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"], &(0x7f00000011c0)=0x1008) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000001200)={r4, 0x5d, "e5c746e4f01045dceae8b4e9cbfed52e0db943ff220ffec04c5c66063ee3b5b8b6c5331e5aeaad5efb4a737c0ff376e42873705a730b75c1066426f646aae0d28246db2a90b39aba25b243e3c7aa221dcbb4ad653373d8245be22d957c"}, &(0x7f0000001280)=0x65) 22:05:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:05:52 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) [ 444.201702] binder: 2747:2748 transaction failed 29201/-22, size 0-0 line 2970 22:05:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f67726f75702e73746174002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668ad34a768eb90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc020660b, 0x400096) [ 444.247396] binder_alloc: binder_alloc_mmap_handler: 2747 20001000-20004000 already mapped failed -16 [ 444.257564] QAT: Invalid ioctl 22:05:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x600000, 0x0) dup3(r2, r1, 0x80000) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000280)=""/4096) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 22:05:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x2}}], 0x209, 0x0) 22:05:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2000000000001, 'bridge_slave_0\x00'}, 0x18) [ 444.303946] binder: BINDER_SET_CONTEXT_MGR already set [ 444.324079] binder: 2747:2748 ioctl 40046207 0 returned -16 [ 444.366412] binder_alloc_new_buf_locked: 2 callbacks suppressed [ 444.366420] binder_alloc: 2747: binder_alloc_buf, no vma [ 444.378154] binder: 2747:2764 transaction failed 29189/-3, size 0-0 line 2970 [ 444.410262] binder: undelivered TRANSACTION_ERROR: 29201 [ 444.434108] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 22:05:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 444.467415] binder: undelivered TRANSACTION_ERROR: 29189 22:05:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) listen(r0, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) write(r2, &(0x7f00000001c0)="be", 0x1) 22:05:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2e08000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:05:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) 22:05:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000100)={0x6, 0x4, [0xeca6]}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000580)={0x0, 0x147, "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"}, &(0x7f0000000140)=0x14f) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x7, 0x400, 0x5, 0xa8f}, {0xbd6e, 0x3275, 0x8, 0x101}, {0xefa8, 0x401, 0xffffffffffffffff, 0x1f}, {0x80000000, 0x8, 0x4, 0x6}, {0x4, 0x8, 0x1ff, 0x4}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f0000000080)) 22:05:52 executing program 5 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 444.675450] binder: 2787:2788 transaction failed 29201/-22, size 0-0 line 2970 [ 444.758170] binder_alloc: binder_alloc_mmap_handler: 2787 20001000-20004000 already mapped failed -16 [ 444.803756] binder: BINDER_SET_CONTEXT_MGR already set 22:05:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x0, 0x0, 0x2000000000000000}) 22:05:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="4a44b8290128445e57deba292d07f5ff5d58a991f2bf6c79dc02e122c2404d5ea27f5a05784f9ce80f3f3c0dff74d71ab3e4d0528c325da758ec667d79d632a44165f52733447535281998ed57745613a5ee567a5ee084fca80abff6e203007b0c42bc95dbb9d57ff4b25bbc403e2ea04b2ba08c3d200132148e9c3af2c2ef13d469cb4db4d1f47016882fa24842347cf1bd4f5c433c6caa4f62105a6b0976ca0b150d39c79d6482a5753e80d21fd31ebf2cb759a2eaa5710637020dfeed905e9e2dfd977524ef008001f36353f52583b22893bbfbef622084d2e5c496bb52f2cb19f29873fc4f99b91f1db15508b08a43a067"]) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) r2 = open(&(0x7f00000003c0)='./file0\x00', 0x8000, 0x100) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000700)={0x0, 0x0, @ioapic}) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) [ 444.835475] binder: 2787:2788 ioctl 40046207 0 returned -16 22:05:52 executing program 0 (fault-call:5 fault-nth:0): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 444.892367] binder_alloc: 2787: binder_alloc_buf, no vma [ 444.897951] binder: 2787:2798 transaction failed 29189/-3, size 0-0 line 2970 [ 444.987142] binder: undelivered TRANSACTION_ERROR: 29201 [ 444.995409] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.021785] FAULT_INJECTION: forcing a failure. [ 445.021785] name failslab, interval 1, probability 0, space 0, times 0 [ 445.033449] CPU: 0 PID: 2813 Comm: syz-executor0 Not tainted 4.18.0+ #196 [ 445.040389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.049753] Call Trace: [ 445.052353] dump_stack+0x1c9/0x2b4 [ 445.055997] ? dump_stack_print_info.cold.2+0x52/0x52 [ 445.061222] should_fail.cold.4+0xa/0x11 [ 445.065295] ? print_usage_bug+0xc0/0xc0 [ 445.069377] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 445.074508] ? graph_lock+0x170/0x170 [ 445.078321] ? graph_lock+0x170/0x170 [ 445.082142] ? graph_lock+0x170/0x170 [ 445.085951] ? trace_hardirqs_on+0x10/0x10 [ 445.090195] ? __lock_acquire+0x7fc/0x5020 [ 445.094450] ? find_held_lock+0x36/0x1c0 [ 445.098535] ? __lock_is_held+0xb5/0x140 [ 445.102624] ? check_same_owner+0x340/0x340 [ 445.106979] ? rcu_note_context_switch+0x730/0x730 [ 445.111927] __should_failslab+0x124/0x180 [ 445.116178] should_failslab+0x9/0x14 [ 445.119991] __kmalloc+0x2c8/0x760 [ 445.123556] ? sock_kmalloc+0x156/0x1f0 [ 445.127552] sock_kmalloc+0x156/0x1f0 [ 445.131371] ? __sk_mem_schedule+0xe0/0xe0 22:05:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:05:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 445.135616] ? mark_held_locks+0xc9/0x160 [ 445.139786] af_alg_alloc_areq+0x83/0x280 [ 445.143945] ? alg_accept+0x60/0x60 [ 445.147582] ? trace_hardirqs_on+0xd/0x10 [ 445.151769] ? __local_bh_enable_ip+0x161/0x230 [ 445.156462] aead_recvmsg+0x1cb/0x1bb0 [ 445.160400] ? dup_iter+0x270/0x270 [ 445.164086] ? aead_release+0x50/0x50 [ 445.167898] ? move_addr_to_kernel.part.18+0x100/0x100 [ 445.173201] ? security_socket_recvmsg+0x9b/0xc0 [ 445.177981] ? aead_release+0x50/0x50 [ 445.181808] sock_recvmsg+0xd0/0x110 [ 445.185533] ? __sock_recv_ts_and_drops+0x420/0x420 [ 445.190569] ___sys_recvmsg+0x2b6/0x680 [ 445.194575] ? ___sys_sendmsg+0x930/0x930 [ 445.198746] ? lock_downgrade+0x8f0/0x8f0 [ 445.202914] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 445.208478] ? proc_fail_nth_write+0x9e/0x210 [ 445.213011] ? fget_raw+0x20/0x20 [ 445.216485] ? find_held_lock+0x36/0x1c0 [ 445.222408] ? kasan_check_write+0x14/0x20 [ 445.226653] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 445.231612] ? wait_for_completion+0x8d0/0x8d0 [ 445.236220] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 445.237032] binder: BINDER_SET_CONTEXT_MGR already set [ 445.241768] ? sockfd_lookup_light+0xc5/0x160 [ 445.241806] __sys_recvmsg+0x11a/0x290 [ 445.241824] ? __ia32_sys_sendmmsg+0x100/0x100 [ 445.241839] ? __sb_end_write+0xac/0xe0 [ 445.241860] ? fput+0x130/0x1a0 [ 445.241876] ? ksys_write+0x1ae/0x260 [ 445.241902] __x64_sys_recvmsg+0x78/0xb0 [ 445.241920] do_syscall_64+0x1b9/0x820 [ 445.241935] ? finish_task_switch+0x1d3/0x870 [ 445.241953] ? syscall_return_slowpath+0x5e0/0x5e0 [ 445.241976] ? syscall_return_slowpath+0x31d/0x5e0 [ 445.294097] ? __switch_to_asm+0x34/0x70 [ 445.298209] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 445.303596] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.308454] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.309952] binder_alloc: 2787: binder_alloc_buf, no vma [ 445.313646] RIP: 0033:0x457089 22:05:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1fe, &(0x7f0000000000)="7000001a00000000781200") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x406, r0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) fdatasync(r2) 22:05:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000003c0)=0x20, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) [ 445.313664] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.313673] RSP: 002b:00007f86454f1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 445.313701] RAX: ffffffffffffffda RBX: 00007f86454f26d4 RCX: 0000000000457089 [ 445.313710] RDX: 0000000000000000 RSI: 00000000200008c0 RDI: 0000000000000004 [ 445.313726] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 445.313736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 445.313745] R13: 00000000004d3818 R14: 00000000004c84e6 R15: 0000000000000000 22:05:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:05:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x3a00000000000000}}], 0x209, 0x0) [ 445.441541] binder: 2819:2820 ioctl 40046207 0 returned -16 22:05:53 executing program 0 (fault-call:5 fault-nth:1): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:05:53 executing program 4 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) [ 445.543404] binder_alloc: binder_alloc_mmap_handler: 2819 20001000-20004000 already mapped failed -16 [ 445.606032] FAULT_INJECTION: forcing a failure. [ 445.606032] name failslab, interval 1, probability 0, space 0, times 0 [ 445.617433] CPU: 1 PID: 2845 Comm: syz-executor0 Not tainted 4.18.0+ #196 [ 445.624374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.633743] Call Trace: [ 445.636349] dump_stack+0x1c9/0x2b4 [ 445.640011] ? dump_stack_print_info.cold.2+0x52/0x52 [ 445.645234] should_fail.cold.4+0xa/0x11 [ 445.649326] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 445.654438] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 445.659460] ? get_user_pages_fast+0x2a9/0x450 [ 445.664055] ? __get_user_pages_fast+0x3f0/0x3f0 [ 445.668820] ? unwind_get_return_address+0x61/0xa0 [ 445.673768] ? graph_lock+0x170/0x170 [ 445.677607] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 445.682634] ? find_held_lock+0x36/0x1c0 [ 445.686716] ? __lock_is_held+0xb5/0x140 [ 445.690806] ? check_same_owner+0x340/0x340 [ 445.695160] ? find_held_lock+0x36/0x1c0 [ 445.699232] ? rcu_note_context_switch+0x730/0x730 [ 445.704163] ? print_usage_bug+0xc0/0xc0 [ 445.708278] __should_failslab+0x124/0x180 [ 445.712533] should_failslab+0x9/0x14 [ 445.716345] __kmalloc+0x2c8/0x760 [ 445.719897] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 445.724924] ? iov_iter_advance+0x2ec/0x14e0 [ 445.729342] ? sg_init_table+0x28/0x60 [ 445.733260] ? sock_kmalloc+0x156/0x1f0 [ 445.737253] sock_kmalloc+0x156/0x1f0 [ 445.741064] ? __sk_mem_schedule+0xe0/0xe0 [ 445.745317] ? rcu_read_lock_sched_held+0x108/0x120 [ 445.750376] af_alg_get_rsgl+0x1d6/0x9a0 [ 445.754468] ? af_alg_make_sg+0x4f0/0x4f0 [ 445.758623] ? mark_held_locks+0xc9/0x160 [ 445.762791] ? af_alg_alloc_areq+0x1ec/0x280 [ 445.767207] ? alg_accept+0x60/0x60 [ 445.770849] ? __local_bh_enable_ip+0x161/0x230 [ 445.775537] aead_recvmsg+0x54f/0x1bb0 [ 445.779450] ? dup_iter+0x270/0x270 [ 445.783105] ? aead_release+0x50/0x50 [ 445.786915] ? move_addr_to_kernel.part.18+0x100/0x100 [ 445.792228] ? security_socket_recvmsg+0x9b/0xc0 [ 445.797013] ? aead_release+0x50/0x50 [ 445.800827] sock_recvmsg+0xd0/0x110 [ 445.804546] ? __sock_recv_ts_and_drops+0x420/0x420 [ 445.809568] ___sys_recvmsg+0x2b6/0x680 [ 445.813555] ? ___sys_sendmsg+0x930/0x930 [ 445.817715] ? lock_downgrade+0x8f0/0x8f0 [ 445.821876] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 445.827428] ? proc_fail_nth_write+0x9e/0x210 [ 445.831951] ? fget_raw+0x20/0x20 [ 445.835441] ? find_held_lock+0x36/0x1c0 [ 445.839550] ? kasan_check_write+0x14/0x20 [ 445.843788] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 445.848746] ? wait_for_completion+0x8d0/0x8d0 [ 445.853399] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 445.858951] ? sockfd_lookup_light+0xc5/0x160 [ 445.863455] __sys_recvmsg+0x11a/0x290 [ 445.867349] ? __ia32_sys_sendmmsg+0x100/0x100 [ 445.871935] ? __sb_end_write+0xac/0xe0 [ 445.875923] ? fput+0x130/0x1a0 [ 445.879210] ? ksys_write+0x1ae/0x260 [ 445.883042] __x64_sys_recvmsg+0x78/0xb0 [ 445.887115] do_syscall_64+0x1b9/0x820 [ 445.891012] ? finish_task_switch+0x1d3/0x870 [ 445.895515] ? syscall_return_slowpath+0x5e0/0x5e0 [ 445.900452] ? syscall_return_slowpath+0x31d/0x5e0 [ 445.905390] ? __switch_to_asm+0x34/0x70 [ 445.909456] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 445.914840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.919708] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.924905] RIP: 0033:0x457089 [ 445.928103] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.947007] RSP: 002b:00007f86454f1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 445.954726] RAX: ffffffffffffffda RBX: 00007f86454f26d4 RCX: 0000000000457089 [ 445.962000] RDX: 0000000000000000 RSI: 00000000200008c0 RDI: 0000000000000004 [ 445.969270] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 445.976558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 445.983827] R13: 00000000004d3818 R14: 00000000004c84e6 R15: 0000000000000001 [ 445.999609] binder: undelivered TRANSACTION_ERROR: 29189 22:05:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x900000000000000}}], 0x209, 0x0) 22:05:53 executing program 7: pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000240)={0x2000, 0x17001, 0x9, 0x1, 0x8}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0xffffffefffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f01c8ba410066ed66b838c5ed720f23c00f21f86635030009000f23f8642626260fc79a00000f8907000f01c966f43266b43e0fae100fb07300", 0x3a}], 0x1, 0x0, &(0x7f0000000100)=[@dstype3={0x7, 0x3}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) accept(r1, 0x0, &(0x7f00000001c0)) sched_yield() r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:05:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2d08000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 446.018349] binder: undelivered TRANSACTION_ERROR: 29189 22:05:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x3e8}}], 0x209, 0x0) 22:05:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket(0x1f, 0x0, 0x8) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000480)={@remote, 0x0}, &(0x7f00000004c0)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000500)={@empty, 0x0}, &(0x7f0000000540)=0x14) r10 = accept$packet(r3, &(0x7f0000000580)={0x11, 0x0, 0x0}, &(0x7f00000005c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYBLOB="d3000000cebeaf7c765176e7da54853925a1ca23fe17bd9f7a608f7cfcac6ca80d339f8673b80900f0042257994f51b5196d76f44dd52cb46f8b9b65c527bab13e147dce47bf88aceb69b233d49882e4ff3659917c333447094bf1750d5cd0e23a5c4ee538e9a21e78498f42533c4c4fc25792adc98f2f927a2bf605292ff29176bd5e47a978fa1efdd6fd7a5e1b2ee972986061ff3212a1ca86d0914ffb3d371aa15224b06b15b9d3fc68e99edb250623fefa61c3d9c40b3a8fd820b9f5de2884c65097641832f81c0db37f9c91cfb67e7ab1265259e7"], &(0x7f0000000740)=0xdb) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000780)={r13, 0x3}, 0x8) getsockname$packet(r1, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000840)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004200)={0x0, @loopback, @multicast2}, &(0x7f0000004240)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000004400)={@empty, 0x0}, &(0x7f0000004440)=0x14) accept4(r0, &(0x7f0000004480)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000004500)=0x80, 0x80800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004540)={'ip6tnl0\x00', 0x0}) accept$packet(r10, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000009c0)=0x93) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000004600)={@remote, @remote, 0x0}, &(0x7f0000004640)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000047c0)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f00000048c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004900)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004a40)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000004b40)=0xe8) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10010000}, 0xc, &(0x7f0000005080)={&(0x7f0000004b80)={0x4dc, r5, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0xec, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r11}, {0x12c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6e3}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x4, 0x29d51ed6, 0x3, 0x3e18}, {0x100000001, 0x3ff00000000, 0x401, 0x5}, {0x1000, 0x4, 0x8, 0xff}, {0x9, 0x2ed, 0x2, 0x3}, {0x2, 0x1, 0x3, 0xfffffffffffffeff}, {0x6, 0xffffffffffffffff, 0x80, 0x2}, {0x62, 0x9, 0x8000, 0xfffffffffffffffc}, {0x3f, 0x42, 0x806c, 0x154f}, {0x4, 0x8001, 0x1, 0xcf47}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}]}}, {{0x8, 0x1, r15}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}]}}, {{0x8, 0x1, r17}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r18}, {0x1a0, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r22}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x81a5}}, {0x8, 0x6, r23}}}]}}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x8050}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000000000000000000000000000000000000e6ffffffffffffff00000076c451b5000000e32f42cc000000000000000200000000000000e2ec8a003259aa95489c00163ea1212d3d76a5d46c5f7d6d3dece09dd4ecc190e7beea2eea269c24960a17c9ce640000000000000000fa171719b98439bb9d88d6b46af87fb06c934dead51200000000000000000000000000000000000000000000"]) [ 446.221914] binder_alloc: binder_alloc_mmap_handler: 2861 20001000-20004000 already mapped failed -16 [ 446.265916] FAULT_INJECTION: forcing a failure. [ 446.265916] name failslab, interval 1, probability 0, space 0, times 0 [ 446.277519] CPU: 1 PID: 2850 Comm: syz-executor4 Not tainted 4.18.0+ #196 [ 446.284456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.293826] Call Trace: [ 446.296436] dump_stack+0x1c9/0x2b4 [ 446.300085] ? dump_stack_print_info.cold.2+0x52/0x52 [ 446.305304] should_fail.cold.4+0xa/0x11 [ 446.309395] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 446.314530] ? __lock_acquire+0x7fc/0x5020 [ 446.318797] ? graph_lock+0x170/0x170 [ 446.322640] ? find_held_lock+0x36/0x1c0 [ 446.326737] ? __lock_is_held+0xb5/0x140 [ 446.330842] ? check_same_owner+0x340/0x340 [ 446.335195] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 446.340059] ? rcu_note_context_switch+0x730/0x730 [ 446.345007] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 446.349878] __should_failslab+0x124/0x180 [ 446.354134] should_failslab+0x9/0x14 [ 446.358475] kmem_cache_alloc_trace+0x2cb/0x780 [ 446.363163] ? graph_lock+0x170/0x170 [ 446.366995] kvm_vcpu_ioctl+0x8d4/0x1300 [ 446.371082] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 446.376819] ? find_held_lock+0x36/0x1c0 [ 446.380914] ? lock_downgrade+0x8f0/0x8f0 [ 446.385086] ? kasan_check_read+0x11/0x20 [ 446.389251] ? rcu_is_watching+0x8c/0x150 [ 446.393415] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 446.398116] ? __fget+0x4d5/0x740 [ 446.401599] ? ksys_dup3+0x690/0x690 [ 446.405333] ? find_held_lock+0x36/0x1c0 [ 446.409421] ? kasan_check_write+0x14/0x20 [ 446.413688] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 446.418656] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 446.424411] do_vfs_ioctl+0x1de/0x1720 [ 446.428325] ? __lock_is_held+0xb5/0x140 [ 446.432406] ? ioctl_preallocate+0x300/0x300 [ 446.436860] ? __fget_light+0x2f7/0x440 [ 446.440859] ? fget_raw+0x20/0x20 [ 446.444339] ? __sb_end_write+0xac/0xe0 [ 446.448366] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 446.453927] ? fput+0x130/0x1a0 [ 446.457240] ? ksys_write+0x1ae/0x260 [ 446.461068] ? security_file_ioctl+0x94/0xc0 [ 446.465520] ksys_ioctl+0xa9/0xd0 [ 446.468994] __x64_sys_ioctl+0x73/0xb0 [ 446.472901] do_syscall_64+0x1b9/0x820 [ 446.476801] ? finish_task_switch+0x1d3/0x870 [ 446.481330] ? syscall_return_slowpath+0x5e0/0x5e0 [ 446.486275] ? syscall_return_slowpath+0x31d/0x5e0 [ 446.491233] ? __switch_to_asm+0x34/0x70 [ 446.495334] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 446.500744] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.505613] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.510819] RIP: 0033:0x457089 22:05:54 executing program 0 (fault-call:5 fault-nth:2): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:05:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:05:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000500)='bridge_slave_0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) get_mempolicy(&(0x7f00000003c0), &(0x7f00000004c0), 0x7, &(0x7f0000ffd000/0x1000)=nil, 0x2) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) [ 446.514027] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 446.532670] binder_alloc: 2861: binder_alloc_buf, no vma [ 446.532940] RSP: 002b:00007f5288730c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.546126] RAX: ffffffffffffffda RBX: 00007f52887316d4 RCX: 0000000000457089 [ 446.553413] RDX: 00000000200001c0 RSI: 000000008090ae81 RDI: 0000000000000006 22:05:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") io_setup(0x2, &(0x7f0000000040)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200000, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000100)="c2e35848ea4bf48f9c6f7c7e80933da66899f16a60945fd3b0f5d5061bc98f88f2903651ebaa9d3fcc2e81280a2b8807d7393984d6995bc725ffd3831aacff7f7c6224c113", 0x45, 0x6, 0x0, 0x1, r2}, &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000380)=""/166) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000000)={'bond_slave_0\x00', 0xe5e}) [ 446.560714] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 446.568003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 446.575281] R13: 00000000004cf150 R14: 00000000004c57a4 R15: 0000000000000000 [ 446.587114] binder: BINDER_SET_CONTEXT_MGR already set 22:05:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x400000000000000}}], 0x209, 0x0) [ 446.635975] binder: 2861:2868 ioctl 40046207 0 returned -16 22:05:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:05:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x7fffffff, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:05:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x2000}}], 0x209, 0x0) [ 446.878634] binder_alloc: binder_alloc_mmap_handler: 2911 20001000-20004000 already mapped failed -16 [ 446.928788] binder: BINDER_SET_CONTEXT_MGR already set 22:05:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x8dffffff00000000}}], 0x209, 0x0) 22:05:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:05:54 executing program 4 (fault-call:4 fault-nth:1): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) 22:05:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) [ 446.988145] binder: 2911:2912 ioctl 40046207 0 returned -16 [ 446.988418] binder_alloc: 2911: binder_alloc_buf, no vma 22:05:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:05:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:05:55 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) 22:05:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0xf901000000000000}}], 0x209, 0x0) 22:05:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:05:55 executing program 7: creat(&(0x7f0000000340)='./file0\x00', 0x10) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x20, 0x6, 0x7, 0x7fff, 0x5, {0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x800, 0x0, 0xffffffffffffffe1, 0x20}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x101}, 0x8) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000280)="642aeffab80b008ed0bad10466edf30fbdfa266466eb0066b82ca600000f23d00f21f866353000000e0f23f8ba4000b0dcee66b8010000000f23c00f21f86635020001000f23f80f004c49", 0x4b}], 0x1, 0x8, &(0x7f0000000300)=[@efer={0x2, 0x2001}], 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) [ 447.344158] binder_alloc: binder_alloc_mmap_handler: 2946 20001000-20004000 already mapped failed -16 [ 447.423625] binder: BINDER_SET_CONTEXT_MGR already set [ 447.430447] binder_alloc: 2946: binder_alloc_buf, no vma [ 447.474442] binder: 2946:2952 ioctl 40046207 0 returned -16 22:05:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$amidi(&(0x7f00000003c0)='/dev/amidi#\x00', 0xfffffffffffffffd, 0x583000) openat$cgroup_ro(r2, &(0x7f00000004c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:05:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:05:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0xf5ffffff}}], 0x209, 0x0) 22:05:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xc228a0efe742e190) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'team_slave_1\x00', 0x4}, 0x18) 22:05:55 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7, 0x3, 0x9, 0x1, 0x0, 0x6, 0x4000, 0x3, 0x8000, 0x100000001, 0xc2b, 0x80, 0x100, 0xdb7, 0x8, 0x4, 0x3, 0x1, 0x100000001, 0x9e23, 0x9, 0x101, 0x4, 0x3f, 0x1, 0x10db67e5, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0x7f, 0xffffffff, 0x7, 0x8, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x1, 0x3, 0xfffffffffffffe01, 0x7, 0x9, 0x27, 0x80}, r1, 0xd, r0, 0xb) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r4, 0x8090ae81, &(0x7f00000001c0)) write$P9_RXATTRCREATE(r0, &(0x7f0000000100)={0x7, 0x21, 0x2}, 0x7) 22:05:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:05:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x400080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:05:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:05:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) recvmmsg(r0, &(0x7f0000007500)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/83, 0x53}], 0x3, 0x0, 0x0, 0x100000000}, 0x2}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/155, 0x9b}], 0x1, &(0x7f00000013c0)=""/99, 0x63, 0x4}, 0x42}, {{&(0x7f0000001440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002840)=[{&(0x7f00000014c0)=""/198, 0xc6}, {&(0x7f00000015c0)=""/219, 0xdb}, {&(0x7f00000016c0)=""/68, 0x44}, {&(0x7f0000001740)=""/117, 0x75}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/106, 0x6a}], 0x6, &(0x7f00000028c0)=""/245, 0xf5, 0x5}, 0xdb}, {{&(0x7f00000029c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002a40)=""/10, 0xa}, {&(0x7f0000002a80)}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/145, 0x91}, {&(0x7f0000003b80)=""/211, 0xd3}, {&(0x7f0000003c80)}, {&(0x7f0000003cc0)=""/231, 0xe7}, {&(0x7f0000003dc0)=""/233, 0xe9}, {&(0x7f0000003ec0)=""/9, 0x9}, {&(0x7f0000003f00)=""/58, 0x3a}], 0xa, &(0x7f0000004000)=""/6, 0x6, 0x400}}, {{0x0, 0x0, &(0x7f0000005040)=[{&(0x7f0000004040)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x8f}, 0x1}, {{&(0x7f0000005080)=@nfc_llcp, 0x80, &(0x7f00000071c0)=[{&(0x7f0000005100)=""/191, 0xbf}, {&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000061c0)=""/4096, 0x1000}], 0x3, &(0x7f0000007200)=""/130, 0x82, 0x9}, 0x7}, {{&(0x7f00000072c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000073c0)=[{&(0x7f0000007340)=""/94, 0x5e}], 0x1, &(0x7f0000007400)=""/218, 0xda, 0xe000000000000000}, 0x4}], 0x7, 0x100, 0x0) flock(r1, 0x2) connect$bt_rfcomm(r3, &(0x7f00000076c0)={0x1f, {0x549, 0x4, 0x8, 0x5, 0x7fff, 0x2}, 0x4}, 0xa) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000003c80)=""/43, &(0x7f0000007700)=0x2b) pipe2(&(0x7f0000002a80), 0x4800) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280)=0xa4ef, 0xffffffffffffff1e) 22:05:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x8dffffff}}], 0x209, 0x0) [ 447.738602] binder_alloc: binder_alloc_mmap_handler: 2984 20001000-20004000 already mapped failed -16 [ 447.797645] binder: BINDER_SET_CONTEXT_MGR already set 22:05:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000000)={0x6, 0x80f, 0x6, 0x7}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_ROPEN(r4, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x10, 0x0, 0x7}, 0x7}}, 0x18) 22:05:55 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xc100, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:05:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 447.829482] binder: 2984:2986 ioctl 40046207 0 returned -16 [ 447.862480] binder_alloc: 2984: binder_alloc_buf, no vma 22:05:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x802}}], 0x209, 0x0) 22:05:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:05:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x82d, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 448.200574] binder_transaction: 10 callbacks suppressed [ 448.200591] binder: 3040:3043 transaction failed 29201/-22, size 0-0 line 2970 [ 448.256938] binder_alloc: binder_alloc_mmap_handler: 3040 20001000-20004000 already mapped failed -16 [ 448.266665] binder: BINDER_SET_CONTEXT_MGR already set [ 448.272611] binder: 3040:3043 ioctl 40046207 0 returned -16 [ 448.278754] binder_alloc: 3040: binder_alloc_buf, no vma [ 448.284404] binder: 3040:3044 transaction failed 29189/-3, size 0-0 line 2970 22:05:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0xffffffff00000000}}], 0x209, 0x0) 22:05:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:05:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) 22:05:56 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) getgroups(0x6, &(0x7f0000000140)=[0xee00, 0x0, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01]) keyctl$chown(0x4, r3, r4, r5) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) 22:05:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='dtrfs.em1\x00'], &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:05:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:05:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 448.587616] binder: 3055:3059 transaction failed 29201/-22, size 0-0 line 2970 22:05:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 448.679706] binder_alloc: binder_alloc_mmap_handler: 3055 20001000-20004000 already mapped failed -16 [ 448.730047] binder: BINDER_SET_CONTEXT_MGR already set [ 448.757415] binder: 3055:3059 ioctl 40046207 0 returned -16 [ 448.789152] binder_alloc: 3055: binder_alloc_buf, no vma [ 448.794877] binder: 3055:3081 transaction failed 29189/-3, size 0-0 line 2970 [ 448.842387] binder_release_work: 10 callbacks suppressed [ 448.842395] binder: undelivered TRANSACTION_ERROR: 29201 [ 448.867429] binder: undelivered TRANSACTION_ERROR: 29189 22:05:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000001c0)={0x6, 0x5}) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x3) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000100)=""/138) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:05:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x4000000000000}}], 0x209, 0x0) 22:05:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) write$P9_RRENAME(r3, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) 22:05:56 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) r3 = dup(r2) write$FUSE_POLL(r3, &(0x7f0000000340)={0x18, 0x0, 0x6, {0x80000003}}, 0x18) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x62, "ac8c43bfde4f507cd90ab5ee3f7a252d411e2a4ab8b7e845c76f11b3833bb8e701ec84cf268c8f771f33720b08d99d17ac5aa422ef20eb43b1488b40179f4fd6a0d4290518ecfaa3d74e80feca42e2ddd4fac154c375e40a0d9a674e89bd8d6bd99b"}, &(0x7f00000000c0)=0x6a) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={r4, 0x4, 0x20}, &(0x7f0000000140)=0xc) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000280)=""/106, &(0x7f0000000180)=0x6a) 22:05:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:05:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 449.022229] binder: 3101:3102 transaction failed 29201/-22, size 0-0 line 2970 22:05:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:05:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x9000000}}], 0x209, 0x0) [ 449.075855] binder_alloc: binder_alloc_mmap_handler: 3101 20001000-20004000 already mapped failed -16 22:05:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 449.121442] binder: BINDER_SET_CONTEXT_MGR already set 22:05:57 executing program 7: r0 = socket$inet6(0xa, 0x40000000000006, 0x800006) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 22:05:57 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000040)={0x52, 0x8000, 0x3ff, 'queue1\x00', 0x40}) 22:05:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x3a00}}], 0x209, 0x0) [ 449.217705] binder: 3101:3102 ioctl 40046207 0 returned -16 [ 449.246419] binder_alloc: 3101: binder_alloc_buf, no vma [ 449.252485] binder: 3101:3126 transaction failed 29189/-3, size 0-0 line 2970 [ 449.299491] binder: undelivered TRANSACTION_ERROR: 29201 [ 449.306425] binder: undelivered TRANSACTION_ERROR: 29189 22:05:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) getpeername(r0, &(0x7f0000000600)=@ethernet={0x0, @broadcast}, &(0x7f0000000540)=0x80) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) symlinkat(&(0x7f00000003c0)='./file0\x00', r2, &(0x7f0000000500)='./file0/../file0/file0\x00') lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:05:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:05:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:05:57 executing program 7: socket$pptp(0x18, 0x1, 0x2) r0 = socket$inet6(0xa, 0x8000000807, 0x0) dup3(r0, r0, 0x80000) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000280)=""/14, &(0x7f00000002c0)=0xe) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000080)={{0x3, 0x3, 0x2, 0x0, 0x1}, 0x286f, 0x8000}) setsockopt$inet6_tcp_buf(r2, 0x6, 0x16, &(0x7f0000000180)="142b0f3c6682b646a332653570c6daf20276b473656fc20c31e783cdc320fbc4d19d737ea8da2d4718a3896fecef9172af1c7b812c660855c439466b1923dfc2da1fef93abbadb870dd1f26326b560e3f71ea501844cd7da17def51b125ad58dccb1d3bd6f51878fc1bab4ac424e45fa429a80cdb603ba804e3efd0bffd824a55af57a4ce97d20b0c43fa990449705995cd69b20164a8fd47c33cd8fd71654c2", 0xa0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x400000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000001440)=0x1008) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r2, r2, 0x1, 0x3}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) [ 449.573207] binder: 3146:3148 transaction failed 29201/-22, size 0-0 line 2970 [ 449.626559] binder_alloc: binder_alloc_mmap_handler: 3146 20001000-20004000 already mapped failed -16 [ 449.660473] binder: BINDER_SET_CONTEXT_MGR already set [ 449.674541] binder_alloc: 3146: binder_alloc_buf, no vma [ 449.680101] binder: 3146:3159 transaction failed 29189/-3, size 0-0 line 2970 [ 449.696282] binder: 3146:3148 ioctl 40046207 0 returned -16 [ 449.733571] binder: undelivered TRANSACTION_ERROR: 29201 [ 449.741598] binder: undelivered TRANSACTION_ERROR: 29189 22:05:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev}}, 0x20) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @remote}}, 0x1e) bind$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockname(r2, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000040)=0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:05:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x900}}], 0x209, 0x0) 22:05:57 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) 22:05:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:05:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x5, @ipv4={[], [], @broadcast}, 0x98}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000280)={r3, 0xfe, "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"}, &(0x7f00000001c0)=0x106) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:05:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:05:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 449.897145] binder: 3172:3176 transaction failed 29201/-22, size 0-0 line 2970 [ 449.928738] binder_alloc: binder_alloc_mmap_handler: 3172 20001000-20004000 already mapped failed -16 22:05:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0xffffff8d}}], 0x209, 0x0) 22:05:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:05:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0xffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r0, r2, 0x80000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x0, @mcast1, 0x4}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000001c0)={r5, 0xeb}, 0x8) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) [ 449.988412] binder: BINDER_SET_CONTEXT_MGR already set [ 450.000182] binder: 3172:3176 ioctl 40046207 0 returned -16 [ 450.024020] binder_alloc: 3172: binder_alloc_buf, no vma [ 450.025994] binder: undelivered TRANSACTION_ERROR: 29201 22:05:58 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2000000000800003) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) [ 450.077163] binder: 3172:3194 transaction failed 29189/-3, size 0-0 line 2970 [ 450.113827] binder: undelivered TRANSACTION_ERROR: 29189 22:05:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 450.299874] binder_alloc: binder_alloc_mmap_handler: 3216 20001000-20004000 already mapped failed -16 [ 450.375588] binder: BINDER_SET_CONTEXT_MGR already set [ 450.381121] binder_alloc: 3216: binder_alloc_buf, no vma [ 450.426411] binder: undelivered TRANSACTION_ERROR: 29201 [ 450.432636] binder: 3216:3217 ioctl 40046207 0 returned -16 [ 450.433338] binder: undelivered TRANSACTION_ERROR: 29189 22:05:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:05:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:05:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x1f4}}], 0x209, 0x0) 22:05:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) personality(0x5000007) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000000)=""/64, &(0x7f0000000080)=0x40) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:05:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) r3 = getpid() kcmp(r2, r3, 0x5, r1, r1) 22:05:58 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40400000, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:05:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:05:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:05:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:05:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x800008912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) [ 450.745802] binder_alloc: binder_alloc_mmap_handler: 3244 20001000-20004000 already mapped failed -16 22:05:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 450.795516] binder: BINDER_SET_CONTEXT_MGR already set [ 450.813525] binder: 3244:3245 ioctl 40046207 0 returned -16 [ 450.837846] binder_alloc: 3244: binder_alloc_buf, no vma 22:05:58 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) r3 = socket$inet(0x2, 0x1, 0xfffffffffffff000) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000000)="71ee47a456c138b340f2b45d9fc80f4834b5f540bae90ac9b8089a4fabbcdd928faeff819868035588feca73ca1133e657be4d7c45c411d9a9", 0x39) 22:05:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:05:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xffffffffffff8000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x7) 22:05:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 451.071372] binder_alloc: binder_alloc_mmap_handler: 3282 20001000-20004000 already mapped failed -16 22:05:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x3a}}], 0x209, 0x0) [ 451.132885] binder: BINDER_SET_CONTEXT_MGR already set [ 451.172718] binder: 3282:3283 ioctl 40046207 0 returned -16 [ 451.209522] binder_alloc: 3282: binder_alloc_buf, no vma 22:05:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) link(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f00000004c0)='./file0/../file0\x00') write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:05:59 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x81, 0x0) write$binfmt_misc(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="73797a313be511b7287c09bd9ed9931e8282adb43f6c35b430eca97becf483b32230c09cf93704e7b452b739f4fb521a0abe1799d0f4274658a50c990152cc4561d0f60cff254c8a932c0ced0000"], 0x1e) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x200000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = open(&(0x7f0000000380)='./file0\x00', 0x40, 0x4) ioctl$RTC_AIE_OFF(r4, 0x7002) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r5, 0x8090ae81, &(0x7f00000001c0)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x10000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @local}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000180)={@mcast1, r7}, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000440)={0x9, 0x108, 0xfa00, {r8, 0xa9, "ca2b66", "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"}}, 0x110) 22:05:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x200002) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000180)) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000280)=""/228) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1ff, @mcast1}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000080)=""/67) 22:05:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:05:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:05:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:05:59 executing program 5: r0 = socket$inet6(0xa, 0x800, 0x10000) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x82100, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, [0x1, 0x5386, 0x6, 0x879c]}) [ 451.523425] binder_alloc: binder_alloc_mmap_handler: 3311 20001000-20004000 already mapped failed -16 [ 451.565486] binder: BINDER_SET_CONTEXT_MGR already set 22:05:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:05:59 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) [ 451.597670] binder: 3311:3315 ioctl 40046207 0 returned -16 [ 451.613533] binder_alloc: 3311: binder_alloc_buf, no vma [ 451.628588] QAT: Invalid ioctl 22:05:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x10000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa, 0x3}) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x4, 0x88200) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@mcast1}}}, &(0x7f0000000000)=0xe8) timer_create(0x7, &(0x7f00000000c0)={0x0, 0xa, 0x2, @thr={&(0x7f0000000080)="9e17", &(0x7f0000000380)="71218b06ac5ae4c20f75254e30b195a629eca3ec9329feec9335b166ac0a469b148883f16e0305d0756a32bc64c0b31ba2574e9adfbb8704fbc298bd1c242b004d34641eb2388040a5e1f95cbf412dc4138d2094f0deb3b0358303fee428c60f153bba3034c7049abebab9d9f77ed90386c0758ab9bdfa9b5178c4c4e67fc17b8432d884493cf0326d08836882dda1eab6c96feab35e26bd38fa9d3360a1ffddcb1c452dbfc45c235f1d59d8dea5cbb3f3a2139595f649ed33e7dc14b551317a027b39719a0df5349c393271"}}, &(0x7f0000000100)=0x0) timer_delete(r4) 22:05:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:05:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:05:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x100000000000000}}], 0x209, 0x0) [ 451.851251] binder_alloc: binder_alloc_mmap_handler: 3349 20001000-20004000 already mapped failed -16 [ 451.894272] binder: BINDER_SET_CONTEXT_MGR already set 22:05:59 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fd, 0x2, 0x1002, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) r5 = fcntl$getown(r0, 0x9) ptrace$setregs(0xf, r5, 0xe4, &(0x7f0000001540)="d35ba54916b8df56597bf57886f889826ec53d7ecdbee44f03f0b6fa817b9558fc50af8bda90ac269d8c297f53b7f6d00a05bc0a5095a056c7c70a95594735bee28d9ff763133c2811e241a1e7c9264218d4c1b5fc2cb8b473320b50e41d0245c993285aed17a68894a706c07673fb6a2e") stat(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r1, &(0x7f0000001480)={0x78, 0x0, 0x2, {0x9, 0xc2, 0x0, {0x1, 0x2, 0x7, 0x1, 0x8, 0xd1cf, 0x100, 0x8, 0xfffffffffffffffa, 0x5, 0xfffffffffffffffe, r4, r6, 0x7, 0x80000000}}}, 0x78) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) timer_create(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x4, @thr={&(0x7f0000000080)="22839bf1424d592492a74cc557e9cbadacb13e8886c3215ea3e836405545601d3f9c2bf248", &(0x7f00000003c0)="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"}}, &(0x7f0000000100)=0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001500)=0x20, 0x4) timer_gettime(r8, &(0x7f0000000140)) ioctl$KVM_TRANSLATE(r7, 0x8090ae81, &(0x7f00000001c0)) 22:05:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 452.005198] binder: 3349:3350 ioctl 40046207 0 returned -16 [ 452.006211] binder_alloc: 3349: binder_alloc_buf, no vma 22:05:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0xf9010000}}], 0x209, 0x0) 22:06:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f48785f69643dfdf32b8a03e1c23b40e3db3944be2b605501633d767fbff629615837686e7b21d7e697eb6effc957d654214c195b4d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x2e0, @empty, 0x7fff}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x8001}, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x9c}, @in6={0xa, 0x4e20, 0x26, @ipv4, 0x4}, @in6={0xa, 0x4e24, 0x4, @ipv4={[], [], @multicast2}, 0x1}], 0x9c) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000380)={[], 0x7, 0x1000, 0x20, 0x0, 0x1, 0x2, 0x0, [], 0x2}) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000000000000300000000000000490b000000000000090000000000000005000000000000000001ac05000000000000000000000000000000000000000000000000000000000000000000000000ffff0400000000008000000000000000ffffff7f000000001f04000800000000000000000000000000000000000000000000000000000000000000000000000003000000000000000600000000000000e004000000000000064000ff000000000000000000000000000000000000000000000000000000000000000000000000"]) 22:06:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:00 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x48, &(0x7f0000000000)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x5, @remote, 0x4}, @in6={0xa, 0x4e21, 0x101, @mcast1, 0x80}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0x1}, &(0x7f0000000140)=0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:00 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x3, 0x420000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001340)={0x0, 0xe9, "eb4d2f9a30d02c680e7e2e71b58f0d901d54418fd0a7d8fa3a46670d0fabbd05ec4bd0175b143931f053fce8e1637ae82407b967d00bd90a4b742c8eaeec24ebec545234cbf6d956de2b6f9ca77be7d2f5df4c050c107ad447b349bcc6a156159de4ce58cec3c57e6e9764eef2e82b3f73afdbb3ef241d4060d83ee8eec1cb801757c09c341078fe616a4f4198704f8954f3e009aa841bd01545c13e73739b49549a0684c275f4dbb088d5a28ef90bfeb999a1a491ec05feb77c22e3e4d93542cf27c207eefb445205eaca1d5d1b27a87bb8c79396cced6bcfbe2a5bcae73e4af99fbad76f902c07e4"}, &(0x7f0000001440)=0xf1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001500)={0x20, 0x5, 0x8000, 0x4000000000000080, 0x1, 0x9, 0x4912, 0x100000001, r1}, 0x20) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000000)=0x1008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={r3, @in={{0x2, 0x4e23, @rand_addr=0x3}}, 0x0, 0x60}, 0x90) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000001300), 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) r5 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x2002) write$FUSE_INTERRUPT(r5, &(0x7f0000000240)={0x10, 0xfffffffffffffffe, 0x5}, 0x10) bind(r4, &(0x7f00000001c0)=@ipx={0x4, 0x300000, 0x6, "48941de17c7c", 0x9}, 0x80) fsync(r2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000280), 0x4) socket$inet_sctp(0x2, 0x5, 0x84) 22:06:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x1000000}}], 0x209, 0x0) [ 452.434514] binder: BINDER_SET_CONTEXT_MGR already set [ 452.439981] binder_alloc: 3388: binder_alloc_buf, no vma [ 452.454570] Unknown ioctl -1072688510 [ 452.470643] binder: 3388:3389 ioctl 40046207 0 returned -16 22:06:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0xf4010000}}], 0x209, 0x0) 22:06:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 452.513359] Unknown ioctl -1072688510 22:06:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) accept$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in=@loopback, 0x4e21, 0x0, 0x4e20, 0x100000000, 0xa, 0x20, 0x20, 0x73, r2, r3}, {0x3, 0x80, 0x63c3, 0x2, 0xfffffffffc6d877a, 0x3, 0x6, 0x7}, {0x3b4e, 0x8, 0x7f, 0x7ff}, 0x7, 0x6e6bbf, 0x2, 0x1, 0x1}, {{@in6=@local, 0x4d5, 0x2b}, 0xa, @in6, 0x34ff, 0x0, 0x2, 0x7f, 0x3ff, 0xcc6daa3, 0x80000001}}, 0xe8) 22:06:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f00000003c0)={0x1d6, 0x0, 0x1}, 0x10) 22:06:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:00 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x80000001, 0x1, 0x80000001, 0xfffffffffffffffa, 0x3, 0x4, 0xff, 0x40, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:00 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x2) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) r4 = open(&(0x7f0000000200)='./file1\x00', 0x40000, 0x0) r5 = socket$l2tp(0x18, 0x1, 0x1) r6 = dup(r1) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x42000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000700)={0x4, 0x80000000, 0x5}) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x82002, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000640)='/dev/vcsa#\x00', 0x9, 0x8000) io_submit(r3, 0x5, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x80000001, r2, &(0x7f00000001c0)="3a004dd71bceb9971cef07c586eb740419ad4f33599f01d5f8a81066458de6097c9b9bf6", 0x24, 0x10001, 0x0, 0x0, r4}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x6, r5, &(0x7f00000002c0)="952f252c8e2786b9be0b199eb030a59a32ec0219bc1980afe786d3b49eeecf9102fe372a2df6a8a70b46b47d776a45d011be5a26a43d9cf7da67346c076bcbc9112a4fa61a69422aca91a62d99e255e6532bc13629bf6aeb19f9e371c391ebeaaf1b136fff94976ca8aaa5cba491918785377b6efa17650cc7f93c555a211c66f61faa62e917c993cc985d92aa8619874f146080eafa3db2142eb00aae2a585553", 0xa1, 0x7, 0x0, 0x1, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f00000003c0)="7ce5cb2451550acf6968d9cb2974eef9038759820e024d4d66333e39f5160df7ed43e7c4f08b118c7d1a1abc5896569dc9c55be1b7a1f08ee8", 0x39, 0x401, 0x0, 0x0, r7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x2, r2, &(0x7f0000000480)="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", 0xfd, 0x5, 0x0, 0x1, r8}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x9, r0, &(0x7f0000000740)="6f02cea1916f62c871a1579c7631578abd068bfacafdd152d36ac4", 0x1b, 0x7f, 0x0, 0x0, r9}]) r10 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x9, 0xc0000) utimensat(r10, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {0x0, 0x7530}}, 0x100) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000780)="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", 0x1000) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:06:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x2000000}}], 0x209, 0x0) [ 452.780847] binder: BINDER_SET_CONTEXT_MGR already set [ 452.780856] binder_alloc: 3429: binder_alloc_buf, no vma 22:06:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x42}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 452.863412] binder: 3429:3430 ioctl 40046207 0 returned -16 22:06:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x60000000}}], 0x209, 0x0) 22:06:00 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fsync(r0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x210}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0xa, 0x2}) [ 453.153763] binder: BINDER_SET_CONTEXT_MGR already set [ 453.174647] binder_alloc: 3473: binder_alloc_buf, no vma [ 453.193649] binder: 3473:3474 ioctl 40046207 0 returned -16 22:06:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x52}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x4000000}}], 0x209, 0x0) 22:06:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 453.397671] binder_transaction: 16 callbacks suppressed [ 453.397700] binder: 3499:3502 transaction failed 29201/-22, size 0-0 line 2970 22:06:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f00000004c0)={0x800000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r2, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x182, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40401, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000002c0)={0x40, {{0x2, 0x4e21}}, 0x1, 0x4, [{{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e23, @rand_addr=0x6f0000000000}}]}, 0x290) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:01 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4001, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:06:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0xf}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x2}}], 0x209, 0x0) [ 453.472597] binder_alloc_mmap_handler: 3 callbacks suppressed [ 453.472614] binder_alloc: binder_alloc_mmap_handler: 3499 20001000-20004000 already mapped failed -16 [ 453.518001] binder: BINDER_SET_CONTEXT_MGR already set [ 453.555962] binder: 3499:3502 ioctl 40046207 0 returned -16 22:06:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0xfeff}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 453.602405] binder: 3499:3526 transaction failed 29189/-3, size 0-0 line 2970 22:06:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x3a00000000000000}}], 0x209, 0x0) 22:06:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:06:01 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x100000000, 0x10000) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14, 0x80000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000440)={0x0, @empty, @local}, &(0x7f0000000480)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000006c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000700)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000740)=0xc) recvmmsg(0xffffffffffffff9c, &(0x7f0000003680)=[{{&(0x7f0000000780)=@generic, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/165, 0xa5}, {&(0x7f00000018c0)=""/172, 0xac}, {&(0x7f0000001980)=""/61, 0x3d}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002a40)=""/193, 0xc1, 0x800}, 0x5}, {{&(0x7f0000002b40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002bc0)=""/103, 0x67}, {&(0x7f0000002c40)=""/89, 0x59}, {&(0x7f0000002cc0)=""/157, 0x9d}], 0x3, &(0x7f0000002dc0)=""/59, 0x3b}, 0x100000000}, {{&(0x7f0000002e00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002e80)=""/18, 0x12}, {&(0x7f0000002ec0)=""/17, 0x11}], 0x2, &(0x7f0000002f40)=""/47, 0x2f, 0x8}, 0x4}, {{&(0x7f0000002f80)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000003140)=[{&(0x7f0000003000)=""/60, 0x3c}, {&(0x7f0000003040)=""/254, 0xfe}], 0x2, &(0x7f0000003180)=""/180, 0xb4, 0x5}, 0x1800}, {{&(0x7f0000003240)=@can, 0x80, &(0x7f0000003380)=[{&(0x7f00000032c0)}, {&(0x7f0000003300)=""/122, 0x7a}], 0x2, &(0x7f00000033c0)=""/77, 0x4d, 0x3}, 0x6}, {{&(0x7f0000003440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000035c0)=[{&(0x7f00000034c0)=""/231, 0xe7}], 0x1, &(0x7f0000003600)=""/86, 0x56, 0x1000}, 0x1}], 0x6, 0x2, &(0x7f0000003800)={0x77359400}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003880)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000003980)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000039c0)={@dev, @multicast2, 0x0}, &(0x7f0000003a00)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003a40)={'team0\x00', 0x0}) recvmsg(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005fc0)=@can={0x1d, 0x0}, 0x80, &(0x7f00000061c0)=[{&(0x7f0000006040)=""/88, 0x58}, {&(0x7f00000060c0)=""/28, 0x1c}, {&(0x7f0000006100)=""/133, 0x85}], 0x3, 0x0, 0x0, 0x8000}, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000006240)={'nr0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000006280)={@mcast2, 0x0}, &(0x7f00000062c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000063c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f00000064c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006500)={'vcan0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000006540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006580)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000065c0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f00000066c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000067c0)={@broadcast, @remote, 0x0}, &(0x7f0000006800)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006840)={{{@in=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000006940)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000006980)={0x0, @empty, @rand_addr}, &(0x7f00000069c0)=0xc) accept4$packet(r3, &(0x7f0000007f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000007f80)=0x14, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000008080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000080c0)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000008100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008140)=0x14, 0x80000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008180)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000008280)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008900)={'bridge0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000008940)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000008a40)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000008a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000008ac0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008b00)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008b40)={'veth1_to_bridge\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008b80)={'team0\x00', 0x0}) accept(0xffffffffffffffff, &(0x7f0000008c00)=@hci={0x1f, 0x0}, &(0x7f0000008c80)=0x80) getpeername$packet(0xffffffffffffffff, &(0x7f0000008d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000008dc0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000008e00)={0x0, @broadcast, @loopback}, &(0x7f0000008e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000008e80)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000008f80)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000008fc0)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f0000009000)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000009040)={@empty, 0x0}, &(0x7f0000009080)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000090c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f00000091c0)=0xe8) getpeername(r1, &(0x7f0000009200)=@hci={0x1f, 0x0}, &(0x7f0000009280)=0x80) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000009300)={@empty, 0x0}, &(0x7f0000009340)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000009f40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000009f00)={&(0x7f0000003a80)=ANY=[@ANYBLOB='t\v\x00\x00', @ANYRES16=r5, @ANYBLOB="200126bd7000fddbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="2c01020038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400030000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000900000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000000000008000100", @ANYRES32=r9, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000100000008000100", @ANYRES32=r10, @ANYBLOB="0002020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r14, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r15, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000002000008000100", @ANYRES32=r18, @ANYBLOB="80000200400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400460d000008000600", @ANYRES32=r19, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB="600102003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r22, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r23, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004008000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400020000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000000000008000100", @ANYRES32=r25, @ANYBLOB="b800020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000800000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r26, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r27, @ANYBLOB="08000100", @ANYRES32=r28, @ANYBLOB="7001020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004007d00000008000600", @ANYRES32=r29, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r30, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000104000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=r31, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r32, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r33, @ANYBLOB="08000100", @ANYRES32=r34, @ANYBLOB="c001020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004009900000008000600", @ANYRES32=r35, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r36, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001400040008001f0609000000040020ff090000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r37, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000900000008000600", @ANYRES32=r38, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r39, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r40, @ANYBLOB="a401020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400080000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r41, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ff7f000008000600", @ANYRES32=r42, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004006356000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040000800000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r43, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0xb74}, 0x1, 0x0, 0x0, 0x1}, 0x884) 22:06:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x20000510}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x12}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 453.909837] binder: 3549:3551 transaction failed 29201/-22, size 0-0 line 2970 [ 453.939192] binder_alloc: binder_alloc_mmap_handler: 3549 20001000-20004000 already mapped failed -16 22:06:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xe8030000}}], 0x209, 0x0) [ 453.977372] binder: BINDER_SET_CONTEXT_MGR already set 22:06:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x7, 0x20, 0x9, 0x0, 0x7, 0x6, 0x5da7, 0xd4, 0x8, 0x8bef, 0xf989, 0x101}, {0x6, 0x20, 0x1, 0xb84, 0x1ff, 0x5, 0x8, 0x2, 0x606198bd, 0x7, 0xfffffffffffff000, 0x6, 0x2}, {0x48b, 0x4, 0x81, 0x81, 0x5, 0x1000, 0x4, 0x3, 0xfffffffffffffffe, 0x5, 0xc7, 0x6204, 0x9}], 0x8}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) [ 454.005474] binder: 3549:3551 ioctl 40046207 0 returned -16 [ 454.034959] binder_release_work: 16 callbacks suppressed [ 454.034966] binder: undelivered TRANSACTION_ERROR: 29201 22:06:02 executing program 3: r0 = socket$inet6(0xa, 0x0, 0xfbffffffffff7fff) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f00000004c0)='cgroup.type\x00', 0x2, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:02 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) fallocate(r2, 0x2, 0x8001, 0x10000) accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000080)=0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x400000, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) 22:06:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x22}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x3a}}], 0x209, 0x0) 22:06:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x4, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000180)={0x2}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) sched_setaffinity(r5, 0x8, &(0x7f0000000100)=0x6) 22:06:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) fadvise64(r0, 0x0, 0x200, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x101881) sendmsg$nl_crypto(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@del={0x108, 0x11, 0x200, 0x70bd2c, 0x25dfdbfc, {{'fpu(pcbc(aes-aesni))\x00'}, [], [], 0x2000, 0x400}, [{0x8, 0x1, 0x3}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x3f}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x6}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c0}, 0x40000) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 454.435490] binder: 3586:3588 transaction failed 29201/-22, size 0-0 line 2970 [ 454.486528] binder_alloc: binder_alloc_mmap_handler: 3586 20001000-20004000 already mapped failed -16 22:06:02 executing program 4: mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x4810, &(0x7f00000000c0)="c31d2bb742623e61144f2b80d6e5e3f78ba8526682b316daa05188c0d2ab3bfd846f7a5d8a21062b30124b453b18a27c13391474e1de03c90ba168b6c2823274b4d9fb178a2300eca26837cb589a58b4b1bd4a166e717b3039efc13e33411fd546e25892e01c281b4e2ec6caa724391dfd4b39067a07eba498ff4278576c44f91fd0e9695bca26e0afa8ef9c1f95b657cca4c906fb9c07611f7cf807d52b1712fc6aedcdb861bf3a8fab2484afa34471cf97791a4f298b2531b257269daf09") perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) 22:06:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xe803000000000000}}], 0x209, 0x0) [ 454.544006] binder: BINDER_SET_CONTEXT_MGR already set 22:06:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x2}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 454.578407] binder: 3586:3588 ioctl 40046207 0 returned -16 [ 454.613818] binder: 3586:3616 transaction failed 29189/-3, size 0-0 line 2970 22:06:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200040, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="266726d35a0e0f20e035000002000f22e0c74424001f000000c7442402d37ddaa9ff2c24c4617e5b82050000000f017f070f23b343d0bf00700000410f01f8b9800000c00f3235000800000f300f9e9389fcb46a", 0x54}], 0x1, 0x1, &(0x7f0000000180), 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) [ 454.656337] binder: undelivered TRANSACTION_ERROR: 29189 [ 454.665718] binder: undelivered TRANSACTION_ERROR: 29201 22:06:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x100000000000000}}], 0x209, 0x0) 22:06:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x7ffff000}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:02 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) [ 454.885099] binder: 3644:3645 transaction failed 29201/-22, size 0-0 line 2970 [ 454.950390] binder_alloc: binder_alloc_mmap_handler: 3644 20001000-20004000 already mapped failed -16 [ 455.008479] binder: BINDER_SET_CONTEXT_MGR already set [ 455.028896] binder_alloc_new_buf_locked: 2 callbacks suppressed [ 455.028904] binder_alloc: 3644: binder_alloc_buf, no vma [ 455.040612] binder: 3644:3656 transaction failed 29189/-3, size 0-0 line 2970 [ 455.054909] binder: undelivered TRANSACTION_ERROR: 29201 [ 455.109828] binder: 3644:3645 ioctl 40046207 0 returned -16 [ 455.120032] binder: undelivered TRANSACTION_ERROR: 29189 22:06:03 executing program 3: openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x800, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f00000003c0)='./file0/../file0/file0\x00', &(0x7f00000004c0)) lstat(&(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000780)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, 0x1}, 0x10) 22:06:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:06:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x32}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xeffdffff00000000}}], 0x209, 0x0) 22:06:03 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x5, 0x3, 0xd004, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 22:06:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000003, 0xffffffffffffffff) ioctl(r0, 0x8912, &(0x7f0000000100)="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") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000004c0)='tls\x00', 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000000)=""/136) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r2 = semget$private(0x0, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @multicast1}}, [0x1, 0x8, 0x7, 0x8, 0x0, 0x5, 0x81, 0x80, 0xffffffffffff8000, 0x7, 0x97bd, 0xfffffffffffffff9, 0x64f, 0x3f, 0x1]}, &(0x7f00000003c0)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r3, 0x4, 0x30}, 0xc) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000540)={0x2, {{0xa, 0x4e22, 0x4, @loopback, 0xea19}}, 0x1, 0x4, [{{0xa, 0x4e22, 0x287, @empty, 0x1}}, {{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x80000000}}, {{0xa, 0x4e24, 0x8, @mcast2, 0x101}}, {{0xa, 0x4e20, 0x8, @remote, 0xb15ea9e}}]}, 0x290) socket$inet6_dccp(0xa, 0x6, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000500)=0x7) fcntl$setownex(r1, 0xf, &(0x7f0000000480)={0x3, r4}) semop(r2, &(0x7f0000000240)=[{0x0, 0x0, 0xfff}, {0x3, 0x4, 0x1000}, {0x0, 0x40, 0x800}, {0x2, 0x51, 0x1100}, {0x3, 0x1, 0x1000}, {0x7, 0x5, 0x1800}, {0x0, 0xa1}, {0x1, 0x9}], 0x8) [ 455.397367] binder: 3668:3673 transaction failed 29201/-22, size 0-0 line 2970 22:06:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x220}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in=@rand_addr, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000240)={@mcast1, r2}, 0x14) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x20, &(0x7f0000000180)="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") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:06:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x802}}], 0x209, 0x0) [ 455.456069] binder_alloc: binder_alloc_mmap_handler: 3668 20001000-20004000 already mapped failed -16 [ 455.551517] binder: BINDER_SET_CONTEXT_MGR already set [ 455.551539] binder_alloc: 3668: binder_alloc_buf, no vma [ 455.562486] binder: 3668:3685 transaction failed 29189/-3, size 0-0 line 2970 22:06:03 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2000, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x6, r2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f0000000040)={0x20000000000000, 0x0, 0x0, 0x0, 0x100000}) [ 455.602831] binder: undelivered TRANSACTION_ERROR: 29201 [ 455.608874] binder: 3668:3673 ioctl 40046207 0 returned -16 22:06:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = geteuid() stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x9d565ea61bfd8f2c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000500)={0xffffffffffffffff}, 0x106, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000580)={0x7, 0x8, 0xfa00, {r6, 0xfffffffffffffff9}}, 0x10) r7 = geteuid() write$P9_RSTATu(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="660000007d0100000048004000040000000000000000000000000000000000000100eb0b00000800000001000000000000000c007d5b2473656375726974792a0004070073656c696e757802003a2309002f6465762f6b766d00e6f6d545c30fb6cfacc822906a9d", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r7], 0x66) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000240)={0xffffffffffffffff}) getsockname$inet(r8, &(0x7f0000000280)={0x2, 0x0, @multicast2}, &(0x7f00000002c0)=0x10) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futimesat(r2, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400)={{r9, r10/1000+30000}, {r11, r12/1000+10000}}) r13 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000200)) ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4040aea0, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) r14 = open(&(0x7f0000000440)='./file0\x00', 0x101000, 0x43) r15 = inotify_add_watch(r0, &(0x7f0000000480)='./file0\x00', 0x10) inotify_rm_watch(r14, r15) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x1, 0x0) 22:06:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x7}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xfffffff5}}], 0x209, 0x0) [ 455.760639] binder: undelivered TRANSACTION_ERROR: 29189 22:06:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) signalfd(r0, &(0x7f00000003c0)={0x2}, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xffffff7f00000000}}], 0x209, 0x0) 22:06:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x10}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:03 executing program 4: rmdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xed, 0x400040) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x8, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) [ 455.978729] binder: 3733:3734 transaction failed 29201/-22, size 0-0 line 2970 22:06:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) [ 456.054808] binder_alloc: binder_alloc_mmap_handler: 3733 20001000-20004000 already mapped failed -16 22:06:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0xf}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:04 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000080)) [ 456.121486] binder: BINDER_SET_CONTEXT_MGR already set [ 456.129324] binder_alloc: 3733: binder_alloc_buf, no vma [ 456.140880] binder: undelivered TRANSACTION_ERROR: 29201 [ 456.167531] binder: 3733:3734 ioctl 40046207 0 returned -16 [ 456.174235] binder: undelivered TRANSACTION_ERROR: 29189 22:06:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280)=0x1, 0xfffffffffffffd89) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 22:06:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x700}}], 0x209, 0x0) 22:06:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x200003f2}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:04 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0x44, "509fb5f72621c08afd655d44fff6ee1ae50c926714a5d85e47c6a9b99038a09a03cffb24c36f052f23365fb098e725757607c7841c91a340f61889b56606c0efe4fca6cc"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x1) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x111, r3, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2200, 0x0) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000180)=ANY=[@ANYBLOB="8000e86428ee13575a75000000000000020000000000000001000100000000000000000000000000030000000000000005800905000000000000000000000000000000000000000000000000000000000000000000000000060000000000001c0600000000000000b608000000000000a8069807000000000000000000000000000000000000000000000000000000000000000000000000"]) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:06:04 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x48000, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 456.539515] Unknown ioctl -1072688510 [ 456.543583] binder_alloc: binder_alloc_mmap_handler: 3787 20001000-20004000 already mapped failed -16 [ 456.588619] binder: BINDER_SET_CONTEXT_MGR already set [ 456.592390] Unknown ioctl -1072688510 [ 456.633240] binder: 3787:3788 ioctl 40046207 0 returned -16 [ 456.658730] binder: undelivered TRANSACTION_ERROR: 29201 22:06:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xffffff8d}}], 0x209, 0x0) 22:06:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000000)={0xfffffffffffff001, 0x7fff, 0x0, 0x0, 0x100, 0x1, 0xfff, 0x9, 0x9, 0x100, 0x8, 0x7, 0x0, 0x2, 0x7fff, 0x100000000, 0x80, 0x5, 0x81}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:06:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x7fffeff0}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:04 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xe00, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2008240}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x79}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ifb0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xff}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r4, 0x8090ae81, &(0x7f00000001c0)) 22:06:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 456.937546] binder_alloc: binder_alloc_mmap_handler: 3820 20001000-20004000 already mapped failed -16 22:06:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x7ffff}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 456.996031] binder: BINDER_SET_CONTEXT_MGR already set 22:06:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xf901000000000000}}], 0x209, 0x0) [ 457.075837] binder: 3820:3821 ioctl 40046207 0 returned -16 [ 457.075888] binder_alloc: 3820: binder_alloc_buf, no vma 22:06:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @mcast2, 0x1}}, [0x7e, 0x6, 0x7, 0x20, 0x100000000, 0x3, 0x1, 0x1, 0xffffffffffff8001, 0x100000001, 0x8, 0x7, 0xfff, 0x4, 0x7]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={r2, 0x1}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:05 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl(r0, 0x1, &(0x7f0000000000)="11bae8a7d1cc73326e0a70ef4ffade1a4cf155aa55117f16e3a7031651ebc48a5b22e3dfed90e2d49b5a71e52ffb255a58c7cb51883624c935b59d2f49979248f373848b673ba178fbac03d16661d921454b127e5c2449fa9b22a1f0b2535551a8b6015c") r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x44000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f00000000c0)={0x3ff, 0x7, 0x0, 0x81, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}]}) r4 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x6, 0x1) r5 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x1e1, 0x10100) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000280)=r5, 0x4) 22:06:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, "3aaa7365637572697479"}], 0xa, "d7cd2bb752550bf8a98dfcfea8dec8978d9eecf7f46bf05b21ddb9eacd6d9800c87ee5e12597a5d8cdf45e4eb7f1d4fa239a578a974dbd4336397ed3f82bc44f2dfb568d4a7c54b0464d3daf0a1efbbc200ab8068e333d876e5d6a64e4bb3e433188f717db525f9dc6370decef2c298d303e3c8b8656949102aa2511606a8d3d9d5c1c082444c7ef4f07c2cc12d9026c7957d9a1e4934af4"}, 0xae) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000000c0)=@buf={0xc2, &(0x7f0000000280)="0055ab425971bb5729165e732855855cca283761234381212d4ff5ec893843038ab1b5499a9960923f7bcb1970889495bc9a1a3ccf8a64beaa7922ff907243715e4b85ca54f2f097ade6678f8a8db9c6173438b4bd1bed65e6b3dfbbf7c6f876aeeee52a49baaf5e5961ca9015975501e6c372099010f36d6febe6b2a0adfc28fbbce189e6f2310806f7a21b41d5308dfd426a65153b0e659e64906f134cb4c303251e7b7ac46d1ac803efc5a26cdf1e9e8d256faf7f1a2f0bd09905e7b3ae671842"}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x10200, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{0x10000, 0x43}, {0x5, 0x8}]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000400)={r4, 0x3, 0x2, r4}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x200000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0xc35, 0x8001, 0x6, 0x0, 0x8, 0x2, 0x3, 0x10001, 0x9f, 0x5, 0x1, 0x1000, 0x0, 0x80000001, 0x3, 0x20, 0x9, 0x100000000, 0xd6f}) 22:06:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x8, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x4000000}}], 0x209, 0x0) 22:06:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:05 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) 22:06:05 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000000)={0xffffffff, 0x8000, 0x6, 0x81, [], [], [], 0x80000001, 0x0, 0x2, 0x0, "c3979133d281cbb42f45f5668d452747"}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x4a0000, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@ipv4={[], [], @local}, 0x0}, &(0x7f0000000280)=0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000002c0)={@mcast2, r3}, 0x14) ioctl$KVM_TRANSLATE(r1, 0x8090ae81, &(0x7f00000001c0)) 22:06:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x60}}], 0x209, 0x0) 22:06:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x10, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 457.362752] binder_alloc: binder_alloc_mmap_handler: 3877 20001000-20004000 already mapped failed -16 [ 457.429174] binder: BINDER_SET_CONTEXT_MGR already set 22:06:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000022, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x121c00, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, r5, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xaf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9cda}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000180)={0x4, 0x9, [{0xfffffffffffffffc, 0x0, 0x6}, {0xffffffffffffff2d, 0x0, 0x2}, {0x6, 0x0, 0xc000000000000000}, {0x0, 0x0, 0xfffffffffffffff9}]}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) [ 457.460412] binder: 3877:3878 ioctl 40046207 0 returned -16 [ 457.486516] binder_alloc: 3877: binder_alloc_buf, no vma 22:06:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x12, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:05 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x82400, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x2000000000000000}}], 0x209, 0x0) 22:06:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = memfd_create(&(0x7f00000000c0)='&procnodev\'\'keyring\x00', 0x3) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000100)=0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ptrace$getsig(0x4202, r2, 0x40, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:06:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x20000, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000100)={0x8, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) accept$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) socketpair(0x1, 0x0, 0x5, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000003c0)={0x0, 0x1, 0x30, 0x100000000, 0x2926f4c2}, &(0x7f0000000400)=0x18) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000440)={r5, 0x2, 0xe2, 0x4}, 0x10) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, [], 0x1f}, @dev={0xfe, 0x80, [], 0x1d}, @empty, 0x401, 0x9, 0x1, 0x100, 0x4, 0x40000000, r3}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) [ 457.848373] binder_alloc: binder_alloc_mmap_handler: 3920 20001000-20004000 already mapped failed -16 22:06:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x700000000000000}}], 0x209, 0x0) 22:06:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000000)={0x3, 0x1, 0x3, 0x3, 0x3}) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000080)={0x1, 0x5}) 22:06:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x3, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 457.900328] binder: BINDER_SET_CONTEXT_MGR already set [ 457.919398] binder: 3920:3922 ioctl 40046207 0 returned -16 22:06:05 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) write$binfmt_aout(r0, &(0x7f0000000000)={{0x108, 0xfff, 0x6b9a905e, 0x3d1, 0x131, 0xffffffffffffffff, 0x36b, 0x1}, "e856fa44dde47fb151c9472b2744b76c62587b65d5489d2bcd2f3f8174dacc9bc1ccbe1d3b19c4fbfc3bca082c2e9d63a24051e07ef6e05994a13108d87a26e3d0"}, 0x61) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 457.965580] binder_alloc: 3920: binder_alloc_buf, no vma 22:06:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xffffffff00000000}}], 0x209, 0x0) 22:06:05 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x6fc, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000180)=0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x10001, 0x80) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="baf80c66b8de5b658266efbafc0cb8848aefaf660f38140cba6100ed0f01cfbaf80c66b89726838a66efbafc0cb00eee640fc76c243e64660f5ec7672e660f382bfbf23b4c7a", 0x46}], 0x1, 0x8, &(0x7f0000000100)=[@dstype0={0x6, 0xa}, @flags={0x3, 0x201}], 0x2) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r5, 0x8090ae81, &(0x7f00000001c0)) 22:06:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x7, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 458.197936] binder: BINDER_SET_CONTEXT_MGR already set 22:06:06 executing program 7: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x88) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) r3 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmdt(r3) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r2, r0}}, 0x18) ioctl(r1, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) getresuid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) ioctl$TUNSETOWNER(r0, 0x400454cc, r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) [ 458.228496] binder_alloc: 3962: binder_alloc_buf, no vma [ 458.259474] binder: 3962:3964 ioctl 40046207 0 returned -16 22:06:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0xf, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x9, 0x800) r1 = creat(&(0x7f00000004c0)='./file0\x00', 0x100) mkdirat(r1, &(0x7f0000000600)='./file0/../file0\x00', 0xfffffffffffffffc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r2, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x8dffffff00000000}}], 0x209, 0x0) 22:06:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x800, 0x200) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:06 executing program 7: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001300)='/dev/rtc0\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001340), &(0x7f0000001380)=0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100008}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4409000056a8d1d2e0165c358aa8daee36449f2318b055c9f63a2e1a9b8f33e19be96c2e0c2417d018a52fe1147e19e910c73b979db5c28beca103363ac0a270d700045818a0510c719752891a34c0155d683c5f9ad29fcc434ccd33a85919fead6f63eb990ca0ad0d43e53481445d4d3684ade08fdd62d0c5016cbcda0b0431ae5d5509511ed27ec2bcd3455993d1b0a1f2d2420189a889bd69e94f9b9efa", @ANYRES16=r4, @ANYBLOB="00042abd7000fbdbdf250300000008000300de000000080003002f000000080002000a00000008000400000000000800030032000000080002000a000000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() r7 = getgid() setresgid(r5, r6, r7) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:06:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0xf000000}, 0x0) 22:06:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="610000000c3cad1ff2d1e2d20b6d63c49ad7afe3810a250af6ae951e6c7653cb54e4639be7356224ab4abf7622646e109cccff873dc23fa677da0ded3951b5756777cd7c232e74f52786efb0fc8bba1f035075c26c98d04708e2541adc19bc626a1798609d10a4f2ea83f56c"], &(0x7f0000000040)=0x69) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r2, 0x52e9, 0x4, 0xfffffffffffff348}, &(0x7f00000001c0)=0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 458.725451] binder_transaction: 10 callbacks suppressed [ 458.725468] binder: 3999:4005 transaction failed 29201/-22, size 0-0 line 2970 22:06:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x300}, 0x0) 22:06:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40600, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 22:06:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xf4010000}}], 0x209, 0x0) [ 458.806975] binder_alloc_mmap_handler: 1 callbacks suppressed [ 458.806993] binder_alloc: binder_alloc_mmap_handler: 3999 20001000-20004000 already mapped failed -16 [ 458.870618] binder: BINDER_SET_CONTEXT_MGR already set 22:06:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) [ 458.911194] binder: 3999:4005 ioctl 40046207 0 returned -16 [ 458.949035] binder_alloc: 3999: binder_alloc_buf, no vma 22:06:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x8, 0x80000014000) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000000040)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xa0000, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) [ 458.954739] binder: 3999:4036 transaction failed 29189/-3, size 0-0 line 2970 22:06:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0xf}, 0x0) 22:06:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x2000000}}], 0x209, 0x0) [ 459.037699] binder_release_work: 8 callbacks suppressed [ 459.037707] binder: undelivered TRANSACTION_ERROR: 29201 [ 459.076242] binder: undelivered TRANSACTION_ERROR: 29189 22:06:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000080)=0x8961, &(0x7f00000000c0)=0x2) socket$inet6(0xa, 0x0, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:06:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x10000000}, 0x0) 22:06:07 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000e5bff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000015c0)) readv(r0, &(0x7f0000000600)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x80}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480)=ANY=[@ANYPTR64, @ANYBLOB="81905725537bff7e7ca3f25c9f3a496a000000e5ff2645f44784de0c454077b9d746f8462dc99a0cd1e7640c9f213118f21de5dae1bcf60ce9c47c7f39e68709a89addcae69758edf80a470905c0fcc979cb975e12cf250bcd290684d4a4210484e7390358f0b39c5c9b943ec5cbbd4e87c8f72c30aed7b92a1503608d33661e99b802542995428aeca52e0d6831b92c9c045739734e5879d05001d8c4436bbeaaf4e46ff3c53d1c95"], &(0x7f0000000280)=0x2) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x8001, &(0x7f0000000040)=""/103) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x8000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x3, 0x0) ioctl$KVM_TRANSLATE(r4, 0x8090ae81, &(0x7f00000001c0)) [ 459.222253] binder: 4058:4060 transaction failed 29201/-22, size 0-0 line 2970 22:06:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xeffdffff}}], 0x209, 0x0) [ 459.273097] binder_alloc: binder_alloc_mmap_handler: 4058 20001000-20004000 already mapped failed -16 [ 459.334542] binder: BINDER_SET_CONTEXT_MGR already set 22:06:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x1000000}, 0x0) [ 459.374350] binder: 4058:4060 ioctl 40046207 0 returned -16 22:06:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 459.430544] binder_alloc: 4058: binder_alloc_buf, no vma [ 459.436197] binder: 4058:4087 transaction failed 29189/-3, size 0-0 line 2970 [ 459.527424] binder: undelivered TRANSACTION_ERROR: 29201 [ 459.534450] binder: undelivered TRANSACTION_ERROR: 29189 22:06:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r3}}, 0x18) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xaa96, 0x0, 0x0, 0x8b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x0, 0x0, 0x34a}) 22:06:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x2000}}], 0x209, 0x0) 22:06:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x2}, 0x0) 22:06:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 459.656966] binder: 4103:4107 transaction failed 29201/-22, size 0-0 line 2970 [ 459.705897] binder_alloc: binder_alloc_mmap_handler: 4103 20001000-20004000 already mapped failed -16 [ 459.757896] binder: BINDER_SET_CONTEXT_MGR already set [ 459.778086] binder: 4103:4107 ioctl 40046207 0 returned -16 [ 459.788359] binder_alloc: 4103: binder_alloc_buf, no vma [ 459.793953] binder: 4103:4120 transaction failed 29189/-3, size 0-0 line 2970 22:06:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x1f4}}], 0x209, 0x0) 22:06:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0xf00000000000000}, 0x0) 22:06:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) migrate_pages(r1, 0x6, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x875) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x50180, 0x0) ioctl$KVM_S390_UCAS_MAP(r4, 0x4018ae50, &(0x7f00000001c0)={0xae7, 0x100000001, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) [ 459.812058] binder: undelivered TRANSACTION_ERROR: 29201 [ 459.818952] binder: undelivered TRANSACTION_ERROR: 29189 22:06:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x1f9}}], 0x209, 0x0) [ 459.992610] binder: 4134:4136 transaction failed 29201/-22, size 0-0 line 2970 [ 460.075564] binder_alloc: binder_alloc_mmap_handler: 4134 20001000-20004000 already mapped failed -16 [ 460.109573] binder: BINDER_SET_CONTEXT_MGR already set [ 460.116560] binder_alloc: 4134: binder_alloc_buf, no vma 22:06:08 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) r3 = dup(r2) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000000)=""/233) 22:06:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x200000000000000}, 0x0) 22:06:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x220000, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:06:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="29ca"]) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) kexec_load(0x9, 0x6, &(0x7f0000001d40)=[{&(0x7f00000009c0)="7359c034078d37b04079973a65842413b2998d873bc98d29091e84a6bace9345f7f0193103b43246868d19897f3ae97b1e527a389a5b0e7b8d47067e8a42d9771ee6939922d6ff148b54704f8d7b92e9f3c137ec2e4815d88b42", 0x5a, 0x9}, {&(0x7f0000000a40)="8775485173ebfc30457da796721ac70dc204bcfd37a33c84ebbfff33eed9128c05c670f909f5035f441fa9eb1c150e8081dd554881ec2395abac687a237a37e0acf53288c62d32da1d6a62a18b87789889196c", 0x53, 0x7fffffff}, {&(0x7f0000000ac0)="e696d5b7be28c5b931a65a5053a961dbe27ecf6abb882e5ed0c32856c576ebb98b67eddeb89047c6b44e5df969fdd7284484cb28c7793d4a", 0x38, 0x9, 0x6}, {&(0x7f0000000bc0)="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", 0x1000, 0xffffffffffffffff}, {&(0x7f0000001bc0)="c63e2138de29201f823e916f8c86d9bf74d94a299d8abc60a9435e1f149a141679624bee498879e1df963c512f06ecd63d1c655c547006ca77061465686acf3b23d2c7236ccec4c06c23f799a1f9d0fd5a674d03b82c18eb427c0e89d6a1bf6e2ad3b265cf3306ee1c8ee2efbc48fc96e3d30ba05e4729ec178280", 0x7b, 0x7, 0x8001}, {&(0x7f0000001c40)="62e6087ce26f4100ef52ed21c56e081f8889caf691f3a1bb9299d5ba849987572300900bb448b499b112d148f95bc5797fe21ba678cd699acc8de127347c9ba7d1a7e249604a2dd85ef3b10ca9c4cedb393f778383177e31b6aa7b9fa1699ef82ab1694de2c1a4d64ba497c5cffb9b932680cf4e3960320e9ec3f4773950c7d9ca4e57802bca305a1528a0579f617b03bcf0a3b365c2b6fd49e7193da31b365700772d650307dc0dfc8a169992a58027f8ab37816151ae04ae365a1ff7844e93b37613518f30c6656086b9f9001d333644efda6eb141f3c54b556403b7d2ede5bfa09faf9cb77b38e706c1553698dd8962a853cf7a91", 0xf6, 0x9, 0x1}], 0x160000) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) readv(r1, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/71, 0x47}, {&(0x7f00000003c0)=""/43, 0x2b}, {&(0x7f0000000540)=""/49, 0x31}, {&(0x7f0000000700)=""/238, 0xee}, {&(0x7f0000000600)=""/43, 0x2b}, {&(0x7f0000000800)=""/210, 0xd2}, {&(0x7f0000000900)=""/184, 0xb8}], 0x7) [ 460.122171] binder: 4134:4151 transaction failed 29189/-3, size 0-0 line 2970 [ 460.167489] binder: undelivered TRANSACTION_ERROR: 29201 [ 460.173712] binder: 4134:4136 ioctl 40046207 0 returned -16 [ 460.213470] binder: undelivered TRANSACTION_ERROR: 29189 22:06:08 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) 22:06:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x9000000}}], 0x209, 0x0) 22:06:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x700000000000000}, 0x0) 22:06:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xd10, 0x840) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x8f, "7f42104c63a44640476420a00ebde642eedd6634bb686f2d074fd2ed0a1b95095c4a98ed689e6a712463c3572d35e73417743024fade367bf2de5dab46fb47d93e10f5839ebb7f9b667e84cc8e3c9aa27f6003bf75ab4971fc0488850b5bcc0338357a9514346a99e792ecb0e5dc52dd852434397e735a655654bfc66ad145b0e5abb82b4b7415c05a8c59490dc8df"}, &(0x7f0000000040)=0x97) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000001c0)={r3, 0xa5, "25e90ae84a4295f930bc6479853b95c8c2598fc8340b3e893cab3d832293ab642d2bc30ea2eb42cf9568fb9e97b0035e888e00a3db73dcf7dcac7d8084b5cb98f5955df063fa54c8d3d37cdfaaa525356d604ebe3f247b0ad8e72b5ed12f8d8d2bb9a6adf5e45d4c3cfad162997752f0b846fc9c944dbd8c0ad744964f2c11f31ddde72470045d837ee59c0af8b14a1b0b03975da9c10e8645b3479ebcc71135c5bed139b7"}, &(0x7f00000002c0)=0xad) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xfc48) 22:06:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x6, 0x800) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0xfffffffffffffffa) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) [ 460.454756] binder: 4182:4183 transaction failed 29201/-22, size 0-0 line 2970 22:06:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x7}}], 0x209, 0x0) 22:06:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x100000000000000}, 0x0) [ 460.506728] binder_alloc: binder_alloc_mmap_handler: 4182 20001000-20004000 already mapped failed -16 [ 460.546573] binder: BINDER_SET_CONTEXT_MGR already set 22:06:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000200)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x401, &(0x7f0000000240)=""/244) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) io_setup(0x46e, &(0x7f0000000080)=0x0) r5 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x101, 0x3) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000380)=0x5f) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffa, r0, &(0x7f00000000c0)="ea61ce5901ab679b4951ef21471b8e5cb88ff467e014567974caeb529183972ced75cc9149c32a", 0x27, 0x4, 0x0, 0x0, r6}, &(0x7f00000001c0)) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:06:08 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) munlockall() syz_open_pts(r2, 0x20000) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x4000) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000040)) [ 460.571833] binder: 4182:4183 ioctl 40046207 0 returned -16 [ 460.611616] binder: undelivered TRANSACTION_ERROR: 29201 22:06:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00e020000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xfffffdef}}], 0x209, 0x0) 22:06:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x2000000}, 0x0) [ 460.777552] binder: 4227:4228 transaction failed 29201/-22, size 0-0 line 2970 22:06:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003d00)='/dev/cuse\x00', 0x4000, 0x0) write$cgroup_type(r4, &(0x7f0000003d40)='threaded\x00', 0x9) recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/226, 0xe2}], 0x7, &(0x7f0000001580)=""/138, 0x8a, 0x7}}, {{&(0x7f0000001640)=@xdp, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000016c0)=""/183, 0xb7}, {&(0x7f0000001780)=""/175, 0xaf}, {&(0x7f0000001840)=""/220, 0xdc}, {&(0x7f0000001940)=""/50, 0x32}, {&(0x7f0000001980)=""/234, 0xea}, {&(0x7f0000001a80)=""/131, 0x83}, {&(0x7f0000001b40)=""/170, 0xaa}, {&(0x7f0000001c00)=""/120, 0x78}, {&(0x7f0000001c80)=""/48, 0x30}], 0x9, &(0x7f0000001d80)=""/157, 0x9d, 0x81}, 0x76}, {{&(0x7f0000001e40)=@l2, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001ec0)=""/166, 0xa6}], 0x1, &(0x7f0000001fc0)=""/216, 0xd8, 0x8}, 0xfffffffffffffe00}, {{&(0x7f00000020c0)=@sco, 0x80, &(0x7f0000003340)=[{&(0x7f0000002140)=""/246, 0xf6}, {&(0x7f0000002240)=""/207, 0xcf}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x3, &(0x7f0000003380)=""/153, 0x99, 0xfffffffffffffffc}, 0x100000000}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003440)=""/187, 0xbb}, {&(0x7f0000003500)=""/115, 0x73}, {&(0x7f0000003580)=""/222, 0xde}, {&(0x7f0000003680)=""/187, 0xbb}, {&(0x7f0000003740)=""/150, 0x96}, {&(0x7f0000003800)=""/49, 0x31}, {&(0x7f0000003840)=""/197, 0xc5}, {&(0x7f0000003940)=""/73, 0x49}, {&(0x7f00000039c0)=""/111, 0x6f}], 0x9, &(0x7f0000003b00)=""/5, 0x5, 0x80000001}, 0x7}], 0x5, 0x40000000, &(0x7f0000003c80)={0x0, 0x989680}) bind$vsock_stream(r5, &(0x7f0000003cc0)={0x28, 0x0, 0xffffffff, @host}, 0x10) [ 460.857469] binder_alloc: binder_alloc_mmap_handler: 4227 20001000-20004000 already mapped failed -16 [ 460.888410] binder: BINDER_SET_CONTEXT_MGR already set 22:06:08 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x7, &(0x7f0000000080)="bf6d1d74435f7cae0c0ed5ed9c6e367d55d6ab93298dff16a0179f8a0db28a826532201c8fc099bcea783ec9422fc4c4c077b53ecf235262c3657dc77e295fcc4b745e86634ce9830d1295972d36520000ef3484436d702fcdfa068addf23253e53d2c858ab53f4a4a6c3e05b63d4caa36b1f4bf20f4aeb2e728ff8d41b4746389c3304d8228f6c4") ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x70, 0x28000, 0x7f, 0x3, 0x8, 0x0, 0x8, 0x140, 0x4, 0x6, 0x6, 0x1000, 0xc95, 0xffffffff, 0x6, 0x1, 0x101, 0x7ff, 0x8, 0x1, 0xffffffffffffffff, 0x2, 0xffffffff, 0x1, 0x3, 0x9, 0x1, 0x3, 0x1, 0x6, 0x3, 0x2, 0x7, 0x7f, 0x0, 0x7, 0x9, 0x0, 0x7f, 0x4, @perf_config_ext={0xba, 0xfffffffffffffffe}, 0x200, 0x80000001, 0x2, 0x7, 0x400, 0xc083, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x8802, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x3000000}, 0x0) [ 460.916234] binder: 4227:4228 ioctl 40046207 0 returned -16 [ 460.917609] binder_alloc: 4227: binder_alloc_buf, no vma 22:06:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x200000000000000}}], 0x209, 0x0) [ 461.022218] binder: undelivered TRANSACTION_ERROR: 29201 22:06:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) 22:06:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00e0200, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x7000000}, 0x0) 22:06:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x8020000}}], 0x209, 0x0) 22:06:09 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0xc0002, 0x0, [0x7fff, 0x5, 0x6, 0x1, 0x1, 0x6, 0x3cb, 0x7]}) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8}) 22:06:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d2761bcf1d0b5ae76", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 461.302464] binder_alloc: binder_alloc_mmap_handler: 4268 20001000-20004000 already mapped failed -16 [ 461.346824] binder: BINDER_SET_CONTEXT_MGR already set 22:06:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x10}, 0x0) 22:06:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x1000000}}], 0x209, 0x0) 22:06:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='\x00', r0}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=@ipv6_delrule={0x48, 0x21, 0x400, 0x70bd2c, 0x25dfdbfe, {0xa, 0x20, 0x94, 0x8000, 0x100, 0x0, 0x0, 0x5, 0x1a}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @mcast2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048004}, 0x10) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) [ 461.369947] binder: 4268:4269 ioctl 40046207 0 returned -16 [ 461.395181] binder_alloc: 4268: binder_alloc_buf, no vma 22:06:09 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x80000001, 0x4000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xffff, 0x4, 0x2, 0x3, 0x0}, &(0x7f0000000180)=0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x18) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000280)={r1, 0x6, 0x7f, 0xa, 0x100000000, 0x7}, &(0x7f00000002c0)=0x14) unshare(0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x4) r2 = gettid() perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r5, 0x8090ae81, &(0x7f00000001c0)) fcntl$setflags(r3, 0x2, 0x0) open_by_handle_at(r5, &(0x7f00000003c0)={0x33, 0x3, "63ab129f13493979b8a8bab27ff4c228df5a61ccfc28f597c8481b157cffc99dba9c431f524359ed8f419b"}, 0x105000) ioctl$TCXONC(r0, 0x540a, 0x7fffffff) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000040)={0x100000001, 0x3, 0x2e6, 'queue1\x00'}) 22:06:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 461.613373] binder_alloc: binder_alloc_mmap_handler: 4314 20001000-20004000 already mapped failed -16 [ 461.655563] binder: BINDER_SET_CONTEXT_MGR already set [ 461.672424] binder: 4314:4315 ioctl 40046207 0 returned -16 [ 461.694120] binder_alloc: 4314: binder_alloc_buf, no vma 22:06:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x4}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bind$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}) 22:06:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x3}, 0x0) 22:06:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x900}}], 0x209, 0x0) 22:06:09 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7fffffff, 0x105000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000040)) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) 22:06:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:09 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1000000000003, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x24a600) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x10}, 0x20}}, 0x9, 0x6, 0x10fe, 0xaa2, 0x3}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r5, 0x20, 0x8000}, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x218a, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket(0x2, 0x1, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f00000002c0)={'lo\x00'}) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000000)={'lo\x00', 0x10000}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYPTR], 0x8) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="73717a313f53ecff947e03cf5108f000685328ec09ffb6d03b181bffd829e87699973d78ed94"], 0x26) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet(0x2, 0x200000002, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040)=0x4c, 0x4) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000878400000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8854969a547843fd6ef29"], 0x90) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000240)={'v\x00', 0x43732e5398416f1a}) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x6, 0x71, 0xffffffffffffffff, 0x0) 22:06:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 461.898395] binder_alloc: binder_alloc_mmap_handler: 4340 20001000-20004000 already mapped failed -16 22:06:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xf401000000000000}}], 0x209, 0x0) 22:06:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x700}, 0x0) [ 461.951750] binder: BINDER_SET_CONTEXT_MGR already set [ 461.970406] binder: 4340:4342 ioctl 40046207 0 returned -16 22:06:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") io_setup(0x2, &(0x7f0000000040)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200000, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000100)="c2e35848ea4bf48f9c6f7c7e80933da66899f16a60945fd3b0f5d5061bc98f88f2903651ebaa9d3fcc2e81280a2b8807d7393984d6995bc725ffd3831aacff7f7c6224c113", 0x45, 0x6, 0x0, 0x1, r2}, &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000380)=""/166) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000000)={'bond_slave_0\x00', 0xe5e}) [ 462.002114] binder_alloc: 4340: binder_alloc_buf, no vma 22:06:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x800000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x4, 0x0, 0x7) getpeername$inet(r2, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, &(0x7f0000000040)=0x10) getsockname$unix(r2, &(0x7f0000000140)=@abs, &(0x7f0000000200)=0x6e) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40000, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f00000000c0)={0xd74e, 0x7fff}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r4, 0x8090ae81, &(0x7f00000001c0)) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x200) 22:06:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x900000000000000}}], 0x209, 0x0) [ 462.276071] binder_alloc: binder_alloc_mmap_handler: 4392 20001000-20004000 already mapped failed -16 22:06:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0xf00}, 0x0) 22:06:10 executing program 5: r0 = socket$inet(0x2, 0x7, 0x0) ioctl(r0, 0x6, &(0x7f0000000100)="6afd0095788eef4c8a9ba77a54db387022c24c2d7b0d99d9bc6a7969cfd55409e06e1d599e072c044fa76069812c7debcdd9d812a079a41ad5dba3f558af997133cfb1f43c31e65e7d6a34ad13991cfd4bf58f988a56598ad09a8effe7054f0b40e6739c8a80e085419f868f884f3a47e535449e7efce5ec14d36ac9102469d75bc45eb8fad86956932ef8ee18854037549faf7330764e6aa3696635c66aa2761f44afedfd2fdc1d3674abdba32650cab8899d596d0e085bd53bca2a041770840a9f47574b6d85") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x400000000000000}}], 0x209, 0x0) 22:06:10 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0xff90, 0x3e6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xc140, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000040)={0x8000, 0xc, "d67e8ddc07dd3e81fc368d00"}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) keyctl$join(0x1, &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fstat(r0, &(0x7f00000000c0)) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000140)) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)={0x1, 0x0, 0x80000001, 0xb69, 0x3f}) [ 462.321397] binder: BINDER_SET_CONTEXT_MGR already set [ 462.329084] binder: 4392:4394 ioctl 40046207 0 returned -16 22:06:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 462.433984] binder_alloc: 4392: binder_alloc_buf, no vma 22:06:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x1000000000000000}, 0x0) 22:06:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x40000}}], 0x209, 0x0) 22:06:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:10 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x200, 0x20) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) 22:06:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x7}, 0x0) [ 462.611406] binder: BINDER_SET_CONTEXT_MGR already set [ 462.636118] binder_alloc: 4461: binder_alloc_buf, no vma 22:06:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xffffff7f}}], 0x209, 0x0) [ 462.685069] binder: 4461:4463 ioctl 40046207 0 returned -16 22:06:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") io_setup(0x2, &(0x7f0000000040)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200000, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000100)="c2e35848ea4bf48f9c6f7c7e80933da66899f16a60945fd3b0f5d5061bc98f88f2903651ebaa9d3fcc2e81280a2b8807d7393984d6995bc725ffd3831aacff7f7c6224c113", 0x45, 0x6, 0x0, 0x1, r2}, &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000380)=""/166) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000000)={'bond_slave_0\x00', 0xe5e}) 22:06:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x300000000000000}, 0x0) 22:06:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x20000000}}], 0x209, 0x0) [ 462.912370] binder: BINDER_SET_CONTEXT_MGR already set [ 462.939700] binder_alloc: 4489: binder_alloc_buf, no vma [ 462.977625] binder: 4489:4491 ioctl 40046207 0 returned -16 22:06:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:11 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) 22:06:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000003c0)=0x100000001, 0x4) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x3a00}}], 0x209, 0x0) 22:06:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000180)={0xffff, 0x539c, 0x3, 0x2, 0xfff}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280), 0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x210100, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='?poc/sys/net/ipv4/vs/lblcr_expiration\x00\x00', 0x2, 0x0) fanotify_mark(r2, 0x6e, 0x28, r3, &(0x7f0000000100)='./file0\x00') 22:06:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") io_setup(0x2, &(0x7f0000000040)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200000, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000100)="c2e35848ea4bf48f9c6f7c7e80933da66899f16a60945fd3b0f5d5061bc98f88f2903651ebaa9d3fcc2e81280a2b8807d7393984d6995bc725ffd3831aacff7f7c6224c113", 0x45, 0x6, 0x0, 0x1, r2}, &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000380)=""/166) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000000)={'bond_slave_0\x00', 0xe5e}) [ 463.359626] binder: BINDER_SET_CONTEXT_MGR already set 22:06:11 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) write$P9_RSTATu(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5e0000007d0101040000000000040000008004000000030000000000000000000001200000000000000015b1000000000000000003005c5e270000110065746830707070305e76626f786e65743002005c2d38", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3], 0x5e) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) geteuid() setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xe803}}], 0x209, 0x0) 22:06:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) [ 463.383754] binder_alloc: 4520: binder_alloc_buf, no vma [ 463.418327] binder: 4520:4521 ioctl 40046207 0 returned -16 22:06:11 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r1, 0x8090ae81, &(0x7f0000000000)={0xf001, 0xf000, 0x5}) fsync(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x2}, &(0x7f0000000100)=0x8) 22:06:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x4}}], 0x209, 0x0) 22:06:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) 22:06:11 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)={0x0, 0x0, 0x5}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x2d) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x200, 0x6, 0x9, 0xe58a}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40, 0x0) [ 463.640590] binder: BINDER_SET_CONTEXT_MGR already set [ 463.668967] binder_alloc: 4562: binder_alloc_buf, no vma 22:06:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) [ 463.713200] binder: 4562:4563 ioctl 40046207 0 returned -16 22:06:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x60000000}}], 0x209, 0x0) 22:06:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 463.927911] binder_transaction: 17 callbacks suppressed [ 463.927950] binder: 4592:4594 transaction failed 29201/-22, size 0-0 line 2970 [ 463.991317] binder_alloc_mmap_handler: 4 callbacks suppressed [ 463.991333] binder_alloc: binder_alloc_mmap_handler: 4592 20001000-20004000 already mapped failed -16 [ 464.007054] binder: BINDER_SET_CONTEXT_MGR already set [ 464.012516] binder: 4592:4599 transaction failed 29189/-3, size 0-0 line 2970 [ 464.014380] binder: 4592:4594 ioctl 40046207 0 returned -16 22:06:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x26) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000800)=""/210) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="2777422a3d536e57ff52fb7922523925a08ea1428f4e8f02febec437cb92b24951b09fbe11bf69f9e4a5ff807efddce8523ad51bc591dca72dceee68e28abbf2a893c10a63177f0ca61f8e5eb68b87d90902eefb91f19c2dc3acbec9202a1ba3681445", @ANYRESHEX=r2, @ANYBLOB="2c726f51746dd042ba066373ce0d0838f5496f64658400000030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB="05000011000000bf", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000400)={0x0, 0x8, 0x2, 0x6c}, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) r3 = open(&(0x7f0000000980)='./file0\x00', 0x2402, 0x2) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x200, 0x5}, {0x2, 0x7f}]}) r4 = creat(&(0x7f0000000440)='./file0/../file0\x00', 0x120) connect$unix(r4, &(0x7f00000004c0)=@file={0x1, './file0/../file0\x00'}, 0x6e) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) 22:06:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") io_setup(0x2, &(0x7f0000000040)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200000, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000100)="c2e35848ea4bf48f9c6f7c7e80933da66899f16a60945fd3b0f5d5061bc98f88f2903651ebaa9d3fcc2e81280a2b8807d7393984d6995bc725ffd3831aacff7f7c6224c113", 0x45, 0x6, 0x0, 0x1, r2}, &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000380)=""/166) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x80) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000040)={0x3, 0x0, [{}, {}, {}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x208}}], 0x209, 0x0) 22:06:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) 22:06:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x3a000000}}], 0x209, 0x0) [ 464.258198] binder: 4614:4620 transaction failed 29201/-22, size 0-0 line 2970 [ 464.298321] binder_alloc: binder_alloc_mmap_handler: 4614 20001000-20004000 already mapped failed -16 22:06:12 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000000)=0x3f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="6274b3d13bce759ca3b1"], &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) [ 464.343454] binder: BINDER_SET_CONTEXT_MGR already set [ 464.371257] binder: 4614:4620 ioctl 40046207 0 returned -16 [ 464.447000] binder: 4614:4651 transaction failed 29189/-3, size 0-0 line 2970 22:06:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) 22:06:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xf401}}], 0x209, 0x0) [ 464.491273] binder_release_work: 19 callbacks suppressed [ 464.496949] binder: undelivered TRANSACTION_ERROR: 29201 22:06:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 464.561657] binder: undelivered TRANSACTION_ERROR: 29189 22:06:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") io_setup(0x2, &(0x7f0000000040)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200000, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000100)="c2e35848ea4bf48f9c6f7c7e80933da66899f16a60945fd3b0f5d5061bc98f88f2903651ebaa9d3fcc2e81280a2b8807d7393984d6995bc725ffd3831aacff7f7c6224c113", 0x45, 0x6, 0x0, 0x1, r2}, &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000380)=""/166) 22:06:12 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x401, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000040)={[0xd000, 0x10000, 0x3000, 0x10000], 0xfffffffffffffff9, 0x8, 0x7fffffff}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x20) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000140)={0x0, 0x5, 0x4, &(0x7f0000000100)=0x6}) bind$rds(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) [ 464.647213] binder: 4663:4667 transaction failed 29201/-22, size 0-0 line 2970 [ 464.682251] binder_alloc: binder_alloc_mmap_handler: 4663 20001000-20004000 already mapped failed -16 [ 464.725322] binder: BINDER_SET_CONTEXT_MGR already set 22:06:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x6000000000000000}}], 0x209, 0x0) 22:06:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 464.753670] binder: 4663:4667 ioctl 40046207 0 returned -16 22:06:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) [ 464.861460] binder: 4663:4696 transaction failed 29189/-3, size 0-0 line 2970 [ 464.884707] binder: undelivered TRANSACTION_ERROR: 29201 [ 464.893064] binder: undelivered TRANSACTION_ERROR: 29189 22:06:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xf5ffffff00000000}}], 0x209, 0x0) 22:06:12 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x4, 0x30}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0xffffffffffff7fff}, &(0x7f0000000180)=0x8) r2 = socket$inet6_sctp(0xa, 0xfffffffffffffffe, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e20, 0xfffffffffffffffe, @mcast1, 0x3}}, [0x7, 0x6, 0xd26, 0x6, 0x706b, 0x8000, 0x0, 0x20, 0x5, 0x9, 0x3, 0x1, 0xff, 0x6]}, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:12 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x9ca) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) 22:06:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x7000000}}], 0x209, 0x0) [ 465.138744] binder: 4715:4716 transaction failed 29201/-22, size 0-0 line 2970 [ 465.199151] binder_alloc: binder_alloc_mmap_handler: 4715 20001000-20004000 already mapped failed -16 [ 465.244269] binder: BINDER_SET_CONTEXT_MGR already set [ 465.293435] binder: 4715:4716 ioctl 40046207 0 returned -16 [ 465.293831] binder_alloc_new_buf_locked: 3 callbacks suppressed [ 465.293839] binder_alloc: 4715: binder_alloc_buf, no vma [ 465.310979] binder: 4715:4733 transaction failed 29189/-3, size 0-0 line 2970 22:06:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="62747266732e658e2ee3"], &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000700)={0x10001, 0xffffffff80000001, 0x7, 0x7, 0x4, [{0x0, 0x7, 0x0, 0x0, 0x0, 0x2500}, {0xffffffffffff8001, 0x38, 0x20, 0x0, 0x0, 0x2800}, {0x29, 0xfcd, 0x4, 0x0, 0x0, 0x1}, {0x401, 0x20, 0x3ff, 0x0, 0x0, 0x2}]}) 22:06:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) 22:06:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) 22:06:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") io_setup(0x2, &(0x7f0000000040)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200000, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000100)="c2e35848ea4bf48f9c6f7c7e80933da66899f16a60945fd3b0f5d5061bc98f88f2903651ebaa9d3fcc2e81280a2b8807d7393984d6995bc725ffd3831aacff7f7c6224c113", 0x45, 0x6, 0x0, 0x1, r2}, &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000380)=""/166) 22:06:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x8dffffff}}], 0x209, 0x0) 22:06:13 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1ff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) [ 465.338357] binder: undelivered TRANSACTION_ERROR: 29201 [ 465.345822] binder: undelivered TRANSACTION_ERROR: 29189 22:06:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2e080000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) 22:06:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x3e8}}], 0x209, 0x0) [ 465.563095] binder: 4759:4761 transaction failed 29201/-22, size 0-0 line 2970 [ 465.610041] binder_alloc: binder_alloc_mmap_handler: 4759 20001000-20004000 already mapped failed -16 22:06:13 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto(r1, &(0x7f0000000180)="819682d7621a378ae25459990028f473e2e4b976332f631c9099c057cfccdeed3ac621269686a2483085e50bb865833e105a4666", 0x34, 0x40040, &(0x7f0000000280)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180)) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f0000000140)={0x40, 0x0, 0x3}) mknod(&(0x7f0000000200)='./file0\x00', 0x1044, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000140)) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') readv(r0, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) writev(r4, &(0x7f0000000200), 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x1) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) [ 465.655347] binder: BINDER_SET_CONTEXT_MGR already set 22:06:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) [ 465.677395] binder: 4759:4761 ioctl 40046207 0 returned -16 22:06:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x4000000000000}}], 0x209, 0x0) [ 465.777811] binder_alloc: 4759: binder_alloc_buf, no vma [ 465.783537] binder: 4759:4784 transaction failed 29189/-3, size 0-0 line 2970 22:06:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) 22:06:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x61, "7c0432882c655fbe90b5f4418ec0fe2db3c3a7678d0a0b33eeb3aef48ed5c671bb10ff9ac1b2dd04ccdb638542b4fe160937f75aa8c937b6d03ddcf6ca7f5033188f0a9833d30bebca61a674e0866e3b757d345f304c0459152096f495fb98adbc"}, &(0x7f0000000100)=0x69) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r1, 0x6, 0xfffffffffffffffa}, &(0x7f0000000180)=0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @dev={0xfe, 0x80, [], 0x10}, 0xa}, @in6={0xa, 0x4e24, 0x4, @ipv4, 0x7}, @in6={0xa, 0x4e22, 0x80000000, @mcast2, 0x80}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x1e}, 0x7}, @in6={0xa, 0x4e22, 0x3, @empty, 0x4f8}, @in={0x2, 0x4e21, @multicast1}], 0x9c) getpeername$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000340)=0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 465.841591] binder: undelivered TRANSACTION_ERROR: 29201 [ 465.850917] binder: undelivered TRANSACTION_ERROR: 29189 22:06:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 466.015042] binder_alloc: binder_alloc_mmap_handler: 4804 20001000-20004000 already mapped failed -16 [ 466.072008] binder: BINDER_SET_CONTEXT_MGR already set [ 466.085825] binder: 4804:4805 ioctl 40046207 0 returned -16 [ 466.095666] binder_alloc: 4804: binder_alloc_buf, no vma [ 466.120746] binder: undelivered TRANSACTION_ERROR: 29189 [ 466.126543] binder: undelivered TRANSACTION_ERROR: 29201 22:06:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) 22:06:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x6000}}], 0x209, 0x0) 22:06:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:14 executing program 4: syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff, 0xa003) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0x8090ae81, &(0x7f00000001c0)) r1 = dup(0xffffffffffffffff) pkey_alloc(0x0, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000080)={{0x4, 0x7, 0x10000, 0x5, 'syz1\x00', 0x12ed}, 0x2, 0x20000010, 0x0, r2, 0x1, 0x7, 'syz1\x00', &(0x7f0000000040)=['\x00'], 0x1, [], [0x62fe, 0x7fff, 0x6, 0x6]}) 22:06:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") io_setup(0x2, &(0x7f0000000040)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200000, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000100)="c2e35848ea4bf48f9c6f7c7e80933da66899f16a60945fd3b0f5d5061bc98f88f2903651ebaa9d3fcc2e81280a2b8807d7393984d6995bc725ffd3831aacff7f7c6224c113", 0x45, 0x6, 0x0, 0x1, r2}, &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000380)=""/166) 22:06:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0xd, &(0x7f0000000240)={0x0, 0x8000000, 0x7}, 0xffffffffffffff8a) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0xd}, 0x3}}, [0x3, 0x2, 0x0, 0x5, 0x2a000, 0x10001, 0xa4b2, 0x1000, 0x61, 0x86, 0x81, 0x7fff, 0x7f, 0x80000000, 0x7]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000040)={r6, 0x8}, &(0x7f0000000200)=0x8) r7 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x1c58, 0x80000) exit_group(0x8000) r8 = semget$private(0x0, 0x7, 0x1) semctl$GETZCNT(r8, 0x1, 0xf, &(0x7f0000000380)=""/240) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000340)={0x1, 'ip6gretap0\x00', 0x3}, 0x18) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000280), 0x4) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x2400, 0x0) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000480)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) 22:06:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="d5ec"]) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="ff0f0000732e826d3100"], &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) lstat(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f00000004c0)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000540), &(0x7f0000000600)=0xc) [ 466.379059] binder_alloc: binder_alloc_mmap_handler: 4821 20001000-20004000 already mapped failed -16 22:06:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) 22:06:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x9}}], 0x209, 0x0) 22:06:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000780)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:14 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x800, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x400) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000080)=""/162) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@remote, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'osx.', '\\{\x00'}) [ 466.424509] binder: BINDER_SET_CONTEXT_MGR already set [ 466.435391] binder_alloc: 4821: binder_alloc_buf, no vma [ 466.450129] binder: 4821:4831 ioctl 40046207 0 returned -16 22:06:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) 22:06:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfdff, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x802000000000000}}], 0x209, 0x0) 22:06:14 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x100000000, 0x7) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x30810010}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="00022abd7000fedbdf250600000064000100080006006c630000080004004e2100000c000700380000003200000014000300ff01000000000000000000000000000108000500010000000c0006006c626c630000000014000300ff020000000000000000000000000001080004004e210000"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x4805) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', r3}, 0x10) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x100) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000040)={0x462, @dev={[], 0x11}}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000002c0)={0x4, r4, 0x1}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r6, 0x8090ae81, &(0x7f00000001c0)) 22:06:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") io_setup(0x2, &(0x7f0000000040)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200000, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000100)="c2e35848ea4bf48f9c6f7c7e80933da66899f16a60945fd3b0f5d5061bc98f88f2903651ebaa9d3fcc2e81280a2b8807d7393984d6995bc725ffd3831aacff7f7c6224c113", 0x45, 0x6, 0x0, 0x1, r2}, &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 466.750604] binder_alloc: binder_alloc_mmap_handler: 4874 20001000-20004000 already mapped failed -16 22:06:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) 22:06:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup(r0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000100)="1c14689014cc6801d42f41f60f371ded86f0edd8b8a3a736d01f6c26990598f32d9c6ef8a55884750bcc19464c27e17c23bf78e1429a719a0c28e66bf0c874470c7aad690d19659ccf3346add73a9ebe4748f0867bb449648b1d16bf2954db63bd350660b158b2fcbe09a238e0564a9812d5e9dd762e1a61c03ffed5226a94ce8cd2c66a56d793054a99f1b08bde489f6c054c0ce97089ae32415df30ec239eaf5febc86d4f40f82e4f2a8144da92b9b327cbf8905558029a48239b8062285495a1f6004d4675082a6a2afa2eed4d2e309d8e688d3bbf540ec235e17bcf9d2e7f512371d92c006429ea513eab13d") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 466.795612] binder: BINDER_SET_CONTEXT_MGR already set [ 466.850631] binder: 4874:4875 ioctl 40046207 0 returned -16 [ 466.907525] binder_alloc: 4874: binder_alloc_buf, no vma 22:06:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xf5ffffff}}], 0x209, 0x0) 22:06:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) 22:06:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xf9010000}}], 0x209, 0x0) 22:06:14 executing program 4: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) [ 467.127695] binder_alloc: binder_alloc_mmap_handler: 4918 20001000-20004000 already mapped failed -16 22:06:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97, 0x0}, 0x0) [ 467.175222] binder: BINDER_SET_CONTEXT_MGR already set [ 467.213965] binder: 4918:4919 ioctl 40046207 0 returned -16 [ 467.251904] binder_alloc: 4918: binder_alloc_buf, no vma 22:06:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='ppp0\x00', 0xffffffffffffff9c}, 0x10) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000500)) 22:06:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0xf901}}], 0x209, 0x0) 22:06:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x7) 22:06:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:15 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x1000000000000003, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) 22:06:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") io_setup(0x2, &(0x7f0000000040)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200000, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000100)="c2e35848ea4bf48f9c6f7c7e80933da66899f16a60945fd3b0f5d5061bc98f88f2903651ebaa9d3fcc2e81280a2b8807d7393984d6995bc725ffd3831aacff7f7c6224c113", 0x45, 0x6, 0x0, 0x1, r2}, &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 467.476621] binder_alloc: binder_alloc_mmap_handler: 4946 20001000-20004000 already mapped failed -16 22:06:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") io_setup(0x2, &(0x7f0000000040)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200000, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000100)="c2e35848ea4bf48f9c6f7c7e80933da66899f16a60945fd3b0f5d5061bc98f88f2903651ebaa9d3fcc2e81280a2b8807d7393984d6995bc725ffd3831aacff7f7c6224c113", 0x45, 0x6, 0x0, 0x1, r2}, &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x900000000000000}}], 0x209, 0x0) [ 467.544499] binder: BINDER_SET_CONTEXT_MGR already set [ 467.594200] binder: 4946:4947 ioctl 40046207 0 returned -16 [ 467.632719] binder_alloc: 4946: binder_alloc_buf, no vma 22:06:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x3000000) 22:06:15 executing program 5: r0 = socket$inet6(0xa, 0xe, 0x40000) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00') ioctl$TCXONC(r2, 0x540a, 0xffffffffffffffd1) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 22:06:15 executing program 4: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0x7f, 0x400, 0x1000, 0xfffffffffffffffc, 0x0, 0x200, 0x2, 0xc, 0xcf1, 0x7, 0x7fff, 0x0, 0x2cf4, 0x9, 0x3, 0x47fb, 0xd332, 0x4, 0x3f, 0x4000000, 0x9, 0x6, 0x40, 0x2, 0x3, 0xf0, 0x1f, 0x0, 0xd453, 0x10001, 0xb304, 0x0, 0x9, 0x6, 0xffffffffffffffe0, 0x8, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x20114, 0x3, 0x27c7b857, 0x3, 0x101, 0x4a0ada9c}, 0xffffffffffffffff, 0x10, 0xffffffffffffff9c, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0x3, 0x10000}) r3 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x1, 0x40) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x4, 0x0, [{0x80000001, 0xbfce, 0x4, 0x2, 0x8, 0x2, 0x29a6}, {0xc0000001, 0xfffffffffffffff9, 0xdcb866b24aabe8e5, 0x0, 0x101, 0x1000, 0x3}, {0xc0000001, 0x3ff, 0x2, 0x6, 0x0, 0xffffffffffff8001, 0x9}, {0x0, 0x2abe58, 0x6, 0x8e, 0x0, 0xde78}]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x0, 0x6) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r5, 0x6, 0xffffffff00000001}, 0xc) 22:06:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") io_setup(0x2, &(0x7f0000000040)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200000, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000100)="c2e35848ea4bf48f9c6f7c7e80933da66899f16a60945fd3b0f5d5061bc98f88f2903651ebaa9d3fcc2e81280a2b8807d7393984d6995bc725ffd3831aacff7f7c6224c113", 0x45, 0x6, 0x0, 0x1, r2}, &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x82e, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") io_setup(0x2, &(0x7f0000000040)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200000, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000100)="c2e35848ea4bf48f9c6f7c7e80933da66899f16a60945fd3b0f5d5061bc98f88f2903651ebaa9d3fcc2e81280a2b8807d7393984d6995bc725ffd3831aacff7f7c6224c113", 0x45, 0x6, 0x0, 0x1, r2}, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 467.817793] binder_alloc: 4979: binder_alloc_buf, no vma [ 467.818892] binder: BINDER_SET_CONTEXT_MGR already set 22:06:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x700) [ 467.899068] binder: 4979:4981 ioctl 40046207 0 returned -16 22:06:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0xf) 22:06:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") io_setup(0x2, &(0x7f0000000040)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200000, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000100)="c2e35848ea4bf48f9c6f7c7e80933da66899f16a60945fd3b0f5d5061bc98f88f2903651ebaa9d3fcc2e81280a2b8807d7393984d6995bc725ffd3831aacff7f7c6224c113", 0x45, 0x6, 0x0, 0x1, r2}, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xeffdffff00000000}}], 0x209, 0x0) 22:06:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000780)='/dev/fuse\x00', 0x2, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='\x00', r0}, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000600)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2442}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r3, 0x104, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3f}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008040}, 0x80) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x1, 0x0) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000bc0)=""/4096) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:16 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80000, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f00000003c0)=""/4096, 0x1000}, &(0x7f0000000080), 0x20}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) r4 = socket$inet6(0xa, 0x80001, 0x8) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 22:06:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x7, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") io_setup(0x2, &(0x7f0000000040)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200000, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000100)="c2e35848ea4bf48f9c6f7c7e80933da66899f16a60945fd3b0f5d5061bc98f88f2903651ebaa9d3fcc2e81280a2b8807d7393984d6995bc725ffd3831aacff7f7c6224c113", 0x45, 0x6, 0x0, 0x1, r2}, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 468.356055] binder: BINDER_SET_CONTEXT_MGR already set [ 468.395839] binder_alloc: 5017: binder_alloc_buf, no vma 22:06:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x2) [ 468.426157] binder: 5017:5019 ioctl 40046207 0 returned -16 22:06:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") io_setup(0x2, &(0x7f0000000040)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:16 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xc000, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) [ 468.544750] Unknown ioctl -2146413349 22:06:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x3) [ 468.657314] binder: BINDER_SET_CONTEXT_MGR already set [ 468.695625] binder_alloc: 5060: binder_alloc_buf, no vma 22:06:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x100000000000000) [ 468.739889] binder: 5060:5062 ioctl 40046207 0 returned -16 22:06:16 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0x1, &(0x7f0000000000)={0xfffffffffffffff8, 0xab05, 0xa7, 0x7f, 0x10000, 0x9, 0x1000, 0x20, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x3ff, 0x9, 0x6ab, 0x300000000000, 0x8, 0x200, 0x3, 0x8, 0x0, 0x3, 0x80, 0x7fffffff}) r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x840) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000280)={[0x4002, 0x4000, 0x1000, 0x6000], 0x9, 0xc0, 0x2}) signalfd4(r0, &(0x7f0000000300)={0x8}, 0x8, 0x80000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x5, 0x4000) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r4, 0x40045731, &(0x7f0000000140)=0x4) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f00000003c0)={"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"}) 22:06:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x1000000) 22:06:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 468.951112] binder_transaction: 16 callbacks suppressed [ 468.951162] binder: 5083:5084 transaction failed 29201/-22, size 0-0 line 2970 [ 468.988378] binder: BINDER_SET_CONTEXT_MGR already set [ 469.002445] binder: 5083:5091 transaction failed 29189/-3, size 0-0 line 2970 22:06:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x4000000}}], 0x209, 0x0) [ 469.054890] binder: 5083:5084 ioctl 40046207 0 returned -16 22:06:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) syslog(0x9, 0x0, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x2000000) 22:06:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") io_setup(0x2, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=""/99, &(0x7f0000000100)=0x63) 22:06:17 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = accept$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) listxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)=""/242, 0xf2) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000000)=""/162) 22:06:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x10) [ 469.328583] binder: 5114:5115 transaction failed 29201/-22, size 0-0 line 2970 [ 469.365794] binder_alloc_mmap_handler: 4 callbacks suppressed [ 469.365811] binder_alloc: binder_alloc_mmap_handler: 5114 20001000-20004000 already mapped failed -16 22:06:17 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x5, 0x220000) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000140)={0x1, 0xffffffffffffffff, 0x1}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x14b) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f00000000c0)={'veth0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r4, 0x8090ae81, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200080, 0x0) [ 469.450606] binder: 5114:5122 transaction failed 29189/-3, size 0-0 line 2970 [ 469.475615] binder: BINDER_SET_CONTEXT_MGR already set 22:06:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x700000000000000) [ 469.511274] binder_release_work: 16 callbacks suppressed [ 469.516932] binder: undelivered TRANSACTION_ERROR: 29201 [ 469.526046] binder: 5114:5115 ioctl 40046207 0 returned -16 [ 469.560448] binder: undelivered TRANSACTION_ERROR: 29189 22:06:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfdffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xf401}}], 0x209, 0x0) 22:06:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0xf00000000000000) 22:06:17 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x8040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0x1, 0x1, 0x9, 0x1000000000000000, 0x5}) socket$inet6(0xa, 0x5, 0x6) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) [ 469.822156] binder: 5155:5157 transaction failed 29201/-22, size 0-0 line 2970 [ 469.866468] binder_alloc: binder_alloc_mmap_handler: 5155 20001000-20004000 already mapped failed -16 22:06:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x200000000000000) [ 469.921870] binder: BINDER_SET_CONTEXT_MGR already set [ 469.921914] binder: 5155:5166 transaction failed 29189/-3, size 0-0 line 2970 [ 469.950591] binder: 5155:5157 ioctl 40046207 0 returned -16 [ 470.024026] binder: undelivered TRANSACTION_ERROR: 29201 [ 470.030911] binder: undelivered TRANSACTION_ERROR: 29189 22:06:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='btrfm1\x00'], &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x4, 0x80000) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000002c0)=""/242) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket$inet(0x2, 0x5, 0x6) write(r2, &(0x7f0000000100)="7ab60884adc00efc3b09c9eb2353c98e8ea29600dc56343527e48c093deb400c036f9c6d1528af2d2a371bd1a9958ffd9036ef5dca0b680d51a2381e7a81ad5448acaa9895d5f889b294449129936ac4c203536f292eecce5064469643c4155f6d6eecb92f5045321aa5e28fa70c17fdd17037990fee818a5e22200c2131c3052a133f030ebf7b741c211ad9cf00c506a738503c5eba59201447924a009f45af94aacc196ca4354f962693fb8deee7f938789fb83d3e816fda7e7bd8b7c51e1df386afa883f6caac235bdf624eb0e68debd84fdb9264184098", 0xd9) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x100000000, @empty, 0xa60}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @multicast2}], 0xbcf6ec3ecaf9d677) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280)=0x80000001, 0x4) r4 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0xfff, 0x80800) r5 = getpgrp(0xffffffffffffffff) write$P9_ROPEN(r4, &(0x7f0000000580)={0x18, 0x71, 0x2, {{0x80, 0x3, 0x6}, 0x100}}, 0x18) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000440)={{0x2, 0x2, 0x8, 0x3, '\x00', 0x7fffffff}, 0x1, 0x100, 0xc5, r5, 0x8, 0xfff, 'syz1\x00', &(0x7f00000003c0)=['/dev/input/event#\x00', '\x00', '/user:GPL\x00', '/dev/input/event#\x00', '/dev/input/event#\x00', "6d643573756d3afb73656c6600", '/dev/input/event#\x00', '/dev/input/event#\x00'], 0x72, [], [0x5, 0x2, 0x6, 0x4]}) 22:06:18 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x20, 0x22000) mknod$loop(&(0x7f00000014c0)='./file0\x00', 0x8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001540)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001500)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000001580)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @loopback, 0x401}, @in6={0xa, 0x4e24, 0x4, @mcast1, 0x7}}}, 0x118) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001440)={0x53, 0x0, 0xe6, 0x2, @scatter={0x2, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/185, 0xb9}]}, &(0x7f0000000280)="afbfdd2b96a3a3570b51c22199dbef6ce17dab535ef7c5bfb88eb37333384afef987e943f3223a598993effdf07fe440a554ba0a10222feabc23b9aa332b784dc952e091f9dad0d3567a4b8a9cab24d97beb672b4d39a038e1284ad6dfa5d76eee1295195c4ea882eac164d0976b0937510d8641dbcd1ff46d3685e81831ae80a731725af987200977780e0f7cb3744cdf1cfb7f57cb8e5b2d004033eb9cf08367efe9c2703fe8e71e33510a0dd0c285e69fc9395798b3ea94f0ceb3116672bcdecd072adcabd65c4f3acafc5e02197e3d3a38f3d536a5292d1548b6374a4deedfd484eace2e", &(0x7f00000013c0)=""/98, 0x4c5a746b, 0x10001, 0x3, &(0x7f0000000180)}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x12715, 0x0, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r4, 0x8090ae81, &(0x7f00000001c0)) 22:06:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x300000000000000) 22:06:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 470.222088] binder: 5188:5190 transaction failed 29201/-22, size 0-0 line 2970 22:06:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x10000000) [ 470.295155] binder_alloc: binder_alloc_mmap_handler: 5188 20001000-20004000 already mapped failed -16 [ 470.323933] binder: BINDER_SET_CONTEXT_MGR already set 22:06:18 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 470.343101] binder: 5188:5190 ioctl 40046207 0 returned -16 [ 470.358520] binder_alloc_new_buf_locked: 3 callbacks suppressed [ 470.358528] binder_alloc: 5188: binder_alloc_buf, no vma [ 470.370386] binder: 5188:5204 transaction failed 29189/-3, size 0-0 line 2970 22:06:18 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x401, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000240)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={r1, 0x0, 0xffff}, &(0x7f0000000400)=0x8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40100, 0x0) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)="22b2052135af51b73a7372ea3e42161e7a9aea1a4815136ec39b7891486706a7bd7287c0a313acda18409df9632fefdded627212ffc7194989a58b9f82b63fee1955d76280ecc0e77912442cf49933078d1104ef4b78a48349fa20e3a14e7b297702aa68eb61c3f6ea9ecce5c8352acd03d80a1460c4b721a9e7e500afec64ea031c2cf0da234902ae74347502f63842096382da399673a16b8ca6cd556a1a3e361723a46088f70084dd4c2437c1abc4d271ed4b086adc1b91d17de192de93d5bd3bf159ce5c72376ac5ea4b22db20b24d2f1ffc9082ebd8d12a408dc4edd3fd900dcb4fab89b24dae85c7203108c3879b50", 0xf2, 0xfffffffffffffff9) keyctl$link(0x8, r6, r5) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x539) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0), 0x121) 22:06:18 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x20080, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(r0, &(0x7f00000000c0)="00e9c94f13457d243ed89bb4eb0443601d918f7fb7825520e79ae184c055d15902a9ef62b6f4c56d9e29696c4bb3043541ffa3899362fe04e6bace096f00aec2973bd0d4e351ca65f2c8ae725bd9ee64a78970ccd84a76d707ea7245257fbfde834f4a94c044cdebba329cddef898ff1736d6d0d62e80901707ba2f8de809695939bade8b1440bda98707bae0ff9e87bcc849d25426414761b2233010dd17fc26bb9ea79cce8b1c5c2a667c557dd1c96b09c0afe4e", 0xb5, 0x8090, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000003c0)={0x0, 0x0, @ioapic}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) ioctl$KVM_TRANSLATE(r4, 0x8090ae81, &(0x7f00000001c0)) [ 470.449777] binder: undelivered TRANSACTION_ERROR: 29201 [ 470.457028] binder: undelivered TRANSACTION_ERROR: 29189 22:06:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0xf00) 22:06:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x4}}], 0x209, 0x0) [ 470.626980] binder: 5240:5243 transaction failed 29201/-22, size 0-0 line 2970 22:06:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x1000000000000000) [ 470.677845] binder_alloc: binder_alloc_mmap_handler: 5240 20001000-20004000 already mapped failed -16 [ 470.723224] binder: BINDER_SET_CONTEXT_MGR already set 22:06:18 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) [ 470.753448] binder: 5240:5243 ioctl 40046207 0 returned -16 22:06:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x7000000) [ 470.803578] binder_alloc: 5240: binder_alloc_buf, no vma [ 470.809216] binder: 5240:5256 transaction failed 29189/-3, size 0-0 line 2970 [ 470.854914] binder: undelivered TRANSACTION_ERROR: 29201 [ 470.861528] binder: undelivered TRANSACTION_ERROR: 29189 22:06:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000003c0)='/dev/dmmidi#\x00', 0x7f, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000004c0)=0xffffffffffff8001, &(0x7f0000000500)=0x4) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xfffffdef, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfdffffff, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:18 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:18 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 22:06:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0xf000000) [ 471.145204] binder_alloc: binder_alloc_mmap_handler: 5276 20001000-20004000 already mapped failed -16 22:06:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x300) [ 471.226806] binder: BINDER_SET_CONTEXT_MGR already set 22:06:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xeffdffff, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 471.285755] binder: 5276:5279 ioctl 40046207 0 returned -16 [ 471.321483] binder_alloc: 5276: binder_alloc_buf, no vma 22:06:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffd) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r0, &(0x7f00000008c0)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f00000003c0)=""/50, 0x32}], 0x10000000000000e5, &(0x7f00000001c0)=""/151, 0x97}, 0x0) 22:06:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xfffffff5}}], 0x209, 0x0) 22:06:19 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x400006, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x28) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$RTC_PIE_OFF(r4, 0x7006) [ 471.367137] binder: undelivered TRANSACTION_ERROR: 29201 [ 471.417434] binder: undelivered TRANSACTION_ERROR: 29189 22:06:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x3000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:19 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100000000, 0x10000) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x2000}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00001ec000), 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x220) recvmsg(r3, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:19 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x402000, 0x0) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) [ 471.610958] binder_alloc: binder_alloc_mmap_handler: 5335 20001000-20004000 already mapped failed -16 [ 471.661726] binder: BINDER_SET_CONTEXT_MGR already set [ 471.699919] binder_alloc: 5335: binder_alloc_buf, no vma [ 471.714561] binder: 5335:5337 ioctl 40046207 0 returned -16 22:06:19 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xe03f0300, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x408240) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080)) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x220) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") dup3(r0, r0, 0x80000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0xc0000, 0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r2, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lgetxattr(&(0x7f00000003c0)='./file0/../file0/file0\x00', &(0x7f00000004c0)=@known='system.posix_acl_access\x00', &(0x7f0000000700)=""/197, 0xc5) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) ppoll(&(0x7f0000000540)=[{r2, 0x5025}, {r0, 0x88}], 0x2, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={0x1}, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:19 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x8}) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x80, 0x4000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000080)) 22:06:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x900}}], 0x209, 0x0) 22:06:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xc, 0x9, 0x8000, 0x4, 0xa, r2, 0x35}, 0x2c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 472.057540] binder_alloc: binder_alloc_mmap_handler: 5353 20001000-20004000 already mapped failed -16 22:06:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 472.103447] binder: BINDER_SET_CONTEXT_MGR already set 22:06:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000000)={0x3, 0xffff00000, 0x1ff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000140)) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 472.145253] binder: 5353:5354 ioctl 40046207 0 returned -16 [ 472.173131] binder_alloc: 5353: binder_alloc_buf, no vma 22:06:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000004c0)={0x9, 0x5, 0x5}) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='btrfs.\x00\x00\x00\x00'], &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r2, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:20 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffc, 0x7c}) 22:06:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="6af8243786c43ff04214bebc4fa0600349723b49e1dfc359fa887a59796def7e624799c893a0f404fc950dc96e7b3ec6bcdb4f0ddc7f3363e055e0d6cf50090bc10eb8c279e544d29b9baae7f84c8a2c919ec3733ed4e9f7dc079ceed6752c77fa8a406eeeb12db457defdc86809f5da737a7ca4648e", 0x76) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 472.446000] binder_alloc: binder_alloc_mmap_handler: 5397 20001000-20004000 already mapped failed -16 22:06:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xf, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0xffffffffffffff49) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x4200, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x3fb}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3, 0xff, 0x10}, 0xc) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 472.499125] binder: BINDER_SET_CONTEXT_MGR already set [ 472.526412] binder: 5397:5399 ioctl 40046207 0 returned -16 [ 472.562722] binder_alloc: 5397: binder_alloc_buf, no vma 22:06:20 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:20 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x80202) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x21000, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x180) write$P9_RMKDIR(r2, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x50, 0x3, 0x6}}, 0x14) 22:06:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2d080000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x3e8}}], 0x209, 0x0) 22:06:20 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23}}, [0x5, 0xffffffffffff8001, 0x1, 0x32, 0x1, 0x3, 0x8, 0x8, 0xffff, 0xb8be, 0x1, 0x1, 0x4, 0xe2, 0x400]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x100000000000, 0x200, 0x4, 0x8, r3}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x5, 0x200) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x9, 0x30}, &(0x7f0000000740)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000780)={r6, 0x1f, 0xffff, 0x922}, &(0x7f00000007c0)=0x10) ioctl$KVM_TRANSLATE(r4, 0x8090ae81, &(0x7f00000001c0)) 22:06:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x1, 0x2, 0x9]}, &(0x7f0000000080)=0xa) [ 472.818571] binder_alloc: binder_alloc_mmap_handler: 5430 20001000-20004000 already mapped failed -16 [ 472.865173] binder: BINDER_SET_CONTEXT_MGR already set 22:06:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'bcsf0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x1c, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 472.887081] binder_alloc: 5430: binder_alloc_buf, no vma [ 472.924217] binder: 5430:5432 ioctl 40046207 0 returned -16 22:06:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) fcntl$getflags(r1, 0x408) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) 22:06:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r0}) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:21 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8100, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400003ff, 0x0, 0x1f}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:21 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 473.200411] binder_alloc: binder_alloc_mmap_handler: 5462 20001000-20004000 already mapped failed -16 22:06:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000001c0), 0x4) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x220) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 473.257337] binder: BINDER_SET_CONTEXT_MGR already set [ 473.283804] binder: 5462:5463 ioctl 40046207 0 returned -16 [ 473.314629] binder_alloc: 5462: binder_alloc_buf, no vma 22:06:21 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8080, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x40000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x2000000}}], 0x209, 0x0) 22:06:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x7fffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in=@dev}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0xff2e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x220) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000180)=0x0) fcntl$setown(r0, 0x8, r4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) ptrace$peek(0x1, r4, &(0x7f0000000140)) syz_open_pts(r3, 0x208000) 22:06:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xf0ffff, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:21 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7f, 0x1) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040)=0xd, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xffffffff, 0x20, 0x3f, 0x6000}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x36, 0x0, 0x200, 0xb6, 0xfb8, 0x5, 0x1000, 0x5, r3}, &(0x7f0000000140)=0x20) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r4, 0x8090ae81, &(0x7f00000001c0)) [ 473.612654] binder: BINDER_SET_CONTEXT_MGR already set [ 473.618243] binder_alloc: 5505: binder_alloc_buf, no vma 22:06:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) r3 = dup3(r1, r2, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000140)={0x43, 0x29, 0x1, {0xffff, [{{0x80, 0x2, 0x4}, 0xdb, 0x1200000, 0x1, '.'}, {{0x8, 0x4, 0x2}, 0xea6, 0x0, 0x7, './file0'}]}}, 0x43) [ 473.664907] binder: 5505:5506 ioctl 40046207 0 returned -16 22:06:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40000, 0x80) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x7f, @empty, 0x4e23, 0x2, 'dh\x00', 0x8, 0xbe9, 0x13}, 0x2c) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc8f6ff295f85713b70") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) sendto$inet(r1, &(0x7f0000000240)="1680960dfa0f61f0c650ed2b294c96039a5be48a3d02c2d784cea6f6b76ddc229e", 0x21, 0x40040, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0xc1, "3b7eed49d24faf933cb3ac42cdaae3a3852249cede56ffeccbc58921e13875a1a6217b67919b817b5e128686c0829ae410f7e51480467d3a111526e78b9edcb0b4c509126d3857501c392e52ee2852ecd5259423f158407f0ca1edbc8dcc8125c8c0fb4962a636070b641e150fddb3ef593e786f9b1668379be46c469573d3e2e205dd8ebc2e9ccd75de73c705ba1d45824863c3b2ce1fe79b6a092df28cc869476367dd456a41eeae1e6ddbebc8b6deed0bd9f3c2e53dabc95c3a7b8116fb857d"}, &(0x7f00000003c0)=0xc9) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000400)={r3, 0x0, 0xfffffffffffffff7, 0x9}, &(0x7f0000000440)=0x10) name_to_handle_at(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x7c, 0x1, "9c23efd83515dd2a8b0070af7c043fa38acba31dd19c55070bea0b83e9d2c391ed81c577bc05b7553359dd7b55de8978635c28ce320d391936b6a1f7f7d6c045dac04e42a4aef190a702f846accc090ca97d156e97a4ca78b8626dc21f2849af2c474f06cd8607c022722021214e81181ab4c0c4"}, &(0x7f0000000200), 0x400) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280)=0xfdffffffffffffff, 0x4) getitimer(0x1, &(0x7f0000000100)) 22:06:21 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 473.948344] binder: BINDER_SET_CONTEXT_MGR already set [ 473.965748] binder_alloc: 5530: binder_alloc_buf, no vma [ 473.971401] binder_transaction: 15 callbacks suppressed [ 473.971418] binder: 5530:5535 transaction failed 29189/-3, size 0-0 line 2970 [ 473.972332] binder: 5530:5531 ioctl 40046207 0 returned -16 22:06:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc00e, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:21 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x8dffffff}}], 0x209, 0x0) 22:06:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x284500) clock_gettime(0x0, &(0x7f0000001dc0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001d40)=[{{&(0x7f0000001e80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000001b00), 0x0, &(0x7f0000000380)=""/58, 0x3a, 0x3}, 0x3}, {{&(0x7f0000001bc0)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f0000001c40)=""/88, 0x58}], 0x1, &(0x7f0000001cc0)=""/82, 0x52, 0xfffffffffffffffc}, 0x1}], 0x2, 0x40000041, &(0x7f0000001e00)={r3, r4+30000000}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000001e40)={@local, 0x31, r5}) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc000000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:22 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:22 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) unlinkat(r0, &(0x7f0000000540)='./file0\x00', 0x200) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x80, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000580)={0xfffffffffffffe55, 0x0, &(0x7f00000000c0)}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000280)=""/142) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000640)) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r4) io_setup(0x5, &(0x7f0000000180)=0x0) io_cancel(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x3, r2, &(0x7f00000003c0)="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", 0xfd, 0x6ce4, 0x0, 0x0, r4}, &(0x7f00000004c0)) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000600)) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) 22:06:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xeffdffff00000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 474.317907] binder: 5572:5574 transaction failed 29201/-22, size 0-0 line 2970 22:06:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x0) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 474.396951] binder_alloc_mmap_handler: 2 callbacks suppressed [ 474.396969] binder_alloc: binder_alloc_mmap_handler: 5572 20001000-20004000 already mapped failed -16 22:06:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x100000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 474.472069] binder: BINDER_SET_CONTEXT_MGR already set [ 474.491366] binder: 5572:5574 ioctl 40046207 0 returned -16 [ 474.510522] binder: 5572:5595 transaction failed 29189/-3, size 0-0 line 2970 [ 474.546642] binder_release_work: 15 callbacks suppressed [ 474.546650] binder: undelivered TRANSACTION_ERROR: 29189 22:06:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:22 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x40) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0x8090ae81, &(0x7f00000001c0)) 22:06:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0xffffffffffffff0a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000003c0)='/dev/nbd#\x00', 0x0, 0x10100) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000540)={0xfffffffffffffff7, 0x3}) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x51070000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:22 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c, 0x80000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x16, "212029a372f042e1cfe4a333935728eed6abeb25b1eb"}, &(0x7f0000000200)=0x1e) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x5}}, 0x4, 0xdf2d, 0x0, 0x7, 0x80000001}, &(0x7f0000000400)=0x98) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0xac) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/29, &(0x7f0000000080)=0x1d) 22:06:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xf5ffffff00000000}}], 0x209, 0x0) 22:06:22 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) r4 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x6, 0x80000) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000100)=0x9, &(0x7f0000000140)=0x2) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000280)=""/253) ioctl$VT_RELDISP(r4, 0x5605) r5 = geteuid() write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x3, {0x7, 0xfff, "4b200a03af88007604601855efc1a9b0d6b9eaf1bc7f8a49b798f91d0d88dd6325e883c4cd1c6a70d62edaf7aad61eebc12af5de80d0ed4754349fef4aef17156ae012766cd435a4602b97adcbe51be27233c9f158da7fdf8b5fa1e2c8674810159a1e7a7916113538820e897513ed617d5fbb82eac73e102e6e0c053bd6a5b74b5c80c1eaeed6fbdff1ead722e23e2af33e9ad4327d9978e736e53abd2435271af5b3518c8b4978b9c73cbf1f5bea6d45f2ad74cc250f557ad33b311f3bf14285befca518ddde050e244c8b308b83bc1bb2568ea87f41fe1c067075fa431766470149cf302fb17bf6799655b9c667ded4ebfbbc4168d9e55833e692589b6795", 0x24, 0x100000001, 0xfffffffffffffe01, 0x6, 0xfffffffffffffee4, 0x2, 0x7}, r6}}, 0x128) ioprio_set$uid(0x0, r5, 0x2) getsockname(r0, &(0x7f0000000000)=@pppoe, &(0x7f0000000080)=0x80) 22:06:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt(r0, 0x9, 0xf515, &(0x7f0000000100)=""/178, &(0x7f0000000040)=0xb2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) r2 = dup3(r1, r0, 0x80000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000000)) 22:06:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xf000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 475.048802] binder: 5636:5637 transaction failed 29201/-22, size 0-0 line 2970 22:06:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000180)={0x5, 0x9a, 0x3f, 0xdb, 0xfffffffffffffc01, 0x7fffffff}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x101000) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) r3 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], 0x14) recvmsg(r3, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 475.110431] binder_alloc: binder_alloc_mmap_handler: 5636 20001000-20004000 already mapped failed -16 [ 475.170207] binder: BINDER_SET_CONTEXT_MGR already set 22:06:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xf00, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:23 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r1, 0x8090ae81, &(0x7f0000000000)={0x1, 0xfffffffffffffffc}) [ 475.198333] binder: 5636:5637 ioctl 40046207 0 returned -16 [ 475.227105] binder: 5636:5665 transaction failed 29189/-3, size 0-0 line 2970 22:06:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x211) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 475.252787] binder: undelivered TRANSACTION_ERROR: 29189 [ 475.264798] binder: undelivered TRANSACTION_ERROR: 29201 22:06:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x2, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x400000, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x9) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x100) write$vnet(r2, &(0x7f0000000400)={0x1, {&(0x7f0000000140)=""/214, 0xd6, &(0x7f0000000240)=""/106, 0x1, 0x7}}, 0x68) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x4, &(0x7f0000000780), 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) dup(r0) syz_genetlink_get_family_id$fou(&(0x7f00000004c0)='fou\x00') ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) [ 475.473446] binder: 5685:5686 transaction failed 29201/-22, size 0-0 line 2970 [ 475.505951] binder_alloc: binder_alloc_mmap_handler: 5685 20001000-20004000 already mapped failed -16 22:06:23 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'gretap0\x00', 0x10001}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x90000, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) [ 475.550273] binder: BINDER_SET_CONTEXT_MGR already set 22:06:23 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 475.586967] binder: 5685:5686 ioctl 40046207 0 returned -16 22:06:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x3a000000}}], 0x209, 0x0) [ 475.652828] binder_alloc_new_buf_locked: 2 callbacks suppressed [ 475.652836] binder_alloc: 5685: binder_alloc_buf, no vma [ 475.664681] binder: 5685:5703 transaction failed 29189/-3, size 0-0 line 2970 22:06:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:23 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) r3 = signalfd4(r1, &(0x7f0000000000)={0xa743}, 0x8, 0x80000) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20000, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x20810, r3, 0x0) [ 475.822576] binder: undelivered TRANSACTION_ERROR: 29201 [ 475.832147] binder: undelivered TRANSACTION_ERROR: 29189 22:06:23 executing program 0: r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000380), &(0x7f00000004c0)=0x10) write$binfmt_elf32(r0, &(0x7f0000001900)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1f, 0xc5, 0xeb4, 0x6, 0x3, 0x3, 0x5, 0x1b7, 0x38, 0x3, 0x83, 0xc, 0x20, 0x1, 0x401, 0x8, 0x8000}, [{0x6474e555, 0x3, 0x915, 0x3ff, 0xcf, 0x546d0c0, 0x9, 0xd3e2}], "1e07957649f95473040cf62d275c0d0752bd6bc61ecfcf350dc4a824713c3b2740d63cf95b2ad4c82f21441266d50263a68c5a734c93f225b2574c187c179d4a5399f946ca38a792ee1f58c612cd570099d09f4335e568fcc851aa9f616e11afeb108b3f07ae166aa75edd6388e9eb3e5330355bdff5791cc17609c95133cb3c5bb821743a9a", [[], [], []]}, 0x3de) socketpair(0x1d, 0x0, 0xfffffffffffffffa, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x2ab25784e2d80ead) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00001ec000), 0x0) r3 = accept$alg(r2, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xbf, 0x50b101) sendmsg$rds(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/100, 0x64}], 0x2, &(0x7f0000000400)=[@rdma_dest={0x18, 0x114, 0x2, {0x3ff, 0x9}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @mask_fadd={0x58, 0x114, 0x8, {{0x2, 0x9}, &(0x7f0000000180)=0x7ff, &(0x7f00000001c0)=0xfffffffffffffffd, 0x1, 0x33f7, 0x0, 0x0, 0x22, 0x589b}}], 0x88, 0x10}, 0x4000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000600)="722e60083d4aa1b03fee636705056e42bab77db12e9a29a9b5316ac3e62956969116370a3eb73927ea495b4318227f3ab70c5bd8bf9881331463888376830df3cf04d278ef8975157d01fad9a5cdb370ba39cd4701c12207b03f47fdc7a5b3d220d1859498", 0x65) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x9c85) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f00000002c0)={{0x7, 0x2}, 0x20}, 0x10) write$binfmt_elf32(r3, &(0x7f00000006c0)=ANY=[], 0x3ede8a2c81214777) recvmsg(r3, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4002, 0x0) 22:06:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xec0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2e08, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:23 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) futimesat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x7530}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) restart_syscall() ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) [ 476.121002] binder: 5738:5740 transaction failed 29201/-22, size 0-0 line 2970 22:06:24 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xf0ffffff00000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 476.178034] binder_alloc: binder_alloc_mmap_handler: 5738 20001000-20004000 already mapped failed -16 [ 476.223468] binder: BINDER_SET_CONTEXT_MGR already set [ 476.232898] binder_alloc: 5738: binder_alloc_buf, no vma [ 476.238548] binder: 5738:5749 transaction failed 29189/-3, size 0-0 line 2970 22:06:24 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @loopback}}, [0xfffffffffffffff7, 0x5, 0x7, 0x0, 0x8, 0x35e, 0x5, 0x8000, 0x7, 0x0, 0x6, 0x400, 0x3, 0x8, 0x4]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x4000000000}, &(0x7f0000000100)=0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(khazad-generic)\x00'}, 0xb2) getegid() setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00001ec000), 0x0) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x220) recvmsg(r3, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 476.272047] binder: undelivered TRANSACTION_ERROR: 29201 [ 476.294261] binder: 5738:5740 ioctl 40046207 0 returned -16 [ 476.325013] binder: undelivered TRANSACTION_ERROR: 29189 22:06:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xffffff7f}}], 0x209, 0x0) 22:06:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000004c0)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xf000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:24 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x800, 0x1) fanotify_mark(r3, 0x1, 0x1, r4, &(0x7f0000000040)='./file0\x00') 22:06:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') r3 = getpgid(0x0) r4 = getuid() lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000004c0)=0x0) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() r9 = getpgrp(0x0) stat(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003140)='./file0\x00', &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000003a40)=[{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000000080)="afb8fe3f1067ffee11b6ddc66deeaa7cefb9b8c80e6b2facab656694768befdf6b5af0f467d3bfc68247a1f38679", 0x2e}, {&(0x7f0000000240)="5f3f141b34da", 0x6}, {&(0x7f0000000280)="ded706d84f480286759e7e4b2827441c4336b4dea8bd791c826959", 0x1b}, {&(0x7f0000000400)="412320416dca8dcff460c946b903cf179acdaa3fd9cdc9ebec50b3e9246da5b8457880eb6658e550c984f3b890fc44cc051182ad9adab97e275cc23e62ac5e0137728c310568f705f9e58e03daacccf3bb60a9ceb428c6fd5deceacca58b5f24193dbd94552dd03adbea8247989b34c07112afcaddbbdaae826d62886a8ac13f1582cf58b7cb899b229f091f4e7b3c4e088e169ccf080464d276bb838d48e8a50090a96b0f0080358e4cd74cb0c81e98d02c16fe5f113e2c", 0xb8}, {&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000900)="06235ec0ef685be128db72d0d0490adff479a206eac2ec727c1abe81b70b9b27992ec4a596e0ee0ebfd7d3c7a40636c155580897902f473b355ac95169f747ae2c89040c4a33bc9cbb26f2d08454256c79aa44ef80025c4cd18f65141da06fd3cbbc0d9d79d2a1a3e84efb46817e2582dbc2d482b5028b470f2713f2d073bc97017da7801385d1ca853b0abfcdcfdd26b69050b413b90af7c99322bf9622258a741ac89f1d6e8818e847008d5a7f9e614c6edc7c05c08dce4df3490cb9f812470c6921f8c1167b8185add58af7faf68976aca9", 0xd3}, {&(0x7f0000000a00)="80ba47398c3eb526706335559baad2592fa675221caea9cda6fcdcae60032eecf996447f31bccbd529b9956e583bbe2cce76918443a91950bde4a3554dbcfaf4b0d96e90f2b82daa7ecc78427de42cc729d86e41d5d1890a532d3b31b87d40e2e4e87d245ca6dbcb08d9ac7dd9e650803530d8e4a06acad19e8694857839cc2be203e9b3ba86040eb0ff22e8265bf7c766e077bd7bdaea39e5cf8086f8eb0e530886c0a5b5cce540ae3a399ecec625b88082e36cb71a146fdb68f85d73", 0xbd}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="4417ed5e224c9fe92a9c08fdca5e79bc76d735063b9e5124851279ee18d8df9d9847bb28cf29e3ae785855a0cb8f6516feb667677e4a9621880710ed6675c990c51222018c9d0cd8f2eb819ee097aee81536d63b1330c4eb192b972d92d591fb17bd229d41346c1eab16f94a1f28d48935804ced197d559a7825d57ac9ff108c3a8da0f644fd1291f20640669f46c49fb37f26bcd5688eaddc255456d6737db08c9fd437cfd52cd2a4fb1d41715c0d0f9b6f11eb73caece71af31e3821d03ae5f46335504cfc82bf876d5f242e2c5541d1a4ff6714570c2308d01adcecd2f362e3ecbddc92035e69741d9a5c6c45efb8ad83c5273faed91803d445de3ae484cbd9fd6c39fd724a164319d27b1e0770c31587372a89b0808af25ffc686ccbef0e96275ee6b0f0322b74f050a42f82052226861a8e1f68625db6a239b81a46cd4d4eaf12665a3a1b45879ab72225d6810531ef984a0712f7e5e3c12dbcd2b48d72224e26ee527019b52bdd923fef4e78f74f15f4af756424d49522456d7198c29f762533c36ef9b55cd1f1f30a57aaed7e28fbaa9411c27493191eb1f030761be41de36120dc38ec1692b16e8d35f12621a4f573bd35d243e5a16befa2271b4119da812f5775d23861817e5cb48e27f984fe33d98a003f51346c0b3e7a9449aee2d8d32168688b01b29bf3e3051a2c6592cadf24baa344a7fc81586ccbecc455374f899618404862a78862b5df7197802ccc07c64b36df00a587b59d15e8e7e08c0107c025a9c858556f25f46bda6e74d5d88e24be28f0d236af06d2b9d778f6d2f8ad07ddcaeda09a1064a921434fa807d5fd0e69e2488bb8b9e297a1143992c51d1f4dba97a7fb2281ecbef81a4b7103495754628da4959fc7a4cbab18ceeb103e0a3ec4d958129c2debc310fdd7afc055de8cb10e051a3d64e1df597f203bb3914afc36321d9a667f9bbd9287de5f301af31e7450a12406412ade0163c6ed3ddec792b4f2a1f0effb9ab60ecafca4769a266e49d4ca6cb08757f826b49fb333119f291d8712d0433aac71dec059e96161ff8ff7d0f638ddd8ef49ba7997ddf1329f17f48fd0164cf79e99dd27fad4f0a7607409e22c2f7d9aa79bd6b0ab7c759001581347b99f8812e7d9cb423d28b130016ed57cb6eb61268a01e13ecdd157c2956ab7c18659475349623ffec630a456bed4468ba405a36e5642e306c71b810441360bdb2c5fced18b5db6a985fca84d5449d66b1731ed817e542ac30a5a072aa83e0552c0d0098f1848fb2d1df1119759985d2c3cb6c83f66a3dd56cb24fe706844e7ec294ba2d71b04043001266da2299404482a027e28ac578f461450827e41e271e56a564fe3d469ce4fdcbe3c52d377071816768611400827a78c9b1a9bceeadd4289273da27a614fd1a21edb2ebb343adffca6ea62ec9da254db3d0644c21f6c2fbd0cca8e467d7fab9fb982e7a55d4cc6d3b5b7b7e640c1f96814ae71d7b8eadc1b8eb1fbf75b29fda9307ba8698c585298ed0c9350616e14f01f01855269d7607e6887540a8f1c0ea4609c36e7500efb6883db9fc0144f0453fe7f2decd6158fee4b8d062335b47a87f4e788ca8c6debdcd1e6836ea1459d8911feb00e79f39fc36da11276ea2f9937e032954f6666f625f67f0f62d1207324efeabe9e36634bccd6c62ce888e72dffd2fafb7ed2262f77e104846fbd183ec2c6438cf0e42bab444c846ae6a472dbb7189ad9d3a36f157a091df4af7f819d3aedfd47909750602ab2a371d45105fe564df1f82780f8e25dc78b1f82d4e1700c55af252bf266587a632585207e2480b30c58f96337700d54c34ef46d48e14699dd98497a5a50edb7c3b1526df50bbd9ddfafd5e0208db548cc1609f31d0fc9b1dd411ad187146b22dc28b8052f22c7fd528000154939cd985c41779ec409b3eb96923c4ddbe0de11b57a7a399e3c49d843a5dfa2f6b842be6be534a1fae660f7fc84e9e1ded4268b65e3ce5d39e483c63b42001ee3f6a98b24942b145729fc6a8ea2c8000628ed4f6c49c972a1cfe6a3c846a893e5c1075070451c6fcc8eaf4880d63c318aad538f46b390e125679e3b6b1498d6c64f43dd31ce03bf11687c35bf424318d8f630e58499363daaad9f8e4c8456dfeec48c16f3f20a15b2a8d12354bd5a3d0e6d222dff9ea7238704e29779f8d9ba2f3b905bf88bd2dcafc539d1358b99dcd41cdb63a3a7225e3b97be04d5306cc0817266633ed5f15a959c9758b87a7dbfbe6216dd866f906a43efb1e78d0cfd4e0c6610110d3e1455a884fd05049743208179f7da63ea88f51d70a96d6e7e389999a2b394c96c61bbfa97a45e86b57c978cd2d4d07067dc90cbf78f9072a4ee7639306c1497f83430cc4ed4a2c7c09469f643741212799fbb3065cd5d07c589180e0191702b0b09dec1a522e422f5327ea874b052de766952234615a43009a1c99e758a2475ca223227c3f1af3a1b2211ca6613b17f4444edeeaa9f5c685492a97ece1b266594fb075d1dd18e780b238d42399063dd1fda92fddfa7a31e503b2c643ee40432840d653cc5c7a9db06e8bee6db7fdde06272774e8a7d516c0f5e3d4cea96e5819856a2e0d8d2ab021cc10411e29d1906b0aa425f93f2e44ab1a2feb8a0bfdd69a6f1654cb3fb0797b337f0b565e17437925f937a29370a5dfdfa7a908ecdbb285858d0d664098605b7f892ea875a77451bda56c6b734840d5c959c25421ba0e6795bfaa094a96cd28d75758aa553483c4ffe6352934c2723c7d5dea3c4dcd053891864c4e35164ef431364f9ec1246eaa545a71a0b7d668a02972837ea331b3813176338843d122919ea7f9dc500ef0744285b16aa892cf23a3a050873f13846aa589c16eb152eff315598d16b1e88702e069dd744c199d5219e084f4a8a01a8fa8ea621ad2828795a81c5dab7cd2bb8c36633ccdb0133bd73ddaf0e2ab9b1abe32283dfcbc03c94af2837337ccf1b7eb7d5014f7f671f3058fcafc89ef9900b10c65ceb30b747a1a5eeb16bdbcebf7c10ca786a2f4b75ff716d672c46c0d9ff096f0e59b4fa6d95f6d9cf966cf171624bb694689468dfb672787a0550ea984c36756ff25d10edfe8a1c53ff3b20a10f77e49ee9527c3678d0dc81dc9bb6608751a5a6e7509850bf67e857589a9e3fbbdb7e36d46d51bfe228ddac07ac81dbb34c603f3ebe69041b079a24fa0cbba48214a4e25bc815b0b6178f24b009d997e83c74f4aaeb4d51ed87a430497d8503b1e5668802e4481cf3884a639962dc4994790cc842fa28e48f07a0477dff9c6877124cb2ed375158311b23203b65db43f5daf58df6bd8a3c4ee085a71521db38f5f0d1102d7e2828912659a6064fa235af7abf331e200ee02a53e63fe85902d6b0e6a3c33c92d4d697ddd152ef50e000438975073e31d8267ce72f5442ac23a13c7280be99d605677df33325b92d517209b9ed966d3b406afb7776895ca269f148f679d503e5425a9ea188d4f4be19894801dd3052e55913e9b0c091e7bd0feef3e6e520d01f5af54eb9e178e52655c79714ab559adef45677dabac7346124c6f68da226f673437660b1a3bf6715aca21edd0e44770434e83d2c8d1ac9035215e7e79fc788f6127018c36547f4264dd88dca492b6c5349376006ed4350aca9c7efd92127d4c060b3e6262fd832b01ad47c8f7585372b497b721c9ac0e53b55e3881d360b3780e97d7689e58d1a065a21e34e8ce8fb43ad2759e6be2b1225d71364b6179677e0bae302c95c3589735aaad03f8cc47065ba4e3019a2ac0abd7b98c3a9bd41e24064969959963d7efc5dce855ef560895a139a17a52b67a28948cf2adfba3d15d45a70c3f8273e28553374020e536406ba2de3ff8d52f4b0c27d9699127947609d5a59845717ecd7a8970ff762f53ed4ca8defec278978e4d697b8124ea814ea03beabc8ef54bf171ef970fd6cfc9584076041017d05a3fb87b7bc1a027cf896f33badb81aae6ab58064da678d8e87172046d1d8001abee2936609b40c001e98bd122c5f3db3f4f0d1875c13501860e63dc57bba814b2ae4ed559de92072d04d4cdbff9202404bcabed33e20fc12e0f685d1d7041bb92f0aa00a0c0749d68ecc4360a1afa44a588dee6f6c8c717f5a91a0c449eaa211d93426dcd2bd1df17afbc2beec695439dd11e6007172b836b3ff6d7cb3761f01ac5f5a3453be566f22dfb182a5c0704c32b645bef849ea13d95d24b585c4a93710982a2be45aa5d290f7da90c5c0d1e0424490c3c11f0f19b87938c4d641b3ab5a98fa49d38178218f15da320be31f4d42a53549a171ffe5154f2a6db9223f79b162811042677741ff7bc661ffe38a51f9621510ffbdf733ceddf006245d79ab9527c46e57c04cae5ea67116958bb979ffe4385afe1d60619afd8d1489061a05e85614987ee9b6760fd329b4262c5e41b2409090737bf864e9d48234192b201c0a4e1cd4bb25bfc49ad709f6e99a6962ae56587998d6507442e2167bc0a89de79a0436b55e45ae98531bf153ab701a7a438a4ffb586232a228a5453d310804151f1967c9888fa8c46e33e8eaf23c5cad1cb3b97c17a14b3e6a668cd9dc8c7f9b5f578e5822af61818ab91807b74f20dec083f2d5fc23e76a42f6b228c1df637eea00bf28866add51fcf8decf5d30d7f12a56f6c9ce3276d8abe9287449b00f87f0ccee0574812b3dfaeaaa9b31b24a7ea10696f61251bbdc47baa9aa618c367e02bcdfabaa12373f936c38498b7c7465833dbfd466bab68a8229346103bd15325ed67cf16c4cc6744c9dbb38dd795bda1d06508495eae54bfb17346bb6a332013c3af74cab76f7f0fbdc102fed33d98ad28bb2f63b48b447dbbb1edbceeab4284541bc622da4d66f0dfff542dbfe5c92d76c8b92c9ae5e0e7e91e06d0d2cbb455f31dfece479d402f0758144d034494fe0deeca5e985a188baf304bfee0ef68cb8bcbdc5836177da0baec62d8880d6d7294dc6fae4942ebc122b7d61f25a60fa13e65fc5921914616605b49e921619408fd000319a3fa19050697592457d318450848b498824a199b75c6cce35bafd413e358ae64f5e94059a1ea0305fdbe95a16cc327a51b8234cd3214b6e6b336c79c2927fa1cbb92cefb9cc300f8a3e28cffe7e869255dedb469f5d5b3f44230a57d794201d626c31dcc4760b755b1cf20c3c9e1692ec0d2be5c7c279344e40f52b63524af70aa2aac6ceebe3358c66df6fb297f90ab788f612ed4dd1b3678764b30c7e9cba7f8e06706c9a137e49f60344e8eb040a7c7f256ee2a746069a6c6d6e85f0c25268dddebed772aa9a70f051539efcb2a7caa9493c5fc4eaee5a5870a4e21036569bd4d6babc212986d5266771db60032540932c82d7037e29d20cd5a48462e1b827c4bc3d07ab42e6a6962b385af79a89c0420310c4395468cea22a4d370900a3ebd3630cff4336495ab4565c98cc8dad95b1df1fbeb326577f80b9aadd09a12e9e38226642854a0c4ecfb1577982bb060ba80b28e8979b8e3f622f5226f54755c5ccb78630c8d1a5ef53aafa23c59a949f8ea92cc76e113c27a59a9413d39529e4a7e9739f706ddac085bff7e743fdf50a41e23d3206346eb101cc62ac716b60c46e12793c22aed5707cb9c38a886f08074603520d27d3f0f8a5d0214a38709af562ca21851712fcaacc6daaa87d3d6dc95fcdd99ae7a297ce4a7b23de51f3eef07ff025f77d9fb8d90e80b6e69e7364fa7243e3b9b164058431b83fde67f3ccd39ea2aa14b7708c558d52", 0x1000}, {&(0x7f0000002ac0)="644fc631fbc7acb288f0121af0e60b16469c840f62cbbe04c9f94376c52ee20af5cf830463ad6ebac671bfca318b7fa95ec77241c46df14a3c1418b2e07acd913cce3348b29a886bf724dc22671041277ab45545ad395c925d29e10b71e680d6b13ecf7a67656ee39d96065fed94e830aeace9f33393444b679e711710ffb060464de6e107f4bd95eadfd80e2dfe828a67e4c9ae36319b0a6315bfadd9d0cbe03304c03fa0b5b2d69861f2f87bd39157aaa6d1753922c7c8199c2e0deab20cbf61cb5ca8214791e3fe4b613d9ff7d0fcf37547107325", 0xd6}], 0xa, &(0x7f0000002c80)=[@rights={0x20, 0x1, 0x1, [r0, r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x20, 0x1, 0x1, [r0, r1, r1]}], 0x60, 0x40c0}, {&(0x7f0000002d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000002d80)="1f5c2361036b438408c9ee672d599e2b83eeb8539be66a10f3404b6b58da1d6a90e44c47e532a367e0ad8407056e4644f5c965e6258784ff2f73f4f5f804f0a234aedecb734e9f6a38c104749849bdfd95e6c5f88335be1e89d6542aa3dd7365b219e6f1bbb5492db5bd5c419ad35252f772bf1ef1d1baddb90275ec1e036e3743dff72da8c0847704456df071ba5f1933a6f15522dc2bf6c02888ca8cf6", 0x9e}, {&(0x7f0000002e40)="7aa83d5146a276f757f23e45601f66e936da55c3d4a77fc5df548aaf049194e70250d90ce6fc97df14fae87f88f2b158a2faecce30cb10669f2539201a8960ce00209ea182fa014c15a38b6039f553f0d851be2852cba9c0d99a7e66d1161a929c645769d6666ea5556205801671e95486c1f4f1ab7f8e22d6fcb8dee61e7e95a923a691611c9d50af66a446dd9bbed71cf4e9d1799e7181ced37a57a6a7185bfc6555bb7477bb5a647f3926f1bfb1a22a24c1f8bb5a5ab6b0d44513d76408c1c68f293bbdb218c914595a598d514b2d2b24d8b1224635f38c7c2f9e0607c59c8f0c8a71fe", 0xe5}, {&(0x7f0000002f40)="4b198836bd9eb98cda2e67bc1a94b801abf2b89bb39daa16f2775d87fdc6095d02a8fff80231f2650b8311af9c3edb8ba6a603db3278f363b250d54b6dd4d358e00c2d3b6bb6f94f29d2e129e739e57f2146f8c397b6b98ebbbbb7b999a70196f199a4e578c1cf3b37666113961c568b59f6bc7501995bbc1c097480cb1304d86922a4f7268719a8fe90e8c59508ce376b98caa916f33c0daed3a3f0f39e", 0x9e}], 0x3, &(0x7f0000003200)=[@rights={0x18, 0x1, 0x1, [r1, r1]}, @rights={0x20, 0x1, 0x1, [r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}], 0x78, 0x8004}, {&(0x7f0000003280)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003980)=[{&(0x7f0000003300)="bee3c6ae15a01084340c4c4cba65f5f3aff8826bcebe0e7e2ec28f5bc0880d33306933223a6df62d34fc5aa8abd93c550b338527e6d8fc299cdfa45718256a036a528708406303457605cb465b2410f33c3f8eb012e28119596f25309209c90ed1a7bd5c8367b3e8355115", 0x6b}, {&(0x7f0000003380)="62ad0cdb76d3f75719216e726ee9b5b6dfa3b35a39924ee24b3501d520ff45f3f65f38547392cab8bead53fcb81c00aa4f69f4ac92a0ad4b6581493209a494afa8bf7121beafcb4d6e3352c2b82547fd11fd7bace0d170bf745f68928c9ab0248e6374f4b004b01836e3a715dc6b44cacf0e2447b5ed17a442f99b4d4e1f00e493f43f3144f221b55f377d2291ea0a39ae551044e2bf787171ada5a14ef282d8cffb4ae45c54477de91a682adc25a74820bbb16827b4ddcf4df8346fee743186e44a", 0xc2}, {&(0x7f0000003480)="8bc3ead20fb30a0499051b6e3a037813bd4b4e3b3f3355b6ee2ad2833cfe1b25b1877a94bc92a14b7eca67d568ae81f2a8dedaca9a183fb813fbff5ffac6e4a289a9694f3c036785df68084b1fe9aad3e5d3d5a05612239f64d4f438c88f40f135c438f4e627677ac984b296c942cc0d28cb72d6e6f9180af50746d28b79512e9111c1f4432918ffec986050676259192255a064f154ac1392f45cad5f249397036b2a677be96102ee49b6b9990f2f88f8886dd2bd2e092f2e856ad5b295a32d15ec59af6feb0f8f8a5bcdd38784e7de96f23b1ce70766429b8edb6913d83ce0688c904c79ca44ed619a2f272471", 0xee}, {&(0x7f0000003580)="d49bf0acbd2de1b9dd09905e03900a30da7694d0ea84d56a1b4c4531d4690f69ed6a256a714b26767a2991cbed1dc89b3a8056579b04e58961aa06e4fba7bcfeeb5f9d1ba541c6ae98cb84cdcb5b5e7a7513ac98d8184602476ebb876c2df74dd6ace3d7456a3763df8714e18875f5dd580cbaae9c80ae0344bcec1aa2cbf993793e049bf72c9e6d450fe0d6a6bc7f0c9bd9dd55580053872f259a4f9c9a4bf8ecee9529", 0xa4}, {&(0x7f0000003640)="5e6a15bf5ac2fd743ed0ec1aacb9855fc71bfc47ab3c51127ecc29514e769c7dbe8102333cac19d163a31ac3", 0x2c}, {&(0x7f0000003680)="80112ac24b2e30b93ea74135cdc337bf31b81e18341e0b7693f9a5a58d613fa94f39ca1f67e28cec678f851c", 0x2c}, {&(0x7f00000036c0)="4c05abe25cd08711bfbe8b996590a984b427906542be2521d35f6c28d8c01ef11bd7ca86d223891b31d825139b545b0e2084a2ef6eb86185624020fe62ab5ab3f2c80541a5347ce382d6df468c195333dc87360d6ba3d44013a4897cc4862f52e3fa900d88347679f49fd1711c8210c07ff28a4f6fd069fbf64fe40088b329a648fae1f2369c2e16402818bef1ab1bf3d3c12d99781d37ade5488528af28ea76a3786d98b866822f849516803dd4a2553dd22c0fb13ed21d0b7aaca74723a4c2ba02cca9fe2beff18073cb9104b4916246359e04f78806b4c9", 0xd9}, {&(0x7f00000037c0)="e6de8c6f8d9a2626981c20c99201bc3290d5d3478fb77be849b80ab0946e72d8ec12c7fa2dc630fefc4d5c13c490eb10fa268888dc40c8ef0de44b193dcb58cdbb215e19165771569a9471438ff786f50f55edac77a18ac3d9165c7f57eeb95c0df23146972a078c08310a473cee76185ddeca38ebff6c92492e06cfab0aa747bfea60b444e09ab517c648ac649e173594ac9efdc423cd7f6677a381bbabc809e1db09ed362bf03eb1c6e9f9fac6e46cad9bc33380fee4fec77b984734fa3bd0d5bcdd0ab80f7802f44811e8bc7bb1a4e4a2243c960e7c90b49a00d53db7f1c30dce1381852d833c647391c6e7ff93", 0xef}, {&(0x7f00000038c0)="859f305f7056827bac43e8dc0b233fc5257df295fd3d623c713c97e68a70c26ef27a654de3f32679204b4564e29d567d88c2c1dcb860a747b4ceca0b576ce717bdffe2a6e74c90c5174aa4be01e1fe8fc750d9d753dd45ad8ee77e56eae42a315e3c225943d782815ce0a07349352d364522b1e436d243e1f24a7a8acd82b201b2809386417a41562798ecd32855059d7990a484f0ab4eef1ab5178e6a9640ad4f93", 0xa2}], 0x9, 0x0, 0x0, 0x145bf6ff9cae8520}], 0x3, 0x4000000) r12 = socket(0x5, 0x804, 0x0) bind$unix(r12, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 476.533756] binder: 5777:5780 transaction failed 29201/-22, size 0-0 line 2970 22:06:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xfffffff0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 476.580458] binder_alloc: binder_alloc_mmap_handler: 5777 20001000-20004000 already mapped failed -16 [ 476.635617] binder: BINDER_SET_CONTEXT_MGR already set [ 476.646606] binder: 5777:5780 ioctl 40046207 0 returned -16 22:06:24 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000000)=0x5000) r1 = socket$inet6(0xa, 0x0, 0x100000001) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00001ec000), 0x0) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x220) recvmsg(r3, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r4, @in={{0x2, 0x4e20, @loopback}}}, 0x84) [ 476.679215] binder_alloc: 5777: binder_alloc_buf, no vma [ 476.737184] binder: undelivered TRANSACTION_ERROR: 29201 [ 476.762405] binder: undelivered TRANSACTION_ERROR: 29189 22:06:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xc24b0828e7f9b6fe) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002200)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000001c0)=0xe8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002600)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002640)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@loopback}}, &(0x7f0000002740)=0xe8) r10 = getegid() fcntl$getownex(r0, 0x10, &(0x7f0000002780)={0x0, 0x0}) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000002c80)={'bridge_slave_0\x00', {0x2, 0x4e23, @multicast1}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000027c0)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@rand_addr}}, &(0x7f00000028c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002900)={0x0, 0x0, 0x0}, &(0x7f0000002940)=0xc) r14 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002980)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000002a80)=0xe8) lstat(&(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000002c40)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002580)=[{&(0x7f0000000040)={0x10, 0x16, 0x202, 0x70bd2c, 0x25dfdbfe}, 0x10}, {&(0x7f00000002c0)={0x530, 0x1e, 0x300, 0x70bd29, 0x25dfdbfe, "", [@nested={0x58, 0x69, [@typed={0x14, 0x82, @ipv6=@remote}, @typed={0x14, 0x72, @ipv6=@dev={0xfe, 0x80, [], 0x11}}, @typed={0xc, 0x55, @u64=0xfffffffffffffff9}, @typed={0x8, 0x54, @fd=r1}, @typed={0x8, 0x79, @u32=0x8}, @typed={0x8, 0x6f, @ipv4=@remote}, @typed={0x8, 0xf, @ipv4}]}, @nested={0x46c, 0x4f, [@typed={0xe4, 0x19, @binary="c869ec9d7a35465a9dbd759380cd56e5675e078c28435e73b1574d46bfb2b4e469d37f4e665b6258be66bdf544daaea646acd4bf7ff028cd0d09432a8fa529a7ff7be1e5dda927185abe0e4eafacba3a14898bbdb2113241c070700932914df15035b1a050a7cb10fbd4d3ad10d0357fe760b734d38d2aee86e589c226f75aff96ffa3e17b5d618edbc79acff1d64a13a9109991297fbf69187221095041700cbc8578cb0c3fa3be3360ab4290c30e1de643be2abb669c991a0021967d6246a7532162a3b6c2f3374bc2896ae00992b022190fe6b3f42923474408b9624b"}, @typed={0xd0, 0x4b, @binary="562eeb9720bf112fbe0fad95b7dfbcb4c8b2e5da46ff7097decccca915c680b85f89b8d66350a724a4681e9130ccd75249a3c1df62fa9812080558fc57b93b20a897bcc7b54b9edc2d437d8ca5f5a75615a094e532fe48a67419f251d9caf3f295ed6d2a1a637e69421e0852636f6bd7be45979a05b850da62e1effc77f48b6dd33e33daf95d991acd660cf1f755ac5286796649efa8849c2d00e7aad8f3aef9bc8bf54ad647883720809e2d4a12ebe996b1756266023c40beef4ba904b0ecd7d263a7ad55f2111b0874"}, @generic="56481292257822dfaa4af93412df084660a675947d6f019a33c3aedb3d69608dc2ec07341938baa18e23ccb7f0c86c57d63b3e2711d31feabe4745d8db998ccfffa68a69c1fd8871c3907f5e592a21e7f70409cf84c384220343fd3ec30c139a99d77bfd52b3315d98f4464224bf60f66ff602f96678f2363d4b18c6beada2e6d9aca6587199943c7a0081973633f201f6577cf685a6a5a7ab6f3a875478dae4865088e986131208e3cc6b07bd534fad002ce16a3e", @typed={0x8, 0x92, @pid=r3}, @typed={0xc, 0x8f, @u64=0x1ff}, @generic="3655595bacf10f78e6fcf2234c301ef1d6c26a1cfd2ac645a5d0fa37465e309c7a8cc7fd70017eeac5205ce105f5f59fa628c3bc591b7f8bb12b1cc0a3f6ada2c60a012e079f0af7cc463037ba74ca0030336790579bcbee698a86d726ef83cd4a9ebc5ee17087d570485d487852432ba743c011e41a3c4a026051cdfa840ba658064faa19bfc7ba02f726a04de7092c7524a5a0f586ff4be65c61e5de5b46e17fb1032df519e8833eb3ffbc5bb1eaf003f7105f812f723252a402d44409ba544eaabf9145ccebd1bdaa1f2edc5feca517424d0753fe8ea0643eb011a25d7663af0871d4254e841b855375842c1e75", @typed={0x74, 0x17, @binary="59a7335d3f5e5ce6bf6664f00cd10bdbb1861338dcca734efecada6bd992df90764b82703f0589254f8d35b17c8f40cfe063e8ed55eea9ec6d78727533f49b14e0ee5338c1f529c84a13d53703b29527ece5562662380215b278fda6c502bb2c044b11896753e82e84e6ddd95321384d"}, @generic="0a8b5dacaa8a7438c2471bc1f026a7363dc24c34c55fd0939315f377451c64b5f1523b628a22062861778ca40f4e813def2400e30a5513c238ed907a1e98fcd4044b69f4f56171bfbf7ddb108f7a9ca83749cfebf80dfe72d8dd0dc3d1cd7a7de4ce0819bb66b4e2d6c77aa3f16182f0e81481111367982877df3b02c4d4ba0e57f64a9593"]}, @typed={0x5c, 0x1f, @binary="b3333046dd0a626e55b252a1660a05962134ded6958fd9c05cbb6c0356b18158318372641fec28e2512af3c318f2a37e2f4fdc47c2dd74fd8e6192e7ce53bc60d0ff45bc79cd3adea1bf4fe7878dfc9f5184512a28"}]}, 0x530}, {&(0x7f0000000800)={0x19e8, 0x1f, 0x1, 0x70bd25, 0x25dfdbff, "", [@generic="5112f4ca8baed48b67967d25d012d288ceae28743a591e2821b7e5c54e5e007ea55045eb82beafd6976df3bf2ac0f2804301941ad26e91af4618d94fb17056b4577fd5437d4cbfc4b66aa1664773c1aa4a647d36e1071dc55362d3a643ecf75ab405355801d329ab0748dd73d284337821d88320b7dafd67c88bfb8df8158eb4779813", @typed={0x60, 0x4c, @binary="233fae7c0984a81244a88de80e58ab4390c70c7d94c1f9b526e670c459e5cbf46f1b617aaa7e07db9bdfb69e266f74d179b81d7ac8478fdb05657568072d37c0b16c11629082e2d71713ecc8a4784f1ea27c0149418aeab4c058e1"}, @generic="90e2ad11e8519c84d562ad262e705114f875f30ce3beff95388c7779c537cd6761d97da9a1a02a7b083e145a48fa661226017b753c279bea6d4dba3d01a538fd0f532947f0631a22857045fe845249e68df8f596f67a92c198714cdc4b63ebd819c43ee2dc65b31dd06df8113fc02771d3d06e54d4d9b6f82822deb5790a0ae306382c2014d6c9ec16c6a1f124ac936425c0950344dfab812e66a177160c387c1c1571beccacd5eb6c1553e3b25bdfba85295019a11f3cc9018322d422299146a27b2f88d50aef6c9f0678f8b3ea423eb3d30d2b82165c8146827f8c40388e0f84f5e38d1fb5a24026cadeca3930775f24825645f25756a30a2eb315", @typed={0x8, 0x68, @uid=r4}, @nested={0x330, 0x21, [@typed={0xd8, 0x66, @binary="865d94df34c60f2a89fba56a1d43661d44a89b5a1d9e2f8b0eef0c6716a8ca6557e27a49b01ac95a3954d5473aa0f7bc4e3a7c147f842cabc5d0ee2f3b606ef4664bdee9bc21d98c5981c039284285becd9c1551d7a6f162f15bd58e8f649139435b9e1d7d48140f175143959b3e5868e485de7c65ff58879ced5e0ee4e4d75457a50397975fb11a13deadb95165bea9d3d06df194102922ab31ccbe8419a3527c3073b496d70143e6c7d685a7c96d7d3efd2f35be2e0bc2964a0ec0d526bdc6722cf5e5aea2cd377ead4a0a87cd31a49d386c7b"}, @generic="2718ece43cd5ef6937ba47c205c2fcdbfeb54ed740fd419b271b385c072a723198a902728b8fb75d21584a83d9b69527b5338cb86e", @typed={0xa4, 0x1c, @binary="058f601bd224719eddf615adbcae2011622503f930ba201983fa5e7c93f1a5b40efaadb67c6a9c889ffb4b65651b09020d72f71d9f8c74676a5a57c2a8bbb71119d1fb8670f6a9e6984a45b7f10121f9a006b51d89f576b83abed1da441933815dd18f443bd43b68bc0ecdcfe08022def8e1ebe2612dca644c4d3cfa122a204a8c60bbf91d3c3ed76e12b34957472ef990a3420b7eab8a7623eb85478e4cd0"}, @typed={0xbc, 0x38, @binary="6b1d440b871a2289373c336d698be287082f3ac45a24fc9e20256117c04a4db90ff7392776bea13d6ccf9798b5aaef610a606324fec5dd81d823fa698f873da34ac1321119dfd09f21fb2576d2f510f5657605f013166d37b319f8a78bdd7b0c898e3568fd3d3469e4599a4b4a839520333b070413512b40153b353bad92c9ae7fa73cec32e5814029c50a2ed2cf77ef1738360e1374fbdbc5d19fa44260fbc4ff3a8c89b8e6400dbe3b18c9d713ee8e33a56355208d"}, @generic="6dccc5535bce9ab50882f50d736dd63219c9e532918aa239234c530c2be7aee6102643d02231af2b36f81bebb67acb4d99e33ba3fb0b7484638bf048a91f556532d27010e5cdd2c2080290a25ce87ba95b198ee81b91f995e78343640fb60fe746201744bde3888ba0c799767437db4cd977c6d56a1e1e26008c4a50996ad2092a54b03c07261fd4bff73b2642aca4575ecbc3d70cc63ad37f80601ddc751aade2d04c3498673ceb4b25a8be", @typed={0x8, 0x51, @u32=0x401}, @typed={0x8, 0x2, @ipv4}]}, @nested={0x10dc, 0x92, [@typed={0x8, 0x1, @u32=0xb7da}, @typed={0xd0, 0x2b, @binary="a8879334ce6d9c5906fcdab1948a9757eccf6ed90e3c3b75f1e4a3e161117632f055eca69e86e66cdfc9f8329b739ac1826783e8953481bb3086ee9e89685d0e3859a603b0b2b8378d8b07eddeb4d2fdd04cc6d309dae5899356ba3b548d12424a250a83bbc7e6c8208ca49d4d1bc323b9ba0bee96edc950d8a0c664c70365420798facaa74ee2a90a30c585b2f1b9c001989645f7b405add830d27057d3784a290d1515a9003bb22b11a41c4e440b4fa87222a7ed7d714ac33158178b087a3f65ad56e15039d81620"}, @generic, @generic="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"]}, @nested={0x1ec, 0x2, [@generic="a4a7e295c026f83328b8e8daf70f4139", @generic="09c897f1910fff67", @generic="457cc5b2a4c77de79b86668c5e9aab9fc76433c5c492ba3aaa93fd73c5425c1d50104c79d2904aa8773c2cbc1946cc731a4463b639c1e39bbf211264923e2b2faf69d7b226e2f758a46e4f24d73658d4f53c1d50685d695c5305ac9dd78da76e0df6665ca7ae09c59926b1a80e083fe21b29f7f64dc84c1f5932d42491f701229ffdb916d424030decfc21e11e2ff30765fc61ea511ca393c8a2298c0ea6376390777b944d765b5db6ae0ec1531ebc74d0a7d37274", @generic="779bb3dfe41e43da819b8623e213902a063d72ea9678fa4a6bed7f789f9adbc6480af2c2afd4469bb934eb25d88e74f6081443507010a18aa2a0c800d1534f92dbe8ffc42d5a2e7c04d046e7feeb83a020b63e99bc4a3ee92e9cbba74b6641b9ad44e4eb65de43feb1853604e0dd7a98cad1d4fdefef8f71c09b7f469faeb1df4d7cd82b8cefaa1ad3c4e7d1166414dc16af2869a4d35a8a4f2569f539e723b83016bdce8193", @generic="1baab3eab01e8bdc241d49ee087afcf84e6e7c322b1494e8eb79665dedb4b40c052a8788949d5f125535a275974467ce70d6f1d9bd506bb9e6f03700e1bbf02a693cff67c5160f6f0a7a0794933ec3480763d27752be1ce7c8fd97c28db6eae6c4fa1a83c20ade5e5173af26fb1325e32830"]}, @typed={0xc, 0x78, @binary="8722a937775f"}, @nested={0x154, 0x6e, [@generic="fbfb2f7563041601b3f1ab3346e26240dde9a7fea73a47f7849e4ec90d1ddc9312f9917ededff6592451250c188588b3dff91f831c4b07077b98eb058735dd53112ececd9c48ef0664125d8f81644361dc5fd4a9137635c10584feeb533f98efdadffc066d25af8f25", @typed={0x8, 0x43, @ipv4=@local}, @generic="96a31b682c33f812a5e16e46a5eac81eda97e28b4b26cb0c44c7400c7dd38bd015a793ad2a61cef86fbb64486b305c8025b9c8e1a1c7f4d1a523fcd3d016f5", @generic="c76e59b5b02d47b9a55d", @typed={0xc, 0x7e, @u64=0x3}, @typed={0x8, 0x39, @fd=r1}, @typed={0x8, 0x40, @u32=0x81}, @typed={0x4c, 0x67, @str='trustedselfposix_acl_accesskeyring(ppp0cpuset/]ppp1keyring&)procvmnet0\x00'}, @generic="15c779cf659341bfa7a22498bc51ca8cd11e9c91fa97fd284dbbbf678d0f0eb6dbc234a439735ab5e28524d7"]}, @generic="5f16059d002f4a6515b42bf1b092133a631c340003bb9a2696da5e7f1cbcacbe6bda63e7b73cc2bc2273ff707c03238108faac2be57d48a9c14cc03db499f3d887d11abce6678b8b66eebe5d2108a940348257443493df41d2c85d47460ca98e5e9c3b2b16193a9b5ce3f789460b97d68b5b9f0728ccd7fba4557b5cff8e3264965a0e38fa99272b963795140042bbffcef953b67cd83f6443"]}, 0x19e8}, {&(0x7f0000002300)={0x23c, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x20, 0x77, [@typed={0x8, 0x47, @uid=r5}, @generic="0a402728ed5df89691637197", @typed={0x8, 0x16, @pid=r6}]}, @typed={0x8, 0x1b, @ipv4=@multicast2}, @typed={0xc8, 0x95, @binary="38e4e2928b43fe5c2a99eada0abf016afd0e21982e38906cdd5dfcb305e2bd0070003dc5759c1c92828cc80b2afda1e5b1b31a5a9cbbef1b8ed9fd88f93c9a2faa3d4baaec67c6c36770983d6b46b8814298732bcf1bb1c463b56cbb38b45c25db322bf1475912b2b6c8ddaeb33fb88e9719cead46414940437ad92614f0e181da443e606838140a20e416ea4facf95a22afec93a3adae0cddb019720eb68c63e0609247f662e9d9686a82cd90e92ddbf7141ee4e44545e2d43e7e42aa58ed89bf82"}, @nested={0x13c, 0x77, [@typed={0x8, 0x53, @fd=r0}, @generic="21e711b16745db11fa379bb48831745789602838c3def0270cc19e23907ba7d30e1667d6e34abf47f556e6bdac09f81ffaa16101bdb73e13fe3769642b8e7bc3f404061f867b3a62a26257d5dbb40499aec640d70159916a983aedc357dbfa109cd6c206bfd58aeb2675107e4114f26fb996e710413730da88b0c0a193b773fa83d2a1877ab984fd3399c2a97931e020622b27131843dd18f4e714ba58832ebaec5fb7adece3731562786e920186f4dc6eb1ade60b9d6741d0c9c756f6712c298e561ed1033d8eb68e2d666b0af653ea59a8d0abf1b87a", @generic="a3da59722073015959eb883404c3eb19883ac1a1e16371e3d80467258358a91e3ba3072fe83970d6ef26fc40e381", @typed={0x8, 0x8f, @pid=r7}, @typed={0x20, 0x23, @binary="66f4355e8eb9de412bd2c8ef4aac8e01a9e5f1b65b1f48a7410329"}]}]}, 0x23c}, {&(0x7f0000002540)={0x14, 0x24, 0x100, 0x70bd25, 0x25dfdbfe, "", [@typed={0x4, 0x10}]}, 0x14}], 0x5, &(0x7f0000002b80)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r0, r1]}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}], 0x90, 0x1}, 0x4000) 22:06:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xfcffffff00000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="13b8e84f36bac733a4346d11a8b2d70fbc74129eb7dec9112a6ad4b6f08ed11dd377cc48b98dbc2a09e58b3d0000", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:24 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x277, 0x0, 0x3}]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r5, 0x8090ae81, &(0x7f00000001c0)) 22:06:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20ea0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:24 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0xfffffe5c) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x1, 0x2, &(0x7f0000000380)=0x5}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000200)={0xe, 0xa, 0x8, 0x3f, 0xbf, "39502c26026de44ce0b8333a33f3e3e63851620c68aa3cdac20a9469197c6106b91a95fb014231a35ec76aae0958ae6bf0decfd57bce421547d511b7b1645dd25344c19991e27692db4d53aacaa3867052996dbea354f081f55c4db64580f0139699da0868969aed100501bc6acc2693e66a3ee87e14fff1b76999952ed753a1a3912f3b892f445d5818c4525f0f5464d5f99e0e7bf9803e591f1feb4265652ed4f43b95d373ff86560625e0b6e132bbbd06eba7d4b14582eb49e3eb4c6deb"}, 0xcb) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x220) socketpair(0x400000000d, 0xa, 0x5, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000140)={0x0, 0x1, {0xffffffffffffffff, 0x3, 0xcb6a, 0x3}}) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 477.028526] binder_alloc: binder_alloc_mmap_handler: 5819 20001000-20004000 already mapped failed -16 22:06:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc00e000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xffffff7f00000000}}], 0x209, 0x0) [ 477.091388] binder_alloc: 5819: binder_alloc_buf, no vma [ 477.091405] binder: BINDER_SET_CONTEXT_MGR already set 22:06:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = creat(&(0x7f00000003c0)='./file0/../file0\x00', 0x10a) recvmmsg(r0, &(0x7f0000005000)=[{{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/147, 0x93}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f0000000540)=""/16, 0x10}], 0x4, 0x0, 0x0, 0xbb00000000000}, 0x2}, {{&(0x7f0000000900)=@sco, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000980)=""/90, 0x5a}, {&(0x7f0000000a00)=""/6, 0x6}, {&(0x7f0000000a40)=""/78, 0x4e}], 0x3, &(0x7f0000000bc0)=""/142, 0x8e, 0x3ff}, 0x80000001}, {{&(0x7f0000000c80)=@nl=@proc, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b00)=""/46, 0x2e}], 0x1, 0x0, 0x0, 0x9}, 0x6}, {{&(0x7f0000000d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000dc0)=""/206, 0xce}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x2, &(0x7f0000003000)=""/4096, 0x1000, 0x80000001}, 0x7}, {{&(0x7f0000001f00)=@rc, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001f80)=""/39, 0x27}], 0x1, &(0x7f0000004000)=""/4096, 0x1000, 0x10000}, 0x1}], 0x5, 0x40010122, &(0x7f0000005140)={0x0, 0x1c9c380}) sendmsg$can_raw(r1, &(0x7f0000005280)={&(0x7f0000005180)={0x1d, r2}, 0x10, &(0x7f0000005240)={&(0x7f00000051c0)=@canfd={{0x4, 0x3, 0x5, 0xc2}, 0x15, 0x0, 0x0, 0x0, "b9d416e24f369a760bb38e001a7eb4c1475116aedf07a2bf153ec812c70a70cdf7548b3bb213cfd5335449cb6221466af37c668370b3c3954579d2f86d50a1d9"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r3, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:25 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r1 = socket$inet6(0xa, 0xa, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x94, "e84dfae1b284f0a5935751f64e8807ac8b3ff181203c0aea12975b4b50a1143bc078ca885c976fc99ca2ef128e1a4ad6771f4d79814561daad181e2bda6b08ec37ad071af03da4133f103da5f3dc55ca2dda0c48ebaccc871e1c2e1d89bc03807d74739fff1a894c78307f468f6263ac5ec5458d58669708801791d743099ba307c248108d0eeccea57570afe5de8dff9cdf3abb"}, &(0x7f0000000200)=0x9c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)={r2, 0x5c, "da6285f5ed35b14be0c45d586fe18a6d386cdf57ee823a8c80684dc1db51a355419186260fd57efc7bbd46e35b62e33143d89d178c79f3f2eadc44ac570384865d9b77972d39abee8885fb1c23c669405dda92dbfc62d9a0e1b95f3c"}, &(0x7f0000000240)=0x64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = signalfd(r3, &(0x7f0000000000)={0x75}, 0x8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x1, @local, 'team_slave_1\x00'}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) sync_file_range(r4, 0x4040, 0x9, 0x5) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) fchmod(r2, 0x90) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x20}, 0x8) [ 477.138434] binder: undelivered TRANSACTION_ERROR: 29201 [ 477.240241] binder: 5819:5822 ioctl 40046207 0 returned -16 22:06:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x5107, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:25 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40, 0x0) ioctl$TCFLSH(r2, 0x540b, 0xc5a) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000000)={"73697430000000000000bfa0733d00", {0x2, 0x4e20, @broadcast}}) r3 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x3, 0x801) socket$alg(0x26, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f00000001c0)={0xe9f, 0x8001, 0x20}) r4 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x20000) write$UHID_DESTROY(r4, &(0x7f0000000140), 0x4) 22:06:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x4000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 477.461158] binder_alloc: binder_alloc_mmap_handler: 5877 20001000-20004000 already mapped failed -16 [ 477.512476] binder: BINDER_SET_CONTEXT_MGR already set 22:06:25 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 477.533645] binder: 5877:5879 ioctl 40046207 0 returned -16 [ 477.570426] binder_alloc: 5877: binder_alloc_buf, no vma 22:06:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x400300, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000500)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000600)=""/41, 0x29}, {&(0x7f0000000640)=""/95, 0x5f}, {&(0x7f0000000700)=""/242, 0xf2}, {&(0x7f0000000800)=""/25, 0x19}], 0x4, &(0x7f0000000880)=""/146, 0x92, 0xe42}, 0x10000) sendmsg$nl_route(r2, &(0x7f0000000a00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=@ipv4_newaddr={0x28, 0x14, 0x200, 0x1ff, 0x25dfdbff, {0x2, 0x0, 0x100, 0xc8, r3}, [@IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_BROADCAST={0x8, 0x4, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40001, 0x0) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) sendmsg$rds(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f00000001c0)=""/52, 0x34}], 0x2, &(0x7f0000000400)=[@cswp={0x58, 0x114, 0x7, {{0x80, 0x40}, &(0x7f0000000240)=0x5b, &(0x7f0000000280)=0x80000001, 0x7, 0x8, 0x9, 0x6, 0x68, 0x1}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x6}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x8}, &(0x7f00000002c0)=0x7ff, &(0x7f0000000380)=0xffff, 0xffffffff00000000, 0x8, 0x100000001, 0x473993c0, 0x40, 0x4}}], 0xc8, 0x40000}, 0x40000) 22:06:25 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@empty, @multicast2, 0x0}, &(0x7f0000000080)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', r5}) 22:06:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x33fe0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 477.780639] binder_alloc: binder_alloc_mmap_handler: 5917 20001000-20004000 already mapped failed -16 [ 477.834610] binder: BINDER_SET_CONTEXT_MGR already set [ 477.856943] binder: 5917:5918 ioctl 40046207 0 returned -16 [ 477.899923] binder_alloc: 5917: binder_alloc_buf, no vma 22:06:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x20000000}}], 0x209, 0x0) 22:06:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0xec0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x220) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:25 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xfffffffffffff000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:25 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000000000000d85f5793008773"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0xfffffffffffffdb5) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000900)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={r3, 0x7ff, 0x8}, 0x8) 22:06:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 478.138640] binder_alloc: binder_alloc_mmap_handler: 5948 20001000-20004000 already mapped failed -16 22:06:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xe03f030000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 478.194497] binder: BINDER_SET_CONTEXT_MGR already set 22:06:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x3c, 0x101000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) getresgid(&(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000440)=0x0) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = geteuid() getresgid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740), &(0x7f00000007c0), &(0x7f0000000900)=0x0) getgroups(0x1, &(0x7f0000000940)=[0xee00]) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000980)={0x2b0, 0xfffffffffffffffe, 0x2, [{{0x0, 0x0, 0x2f3, 0x8, 0x3, 0x1, {0x4, 0xe000000000000000, 0x2, 0x9, 0x5, 0x80000000, 0x3, 0x5, 0x7, 0x1, 0x7, r3, r4, 0x1f, 0x63}}, {0x3, 0x6d, 0x10, 0x0, 'posix_acl_access'}}, {{0x1, 0x1, 0x0, 0x200, 0x3f, 0x2, {0x6, 0x2, 0x100000000, 0x6, 0x3, 0x6, 0xffffffff, 0x3, 0x9, 0x135, 0xfffffffffffffeff, r5, r6, 0x7, 0x1}}, {0x4, 0x0, 0x0, 0x100}}, {{0x3, 0x3, 0x1ff, 0xff, 0xace9, 0xfffffffffffffffa, {0x6, 0x3, 0x2c4ce30a, 0x10c, 0x80000001, 0x4, 0x7, 0x4, 0x5, 0x9, 0x3, r7, r8, 0x100, 0x6}}, {0x0, 0x0, 0x17, 0x7, 'echainiv(ccm(serpent))\x00'}}, {{0x1, 0x2, 0x72, 0x100000001, 0x10000, 0x9, {0x2, 0x0, 0x4, 0x5eb, 0x9, 0x1, 0x7fffffff, 0x2d7, 0x8000, 0x6, 0x800, r9, r10, 0xfff, 0x7}}, {0x6, 0x7ff, 0x17, 0xa472, 'echainiv(ccm(serpent))\x00'}}]}, 0x2b0) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='aead\x00'}, 0xfffffffffffffe1a) ioctl$BLKIOMIN(r11, 0x1278, &(0x7f0000000140)) [ 478.220712] binder: 5948:5949 ioctl 40046207 0 returned -16 [ 478.245615] binder_alloc: 5948: binder_alloc_buf, no vma 22:06:26 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x602c88ff, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000100)) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40) ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f0000000040)=""/70) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) 22:06:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10}, 0x10) 22:06:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x8000000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x43e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2d08, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x6000000000000000}}], 0x209, 0x0) 22:06:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 478.642113] binder_alloc: binder_alloc_mmap_handler: 5993 20001000-20004000 already mapped failed -16 [ 478.714897] binder: BINDER_SET_CONTEXT_MGR already set [ 478.733280] binder: 5993:5995 ioctl 40046207 0 returned -16 [ 478.761080] binder_alloc: 5993: binder_alloc_buf, no vma 22:06:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69af40b440e1b9950810bf2c93fd2a26d9e181780aca84f48d19ac75543d591a12c8ea6136d0e14648eedd747c1d27bef0e09f9f54274d9ec66167e0b07656032855958e42d9ba1afadf2edbbafdba24fa53c5591673615b00e2293e6881ff5569e3570dd8136f03433740994d692c54a7524aa79d192afef2467c1f0d02784373ec13ddb490de8d77e553e832098ac9531d451b6447d45838769484bdf") perf_event_open(&(0x7f0000000a40)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) ioctl$fiemap(r2, 0xc020660b, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x20, 0x2000) r2 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x3, r1}) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r3 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x220) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x10000, 0x7c61}, {0x80, 0xa2}, {0x9, 0x10000}, {0xffffffff}]}) recvmsg(r3, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:26 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget(0x3, 0x18) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000040)=""/199) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000000)={0x3, 0x10000, 0x40e5}) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x1f, 0x1}, 0xf) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x1c000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 478.945247] binder: BINDER_SET_CONTEXT_MGR already set [ 478.958241] binder_alloc: 6027: binder_alloc_buf, no vma [ 478.984609] binder: 6027:6029 ioctl 40046207 0 returned -16 22:06:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) uselib(&(0x7f0000000000)='./file0\x00') bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x2000) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000140)=0x1, 0x4) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000180)='net/fib_trie\x00') r3 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x220) recvmsg(r3, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x751, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:27 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) [ 479.263883] binder_transaction: 13 callbacks suppressed [ 479.263899] binder: 6058:6059 transaction failed 29201/-22, size 0-0 line 2970 [ 479.334764] binder: BINDER_SET_CONTEXT_MGR already set [ 479.340806] binder_alloc: 6058: binder_alloc_buf, no vma [ 479.346442] binder: 6058:6066 transaction failed 29189/-3, size 0-0 line 2970 [ 479.354190] binder: 6058:6065 ioctl 40046207 0 returned -16 22:06:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x2) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000056c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000005680)={0xc39c, 0x94fd, 0x2}) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000005740)={{0x2, 0x4e24, @multicast2}, {0x1, @dev={[], 0xe}}, 0x20, {0x2, 0x4e21, @loopback}, 'ip6_vti0\x00'}) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="a7746fce4f8853a1d0b83213bdbec25f2eaa5bfe9d609b6905a45d065e1120105eaa0f638f6cba83ecb69eac26502e1b20c31a1a707a367e2acdcb41bbc3284240d5dd9eb29099b84fc73a760d3ef5789577f701db55d4d9baa1ea6e8d57f972ae81b032ba0fe29ad935faacd3bce2e852a954a6ca1095712a7458eb17cc282e0293942875a38bbaa4870c22814bbfe9ba841ab2e2384588a630c492c27512f26b4a74252547f76c18bd286f53ee88e7c556569d160b2a9ae3f35625985cea576600cb244a7e8621f4349eeafa1c7240e3a46753462489d6c04505ae536260", 0xdf}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f00000004c0)="dda9599b0bdaecc9b332fcded37553cbbe364dcb2ade886d863f8ce4be5eac92e780d78ae221111243601bdaa81371fd98f79076f83f88f077794e126fdb321087abba", 0x43}], 0x3, &(0x7f0000001bc0)=[{0xf0, 0x11f, 0x5055, "4393c65eb7ecdc4a46e3be2565b5d4185a09634e330a24ff62a15228c920c39fb8fbaaccfebb30fe98e36f680ffa7f8a36e2d9ace31085d55d7129f05494ee0d66049452187aef884e4b3b26c59bd6902fec1fe506c61373f300b4209f76f783ee0ed6ed28fc596bf6cee9560e41d59068c0ec72a24ded0d637a4be3d05412b5c80239692e6ff588354e04e384869dd8e2502668e17005ac29af51d328bbc7b1589726505a8366049d2df981c3b9289a6a84d1b1f7e55bf61f3a1ec31aa5befd000a95e02ceec43272076ee9524642dda234eae2c5b960adb8ad"}, {0xa8, 0xff, 0x9, "8231c69e82a9a7af19a49c345cb25f90d8f8f4058571e493f04b2c85a4deea8daec350e44d31459064db7e81e388c27dc840ce02f1f892228c613c710b72e9c9378bed307d6b5044332c16d10257907842094d3a4e7a2e4e44aaa8b8ff6b292ade92de1fd5d93dc430fe345fff8ab7c729523107813bdf05cf2e79c151b8fc95949f52975b91849025af9f44b532183e23fb481d159769a0"}, {0x58, 0x119, 0x10001, "f5d0f8f39a6897ae8f13e4e558359155ff7cbcaee363385ad591811e124841b73cb2293d873dee4e730c6c70b08accb05f67a172bdaabaaf2b6281bc845e69988187df19"}, {0x90, 0xc9e3447ea8d99691, 0x7, "33b3165fb0f68e96ec88fb20bde7a513a2bb08335db072702619f225683f1877115fc8e456e4f2cc9aa08f8029a36e81528f10605eae4723480a591a31b64ce4111c0e2bbab316a468624041345465491859e41209a466ec7d16191ee3e7622e1c6328bcf441bcad7a2841de8aa1ffedc300f0987dbc6bb2e2f20fb1d8e7"}, {0x10, 0x109, 0x7fff}, {0x110, 0x1, 0x156, "046b8502921b5a1b4bc89ec452fafde4ad5a46723ffdb0dce43ddf2c46b6f906d1af90ae2ec2030d6a8634e61a524122e3eefd86bcf617793871b080de4ec7f8d4a9ff0fea057da003190e542a2fb2dd5e26b4e6d2621b435ed887251c55358ac9ccec903f93226e2e27ac56a5e4012bfcf647d433dcbedc172e8273bbe96563937b1533c56b4c4725c915184fe5b78431d82d37d772894cb89a9cde15fdf6ddd8a8acf4350a1452db9b53dc49af4a7e22c8ece1460b63b011e23aa9438e159aa4055de74505752c171a1ea9c5119167c3c3ef3af34a6fb6661928cc9e0dd06c0ee558e1d7dba16e629af4f24872d52c6e07983886d1fa3e87"}, {0x68, 0x105, 0x8, "47f78097651019574c182074e0888666a7f60d04052452d6b6cf41be4a4217d9701875978d281eed8b1a7bc1e5484a7b5849ae99eb2eebfd6453bcf3900652e2225d8546aedea28ba2b701192dcdc70322c061a201"}], 0x408, 0x20000800}, 0x6}, {{&(0x7f0000000600)=@ax25={0x3, {"59665a20a43bb3"}, 0xe41}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000800)="918f6ca1279ed89b9494a4d7e718c21612a98482ef789748c7cbd5eac446895e8f668052ca78223ec22027a14443e239d6854afb46b670b3889258d756b6c698b04433d56429c97072e447009de9b964c39015edc0a33e0c283af2e6e366c25dd22abddab1f96e42d933e9092c18b2aecfdd2a88958364b55eda80f971580544dce4ec8302a9d18373914fa391a102b08b6cbc3e3003a85b4f79bdaa38c2ccb975626fa5fd337e85ee72e4bd102ce7ed8681f21af8fdb38bfec554995a54212f280cb08b0a", 0xc5}], 0x1, &(0x7f0000003000)=[{0xe8, 0xff, 0x0, "00298720b664630ad0c88031001897c45db8ba1e05671232384c06b5dcbbbe4cdcd467bda0ada0629d4a8005f64de15e974686675b35b99085b0a69f3ab681bc4cc67686f469c0bc8a921b61cdff91fb88c22962d0b7706cf2c7dbc0f042e78d789ebbab817d5680657606f9035f8641125daa66517c41397f7423976b7825f5bf5d9ad9ba6554c567bab87bdd5bc6d1924503d0d72507d1873d6eb7512faee826e8430cbf687da01b076ac07bb5656b486cbc3f858b613d5e0bcfb50385aae0df30c136334d27f34c5f7396aef5511492c5"}, {0x78, 0x110, 0x6, "03afaeeee3d3940c35b68f9a4148deadd80780e34e06af4d9128c969c17157a62b75fbc284c91cfef9fde040ada94c35e41c529efa7d224c5f0e5e9d386018c000c86629b11baad1da92e5ef9899df4313b9e2e0102392a3a87beaf0b83c0e62f6"}, {0x50, 0x0, 0xffffffffffffffff, "7d040cdef9553925e46cb9b019337a846f129facf0a1a77bde34862a7a2b7bfe84386f15883c63f2551c30e3446b6835c1598e2b6fa2fe7db8ed9b3201e61a10"}, {0x88, 0x113, 0x473, "9200e95a0b91a093a071d87a16c8f3486e6ece9d5d2833fedb8e3e4fa73a0e85e2a740c043a8af045eef3bf0936703f6f53ee9d0b6e2256cca1d5b251305255ffcbe9ad89360107f675915a4a7b3d6a30a52c6875393446a720cc00e916ebd2e25d1737531e7daf1ba2fb32c3137e3148d7ec89cf15018"}, {0x78, 0x103, 0x10001, "b43ef9efc7861e02296639607c63b6baecb21ec2f9c394209e138a50ce0e106ade0b7e9c5440a1cf679216ad9ca62e76ef7d90a7bc4abeb39e0cfcad6a1667e231016a2952b4acf8e49641d1d098dd8f3fdb1fddf0b93f3f3ced404980928e31bc8475"}, {0xb8, 0x10d, 0x0, "e41908985ea30e3166efdfdc5033229a5d1bd3a0d812d890268b8c798a7dfbb2f32a384f8a7b766d5fa0259bfa9ba47999aab9db6096781e1975e56806dc0a53bc8cdb630cb7c63cac0e8b9f01989bfab97f382ebe5df34d4e9e91bfddb8bfecc08ab3c22554910e3e6b4539ec5ba8788afbaadcda04f60be473185b33a8529d2d26abc5ed7bdff2638f5625781fe871bd6e76cbddd46ba7549d2e5b20cf29ebd3"}, {0xd0, 0x101, 0x1, "d83394ef7c392dc201041c99132172a7b178f4331fbf065da852b3bcb956a4d524efd616dfa8d66510f0e84624bc1cb80c427cba0af6aa4a57148b7d364e45a453a67607e2a1df2f3516f0579b1fa657e2f05be6be1bdb658127cb9bc8898347d83262c494401dcf0ac1d46c0604cdea65e027729324c29d99d7adb70c2dc94c6ff9333b962e2c789a4bee376b1715da7e5a212416cff5982ff14b761eb5810bcb0198ea2076bbf24d35f13727693b2ac7783a349a8114c9d29a60af"}, {0xc8, 0x101, 0x3, "8164538b9c1c30e631a2dedd1eb303239cc1f96a7979372c2909bf0156aadbe3602210ceec8530248ff6c17f91160b87eb67b2ad5f9b93b791131fbb898033d54e4bcf0c659a4274c30e0616edd73ca253dc3715c78b702c578ce5b4728785a2ddee2c2f1cc7e4a493475e04d81b074dc3bc63e4d98dda973c4097f8acaa325b0b9979ae0b53856dfdd564a77d0db0675f0496e921c90e1a94e23b778104e5368c29ecd05f3349371dca251640c4797230e74c46f93f64"}], 0x500, 0x1}, 0x2}, {{&(0x7f0000000900)=@l2={0x1f, 0xf63, {0xffffffffffffffff, 0x8, 0x7f, 0x8, 0x8, 0xffff}, 0x9, 0x9}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000680)="8b0490c48aabd8ff688d581a0617ac5ccef79de76aabac383f7053e58568c53fbcabac9da21618929e45d1c87ad7ba57", 0x30}], 0x1}, 0x1}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000009c0)="32b42e9fecfe73", 0x7}], 0x1, 0x0, 0x0, 0x4}, 0xff}, {{&(0x7f0000000a40)=@in6={0xa, 0x4e23, 0x4, @loopback, 0xe5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000003500)="31ba2b51b32e543f034880b42c4f8614efcc827b10cba440e71bd922d00499f11c97a7d607239e847cf704780a31322ec1adf881ecda6ef2197cd41e2e59633b5d1f05140bbaad973c6c8ae99422059a06badc308d3c94b46bb523a53dead23e831bec9fdbf2ef14ed56a4214896f83d2e3f6320317c5bce1abef71aca49913e0b480f662603351cbb5b7216eb95fb21f8", 0x91}], 0x1, &(0x7f00000035c0)=[{0x110, 0x11f, 0x5, "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"}, {0x20, 0x6, 0xc5, "f72b35485bd793a735cc42dedebe5b15"}, {0xd8, 0x13f, 0x7, "e752aa3fbcbb1501982e4318477f01176d2dafc335f32c210f9e63e07a073a0b6afe6a6688f61e61e1e081b2567a9c67e2f17d56bbad1be60c647b580ec2017ca6f884bdd10274e9e6795b76ab209575b2635fa56d228b7cb44100e62fbc0ce42d4b832864effa840f807d3f4a74f8d42d9ff19e274353ad29c4b98dd34e29235a4c8ebe5b809f4b4e58376aba3aea2e3ab36ce7fc6890978301f147f77851d4e3f02c3b2d4de12699a8f2f7ff61b2d823151327052d5b3686ad3ec7a285be73be34"}, {0x90, 0x119, 0x3, "cfbb8d844d6a485d177f55bc97a5c2c8e822e61fb55558f31f1b86d8c638d993a5ac96ea6c01147d7974505ecb7e9a4e04fece1d3e487c4d503248d328e35f1faf912f80df6d75894efa2049a894691b7d9bbd72df439b5930142553d1cb20942e4cafad717cb3636ba2b3e8202b467ddd4f492a6963262a5533"}, {0xf8, 0x108, 0x5, "7a155208c18b4b9fde64336efe4e190ed148c9b40b1cca38ebb30680dfa8e0fd72f57ddb5b19c53e295490b464b9c680cada2f6176b8bff47960873848c5d82080a9c899b9e06755b0727ac8270ed13474f2d061033ef9245ee6d904ea44db4f0da261e64d6f4e935378c8cb5c9d9b22505808d7b3d28242e30b9044b558fc3d244e6c78a3a591e44d20cf10c72edad570d446c3e156f65060c9d49a83925f2e931c242bed42fdbffaf64c84ace887416d947e97687ab81e4a65d445cb2ec3c2a62629c822fc51aac8442794b70a7b9ae220b981eb8bb100b5d0f4c630c62936b15e1dd94efe2d"}, {0x38, 0x119, 0xfff, "e92fae8192a77c402f5ea4e9705e21bb1c44e8f73c2c8ebc75e58ea581b12636d067095a"}], 0x3c8, 0x4000000}, 0x5}, {{&(0x7f00000039c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x2, 0x3, 0x0, 0x1}}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003a40)="ab3c82a05ac2cc5b92103eda7130d9e2145bddb780f90a8ea2e5e8178f5f7872925b6a5df0cbd29eecc1a08a3c8cc1789c5b84dd963bcfb75ab96710a48bfc80ce0bc4f2fdc94e085ab93e01e147bd6c3c", 0x51}, {&(0x7f0000003ac0)="6457e7975841256f67828c69c069065287eaefb7fa57ff5cd0fd9a6973c2d9cdee28f7e6eceb92b98a6231713f380404a2bfdc6d4313e3213b58e6e33f3839d7a72357c27db917ad4f7b7e8ea57e395f27c5667abc81c4554e01", 0x5a}, {&(0x7f0000000b00)}, {&(0x7f0000003b40)="5d800c4c1041ca442d2dc228b9db6e0c4e8cbb1f208bad6b07140f85ee26af84ca8853024ef8d3a37ff3f84cc0642b37501b29eb864eac9407f039bb23fec7678e50255d258d6d5c1e7646b00e6a01dbbbc5466e85ed1d53e1b8bcd6387230596dc8ce403926ffc9915e57e94378a3971f78a8f06cac100e828ec9150254f64ded752f9b191f6253507a670a0767f0d9131344d2109c57f0a37f40302434", 0x9e}, {&(0x7f0000003c00)="88ec2b47ae3bc9d182c80f3556398dce3f155388b6cd715c2c", 0x19}, {&(0x7f0000003c40)="b7902ecaa6b775a01a3e677fc5b49cf7f24ef2714a76ac50300c037631a0ebb5c7877fdeb8dba995860dfd3d53da12fc11c8ba2a02198fcdf8842096173da90c7d0e9ab3d06b7b5ce6c0", 0x4a}, {&(0x7f0000003cc0)="402eacdc8f6fa0181906d8392b9675160f105bf184cedf04362f4bdd66e764b341231290a9680fdf3170563953b71fec99d4451c2ffd1e8104864e49c91463666bf89cfbbdbf47e7f7150fe2ccd965bccc0108e7a5d1ca8645c4b20273fd416203e287396dfd6f439762c7825df85f09354ffdda20ba49b4996d3933d608d2675199cc34147afd41928a2a6f768b98ee8f709726abe18def3c2196307f1f98c0e0a6933d9d0d76e0019c2846ed1309ced90f5c39400f394ee9abf7954c924470564544f9a92f", 0xc6}, {&(0x7f0000003dc0)="261014656becdc5440663fd983b4c68fcdcf54438b00c45e3099b09040c3074de97ccda75fd51658f692dcf343ce34f6015d7ee7b58fdc62bb86a42c98e7cf04b922f3654b9ebab4c59dfeaa76f9e363f1e7f40131118360a8c89abe23f50d18083bd10bbad42b7896635f6a778da8481908187a901535d8034723c19abda29cba63ad14af43d0e42ac1469e075741e54578225bf20ea4aae9fac430a08140d7d5d180d222feabad6918f10c2893adf30e1fb5cad155cc03882847499a84e681", 0xc0}], 0x8, &(0x7f0000003f00)=[{0x1010, 0x0, 0x9b, "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"}], 0x1010, 0x800}, 0x9}, {{&(0x7f0000004f40)=@nfc={0x27, 0x1, 0x1, 0x7}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004fc0)="7640d345c6cc755da27c4ca2d1077fc6238b406d8b01b4cde20be8dd91beb8e63dfb7be621ee432d1423ee2d5f2fab77e5fc41da799b862adcd19166bbbcef4b75f785d3d3e67405712fd44be58e8d2432ee3f44d66165aa1c9c482dc3317e431e2739b9313d4d2340033e9de0f71d94086839357a600ee343d532d37386ecefbca943d3181ea889198121491d46596a7dc897418c67ae74c60616d4f3f913", 0x9f}], 0x1, &(0x7f00000050c0)=ANY=[@ANYBLOB="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"], 0x380, 0x800}, 0x9}], 0x7, 0x4000000) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/rtc0\x00', 0x240600, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000005600)={{0x10001, 0x80000001}, {0x800, 0x7}, 0xf2ea, 0x2, 0x5d91}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getegid() write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f00000000c0), 0x4) 22:06:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="cdbe11d81f3263d3faadb22fa06a0e521d98511d5b4343d9af89e72420b727f31661d7bf51b04317a459caad6a2dd617205178c068cdbee9edb8a2361c53c7512ff97125cbce097727104bdf51aa61da2c65ea94ad386fe5357814cdd89db680948f753f430633f1508053e4b0e2", 0x6e}, {&(0x7f00000001c0)="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", 0xfd}, {&(0x7f0000000400)="7826a83b2c3d598625a92d87f372574e3bd2580592072f6ffc65d026f4c7f817655f40e45c6473a580630498fa34aa8c01b75d843286c0e3b9dfd4aff1a8cfd27aa19a01", 0x44}, {&(0x7f0000000480)="1c07df989b1b68edf92cb233314b48e2555d28c9294a126c149bd6c5588a318cd7913913fd15227331444f09eaf4fc72320ede0ad1e5cb16e5066389d85f9a4b735cf71a2133e1573f6a646e5b5f075fb179a778c27b3afa31520d15a46d55d6e061b088daf328c1ed", 0x69}], 0x4, &(0x7f00000002c0)=[@assoc={0x18, 0x117, 0x4, 0x235a}, @op={0x18}], 0x30, 0x24000000}, 0x40000) r3 = getpid() write$P9_RGETLOCK(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000037010000ff0f0000000000000000000000000000cc91afe4e9a49684b867a1f2316af5a51932f3a1878f5e50670916d944909d0d585feb7fcb4b98f78675abf5f9d886c61ff61fa0930931dee18e2b99961586f7c22f14cd1f34e8f6647906253e4827ac7a74c933baf924d10997a14e85030000000000000089197e389d63b4ccb7694d044b6198c0", @ANYRES32=r3, @ANYBLOB="1e0070726f63707070306d696d655f7479706573797374656d29766d6e657431"], 0x3c) r4 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYRES16=r4], 0x220) recvmsg(r4, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000600)={0x101}) accept$alg(r2, 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) 22:06:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x3, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:27 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) 22:06:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x3a00000000000000}}], 0x209, 0x0) 22:06:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d080000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 479.502443] binder: 6075:6081 transaction failed 29201/-22, size 0-0 line 2970 [ 479.544587] binder_alloc_mmap_handler: 2 callbacks suppressed [ 479.544604] binder_alloc: binder_alloc_mmap_handler: 6075 20001000-20004000 already mapped failed -16 [ 479.609124] binder: BINDER_SET_CONTEXT_MGR already set 22:06:27 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x80082, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x70, 0x8001, 0x2, 0x7fff, 0x101, 0x0, 0x5, 0x80, 0xc, 0x401, 0xfff, 0xffffffffffffffbb, 0x7, 0xd1, 0x1, 0x2, 0x9, 0x7f, 0x7569, 0xfffffffffffffff7, 0x5, 0x0, 0x20, 0x37a, 0x0, 0x80000000, 0xfffffffffffffffc, 0x2, 0x8, 0x20, 0x3, 0x2, 0x0, 0x8001, 0x6, 0x100000001, 0x800, 0x0, 0xbf5a, 0x1, @perf_config_ext={0xfffffffffffffe01, 0x63ad}, 0x2, 0x1, 0x0, 0x2, 0x5, 0x5, 0x20}, r0, 0xa, r1, 0x1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@local, @multicast1, r2}, 0xc) r3 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x220) recvmsg(r3, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:27 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3000000000, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="b09b165e550506db903c0f01d97ec8c4", 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) [ 479.629487] binder: 6075:6081 ioctl 40046207 0 returned -16 [ 479.651578] binder: 6075:6097 transaction failed 29189/-3, size 0-0 line 2970 [ 479.696986] binder_release_work: 13 callbacks suppressed [ 479.697020] binder: undelivered TRANSACTION_ERROR: 29201 [ 479.737517] binder: undelivered TRANSACTION_ERROR: 29189 22:06:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = semget(0x2, 0x3, 0x100) semctl$IPC_RMID(r1, 0x0, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x220) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0x6, 0xcd9, 0x1ff, 0x40, 0x5, 0xb5b6}, 0x800}, 0xa) ioctl(r2, 0x20, &(0x7f0000000140)="8253e5c10b8474097d7b71e88c27ac3cf2d1718e69661646a8a1e5eb329d37b903f580c6780cc5a7d2b84fd3d676104543179d16c2b785e7dff2239ad3c9de7b3efd2847832cf01c13678c20973d227387fd0aba075bc7c70e01c9c1e9adc2fd38abfe2ce18b4f23badb89cc9f72a4982bb7a1c29347") r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x24100, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f00000001c0)={0x0, 0x3, 0x4}) 22:06:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x9000000}}], 0x209, 0x0) [ 479.936026] binder: 6117:6118 transaction failed 29201/-22, size 0-0 line 2970 22:06:27 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'syz_tun\x00', 0x7}) 22:06:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x34000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 480.023651] binder_alloc: binder_alloc_mmap_handler: 6117 20001000-20004000 already mapped failed -16 [ 480.050639] binder: 6117:6127 transaction failed 29189/-3, size 0-0 line 2970 [ 480.093078] binder: BINDER_SET_CONTEXT_MGR already set [ 480.140429] binder: undelivered TRANSACTION_ERROR: 29201 [ 480.146403] binder: 6117:6118 ioctl 40046207 0 returned -16 [ 480.157396] binder: undelivered TRANSACTION_ERROR: 29189 22:06:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:28 executing program 0: r0 = semget(0x0, 0x3, 0x24) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f0000000200)=""/162) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00001ec000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2c5c, 0x8000) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x220) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000140)=""/151, 0x97}, 0x0) 22:06:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x9effffff00000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:28 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000003c0)={0x1000, "64d7d083db71e8d68f68bffe84679b828e4eb574a68af0cdb0e82aac5d82473cfcf2adbe7c607a7afa7883088c0da5e5df7f83d75436bfbe8dfc027d21a20ec73453daa0c9a57924b681491c0c2c08dca34431660e6a72e44836b1c42f3f4a151e911dc9d1afd9e032e69f35f3c9fbdbdbb8c1886f96264380b2e70d7936ee0d946c8ad2ef0e8971848909ad9f6dd42be28b6ad0fd892a261704b3981338f918350b7626f6c238a65fa47415dca22dbe073d93f11bbab3e7cedd100e019a54dc993bf3857705a5a6fb568fe08a535b2e5af8ed7e531d9f4a4686addb9094accd703f7e4c1f67ca24150ad1876b552cb3e115e88daf0d61bee6f706a4051f1f125ca13cf1c4a740fd13f663eb2edce3a2c319292827d3e8861c4d58b54be835968ede3ff1aa11993894a6ce567e8cbf4f2ac61a4998ec8bf6c545c1cd9dbd636e4ca579ae1aea238cc62878ddf3cea64d067b15a9d65534345540873bf068fcbef34916389ea351b03c0eb193e11c379d143ae79ac688778931cf3aa9a76496213a29bf5781226f47de0534c580c75a13715edd9d59acf1e4398ee005d21342edfd69c7d74c0ed6f08f7f56e48b678e7d0733c68514093c02c8503a69ef8cf782da864a19e06e2cf76b4eea39e913b2cd82b3ee6e16d57623728fbc1bd098b75f3ee28e2f76d8594495edd1b9709da7fbc029106c61b44501d412350d16e700a3eda89d74771d0f1dd2a282649157ef9d0e3332c7aa621059adaf0dc24134e2bf32ff292b01a59cad469a6cf0c96e3524439d1dca31f85353384ce7e9fb2feea3aea24257390becd663fe4df6f4edcb247356df97c0ba1a2d0da8b46641433a0a24d7fef01bbf2bc39c153f0ca38beb8b0da9bebdc28f70029967bb0e162958338fc1f864fa41037101b5d7c6b74d4975a1bd00138d40e1fc44e18256678e8e8e674bffa643d3d0a76583abec32daf0e6312ed0d542bff21e2640448624d67dac0f24fc9734ede96fe868852e32eb68d33a9b0fb9af06b1acaa525c646fd821463a0c86de7c9f47fbad7b3c5b88a4c499eba8b38bb9a0ff71484985e5f269b5dd063650072f995ba5a6482812b043a508e08099b92f2b05defbe3b183ffe53388d801b8a9cd50080cb03d8f98159c623cb71f7e7c48a1efe334f476fc84763ca564c1e93c32fc1c685d09d3533e27e3d0b9972ff1649bc9d3cd6aa3521613ff28c6b048a43e00b72e247094e34225e5fe244e0025c404464811f5ca8af5d9227a694d9a69cf5bc705a867be399bd67883faaa0a91508638c9b7c38274841abc961b1b6b1bfdb1cda724bcbf76240edb95097cf4d6fc770726e8edbe9b552e99e33048676f78936f2f2dd8d426a25b7391e7f6bfc220ac771b3e23122d92c80ca2fcf9f291dc1f4d8fb2de17dc2ccaeb92a517aadf8a6d84808a8d810e6fcb91c103b280ff9a90918ef09f2d114d80e7bd10cdbb64106b9b24f6e1b2189fa7c57f8f2a9a79275c23702ce61c9a97b2b2b63bc76fce7f44747b9b6c596030ccfca11f464ff455a2e585d006ade69a2b71fccf752e4af177fef17a9316ea3a3fcad079560ca70f74b99b754fce34aa05b00e5bf878f3074f5965dd3132d61725e518fd4d7901ca60b28ce27de594f82afd66178717cb6222aeff519051b969897927263c01449c3d5d9cc704ba7662503f2fedfbb22bd517deda50d92201b95f18006d086c1095283ba43c27f9622740b9a78cef0529fee9950897e8e6ea4ffb8f0353e05bba03241e79d016eac97bdc3ead5ffc0d80d2bd1b927135357f6bba5852dda5bdeeb35b15e9043679b3e960b2c3f0d387c3be8cafb8ce352552e7ca2df6e20d65f052fadb848c7c0fe403077a001b9ee44a80d808cdc2884a8c72b8f9ecc3c2a5ec6ec73f21f7d8c8e104f466e74ad3d2099554132ece55eba050500878321f7c5de44c1ca439a3a5c62de047ab5012103bd21452b47f27d3ce19de8d890f13a24644105c09a26dca48737a629c377cc9c2a3ba44e681587a690a35cf612800c349c77e8a0c0825e38fe14c5a33bf562d66df65102a066a56d08a627805e0359ff12b8c45024be5bd65269f5d3d4f6d2d3114db704d9907b1ef3b4aba23f42658d485c6ee3e70552281c1c87e8aad5d71ab413cedd53d538b6ee437735ac8cb170a319f65404e30ab5a8d465062cfd27bba66ba82fed6c3d2cfe28244e20c574200572ebcdd90a25bc7ae5b5c15eda1d0869cca161aa79ea9a2ad0fa977f90e2fc069ce68bbacda6577565e4a9e046da2305af248caaf78e637ad96b66999cbd36c9a26e204cdfc673920370d1946ee838dc980701385ecbb446ef25fd6d5eb8c3797f5847f9a9bc26a80cc94c9507fe2228ab88bf776fbcdfa156f1c82e387711e64883f14ec2f3e15957c319fd7564bb4c1c56f059f1f0f1eceab1cd38acbfd3ddb9801867ad59f01d63b70d3fe5829a74185f123347dbbd58b0cb75b8ac96ff891c66853ca7e9baa1a38b0d2aa0bf2baf734c540cfc10f8b0b3bf0a4c6afa20ee89ed8b5d9f7caedbe236760557bf6ec22107ab51a713265b9a647bd6a3ce210e3a15ebe25d025f90f9c29d0d1128141eaed3654c6778dabc23e5eaff5485cd4abba44e6309168257eecbd0873078e017e8460d9f0e15ad032afb12743c25c558b70dc4c00292cd0975f5aa73d218e91f949dfb039f24e4e044e2eef27abded688a404fc8f94d0be4be9f27b74ba350d10a0c34708e528342279b9578bf66c50e9cada82d03eddd2ef7b576655b591067377b70d6ad8cf8f659ef464be53b33001dd6aa9a844e63dfe16566de69a07d0512e4d80ad4da3b9df63c57fe6a19f6db79d8f9491fec62e4feda9efd7548b12b2d5ade9ac45e7a6e0ea9ad8d36e55ba398141ce66b350f0d8656eaffbf4168273f9c9de2030c7544f36294796f56c22796812c59bd7d6590416e3972b986df7ec53eef8c5d7c06044cac01df72ae70707d82ba6a9e8f94e7441c80c0d67f49e1099908139bbff4c5df14686d48b12c0a1e3c5ae0a9c3be717821280f9be7cc2100e6eb30fd2f80f52db4166ff8022e5c0b5266f5395b9fca960631b91f7327ba09ebfac9b39377ecef560ec89a47a9edb785b6f226d5c7f936d17bdc52d26c643319489fbb6758a68a6e5f13128222b2d557b8409d111f0c672b83b5342e17cb071f0f096638954305eec2c5873d29fc5d6ade81c6fb82385742d16ffc8c32926429505905ef9db9e6b6f8c774873f09bf1ea9919eb5a7d231289712e1e231680a986e0ee76d11f9cf439f87bf831f21a757f43b3bf319d90bf0a28a0bf9cada86a8c474356ac6165bc726d609a90ffbd54a7b9766182da99f49d6a29eae4de3ccd19fb68b874048965e68ebcaf75dd3ce84e697804a9be70c4529c01ca7834d01c99df1f3d01f58d5e407dbddccf5f646fcd938434cc08ab7cac137880c20cd3f609ede6e1417c3a080f5963edcbdd35e485ef3d045eb56a8cfdd4f418a6f8233b524c517c3d8e2f44955b7f2283b2361f7e95b327870deac24d2312bfba1b750c06b5765720153ef462dfe731186a21b56e80856722d43d23d961e78e80e33f881eb6ce45a4da9c3fccb80c6b19adf301c565436e30e957f5d2c442084fe66852fe5471e87ac01c187647c5e24f24f3ea532e25d4b3d035f3621f9382c9832068f62d9157791101553ff0c93f2d534b37ff1d450a85fc4f0eab49c1ecad42d56a3e54ff5e0862c533cd70d97ea41e5f7d9c7faeb9a94c6af815e183d331e9d606c76f9a4058f8f5990ce8916eedf19de3e134b7f696050b70f66b152ad3bbb35267936b449510d36b9aa43d5f88cae5ff9db3d5e02fb6bd02151cc0578bdb76c666bfab3d50bba7b112d25f06d947dce9ea5de88d64541141c58f1afce493c0a4d38d67ab36dae92b284ca435a57ad19c7c594b3054ca76a20ff3d619acb908e0610ab9bce5f0c99e106305612d5b5c9bf840232ac53748b4fd92e632325cdf888bc01cb9f9998f3de603ed64337d3be4d6082683d84033d453ca8aa75fff95e4dbe992ae28e32f221fbb9366228f5ace50139d497aff862e6b3fb98c695396e03d907b3fe52368be9a229235dd4834bf04573f5adb2b744ea5fc8ffc9424c8e65e8af67fd84541a4f090dab5c54c5e564a7a2fcbdee9b8ffc1ada72e1c955c292b258b6458fbc27ede5606a52991105b0cddf4ed1f2e0570d6c38e223dc598fefa056c4ae5b91ba391d1cc3534c8c4c52fdec354fbc180f94e149cd73ba96375c90a9ae982f2b352be826be95b48038d3857c234b4e256963fa1cd66417871db89633b8cac8fd286fb73e1a2f7e29d8dd09e0e1772507dc772047bab5a5097aee749bd61b9f47cdd0f7cb46ae4697c5d1e3ee8a3c6e35bdc60f9c3a780a88942994d604699173595b33afba21180b403656050b4836606088307491349621878841e584124173e53e778abd33a5d545b4681feac283d193a83dd2ae11b459b33147640ba1af743eb966bdfde20880f1c15835ea9500e38a4c48413a338e5b45584dbd2a8dddf3ff8f08bedd48267cd5b47712f1060a7096dc7a043b3e8fefc4faf0b3bfc4fe462d2e1af4233409d42347ea8be159750b1318414a5fe1e0bce8b34ca1e1c4df05a8ce1e0828ac9d88d45a9800031ef8e62a9bed4ad3ea40f9b6a21a39c5744874df03a7c00563126780e8f5f436a426a92e8a3bbcb6c7e6da8034d7cdc5fd319018f99d10a54f3363a810cd0d621b5cb36426c297998fda50e4fea86ea1f7db00f8429052e68225244069be47eb5110fb945888a54a85c1961150e1e1c36a54c05166c8868766fa5fd10b9a7491d796dcb3ce5ceaadd2f19e5e01c623af746b77aff3e71425e5f5729713b3bf919fa4dcc96b520123edeb56dea05a731878d7f30585f57ea353293b3056821254da7640eaa37aa18562819480bebc3b01534c965a4905ad520fc1cbe00a6ee651727c43308cf71abd7580983a0be7428975ad9f4a2c25eca6a4b7d6218066495fc0506ef1c39890e9f1f2502b86b34e4582cb10c4100c479d6cfb56aa7481591bc864af824b4c99e3e1bc9257213fba928245e0d23ba6ff000354233d8e210d0d72054134fa436a945fe57ac038ba7b95813691df4c4d813d4e1003347a6adba9e01d4464e26f66c70e1932dcd69d7712a44e496b4b9692c4b8bf9a732b41c368f862214771be734c3c70654e55a76080312f64adbb89a388e47ac76041e040601dba294dbf80118c206e999c3bf9c82923030e27fd0b1c323bf93b9d24b565cb4ee9488b35fa86a33974a0b3723c0634a64e6b7f623e27d52b37d748e8cea6fd8524d04e981bb3cf165974fd376e7a87f0f6aafca73ae4fcb5f672598241d1e78a5937db826d6010350ffd2e6f4d80c73dc44fee0a8265e9107ed8149299b4545ff361fd4e2437762d5cc0419b38312e1a1e91cd9d3f7fcdfdc5dfda31bd2114178d59091385f6e0f0c03ce68a2012c1ec87be0f52f26c0721e8c9c55848cd8a9e77613dbc97116b8e47c6b54eb4204ff254fc581cb274c9d9659a1bd2cad41b494d6cc397084d6abb934fdf5ae907c0aa988b2ae49253c28fa018861b53098bece4838b7053232363455fb618a082383b2ea26bde0276a3a144bef35a83d5193a2ea756b0a245a1f3d21a9c7f1688d0101f3abf43cc81ed9d9955bc4df6cdeddb730229cc4cdc0ad6c995d90f1c7e1b590cc4d435ac3199b488f098a0e7000a3cddb0165ea85ec2e81cd522b4055a5abf7d6ebdc0f10"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x700}}], 0x209, 0x0) [ 480.457890] binder: 6159:6160 transaction failed 29201/-22, size 0-0 line 2970 22:06:28 executing program 5: r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c, 0x800) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xc8, "67881cb085ba869c122c90d73c8542f2add045318948774659fb18f4f6767def1a80460c960ea7dc31510f745e38b6a4d3ee77b8d604dc4c07a242c99e69c486c5a11bfe380a159174b50bf05ef092208d76eb3b32a5f67e175dd66113ad477e262ef4b212edd3ea936b8bffc92494041b5683530f030938c11d0aaabb0f06ac5be408dcfd419d08d61b03e05850e0be647259db231e0fb1009ca66403cd974c8ba2a6b26ee2c34b885cf36e4e57804b9c5345f244d9f4dcf09601c6259e636f94483e8864bffea6"}, &(0x7f00000002c0)=0xd0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r1, @in={{0x2, 0x4e23, @rand_addr=0x8}}, 0x9, 0xf997446, 0x1, 0x7, 0x82}, &(0x7f00000003c0)=0x98) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xfffffffffffffffb, 0x20d8000}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xf0ffffffffffff, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 480.519478] binder_alloc: binder_alloc_mmap_handler: 6159 20001000-20004000 already mapped failed -16 22:06:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x400, 0x0) write$input_event(r1, &(0x7f0000000200)={{0x77359400}, 0x0, 0xffffffffffffffc0, 0x1}, 0x18) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080), &(0x7f0000000140)=0x4) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x5146ce1f9f09a759}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r2, 0xc9, "ed1294", "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"}}, 0x110) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r3 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x220) recvmsg(r3, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 480.564273] binder: BINDER_SET_CONTEXT_MGR already set 22:06:28 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e24}, @in={0x2, 0x4e20}], 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) [ 480.623668] binder: 6159:6160 ioctl 40046207 0 returned -16 [ 480.653360] binder_alloc_new_buf_locked: 2 callbacks suppressed [ 480.653368] binder_alloc: 6159: binder_alloc_buf, no vma [ 480.665178] binder: 6159:6182 transaction failed 29189/-3, size 0-0 line 2970 22:06:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc00000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:28 executing program 0: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0xfffffeb9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000000c0), 0xc, &(0x7f0000001640)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="1009000000d21853315b6402b153"], 0x1}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x800, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f00000001c0)={0x4}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000002100)=ANY=[@ANYBLOB="001000009cb31d58ff0ca0591e6f5e932a07b505ea40dd38d2b34cb8b8b99f8dfd4fdbab36805f720d85b24b7e590a121ca11171b9ce39dad7c6e9129d859b025dc7adb3aa6529f85450b339924e521d0c5c1297a60b5982aff9c9c2427c2d04da67123b73e738d4dd1c9c7aec0942f29b27f5a3cdf0349854633b3ed5bf1fad5a2d7cc144edafedb9dffeb3b13b501781cea0eb0037cc42df09de4fe7f049cc03ad8286dd02b861af07e259439ac2be0aabdd437ca4514ee43432c7f028d14097a53ba17ce1a38a7732543ba8bf972171b0ee2b91b6e412e4437c17120043429079014739cd4b181d6f8621c708ac0fc1e9cc48e91349480df72f6b18adccd03adf1ab494ab0772c3086d41d4ab2eacf99c93f0adcb4b2e953d5a6c7606d778f373067916ae4b97c8e907c709d7392463f031e973a738012141f971b44480eb46a6396f7a6db6ef6abfd19722ee5660af7bfc26b5eabdaa3fbcac7ceaa630457036b4be7944af74bd5d7402d67f9948ba97304653a83dc361790d7b3b4a95e7401293855f4d5d6684b52df9e777d58601ca613a27d2ad29c75bb14919c533038745c73a53"], &(0x7f0000001200)=0x1) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001fde), 0x4) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 480.785846] binder: undelivered TRANSACTION_ERROR: 29201 [ 480.796499] binder: undelivered TRANSACTION_ERROR: 29189 22:06:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x1c00000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 480.969416] binder: 6207:6208 transaction failed 29201/-22, size 0-0 line 2970 [ 481.025998] binder_alloc: binder_alloc_mmap_handler: 6207 20001000-20004000 already mapped failed -16 [ 481.060504] binder: BINDER_SET_CONTEXT_MGR already set [ 481.098406] binder_alloc: 6207: binder_alloc_buf, no vma [ 481.104052] binder: 6207:6214 transaction failed 29189/-3, size 0-0 line 2970 [ 481.134513] binder: undelivered TRANSACTION_ERROR: 29201 [ 481.142613] binder: 6207:6208 ioctl 40046207 0 returned -16 [ 481.156624] binder: undelivered TRANSACTION_ERROR: 29189 22:06:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:29 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0x8090ae81, &(0x7f00000001c0)) 22:06:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xffffff9e, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xfffffdef}}], 0x209, 0x0) 22:06:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x8, [0x5277, 0x8, 0x200, 0x81, 0x6, 0x0, 0x2, 0x9]}, &(0x7f0000000040)=0x14) 22:06:29 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc8070031") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 481.472177] binder_alloc: binder_alloc_mmap_handler: 6229 20001000-20004000 already mapped failed -16 [ 481.517535] binder: BINDER_SET_CONTEXT_MGR already set [ 481.535414] binder: 6229:6233 ioctl 40046207 0 returned -16 [ 481.560203] binder_alloc: 6229: binder_alloc_buf, no vma [ 481.581562] binder: undelivered TRANSACTION_ERROR: 29201 [ 481.590377] binder: undelivered TRANSACTION_ERROR: 29189 22:06:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 481.772519] binder_alloc: binder_alloc_mmap_handler: 6248 20001000-20004000 already mapped failed -16 [ 481.784217] binder: BINDER_SET_CONTEXT_MGR already set 22:06:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xffffff7f, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 481.821844] binder: 6248:6249 ioctl 40046207 0 returned -16 [ 481.842224] binder_alloc: 6248: binder_alloc_buf, no vma 22:06:29 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc8070031") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:29 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000040)={0x7b, 0x0, [0x9, 0x5d4, 0x7, 0x9]}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0x8090ae81, &(0x7f00000001c0)) 22:06:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x2d1) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x1c00, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x7, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$TCSBRKP(r3, 0xc0101282, 0x1000000000000000) 22:06:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/40, 0x28) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 482.107086] binder_alloc: binder_alloc_mmap_handler: 6275 20001000-20004000 already mapped failed -16 [ 482.138343] binder: BINDER_SET_CONTEXT_MGR already set [ 482.174652] binder: 6275:6276 ioctl 40046207 0 returned -16 22:06:30 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) sendmsg$nl_route(r1, &(0x7f0000005700)={&(0x7f0000000000), 0xc, &(0x7f00000056c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001400040043e9ffff30000000000000001400001d29217d5231a40048a86f50f5a4c638e7a6efc768a1e72940e21aede4f62d68af6b28e84d24b3ae1d04c7364165624974f9e93e39dd9aa2f32051e9d2971b6a8030822deb146e978b25d47921569e348b6bd2b0441d9dd138f8476e5413b0d068371aaf47b4d1634f5cd4c09f1f9462c79b4e44be4b1c540cee102a384bcc55d4c4a6214c0317b6d82c55"], 0x1}}, 0x0) 22:06:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xf0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20ea0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x200000000000000}}], 0x209, 0x0) 22:06:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc8070031") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) io_setup(0x800, &(0x7f00000001c0)=0x0) pipe2(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000bc0)='group_id'}, 0x10) r4 = syz_open_dev$adsp(&(0x7f0000000d80)='/dev/adsp#\x00', 0x3ff, 0x10000) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/dsp\x00', 0x400141, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000001f80)='/dev/admmidi#\x00', 0x0, 0x0) r7 = eventfd(0x1) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000032c0)='/dev/qat_adf_ctl\x00', 0x200, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000033c0)='/dev/vga_arbiter\x00', 0x82000, 0x0) r10 = syz_open_dev$dmmidi(&(0x7f0000004440)='/dev/dmmidi#\x00', 0x4, 0x0) io_submit(r1, 0xa, &(0x7f00000044c0)=[&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x2, 0x9, r0, &(0x7f0000000980)="e1042c05fa04b9b2bb2314b32d44e18a7ea4d6519cceddd8a0a8884c572ef444d4a0aa78b9aa9974e0a10b1065d021c7107a32f772231f40fde711deba900165c48e4f95eda40f8d2dc635", 0x4b, 0x5, 0x0, 0x0, r2}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000000a80)="87290ad0ddc59879237bdd24ec170af32ca88c694c1b1bae478d7064b9ed747f4bd6c8265897f0adf0a2e8c6c61a4a4ea9fe17524c96b64fa65eadf478e647250913b443641b2bda676a051874365e1a69a5ffb2cae2d34fcf4a1f284e2568ce8ce5708d4f65270d1b2457291befca678526886c73cad82b5bf1cae53db2fede0275abe778e9b15e6ee5d534b96915", 0x8f, 0x1, 0x0, 0x0, r3}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x5, r0, &(0x7f0000000c80)="d6b1e5b9162f83e82b83497a69f1930d530bc1e76f40d3420a002d572b14ebc5ad8074e107fb58dd7eb40c89a5b1ad6bdd2e0bc92e9c1dc4d91b54851b9b7fc1f2c931b2b6652c60f858ed537994f61a0211a58a9cf5d9f88184174b79a9b1513b1d90090c27147e131ef7b7f4cebef32425d57fa766915f23fe94b3cc25f65af028cd913c3c202450696abb03e55d7eb0c3dce94bab7b4bc7443a59d317f10fd703c2ecf533283003fc19367a5e15b323ecbde8915c92ff38e814bab50d83c8c964a3eafa141a9a9f1ece894fe88402", 0xd0, 0x4, 0x0, 0x1, r4}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000e00)="deb6d5a5fc830ce564130a85500d906095d38ff0ef8ca74d046bee51a5bc5131827b25bf39666ecb54774c7883010cd0799e7dd7cdb2c4038241b392f0cee19905a1c370d7cbd7a50b80370b62228af1b47aeccd5aa118c993ce10a9304fac06d453b0578cb7c92fd5308efc01e04d48f6567a2a466e92a21bf8f8ed84b916215ce4a0833f1f87a2335ff59f05ac7883268a9a0df7fc7e03338cc179018fcad028729cc65f77582f900d7724dbea0f49028ff1bf4511eaab3349e539c7604053f97f51731f3df80ec8949259f53c399f3af7b11539e8fb4b5303c302437ee781b6d82336d1dc41f3360e7c79f1d04bc8c7b36188a7a1766d19cb564d614158b1e12e565bb657e12c422b8c4f8850fa97373dd13e4afb35d7c83762dacf6f35df85fda11cd6601af7b22c790a75fde66c204ce3abe5c2d3e2952da3a86a4de74a83787d804d789a3dec33a02178c5029a021a151b7d85ae7b72c8ec5df88470b06d09f597a292211d7545a852a601255eeb8e6adfda75e24c784f9a7f8f0e345909dec5bbfd887893d072230cd94a6797963eec9cdc1d9d3baebc04a74c708aa78eefb9362bbbd59a58b9a85cf9c3829302db2801f2bf6fb11de4860c1bf5ec20ef8c2be7983d936ec37ec28eea189b5de3028c79879d50160680896117e9615f75ba9e18a6980cfadf07cfe8f89d6f0f4f48156056f52daa5df21262d66f810ea5b0ff0c04f368bba8739e6e3e71195b73cd238983e75bde4678a5ea643c73e75520ce2dd149341eeb83ec705d9738998270f8b63771ff38c53b7b618e78aa4f7ffff56ccf0645e7e83c30370ca348cd7ad61b201e159f9aeed451ea039bc7e151d7bf119e8a6b128f7c4d3c6a88e50683fdf9e4244adf268964964e0ef732a7da114da345494036c3c5c81d819cdfadf887b6926dc28cfbd5840514dbbae36c385aaec367b4c2a8bce5c766c9d7623e217bbc13d8438469696962d9aca6c957e7b332b5b9bbee45e2ace088ed683ee37669b671562be0ae67bb6c4748013af7428486cc980f408376fc1f8e0e906c87e90fc89514259c3f87a180d178c26e9882eb0e74d7af25beb8d516ee4ce6b9839d976f441eee9e9c048dac66ce7fc513dac54142c67bf52373d9d19b269edbaede07350816cd948722af852fef4419ef72a6a6c9937864364741b56d32da417103e0889d0e46745fb23f89917964542afbd031d1780042e1c57a24d93bfe32ff1f22160a0cd4623349f1571daba0686a032519d0443e419252026e0c4bf46453f4bdbc3366192bd564676d326b68e663257507040a07ff792e75a57ddade55e5874d752c4915303471a843bfeb3987d04717125fa6fa61faae12bb09dbd104b5e551920d2b9b0767947c2c709721c247c23c24b4facfbfb1218bc84691af98d0352e2063e9364bee407aa36cff9838fb76a346f351eabff4f930fe7994fb567073abed0034476043a23fe132e33907a80fc87f0882b15d611ac61c977e69dca916673ec9e01792fca3fc3ae98488fd50687d1fdca023c7748ef1977dcd5e5468388806fcbfc123c1285aa48bdcb3e8e62202ec8d9077011cd251adc80392bfc8f81f5ab4b8d3de895a6a658815afe5881fed50e75340f24eb63662b4b5e439eadafcdc5041447707cece63fd85f543e353ea298b39ab001411949e79d5b43661394195251aa9a1ee4d7f60a918a1bfa7bc465e14b6b428bfb1bee4ae48d03f0bcd41fb36a98520ea5e4460c9000d79dec633f5d8566bd2cb2d5d9aad0c77cebace78ce927787ca9435269fa300741cd12ae4f18818acde07d407e16c4362d6597633b61f37d553295d5c09aa1f5e523d24a660a6bb238c43ef83c8ce9b211c7e11c63ad5346260c41d870d6598b8611e2d9c33d7d8209b08f8c38b4979f00fe760301333013d634f160fc3103f3cf6d75346fcdeace57fdb973f48f0729636867e92470a7b2e1305aa7fb87b47c8a59a8d39612130aef651632c058c27f15dc48f55f567b4e8c815fd3b6651f9ced4ab9181c66fc9a57abf49833b95d7c66747c4db8737d2ad0bb3549b2617de2ade32326b120d265d8b676971599ca74ba1dec9d2516be819e772b108dc904eb03b4331e6114075eb1873eccd51acbe64606d9b82665cf1824136329b900616f3dbf42fd67cd99a7700f80adba37a81565aa31fa0103b9e48e14fb018c7cda6ca331e7189935c1999cf013b1965e57c2413378fb6b38b42c38b21bf1cf360ef5d69deba367b35a4f313814fe5cd9e153189974d4e001c0d230edb839c2f8be1b1eb868aa724641ec1315c801589570b95ad6982414731250d28211b78712c29793e454efd9bc9bcd8902eccc71636e52471bb01cc024138c2ab9a4d9e1589142542c641ae32968a7c5d570694b834b04d360c33977e8530ec67a319ed0f1849c0ad8a49b16917aed3cadd05026329aa9df3d6518c20cbe104e6e5d1cefa6f4b8cd3c0cc1abaa4acdb679ea914bd9175879b163f0d375384edf3e64150cad6a20248b357c50ea007f29753cbd11565ba4d541535c5fb97823c654e776a84bc1c41fd16ea7db4c7efc608930e94c60f9de5d6005f6cc03de239832e469ce265f2f503d96a858f0af7158fb87e5aca00d7be17385788c9f2bc6f8848a8ef89ce133103b47b3fd618c9ec2be3e3650872edb70b62ba41c65c3971ea8fb889c0a9b65dd3d110e3e80354b25018a4e3460c4e46f7500c89d3cf2b1c9daeb5d92cafef46439f5834a3db61d4caa35dd9e78f7a240ca2f754e233d3edcc7367caa5f870a6258a5330762a6bb0c8fee362dd81ae7f462b1c91bce446c2d8755dbd7eabf250378110b3ad507ad8564912d75b2260a9516316c2816f8d75f064d90f65b66049332c97057d01f9ffac3c697ce6a29d09490c8fdefde04e13a6ebeef1e8f3909980868048d322f40ea3cfc0d1062c07bd1fc7e93be99de0d739ba9cea2514c0d82907e771ad3628faad70fb9848a0ca53629f5cd1e1818d394cc1530e60e0f3b3b3470ed4616369bd6792244c6a0a246dd522548b7a7461aa3cdbfbaa32af3d20d67ceb4d9de0f5097326a81d6f3ccdc9956288c36e2ac7dfd30f359843366ab724b18687bf78c23f9eed94827842e179de90ed5951b0ff70af4e3f8d64c84166aa974a1bb800f5054a4c89f022b08e1d10a7cc9b619c3794d1e376548e07faecc59529b75a78bdd7f0a53c74f463cf630c394d12f5e6122572a4e728616f47a26f921148580cebeaccf7f992441504975667c4158baeed60a3c62979952f634a9493bdf8f6acb318f0abed521b93908470d212a013b426daf3759ebb4052b9da7eece2a4e096784775e2ce597c9a9c5bef68151fc532231be1eec0c66eeaa21207ba656a71e974248c179368741b2e48c8e80d0a6be49fcf0bdffca908864b2284bfa00952693b6a3d4a70c1bacf94132136e9ac8a801a7938bac28b836231d1a200e818ce66405698526aff981bf482f07b3a4f797be74a8847dd1d518c74e42d59cfc4711a9d2a5493b348ff52804dc964d81177f272e09503d64999d80d61ef208ab49eb64e87ac75c7bd61dd4df23dd21ffc8786955a85a57f6924e4aa1202646df0ed56baddc9d07dceb7dc93544567e7f47c2cfab85e33c19e8bb4bc2922a9983a3ff65eb65f862807fa43afa976b02479dd3d6e8c8d4e696bfd0de3c8058085c0f18e8c7d24064df9dda0fc0a3d94ae63136d0b69ab4ff2340fdce3d088866d9220be31cf584b6ba7690bf4ec1f9799624bc0fc1a107b097c5c05b4aece4931e02c5ff2429fccb003d50f436bea6efa89a632407424da3595d67ba8bd1a08a797e2b37bc7e934520b2c4db59470ffd1c9995b9f8c18eb61cae08ccea8c9ff4f9cb3e3394fdcac93472776fa490681e54939d3c5d9064f3de5f73c7256cab5b276f16cfce5063e20458667a1a2c477e4f9df65952297e20e0af3cc9571a4c459de7549c533481928f8ab055d88a3f0bebea1ecc7692c095de197f9423eec8f82a0f472314404e723e34e19d2ccd0ee44fad6778a2f9ad6dbb70ef530753fa0687ef29a145e32cac25ecfcd71ef0152927aa604b3ff210b2eae6925436c9c4fdd0670ff57d760a4e2364a14733a374d9bf9400e1ed49581c400d6cc56887fdd908f0fffd9edc6fdcd250fed892580e1ea45955339e6b83d87f1568eeac157cc13da1f1e79b656f333b13072d697262f276cc905cf5cb6aafbc1f5cf60bd4ed56943b30e802ba4ab54d6e60ed49691d609ba8052b3452ed9559bcd73987e08a68b37b3743d02247611f8b58c50948cb4613df60be534a0c9caa4a7b73844a2ac8fb25f1fbb2e7501e1a625e84e85edde13d35a5c944d7b2536798420ea8ae172b42fd93e171cfcdf515d3317470ba3c5a1fa926652c747da31bdbc5c7bc2ed5ba3e3b025fe37a561943d945ce86d475e9def0487f59904b133e64279e074546f4380d160e27cd09edae58bfc7a88d384435a336ab7b60b22436deb063d95e4d087dbef9fc47e5bbe89be448676cc39a3576dcc7e8c663b3069cb33f2b58fa506a1dbd322d05dec0536659152982856063026482a8825064827438e14425f1e94c2482bfbd527a7215164cdeabb8055e738b503af2990a7ad27b0dc9bbda3e0c2b7361973955211dfdd2aab10de83ed0330316af4e962dc590ce7735d4a6b9c344b43f071d3cf69f2d4f6f25d4ca8437476290efeacd419d6ccc133f39017843d7ac7b693ac71fa0e6c5ef07e69f10cc6bced039e181d6b3ac4499aa66e11c1563b92678f4c59056820b7245dff3f39d154834946479619b36b880929cd8c31a03d1239cabb3eb32da9dfeca0018365122ee46d99ca0e852e8071dfcd3b6617562438cc64afbc9e2f069287bed30e8429ca5e537ace5e55367597b474fbb56ca1214908e1ddbe31fe8f3899a4e2b7e1388048e08622f1691ab49f8bd4be3578330ca0269f02e9cae87f7157024e7aacb98d025649d06aa96b22283123723b5de57748b4dc9df08e75d3379d66c03d85ca074d8a535a4d8f99d034b995d1364f00de4f50e4ab4055100b3c5a4af5719ac4a11449c0ce897a64b4cac6531b9a7eadb72a378e2a507f6eadb2d0088a21ee8ef7fb1969d8db4b50aa3ad288fd729797fe706240a13c947d3379d6ea3afbc52293329e4dc4ec23cf0cc86f5da2a1ecc883b4a30574bc97fa5a917057afbb6a4573976fcd183664eaa62e00d62be3f61942072384b5c7edd78bb48926d9df2bb950b79f1f2cf697cfecc2ee0380c069270c7a8352b174c0e9730af39ce24214099126d1fe7be26f65e4d1b27919362724b852a9c203f29043003f9c055d92b9bb8e3f0bde560d0b0d566a779497324a34957da21bc82b29322a66aea7f0acdeb55344c64043d820f740062953f5654327a6da6f5ab14652c5ff628752be283c7f26267ad809b1897c539a509daa13055d0ccc0f1ee775abcbc881b482d37082b662bbda601ed2fea71e8a4d8dac6be4a6c4116eafbbeaba297b554ab10cea76c8c968644ba37e96a065a7d72055d72f106683a4721c2ddff7c6ff25bb06e61663f291b34fd98e9363bc8e85016f33f8e50c2a2a1b3f1245d04996ac6ac738aab30745a63ca22102b221265af7379a35674bb746eb78325fb7861120ed42b991bdaa55c1cbe8cb282b717c34c12813e3511ccaf08d3d2e0f1944d072b4fc7e48550925eb73d1892011b5e00dd86b74e8def45aa4ba9af43c119fde284aa21c5b1593e9f771791d619fcadfdba95d5d4e00", 0x1000, 0x0, 0x0, 0x0, r5}, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x7, 0x80, r0, &(0x7f0000001e80)="ab9c9e1857cd93606316df8991e1cef4f9a427bd3156fafe17987750ac47d1debcf00dcb3135ebf34e65c8fc4b838b5d34eb1ce85beb5418194d0f8bf88ea2ddbff2cc92f09cd125b04372fb969193c28c5240568494ce8d2920dea059fc41158c960f235dc1f0e0269403f68a63ef0b1b1faadc5fd0a92369864779369e352cf81095f2fdbdc89aea040bd89b026c7ff66ec38f2f8215724e5a35887fc683bce2d3e37d935957e88b9809c3a118b54745a79d97f2988b5d2da9a13abe61acc53e06e7b7972d38959379d1b131c329d48ee1a90b0c44678f173ba9e53906d5a9bd7cbdec7167df26d05aa0866eda", 0xee, 0x4, 0x0, 0x0, r6}, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000003000)="e2f073653f34d1628b6310027ede0bb2c30c35a2a194d39be6a93ec558dc5071a488d7080fe5720e58dbc563a9160f4f1182eee486a94424db127a92f156c11475e23d2d5d9ce0974da99d35ce2be8a7625a14760e26b1d93bf789678a3eb09e001acb631a437a070486024fd550eeb1b4de4455cc2c955227991288b429c50fd704dc0318666d220e234b3e5c2138b793c86ba5b274a9a59374a7259d33c31be3821141e342167579658113a6d71b0871624cf4af6ed542a69fd003694cc23c7182d21f353e82ecfe79f0dc7f", 0xcd, 0x7, 0x0, 0x1, r0}, &(0x7f0000003240)={0x0, 0x0, 0x0, 0xf, 0x2, r0, &(0x7f0000003140)="c383aa175d97cf95881f8cf3964f438b88057b028c1aeda5ee134253dafb09c01fe6442ee5c510c7de82cf9cb0e2502c781f4c0873f8fc6c518deb104cfef1219ce505636a57512720d46282141abc10d3c86227f6f6317156760d252b0edfa06efb5f400fb32a5b1d638dd9cc75f3ad2aad0cb41558bdc9755754b89dcc5707d33a0e22dfdaebf76fdfd6bb70e574b0f3f8d56718d19b713d11122f72b48780a63fb25f973f2254b2b4c4ced0ab5609f333d38fb158b8ca4a5555bee608f93d73209ec7033d8dbf5cf90fa85107a0d8", 0xd0, 0x482, 0x0, 0x1, r7}, &(0x7f0000003300)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f0000003280)="3fb49864f5e7578e057c6941a9b70a53e5b23c3d18866aa33a92225a25c0fc382a27ab0e42202138e84bcf6433912e42db16e63225a3c7d84e52b3", 0x3b, 0x523c, 0x0, 0x1, r8}, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f0000003340)="5801c2b55f04f0c62be2a2b6b547574db865eae1ab8b7ad390d39c789cba034fd18bf8268a5c9a800c4b90c9cd0e9dd87f103bb08a93200a80d5aaf9f54d71673eb0110066fe2f4c8f8047e7e6a1e3f4cd8cb95c7f7e2821acf42bf699d8b7d9629321d2a4b558549736efe2216bb042", 0x70, 0x9, 0x0, 0x1, r9}, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x3, 0x3, r0, &(0x7f0000003440)="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", 0x1000, 0x1, 0x0, 0x0, r10}]) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write(r11, &(0x7f00000003c0)="e8aa0f79c495bd53097fdf122404309ffb6a65dd49f47e2fcad00c7b0a", 0x1d) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r11, &(0x7f0000002000), 0x1000) lstat(&(0x7f0000000800)='./file0/../file0\x00', &(0x7f0000000780)) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r12 = syz_open_dev$mice(&(0x7f0000000680)='/dev/input/mice\x00', 0x0, 0x48000) connect$unix(r12, &(0x7f0000000700)=@file={0x1, './file0/../file0\x00'}, 0x6e) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x1c, r13, 0x700, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1) write$FUSE_INTERRUPT(r11, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r13, @ANYBLOB="000025bd7000fddbdf2501000000080004000000000040000300080007004e230000080007004e23000014000600fe8000000000000000000000000000bb08000500ac1414bb080001000000000008000300040000000c000200080008009c08000008000500030000000c00030008000400d3020000640001000800010002000000080006006f766600080005000000000008000b007369700014000300e0000002000000000000000000000000080001000200000008000b0073698c001400030000000000000000000000ffff00000008080009003e00000008000500170b00000800060000000000"], 0xf0}}, 0x80) [ 482.704856] binder_alloc: binder_alloc_mmap_handler: 6308 20001000-20004000 already mapped failed -16 22:06:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) socketpair(0xa, 0x6, 0x81, &(0x7f0000000180)) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000140)={r3, 0x1, 0x6, @broadcast}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 482.750506] binder: BINDER_SET_CONTEXT_MGR already set 22:06:30 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) sendto$inet(r1, &(0x7f0000000440)="128968bbd576c0ab7276b6ed5f90901e872b08b8", 0x14, 0x4040, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f000001d000)={0x200000006, 0x70, 0x2, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x801, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x1, 0x34000) creat(&(0x7f0000000040)='./file0\x00', 0x100) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0x10) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000380)={@remote, @multicast1, 0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000400)={@remote, 0x1f, r5}) r6 = socket$inet6(0xa, 0x802, 0x9b00) ioctl(r6, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r7 = socket(0x40000000002, 0x3, 0x8) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)="627269646765300000000000000200", 0x10) sendmmsg$unix(r7, &(0x7f0000000240)=[{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001500), 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0000000000000000001d0000"], 0xc}], 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r3, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000140)="a5", 0x1, 0x4000002, &(0x7f0000000180), 0x10) 22:06:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xf00000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 482.780718] binder: 6308:6310 ioctl 40046207 0 returned -16 [ 482.812740] binder_alloc: 6308: binder_alloc_buf, no vma [ 482.900172] raw_sendmsg: syz-executor4 forgot to set AF_INET. Fix it! 22:06:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x9effffff, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82d, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffffffffffe0, 0x200) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000080)) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x33, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r0 = socket(0x2, 0x1, 0x0) r1 = add_key(&(0x7f0000000640)='cifs.spnego\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000009c0)="f2ad594f5334f2d4423c1c2a91f4cb195178b124a8f5eb0bee785172b0a14ff3d9bcdac1e17c7b06d24befc49a199d8192d4b5199be81c369fe175aa554a957a837037ea4c51e5f490b69dd015664fed25a27e9e0ec9a0e2100443570bc94f6c83dc544edafcca4941ff8ed5a58fb1b27545e961d23979c83372132367e5ad22f20f15fe3311ba974e6c3ab7540127688d23bce90b6867a2b75aa86db9ba8baaba3bb74c4d0200000001aec0d63898f413fc0fffc2cdef3c6e2caafd8a5c9398d50ed1b69bea555c1657c4198324984adf61e805e10921479cb38b7bb17fff123324f244a07bd5e442bd45", 0xeb, 0xfffffffffffffff8) r2 = request_key(&(0x7f00000006c0)='trusted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000380)='trusted\x00', r1) keyctl$negate(0xd, r2, 0x3150, r1) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280)=0x36f035224520320f, 0x4) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x0, 0x9}, 0xfffffffffffffcb7) r3 = socket(0x0, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000005c0)=@int=0xfffffffffffffffa, 0xfffffffffffffed1) r4 = socket$inet6(0xa, 0x202000000802, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000680)='/dev/qat_adf_ctl\x00', 0x30000, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x207) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000180)=""/39, &(0x7f00000001c0)=0xfcbf) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000580)=0x1, 0xff0e) fcntl$setlease(r0, 0x400, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2, 0x80000000000041}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x1000000800, 0x0, 0x3, 0x1}, 0x20) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x280, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000b00)='veth1\x00') ioctl$BLKIOMIN(r6, 0x1278, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000140)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x1, 0x14, 0xcc, 0xcfec, 0x2}, &(0x7f0000000540)=0x98) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000002c0)={0x3, 0x1, 0xffff, 0xeb, 0x6b}, 0xc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000c00)=ANY=[@ANYBLOB="b415df250800002008010000a99ac268fa076f68f663a21e000080000000265e00000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') sendfile(r4, r7, &(0x7f0000000340)=0x201, 0x7ffffffe) 22:06:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x6000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 483.085055] binder_alloc: binder_alloc_mmap_handler: 6358 20001000-20004000 already mapped failed -16 [ 483.146826] binder: BINDER_SET_CONTEXT_MGR already set 22:06:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7fff, 0x500) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000080)={0x1, {}, 0x6}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x220) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 483.178720] binder: 6358:6361 ioctl 40046207 0 returned -16 [ 483.178781] binder_alloc: 6358: binder_alloc_buf, no vma 22:06:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x3a}}], 0x209, 0x0) 22:06:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000500)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr\x00', 0xfd1a) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) recvfrom(r0, &(0x7f0000000380)=""/239, 0xef, 0x0, 0x0, 0x0) close(r0) 22:06:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x1ff, @mcast1, 0x1}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r3, 0x2269}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 483.549935] binder_alloc: binder_alloc_mmap_handler: 6403 20001000-20004000 already mapped failed -16 [ 483.583036] binder_alloc: 6403: binder_alloc_buf, no vma [ 483.585310] binder: BINDER_SET_CONTEXT_MGR already set 22:06:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xffffffff00000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) r2 = open(&(0x7f00000003c0)='./file0/../file0/file0\x00', 0x400000, 0x20) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000004c0)={0x2, 0x4e24, @rand_addr=0x58262d67}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 483.610358] binder: 6403:6405 ioctl 40046207 0 returned -16 22:06:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@bridge_setlink={0x20, 0x13, 0x129, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0) 22:06:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xf901000000000000}}], 0x209, 0x0) 22:06:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x60000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) prctl$setmm(0x23, 0x3, &(0x7f0000ffa000/0x3000)=nil) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000180)=0x1000, 0x8) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000080)=""/11, 0xb) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r3 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x220) recvmsg(r3, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x20000, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f00000007c0)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[]) lgetxattr(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="62747260732e65060000"], &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r2, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000004c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) [ 483.805104] binder: BINDER_SET_CONTEXT_MGR already set [ 483.849474] binder_alloc: 6431: binder_alloc_buf, no vma [ 483.877253] binder: 6431:6433 ioctl 40046207 0 returned -16 22:06:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x7f000001, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x1, 0x0, &(0x7f00000002c0)="9f"}) 22:06:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="310ba575e295f3e955385ae6cb9a7319501f7300efc8fb187265ea7143a7ba07d02eaf56aa5c4274ca96bfd03b78813c8077999af1947caa900970b4a645dc47bd9daf3ec2c1e08207882419c9aadb39eb69c8a4bdfe5d7699ef128b1afd91d6eab18c1af5fdf9c763d72aaab686f6ddbb00c4529f8752ad348f86282f7e94bb7b60979d34142ee1aa6fb0c2cf1ab1742a8ba0397e64e55b8aac9319bbf64f3ad0c02f63055fa06c031f5d9fb23f23eec55eb8920d575c7c5c3c3016c646d1f819", 0xc1) r1 = accept$alg(r0, 0x0, 0x0) fdatasync(r0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x8000, @ipv4={[], [], @multicast1}, 0xfff}}, 0x1, 0x8, 0x40, 0x2, 0x7}, &(0x7f00000001c0)=0x29) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0xcd33, 0x10}, &(0x7f0000000180)=0xc) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 484.020237] binder: 6460:6462 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 484.053120] binder: BINDER_SET_CONTEXT_MGR already set [ 484.078488] binder_alloc: 6466: binder_alloc_buf, no vma [ 484.103442] binder: 6466:6467 ioctl 40046207 0 returned -16 22:06:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0xfffffffffffffffd, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x180, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r3, 0x9030, 0x30}, &(0x7f0000000180)=0xc) 22:06:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f0000000700)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc00, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:32 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="000000845c26bf2049dfb00000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x88) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000240)=0xfffffffffffff001) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000002c0)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="e59afb0b63bf477368a605da69ea4257851dfd2df91291dad5f9e4719bc40541be5a081b038a653c1e091f08318bb787", 0x30) r2 = accept$alg(r1, 0x0, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000900)={"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"}) ioctl$sock_netdev_private(r2, 0x89f8, &(0x7f0000000400)="c76264f3de640b24fdb16ff22d833fcc30fd24d4ebd73aeebf4a839c7f02e25a463c524c3bb64cf22d0f98c25337179c83779c7b05f39966f1acdd49ba858854ffefb641a518d95736378836060e16220b8ee73a7922cba782b0b05d298570d3ac765caf3d8e8eb841e5de807962cb1030de7c5c85c86359") write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x13a) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) 22:06:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:32 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000dc0000)) close(r1) 22:06:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e080000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 484.316771] binder_transaction: 15 callbacks suppressed [ 484.316788] binder: 6478:6479 transaction failed 29201/-22, size 0-0 line 2970 22:06:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xe803000000000000}}], 0x209, 0x0) 22:06:32 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x1, 0x8000) 22:06:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1c1200, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x200, 0x2, 0x0, 0x6, 0xffff, 0x3, 0x80, 0x8, 0x7, 0x2, 0x0, 0x1}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0x2f, @rand_addr=0x8, 0x4e20, 0x4, 'rr\x00', 0x20, 0x200, 0x65}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x4e23, 0x2000, 0x8, 0x5, 0x79}}, 0x44) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 484.370868] binder: BINDER_SET_CONTEXT_MGR already set [ 484.376379] binder_alloc: 6478: binder_alloc_buf, no vma [ 484.381992] binder: 6478:6500 transaction failed 29189/-3, size 0-0 line 2970 22:06:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1fff, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xfffffffc, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 484.411421] binder: 6478:6479 ioctl 40046207 0 returned -16 22:06:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:32 executing program 4: 22:06:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) r2 = getpid() sched_getaffinity(r2, 0x8, &(0x7f0000000000)) 22:06:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x300000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 484.586011] binder: 6528:6529 transaction failed 29201/-22, size 0-0 line 2970 22:06:32 executing program 4: [ 484.666535] binder_alloc_mmap_handler: 3 callbacks suppressed [ 484.666552] binder_alloc: binder_alloc_mmap_handler: 6528 20001000-20004000 already mapped failed -16 [ 484.773446] binder: 6528:6548 transaction failed 29189/-3, size 0-0 line 2970 [ 484.784254] binder: BINDER_SET_CONTEXT_MGR already set [ 484.805958] binder: 6528:6529 ioctl 40046207 0 returned -16 [ 484.827867] binder_release_work: 15 callbacks suppressed [ 484.827874] binder: undelivered TRANSACTION_ERROR: 29201 [ 484.854233] binder: undelivered TRANSACTION_ERROR: 29189 22:06:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x1000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x410000, 0x0) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x9, 0x80002) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000100)={0x0, r3}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780), 0x2, &(0x7f0000000800)=""/151, 0x1b}, 0x0) 22:06:33 executing program 4: 22:06:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000a80)='/dev/snd/pcmC#D#p\x00', 0x3, 0x185000) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000ac0)=0x1) sendmsg$alg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000700)="7938d0e53fbfba7aaa9b92fd34e9642071930e56d13909c06157e4659994566a19391b78ba9639668a8a651502d376f2667b498441dea585fda5a6cb569720b9b9e0c321ec352d86e8db20661f7969416ad68f33d20a818eaca949284f6e958fe95cdd28a51d52732656884e5f99ca672988e9c40ccfcce91892165cb31c96757a4ab65baf45b43ef6e0b94fd6a3c0a47535a6b9279b746f77d53da76f58f23459244baf0483f6d8ca8fa31e79eb161790305d634066217f58b0045338c993731819f82634aec0a55d9bac997a46768868c84455cd8f78ab5688c4acce6c11ee845aa3100416f4910ac035", 0xeb}, {&(0x7f00000004c0)="ff7559958851caa8c0f9579c4ef0fe5616131782153bb752779fa163cd49809c3dbb8d4efaa3b86a73fd78f9a55bf69bb80924f8cc3554e855dba4f2bf230e1e96f0c83f096ea717e4585be344d9831989e3c166e229fe5af069e0f6c87a98180e1b3667269ad8547071025b4b65254e364dcf926f540519013e201099f2e3068655cedc09efafc80d90dc3117e8fafe1f56f042a4bd8163aabb79618d771f55561ff68a781e3c", 0xa7}, {&(0x7f00000003c0)="c76d983a3a58e8f7bcd03d07d314c7b71737ec79d1c6223ce1ab9f2d07ceaba81723bce9bb1468", 0x27}, {&(0x7f0000000600)="904c3f6216ce22e855ca584fd814f542cf1df251a956e9ef166f4ede15dfadfa39412a4d2b08e38156b6f4779f35b9d61fded4c09c91340177983930f51d0bda31db96c4dc80235c019142f49f135ebe511d8b0c1985dbe4c346c3c097187830c1d4e657cb6498e89a492eec16574d8fb32cfee29434562f9622d22476d7f9631fb945b4b3d0c3dc8ba0672acda917e985cc4b7104ae60535cb0f2a9471289fa946f370cda970feb1b9eed49990eb357be63", 0xb2}, {&(0x7f0000000800)="263f22c1a078f5fe8c775df06e08f782aa4502741a67962cebce7411bd6b8b29ff5f082fb81e0859cdb7760fd9d74e990a713baeaf48b9a159d2523927a6cc3ba51e4946c3e036a22135b7cccb077d56adecfd1c3d7944381bad3340dc1836046ee59a0c01e8e0b503f4aa6abc1ad34e00ee0a28e5f6299eb5b89f51706fe8e374c67d53f92bf49ce6f728ed30442984c420870dcb063b57aae033226a6139f90442a2a3b5b195962c68a6d2d76b16b141c74580425ff25d3bde8f00998a183b245adc433e", 0xc5}, {&(0x7f0000000900)="daba82693b140ed00ee6aa29e73a", 0xe}, {&(0x7f0000000940)="51cb754d53f8a80b105d73ca1a79d9906581e4bd2f6c9a0703c37c4d02b62afa734585ce16488f12ef764d9487e5c0fae4e55118d74f8b98f6ae7c1ac7b45f9b041d2368262f78769e9a8e9e5e585f401a4575b13678a0", 0x57}], 0x7, 0x0, 0x0, 0x40000}, 0x40000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r3, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xf901}}], 0x209, 0x0) 22:06:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f857150") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0xb4, "0d4d934c80bc5ba0aa0de637040632c69e9fa7b7a550b8b926f91109d66988ddc0badfdb3be76711f28ba8346b7683376c28ba0e874a22c755ba5f3978e60467322d94b4bfa086bfcf4b3680e5069e0a4b53beb88ac237bc1088fb2d9e1305fd66e9778b16458bb3e189c4a4ec712bcbde86808ada5ad236c7ed3b9fa86bff085cedb46ddb17a4fe72badea6889375d3b36a5d86da678c166e51c7f4f9d23e890ac64737a0a4362e02c8bfad1236503a2cc97c18"}, &(0x7f0000000040)=0xbc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r2, 0x6, 0xfffffffffffffffa}, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfffffffffffffdf0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000200)={0x6, [0x6, 0x7, 0x9, 0x8, 0x2d, 0x624]}, 0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:33 executing program 4: [ 485.172896] binder: 6566:6569 transaction failed 29201/-22, size 0-0 line 2970 22:06:33 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x4000, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xff03, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 485.214404] binder_alloc: binder_alloc_mmap_handler: 6566 20001000-20004000 already mapped failed -16 22:06:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) [ 485.263037] binder: BINDER_SET_CONTEXT_MGR already set [ 485.287432] binder: 6566:6569 ioctl 40046207 0 returned -16 [ 485.316962] binder: 6566:6590 transaction failed 29189/-3, size 0-0 line 2970 22:06:33 executing program 4: 22:06:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc00e0000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 485.345757] binder: undelivered TRANSACTION_ERROR: 29201 [ 485.355193] binder: undelivered TRANSACTION_ERROR: 29189 22:06:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000080)=0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="14958cba45eab1f5f074b943f2f46928cc665276d44be1d000d0b26cc1a3e93234cf", 0x14) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x220) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x2, [{}, {}]}, 0x27) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140)={0xffff}, 0x4) 22:06:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:33 executing program 4: 22:06:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xf0ffffff, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 485.543617] binder: 6612:6613 transaction failed 29201/-22, size 0-0 line 2970 22:06:33 executing program 4: 22:06:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000440)={'TPROXY\x00'}, &(0x7f0000000480)=0x1e) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000080)) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000140)={@empty, 0x0}, &(0x7f0000000180)=0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000001c0)={@dev={0xfe, 0x80, [], 0xf}, r4}, 0x14) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f0000000900)={0x210, 0xb, 0xf, 0x320, 0x70bd28, 0x25dfdbfc, {0xb, 0x0, 0x3}, [@typed={0x8, 0x56, @uid=r5}, @nested={0xdc, 0x1d, [@typed={0x8, 0x30, @ipv4}, @generic="393172eace98266b7967b6b3a965a695cb1e430edbbe1582023fd3af0c782a5040330962bca595218564202319c1efe8bfe0d56099750844eec0af66e7073a43a407757307a72cb7a312ad0eb292ed37a802c5543e213c274d346ae82a7cdd52b51259ab9e0ab2ad5b11abef80b9358965853d6a121d585b4405c958400a4b69f3198a5263ea417e89bc81f37fc5de3a2a821d547ecbfbd486426f780e41a7fea2a9a06f559b723fc7f655b4d3ec39520c4dd5e43880701dc5bd4da511faa9953042d32687d387c86718af5768c6"]}, @generic="4ce17d699f1f4f6f3c468aed9d3ec88ad3b80ebc5dacb8cddd4a45a890ec76c382de997acea3b8c50bb047711564f99da6765307eecf8a", @typed={0x8, 0x41, @ipv4=@multicast2}, @generic="742c1c31b47feb9e709e3c94913feefbcf85f3e02009e0007bdadb6dc9169db4fe2bb8fe44e851a4d8fd01017d93b67987d515df0aabeab6f3daa391618e85ce004da88823481fa77d92b3ba44b2da801a429e93b491cf532700f42aac6fbc1f6efefa29e1bcec6959ffd89c8a5c6036caa812c10325e992f3c51232140a99eebf45435255f359555e4056c8bd0665fd65cbca8aa2d27faa72801cdb9a7bea121bed0807e14fbb1aeec2d54cbb63f7834f87cbacf10924c134afb8292188ff923d6e9ff82669bb80e9543585c03a02388a431b5b79811d25b1"]}, 0x210}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000004c0)={0x4, r2, 0x1}) [ 485.608992] binder_alloc: binder_alloc_mmap_handler: 6612 20001000-20004000 already mapped failed -16 [ 485.703401] binder: BINDER_SET_CONTEXT_MGR already set [ 485.731587] binder: 6612:6613 ioctl 40046207 0 returned -16 [ 485.762192] binder_alloc_new_buf_locked: 2 callbacks suppressed [ 485.762200] binder_alloc: 6612: binder_alloc_buf, no vma [ 485.774020] binder: 6612:6631 transaction failed 29189/-3, size 0-0 line 2970 [ 485.807410] binder: undelivered TRANSACTION_ERROR: 29201 [ 485.814416] binder: undelivered TRANSACTION_ERROR: 29189 22:06:33 executing program 4: 22:06:33 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffc0, 0x2) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x8000) r2 = socket$inet6(0xa, 0x4, 0x400008000000002) ioctl(r2, 0x2, &(0x7f00000001c0)="940500000000b5c7e662c3024d12c2c0880000006440a8d5c812d5d968a3cacc4047518192e8df23dd80c03d72b874") init_module(&(0x7f0000000080)='\x00', 0x1, &(0x7f0000000140)='--#keyringGPLGPLuser\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x401, 0x0, 0x1aac80000, 0x3, 0x1, 0x79ccf790, 0xe0, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={r4, 0x0, 0x8000000000007}, 0x8) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r5, 0x4040ae72, &(0x7f0000000200)={0x1f, 0x7, 0x101, 0x5, 0x80000000}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000)=0x9, 0x4) 22:06:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x300, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f857150") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x1f4}}], 0x209, 0x0) 22:06:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="2a88f9ff35b70052eecadeebc6c1a112ebae134d17c9c5aa0cdee210873163b0cf429042838e2214ead1a5ab4a2e60711192a14ef67a0ffac83d698e99683819da40c23d006d53f5e4432b0258239595e9fa2db331d0b3f507802534bd", 0xfffffffffffffda5) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000b00)={0x0, 0x3}, &(0x7f0000000b40)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000b80)={r2, @in={{0x2, 0x4e24, @rand_addr=0x46}}}, &(0x7f0000000c40)=0x84) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x100) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000900)={0x0, 0xbd, "fcb4024b0b87acce5ae4f208a37b258fde1a86469ca87a825f1fd74c5078e46830109102b92bbf04e55b29b96d941c9815dcfc1e3508106030a153a8b80770f2d042bc949676ae9fb1aeae24ccd8a6a935384977e8a7121ebfd36571cdd895a3a6bdb5e6c01c4b97e1d245da5dc478812f3ce94220ae556a25cf588f0924840e8a976341cdbea96a79b4c0696abd898202ec03fa2e5c26c7d1bd1dc62934124a532cb2cd2e1507680216915ef0a2560e3d4d5d0e3c5515f798a4c8b0ae"}, &(0x7f00000004c0)=0xc5) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000300)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000400)="e60306a8b451bb0f897bfabb299c207fc0cf515b045fdb5ca1de6c33e2794e7755659c922d748c80487fe6f3b8bc4f2ff39620d98d2b47e4fffe3cb54b73337422210ac3e132482f030613ecabf166e0ac557f37ab131796d3559644dee2e3bb962ae8d0009cee9050a23b37f54cf9ee9c25e88d1cff3112e9f01466ef53396d494ef395615bff616d2b52e9b5d2da684e8a025632ce67550562b2ce12b4ecdf5eea629e", 0xa4}, {&(0x7f0000000600)="6df68e6d3c8d66fc3b767ea94b30dd05c80c28230c591aa6b2f45c683cfa9aa75f0fc38aa9f5773e04eaa8950cddd947c37a47f5cf636886d6d34d35b1f7d92aa26c96451ef0be45ad80332079c8b744ca4a89e49cdae332a1cf65ddedf11627ac52c6cd9211b812175a022659cf66bab7b9745445845efc1bcbf241eb2df57f4aed778fe6741431346966183ae94e906c10cfd04b92e5c2e01063a34f49fb162bd9226e9d35dbb42fb45e775790841c3481b946216f662c0e8b929704439fc8ed00ad52642359", 0xc7}, {&(0x7f0000000340)="fa82451fdcec631fb0299e49fcdc8f104e3b4f2b414d389817a047d3c1d49c3e0e968fc786be40efca2ed0e9", 0x2c}, {&(0x7f0000000380)="cdf35b2f7778b8c110d5e0a2049805c4", 0x10}, {&(0x7f00000007c0)="94ea957030e9055204817ef173225cfabbe9b8bd5d9265983f288253cd74e720d6dcc22dad2423a15e447a8bfbe3411cefb16a369b56337da03a35e87a6f4768e65b7e9862c71bbbe5f0256732da90ea59ca6180ebd94ae5194103f496a2209b2f68ce1606cb57e9ea52332188f6fb3d19b325bceeb860e76aeb44083b8bde225089bf6da71342", 0x87}], 0x5, &(0x7f0000000a00)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndinfo={0x20, 0x84, 0x2, {0x13, 0x8205, 0x646, 0x10001, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @authinfo={0x18, 0x84, 0x6, {0x49}}], 0x90, 0x8000}], 0x1, 0x8800) r5 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYRES16=r5], 0x220) recvmsg(r5, &(0x7f00000008c0)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000140)=""/151, 0x97}, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000c80)='syz0\x00') ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000000)={'gretap0\x00', {0x2, 0x4e22, @rand_addr=0xfffffffffffffffb}}) 22:06:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:33 executing program 4: r0 = socket$inet6(0xa, 0x800000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000100)=[{0x10, 0x29, 0xb}], 0x10}}], 0x1, 0x0) 22:06:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xff03000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 486.054240] binder: 6644:6645 transaction failed 29201/-22, size 0-0 line 2970 22:06:34 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x101, 0x5, 0x0, 0x5, 0x1, 0x8}, 0x2c) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x1, 0x1, 0x296, 0x9, r1}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0xfffffe98) recvmmsg(r2, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/209, 0xfffffcfe}, {&(0x7f0000000400)=""/134, 0x86}, {&(0x7f0000000100)=""/12, 0xc}, {&(0x7f0000000600)=""/147, 0x93}, {&(0x7f0000000900)=""/245, 0xf5}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x6, &(0x7f0000001a00)=""/254, 0xfe, 0x401}, 0x1}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001b00)=""/4096, 0x1000}], 0x1, &(0x7f0000000380), 0x0, 0x8}, 0x100000001}, {{&(0x7f0000002b00)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/82, 0x52}, {&(0x7f0000003c00)=""/241, 0xf1}], 0x3, &(0x7f0000003d00)=""/65, 0x41, 0x145}, 0x40}, {{&(0x7f0000003d80)=@l2, 0x80, &(0x7f0000004380)=[{&(0x7f0000000740)=""/36, 0x24}, {&(0x7f0000003e00)=""/136, 0x88}, {&(0x7f0000003ec0)=""/127, 0x7f}, {&(0x7f0000003f40)=""/144, 0x90}, {&(0x7f0000004880)=""/210, 0xd2}, {&(0x7f0000004100)=""/93, 0x5d}, {&(0x7f0000004780)=""/241, 0xf1}, {&(0x7f0000004280)=""/197, 0xc5}], 0x8, 0x0, 0x0, 0x3837}, 0x5}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004400)=""/91, 0x5b}, {&(0x7f0000004480)=""/202, 0xca}, {&(0x7f00000007c0)=""/29, 0x1d}], 0x3, 0x0, 0x0, 0x9b9}, 0x1}], 0x5, 0x2001, &(0x7f0000004700)) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000004000), 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00001ec000), 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000004740)=0x3) r4 = accept$alg(r2, 0x0, 0x0) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYRES16=r4], 0x220) recvmsg(r4, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='btrfs.um1\x00'], &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={0x0, 0xfffffffffffffff8}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000500)={r2}, &(0x7f0000000540)=0x8) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x800, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000640)=0x80000000) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) [ 486.137793] binder_alloc: binder_alloc_mmap_handler: 6644 20001000-20004000 already mapped failed -16 22:06:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x5107000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 486.204134] binder: BINDER_SET_CONTEXT_MGR already set [ 486.235420] binder: 6644:6645 ioctl 40046207 0 returned -16 [ 486.265993] binder_alloc: 6644: binder_alloc_buf, no vma [ 486.271603] binder: 6644:6678 transaction failed 29189/-3, size 0-0 line 2970 [ 486.310573] binder: BINDER_SET_CONTEXT_MGR already set 22:06:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0x101000, 0x4, 0xf, 0x1, 0x1, 0x5, 0x3, 0x5672b876, 0x5, 0x3, 0xdf, 0x100000000}, {0x0, 0x10d000, 0x1731b5b9fb7e7ecc, 0x7f, 0x20, 0xffffffffffffffff, 0x9, 0x80000000, 0x100000001, 0x101, 0x400, 0x3}, {0x100000, 0x0, 0x8, 0x7, 0x2, 0x7f, 0x8364, 0xffffffffffffffff, 0x2, 0x7, 0x2, 0xfff}, {0x100000, 0x107000, 0xf, 0x7, 0x26ec, 0x8, 0x31b0, 0x1, 0xda2, 0x447, 0x7, 0x7}, {0x5000, 0xf000, 0xf, 0x58, 0x8000, 0x3, 0x120000000000000, 0x3, 0x1, 0x1ff, 0x3, 0xc027}, {0x0, 0x107000, 0xb, 0x1, 0x9, 0x4, 0x7fff, 0x80000000000000, 0x46eb68d8, 0x7ff, 0x6, 0x8}, {0x107000, 0x10f004, 0x9, 0xfea, 0x1, 0x8, 0x9, 0x3, 0x1, 0x100000001, 0x2, 0xd3}, {0x1, 0xf000, 0xe, 0x200, 0x8, 0x1e97aecf, 0xffffffffffff0001, 0x200, 0x3, 0x2, 0x3, 0x6eb}, {0x3000, 0xd000}, {0x3000, 0x3004}, 0x2000001b, 0x0, 0x7004, 0x210050, 0x6, 0x800, 0x1000, [0x100000001, 0x7, 0x3, 0xb6cc]}) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 486.343123] binder: undelivered TRANSACTION_ERROR: 29201 [ 486.358492] binder: undelivered TRANSACTION_ERROR: 29189 [ 486.363963] binder: 6681:6682 ioctl 40046207 0 returned -16 [ 486.370006] binder_alloc: 6644: binder_alloc_buf, no vma [ 486.380083] binder_alloc: binder_alloc_mmap_handler: 6681 20001000-20004000 already mapped failed -16 22:06:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x6000000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 486.398363] Unknown ioctl 1094233732 [ 486.415860] binder_alloc: 6681: binder_alloc_buf, no vma [ 486.455516] Unknown ioctl 1094233732 [ 486.466445] binder: undelivered TRANSACTION_ERROR: 29189 [ 486.477241] binder: undelivered TRANSACTION_ERROR: 29189 [ 486.491718] binder_alloc: binder_alloc_mmap_handler: 6699 20001000-20004000 already mapped failed -16 22:06:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f51010000000000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 486.534977] binder: BINDER_SET_CONTEXT_MGR already set [ 486.546621] binder_alloc: 6699: binder_alloc_buf, no vma [ 486.583848] binder: 6699:6700 ioctl 40046207 0 returned -16 22:06:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100)={0x80000000, 0x0, 0xc63, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x7, 0x303080) bind$pptp(r1, &(0x7f0000000180)={0x18, 0x2, {0x3, @local}}, 0x1e) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0xaa1, 0x2, 0x7, 0x9, 0xdfa, 0x80, 0x7f, 0x4, 0x4, 0x7fe, 0x1}, 0xb) r3 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x220) recvmsg(r3, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) socket$inet6(0xa, 0x80a, 0x40) utimensat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x0, 0x2710}}, 0x100) 22:06:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x2000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'ip6_vti0\x00'}) sendmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)=[{0x18, 0x1, 0x1, "e304c9c0"}], 0x18}}], 0x1, 0x800) 22:06:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x1f9}}], 0x209, 0x0) 22:06:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f857150") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) setrlimit(0x7, &(0x7f0000000080)) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000000)) [ 486.802141] binder_alloc: binder_alloc_mmap_handler: 6732 20001000-20004000 already mapped failed -16 22:06:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 486.847431] binder: BINDER_SET_CONTEXT_MGR already set [ 486.886838] binder_alloc: 6732: binder_alloc_buf, no vma [ 486.895697] binder: 6732:6733 ioctl 40046207 0 returned -16 22:06:34 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000600)=0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x54, &(0x7f0000000640)=[@in6={0xa, 0x4e20, 0x100, @dev={0xfe, 0x80, [], 0x21}, 0x401}, @in6={0xa, 0x4e22, 0x4, @ipv4={[], [], @loopback}, 0x7}, @in6={0xa, 0x4e21, 0x3, @remote, 0x6}]}, &(0x7f0000000740)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000780)={r1, 0x40}, &(0x7f00000007c0)=0x8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f00000004c0)={0x2b, 0x3, 0x0, {0x4, 0xa, 0x0, '/dev/fuse\x00'}}, 0x2b) ioctl(r2, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r4, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:34 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x935, &(0x7f0000000000)) 22:06:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x60, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:35 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r0, &(0x7f0000000080), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000480), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000300), &(0x7f00000003c0)}, 0x20) [ 487.127532] binder_alloc: binder_alloc_mmap_handler: 6767 20001000-20004000 already mapped failed -16 22:06:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xff030000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 487.185633] binder: BINDER_SET_CONTEXT_MGR already set [ 487.226146] binder: 6767:6769 ioctl 40046207 0 returned -16 [ 487.270357] binder_alloc: 6767: binder_alloc_buf, no vma 22:06:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x7f00000100000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) signalfd(r0, &(0x7f0000000000)={0xbe}, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xf5ffffff00000000}}], 0x209, 0x0) 22:06:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e23, 0x2, @empty, 0x2}, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x6}], 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000400)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e23, 0x26, @ipv4={[], [], @remote}, 0x3}, @in={0x2, 0x4e22}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e24, 0x6, @local, 0xfffffffffffffbff}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23}, @in={0x2, 0x4e22}], 0x98) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x244000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000140)={0x1, {0x77359400}, 0x3, 0x1eea00000000}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000180)={0x0, 0x81, "142452ccfa460f950d7114def76213bc89d7148c822d26089865a75103b97337bb46811e54679e08ac4c19f5b1b3fc9da6f83823987e0a8bef4fe37d9f203ee19a4fbca91de3cd3fb0053c7d3e3970582791006bfcb5339c6d42c9b8e28ad6e6726038bd2a77089067d5601485cb3c32d58fe346e31b5fed21e0ecb4839529b421"}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)=0x0) waitid(0x0, r3, &(0x7f0000000300), 0x20000000, &(0x7f0000000340)) 22:06:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xffffff8d}}], 0x209, 0x0) [ 487.510951] binder_alloc: binder_alloc_mmap_handler: 6805 20001000-20004000 already mapped failed -16 22:06:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x400050000, 0x0) 22:06:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xfffff000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 487.556515] binder: BINDER_SET_CONTEXT_MGR already set [ 487.575053] binder: 6805:6812 ioctl 40046207 0 returned -16 [ 487.656144] binder_alloc: 6805: binder_alloc_buf, no vma 22:06:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc0000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x34) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000000)={0xf, 0x1, 0x5}) 22:06:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000600)=""/162, &(0x7f00000004c0)=0xa2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) chown(&(0x7f00000002c0)='./file0\x00', r4, r5) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 22:06:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x2000}}], 0x209, 0x0) 22:06:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) open$dir(&(0x7f0000000680)='./file0\x00', 0x127100, 0x2) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) socketpair(0x8, 0x4, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) write$P9_RLERRORu(r2, &(0x7f0000000800)={0x15, 0x7, 0x1, {{0x8, 'trusted*'}, 0x1}}, 0x15) socket$inet6_udplite(0xa, 0x2, 0x88) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x1, 0x1, 0x20, 0x8, 0x81, 0x6, 0x0, {0x0, @in={{0x2, 0x4e20, @rand_addr=0x1}}, 0x9, 0x401, 0x6, 0x0, 0xff}}, &(0x7f0000000600)=0xb0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000700)={r4, @in={{0x2, 0x4e20, @loopback}}, 0x373, 0x9b}, &(0x7f0000000640)=0x90) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000003c0)='/dev/nbd#\x00', 0x0, 0x10100) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000540)={0xfffffffffffffff7, 0x3}) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) [ 487.994733] binder_alloc: binder_alloc_mmap_handler: 6850 20001000-20004000 already mapped failed -16 22:06:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xfcffffff, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780), 0x0, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 488.040276] binder: BINDER_SET_CONTEXT_MGR already set 22:06:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 488.102413] binder: 6850:6853 ioctl 40046207 0 returned -16 [ 488.133807] binder_alloc: 6850: binder_alloc_buf, no vma 22:06:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x100007f, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) clock_getres(0x7, &(0x7f0000000000)) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000003c0)='/dev/nbd#\x00', 0x0, 0x10100) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000540)={0xfffffffffffffff7, 0x3}) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x40030000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 488.339010] binder: BINDER_SET_CONTEXT_MGR already set [ 488.344505] binder_alloc: 6897: binder_alloc_buf, no vma [ 488.371572] binder: 6897:6898 ioctl 40046207 0 returned -16 22:06:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)="4e89459a04acc5db939d8a2dcb09ee749614f30032d6772ee7d8fd43faf2688907e3cdd4ab2cdf61cfdc84548313aae686e4afc02ea2c396afd3d05321ebbe1f7cee06558fe3b429b727889164bc761d334e654ad6bd2ad23070bb8bad5579ba", 0x60, 0xffffffffffffffff) r3 = add_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0x0) r4 = request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000002c0)=',@*,\x00', 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000380)={r2, r3, r4}, &(0x7f0000000400)=""/241, 0xf1, &(0x7f0000000700)={&(0x7f0000000600)={'crc32c-intel\x00'}, &(0x7f0000000640)="179cb7934c2eb376012f70663343563c373bd667a73daa707bb814fb93884d981a9e68887096a5c80b83bcf373a9b90a61bf66252aeacd5059f0a69fd5e7d754685e8c499677347eaa5a7078ca1a17c0620efc8cb81c3244716b4a8723083d3b485bc3e144c9a39760fb04da217c1ffd58e1f9d609e486d9e5a5ab21eeb8f85d0f819b2c87f8cffd46bd5c583ef3d84fbd3ac00c2caad528f7facfb5c23510", 0x9f}) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000740)={0x0, 0x1000}, &(0x7f00000007c0)=0x8) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000940)='/dev/rtc0\x00', 0x200080, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r7, 0x5385, &(0x7f0000000a80)={0x7e, ""/126}) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000a40)={0x7fff, 0x3, 0xbd, &(0x7f0000000980)="6bbc9d0e92f0dcb467a334881dab2f86cb356e53737389e6fc615e47b77c0aca4fc141b3be8d974849d85d9fbb3fa432022e2835cbef2adee9dce242b806bf2afdadbdb88716db2b87772205c6f5d569330fc424b58594f306687824b479d7f35ef36f8a0bdcbe572e0d77bbd95861cd28078e1bf7fe264ac86f1cbff2dbe13dfb7b0e6b204c3889b1d5807fcf6cc1058f17edc50116646bd6104a9338061b2e779b563073e14a27a06581e41406941aaddc31c969e1ee11962db3718c"}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000900)={r6, 0xfffffffffffffffe}, 0x8) 22:06:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x200) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x69) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), 0x4) r3 = fcntl$getown(r0, 0x9) fcntl$setown(r2, 0x8, r3) 22:06:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xffffff7f00000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x700000000000000}}], 0x209, 0x0) 22:06:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000001940)=ANY=[@ANYRES16=r0, @ANYPTR=&(0x7f0000000900)=ANY=[@ANYRESHEX=r0, @ANYBLOB="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", @ANYPTR64, @ANYRESDEC=0x0, @ANYRES16], @ANYRES16=0x0, @ANYRES32, @ANYRESOCT=r1, @ANYBLOB="089b039a9082e6e9477995e6bdf0f0f4b7ef2965c52cd9e0dadcd56e287a5f8f969e543cc1985a37f93ba98d0a0c4ed4c6dbacff520b786ff11435e8ee0d0a2f9480e6c7a5cea5012941d65eda050fbecc97696c7da3c16245c8990e060c50df54183eb95d534e6967a6dd052a82b38ebfb4fc28d79e710f8a368c718559eaa54d08dd072644174333a33bfc4c3111ac6b9d4070a05bcaa0accd15433199a5049e35572becfb7064bdbfd5577c0a73a7a5555a0e841370b5c2745e84dbe0f2d9f040740bb27212eb7b4fa277ec739111e6877f527e6fd11e22af83", @ANYRESHEX, @ANYBLOB="638dad79817660b4ebc7ac3eb1dbd2b13718d3a1da4bb3dfab7238a5cb529bf8337440892c615f5547fa3affffd54d846190ae5c1cfe80095d7fbc6271b3f18a21f7f7dfb75c774ffcd5f3bac149242afba86b8bc3d188fbb6de9e2a07833a8b27d9b314b3e8f1d88c1f206fcefa13ab922d7e2540629c1df6c799e9ef6aca9de88232849fe7eaf7a53be42aa541f69d3115759861591ba94f39953fac5f88101dc73e012edac3268a52eea90a829dba10c6b7da1f87f39392", @ANYRES16=r0]], 0x8) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='\x00', 0xffffffffffffff9c}, 0x10) mkdirat(r1, &(0x7f0000000500)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r2, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x200000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000003c0)='/dev/nbd#\x00', 0x0, 0x10100) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000540)={0xfffffffffffffff7, 0x3}) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) [ 488.945499] binder: BINDER_SET_CONTEXT_MGR already set 22:06:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xeffdffff}}], 0x209, 0x0) 22:06:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:36 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000100)=0x80) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000140)=0x1f, 0x4) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x43660ccf, 0x200000) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xb) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80040, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000200)={0xffffffff00000000, 0x4}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000180)={@remote, @empty, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000680)={@multicast1, @loopback, 0x0}, &(0x7f00000006c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000b00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000b40)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000c40)=0xe8) recvmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000000c80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000d00)=""/205, 0xcd}, {&(0x7f0000000e00)=""/133, 0x85}, {&(0x7f0000000ec0)=""/107, 0x6b}], 0x3, &(0x7f0000000f80)=""/42, 0x2a, 0x20}, 0x21) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="b4030000", @ANYRES16=r2, @ANYBLOB="020327bd7000fedbdf250000000008000100", @ANYRES32=r3, @ANYBLOB="b400020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000200000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004001f00000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="e801020038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400010000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="ec00020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400ff00000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000000008038000300240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000100000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004006df0ffff08000600", @ANYRES32=r8], 0x3b4}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r9 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[@ANYRES16=r9], 0x220) recvmsg(r9, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 488.967224] binder: 6951:6954 ioctl 40046207 0 returned -16 22:06:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x4, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:06:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x101000, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f00000004c0), 0x4) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c77e5038e250cf2818dcad109c6d415726f6f746d6f64653d3030303030303030303030303030303030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) socket$rds(0x15, 0x5, 0x0) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r2, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 489.179701] binder: BINDER_SET_CONTEXT_MGR already set 22:06:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) sched_yield() setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 489.202461] binder: 6998:6999 ioctl 40046207 0 returned -16 22:06:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") lstat(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000540)=0x0, &(0x7f0000000600), &(0x7f0000000640)) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) r5 = geteuid() r6 = getgid() r7 = geteuid() getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getuid() stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b00)='./file0/../file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000d40)={0x490, 0xffffffffffffffff, 0x7, [{{0x6, 0x0, 0x2, 0xac9c, 0xc41, 0x3ff, {0x6, 0x9, 0x5, 0x2, 0x74200, 0x66b, 0x7, 0x7, 0x40, 0x3, 0x3, r1, r2}}, {0x6, 0x8, 0xe, 0x7, 'mime_typenodev'}}, {{0x0, 0x2, 0x7, 0x1ff, 0xff, 0xffff, {0x1, 0x3, 0x7fff, 0x5, 0x0, 0x434, 0xd0e, 0x6, 0xa36, 0x200, 0x7fff, r3, r4, 0x6, 0x7f}}, {0x6, 0x9, 0x4, 0x4, 'em1\x00'}}, {{0x2, 0x3, 0x2, 0x800, 0xc33, 0x7, {0x2, 0x1ff, 0x6, 0xc4, 0x480, 0x80, 0x2, 0x7, 0x0, 0x2, 0x4, r5, r6, 0x5, 0x977e}}, {0x1, 0x1, 0x1e, 0x5, 'loselinuxsystemppp0ppp1)cgroup'}}, {{0x1, 0x1, 0x40, 0x8, 0x0, 0xd629, {0x2, 0x8b, 0xfffffffffffff000, 0x9, 0x1ff, 0xfffffffffffffff7, 0x0, 0x2, 0x100000000, 0x4, 0x4, r7, r8, 0x7fff, 0x9}}, {0x1, 0x6a8918e9, 0x0, 0xfff}}, {{0x4, 0x3, 0x2, 0x80000000, 0xffffffff, 0xb7, {0x0, 0x0, 0x5, 0x4, 0xfffffffffffeffff, 0x1, 0x7, 0x652c, 0x200, 0x2, 0x2, r9, r10, 0x6, 0x7fff}}, {0x1, 0x3, 0xa, 0x3, '/dev/fuse\x00'}}, {{0x1, 0x3, 0x7, 0x7ff, 0x10000, 0x2, {0x1, 0x7, 0x8, 0x1ff, 0x5, 0x3ff, 0x18000000, 0x3ff, 0x5, 0xafc, 0x6, r11, r12, 0x3, 0x24}}, {0x2, 0x5497}}, {{0x5, 0x2, 0x4, 0x6, 0x0, 0x2, {0x0, 0xffff, 0x2, 0x1, 0x7, 0x2, 0xae7, 0x3, 0x4, 0x7, 0x100000001, r13, r14, 0x8}}, {0x0, 0x0, 0xa, 0x2, '/dev/fuse\x00'}}]}, 0x490) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r15 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r15}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r15, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r15, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000003c0)='/dev/nbd#\x00', 0x0, 0x10100) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000540)={0xfffffffffffffff7, 0x3}) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:37 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x4, 0x101000) r1 = socket$can_raw(0x1d, 0x3, 0x1) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x80000000}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00001ec000), 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x220) recvmsg(r3, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 489.399041] binder_transaction: 18 callbacks suppressed [ 489.399068] binder: 7013:7014 transaction failed 29201/-22, size 0-0 line 2970 22:06:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x751}], 0x492492492492805, 0x0) [ 489.486048] binder: BINDER_SET_CONTEXT_MGR already set [ 489.486087] binder: 7013:7023 transaction failed 29189/-3, size 0-0 line 2970 [ 489.521584] binder: 7013:7014 ioctl 40046207 0 returned -16 22:06:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) close(r0) 22:06:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 489.682538] binder: 7048:7050 transaction failed 29201/-22, size 0-0 line 2970 22:06:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xe8030000}}], 0x209, 0x0) 22:06:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc0}], 0x492492492492805, 0x0) [ 489.727484] binder_alloc_mmap_handler: 4 callbacks suppressed [ 489.727500] binder_alloc: binder_alloc_mmap_handler: 7048 20001000-20004000 already mapped failed -16 [ 489.794124] binder: BINDER_SET_CONTEXT_MGR already set [ 489.818108] binder: 7048:7050 ioctl 40046207 0 returned -16 [ 489.832226] binder: 7048:7063 transaction failed 29189/-3, size 0-0 line 2970 22:06:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x100) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfe11) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) 22:06:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0xfffffd1e) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000080)=0x1c, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in6}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000003c0)='/dev/nbd#\x00', 0x0, 0x10100) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x2}], 0x492492492492805, 0x0) [ 489.880436] binder_release_work: 18 callbacks suppressed [ 489.880443] binder: undelivered TRANSACTION_ERROR: 29201 [ 489.892804] binder: undelivered TRANSACTION_ERROR: 29189 22:06:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x2000009) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) getsockname(r1, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x81, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x81}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0x80, 0x2, 0x800, 0x0, 0x2000000000000000, 0xcb44, 0x6}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000240)=0x84) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f0000000180)={r4, 0x2000007ff, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) socketpair(0x9, 0x80001, 0x6, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000440)) [ 490.016257] binder: 7076:7077 transaction failed 29201/-22, size 0-0 line 2970 [ 490.078244] binder_alloc: binder_alloc_mmap_handler: 7076 20001000-20004000 already mapped failed -16 [ 490.114092] binder: BINDER_SET_CONTEXT_MGR already set [ 490.114148] binder: 7076:7084 transaction failed 29189/-3, size 0-0 line 2970 [ 490.131153] binder: 7076:7077 ioctl 40046207 0 returned -16 [ 490.161170] binder: undelivered TRANSACTION_ERROR: 29201 [ 490.173791] binder: undelivered TRANSACTION_ERROR: 29189 22:06:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c3070303030308c55a6fb9cdf8ef43030117541d527a3947c152319385c9ed772414968662cf681efdee71e9d90650133a37690b038b4ae768684962e5bce2163306f4f18db23c91c27e0c919a329ba4f64f991c6ee42", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x60000000}}], 0x209, 0x0) 22:06:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xfcffffff00000000}], 0x492492492492805, 0x0) [ 490.302098] binder: 7100:7101 transaction failed 29201/-22, size 0-0 line 2970 [ 490.330489] binder_alloc: binder_alloc_mmap_handler: 7100 20001000-20004000 already mapped failed -16 [ 490.376435] binder: BINDER_SET_CONTEXT_MGR already set 22:06:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030c73d00000000000030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) [ 490.398420] binder: 7100:7101 ioctl 40046207 0 returned -16 22:06:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x300000000000000}], 0x492492492492805, 0x0) [ 490.447559] binder: 7100:7118 transaction failed 29189/-3, size 0-0 line 2970 [ 490.484321] binder: undelivered TRANSACTION_ERROR: 29201 [ 490.491921] binder: undelivered TRANSACTION_ERROR: 29189 22:06:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="62a551284c34e467ee60"], &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 490.674934] binder: 7136:7138 transaction failed 29201/-22, size 0-0 line 2970 [ 490.732750] binder_alloc: binder_alloc_mmap_handler: 7136 20001000-20004000 already mapped failed -16 [ 490.761108] binder: BINDER_SET_CONTEXT_MGR already set 22:06:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x80) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000080)=0x1) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x6000}], 0x492492492492805, 0x0) 22:06:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 490.794453] binder: 7136:7138 ioctl 40046207 0 returned -16 [ 490.808079] binder_alloc_new_buf_locked: 6 callbacks suppressed [ 490.808086] binder_alloc: 7136: binder_alloc_buf, no vma [ 490.819866] binder: 7136:7146 transaction failed 29189/-3, size 0-0 line 2970 22:06:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xe03f030000000000}], 0x492492492492805, 0x0) 22:06:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") chroot(&(0x7f0000000040)='./file0\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280)=0x4, 0xfffffffffffffdce) 22:06:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x8020000}}], 0x209, 0x0) [ 490.845550] binder: undelivered TRANSACTION_ERROR: 29201 [ 490.877373] binder: undelivered TRANSACTION_ERROR: 29189 22:06:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis256-generic)\x00'}, 0x58) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x222000, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x0, 0xfffffffffffffffe, 0xde, 0x1000, @buffer={0x0, 0x28, &(0x7f0000000080)=""/40}, &(0x7f00000000c0)="02e52320b7d5ee2a96259221f95c8e18662eaba807cabad56b86f9f07883fedb7c1ea1d0b1c14c156082fe33a2c14ef3e2c08230d110bf03b5901d5bde13206a962026e09091bf67318a34d930ca96103e4aa495cedecf528f6329e15c5b036b541d0e3a24ae3a2df02ad416984c2037dc0d4f40a24f26aa16c60bb9f97494d6092009d79331f085808eb51e6bc6b671bc7a05cd546013cddd0ff52a0f26845d16a457b8f4c89fd28ec3bc3bae8b0830ef9bca36cfac40cb376f36b030a085dfcc6ce46d161be062591a9e2a508c9501a83b7a73251f3c7b8b0fed25d091", &(0x7f00000001c0)=""/124, 0x65b59a8, 0x20, 0x0, &(0x7f00000002c0)}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) setitimer(0x1, &(0x7f0000000380)={{0x0, 0x7530}, {0x77359400}}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x220) socket$can_bcm(0x1d, 0x2, 0x2) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) write$P9_RLERROR(r1, &(0x7f00000004c0)={0x15, 0x7, 0x2, {0xc, '/dev/autofs\x00'}}, 0x15) accept4$vsock_stream(r2, &(0x7f0000000480)={0x28, 0x0, 0x2711, @reserved}, 0x10, 0x80000) 22:06:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xff030000}], 0x492492492492805, 0x0) [ 491.034666] binder_alloc: binder_alloc_mmap_handler: 7180 20001000-20004000 already mapped failed -16 22:06:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 491.080398] binder: BINDER_SET_CONTEXT_MGR already set [ 491.085849] binder_alloc: 7180: binder_alloc_buf, no vma [ 491.095383] binder: undelivered TRANSACTION_ERROR: 29201 [ 491.107379] binder: undelivered TRANSACTION_ERROR: 29189 [ 491.115462] binder: 7180:7181 ioctl 40046207 0 returned -16 22:06:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xe03f0300}], 0x492492492492805, 0x0) 22:06:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00'}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x220) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 491.270107] binder_alloc: binder_alloc_mmap_handler: 7209 20001000-20004000 already mapped failed -16 [ 491.325918] binder: BINDER_SET_CONTEXT_MGR already set [ 491.343272] binder: 7209:7210 ioctl 40046207 0 returned -16 [ 491.360016] binder_alloc: 7209: binder_alloc_buf, no vma 22:06:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)=0x0) ioprio_set$pid(0x1, r2, 0x100000000) 22:06:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x5107}], 0x492492492492805, 0x0) 22:06:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/108, 0x6c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='systemprocvmnet1cgroup\x00'}, 0x10) write$P9_RMKDIR(r2, &(0x7f0000000200)={0x14, 0x49, 0x1, {0x2, 0x7}}, 0x14) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 491.540445] binder_alloc: binder_alloc_mmap_handler: 7228 20001000-20004000 already mapped failed -16 [ 491.611546] binder: BINDER_SET_CONTEXT_MGR already set [ 491.617541] binder_alloc: 7228: binder_alloc_buf, no vma 22:06:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x4, 0x20, 0x8ec, 0x100000001}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r1, 0x4, 0x2, [0x100000001, 0x80000001]}, &(0x7f0000000180)=0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x1f, 0xfffffffffffffff7, 0x100]}, 0xa) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x7}}], 0x209, 0x0) 22:06:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf0ffffff00000000}], 0x492492492492805, 0x0) 22:06:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffff, 0x480) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 491.652789] binder: 7228:7229 ioctl 40046207 0 returned -16 22:06:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x2000000}], 0x492492492492805, 0x0) 22:06:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 491.802807] binder_alloc: binder_alloc_mmap_handler: 7271 20001000-20004000 already mapped failed -16 [ 491.812811] binder: BINDER_SET_CONTEXT_MGR already set [ 491.819152] binder: 7271:7272 ioctl 40046207 0 returned -16 [ 491.841582] binder_alloc: 7271: binder_alloc_buf, no vma 22:06:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x1000000}], 0x492492492492805, 0x0) [ 492.061674] binder_alloc: binder_alloc_mmap_handler: 7296 20001000-20004000 already mapped failed -16 [ 492.134414] binder: BINDER_SET_CONTEXT_MGR already set [ 492.134433] binder_alloc: 7296: binder_alloc_buf, no vma [ 492.181331] binder: 7296:7297 ioctl 40046207 0 returned -16 22:06:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x40000}], 0x492492492492805, 0x0) 22:06:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16], 0x220) recvmsg(r0, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780), 0x0, &(0x7f0000000800)=""/151, 0x97}, 0x200000000000000) 22:06:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) socketpair$inet(0x2, 0x2, 0x6, &(0x7f00000003c0)) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x2000000000000000}}], 0x209, 0x0) 22:06:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:40 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 492.501699] binder_alloc: binder_alloc_mmap_handler: 7319 20001000-20004000 already mapped failed -16 22:06:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x34000}], 0x492492492492805, 0x0) [ 492.569426] binder: BINDER_SET_CONTEXT_MGR already set [ 492.595106] binder: 7319:7320 ioctl 40046207 0 returned -16 22:06:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sync_file_range(r0, 0x9, 0x3, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00001ec000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x220) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 492.630436] binder_alloc: 7319: binder_alloc_buf, no vma 22:06:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xffffff9e}], 0x492492492492805, 0x0) 22:06:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1a, 0x40) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000140)=0x4) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) socket$alg(0x26, 0x5, 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x220) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 492.867888] binder: BINDER_SET_CONTEXT_MGR already set 22:06:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xfffff000}], 0x492492492492805, 0x0) [ 492.896849] binder_alloc: 7359: binder_alloc_buf, no vma [ 492.930463] binder: 7359:7360 ioctl 40046207 0 returned -16 22:06:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2(&(0x7f00000004c0), 0x4000) r1 = fcntl$dupfd(r0, 0x406, r0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r2, &(0x7f0000002000), 0x1000) personality(0x440000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000500), &(0x7f0000000540)=0x4) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000003c0)=0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xffffff7f}], 0x492492492492805, 0x0) 22:06:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 493.180163] binder: BINDER_SET_CONTEXT_MGR already set [ 493.213415] binder_alloc: 7389: binder_alloc_buf, no vma [ 493.255794] binder: 7389:7390 ioctl 40046207 0 returned -16 22:06:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e23}, @in6={0xa, 0x4e24, 0x3b0, @local}, @in6={0xa, 0x4e21, 0x1, @local, 0x9}, @in6={0xa, 0x4e22, 0x1f, @local, 0x6fa}, @in6={0xa, 0x4e23, 0x1, @empty, 0x6}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @multicast2}], 0xb0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) setsockopt$inet6_int(r1, 0x29, 0x5b, &(0x7f0000000000)=0x4, 0x4) 22:06:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x45, "9aa11a031d265ada4c249e994515d998082ab59bf7a956fd283226352cd7dcddca5de4a01891c49507c8491286c3af27ca03f9eaf94ffd4c23c0b6be435103b86d668c39c5"}, &(0x7f0000000000)=0x4d) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23}}, 0x5, 0x5}, &(0x7f0000000080)=0x90) 22:06:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000040002, 0x9) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x8dffffff00000000}}], 0x209, 0x0) 22:06:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf0}], 0x492492492492805, 0x0) 22:06:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x3}], 0x492492492492805, 0x0) [ 493.544233] binder: BINDER_SET_CONTEXT_MGR already set [ 493.544258] binder_alloc: 7415: binder_alloc_buf, no vma [ 493.569648] binder: 7415:7417 ioctl 40046207 0 returned -16 22:06:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x9, @mcast1}, r3}}, 0x30) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c800}, 0x1) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x100) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = shmget(0x2, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) socket$inet6(0xa, 0x80005, 0x4) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000400)=""/221) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000600)={{0x8, 0x0, 0x9, 0x10001, '\x00', 0x100}, 0x5, 0x30, 0x4, r2, 0x6, 0x0, 'syz0\x00', &(0x7f00000001c0)=[']GPL-%eth1ð0\x00', 'aead\x00', ']GPL-%eth1ð0\x00', "637075736574065c00", '\x00', 'syz0\x00'], 0x34, [], [0x2, 0x2, 0x7ff, 0x2]}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r3 = accept$alg(r0, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x181000, 0x10) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x220) recvmsg(r3, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES16=r5], &(0x7f0000000380)=0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x9}, &(0x7f0000000180)=0x8) [ 493.747857] binder: BINDER_SET_CONTEXT_MGR already set [ 493.772567] binder: 7447:7450 ioctl 40046207 0 returned -16 22:06:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) getitimer(0x3, &(0x7f00000002c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000480)=@sco, 0x80, &(0x7f0000001980)=[{&(0x7f0000000380)=""/55, 0x37}, {&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000700)=""/101, 0x65}, {&(0x7f0000001900)=""/85, 0x55}], 0x5, &(0x7f0000001a00)=""/4096, 0x1000, 0x7}, 0x40) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x253, 0xffffffffffffffff, 0xc1, 0x89, @buffer={0x0, 0x5e, &(0x7f0000000140)=""/94}, &(0x7f00000001c0)="633f9f03c6c96541cf9affdc0f5ec881c188c11edc83bc8b724da3c10ae7526f5bfc738d293226399c2e324665a0410e54003981e2bb22288ec31930e7c507505013c30068896c3f370461fba29ccb5b8f0129f406e8cef3823b1effe449860571c12be28df66426225a64ff67b19730f6db1959a20ba976e5326da72013722c875549986e04401f5be2690875526127b697ba0cd050542d59a4bf76d751dc7a4257c049f83e62754e65ad3eb2246dff6e0799c320c9d1f85f60525e6b6221e710", &(0x7f0000000000)=""/1, 0xc9, 0x1, 0x3, &(0x7f0000000080)}) 22:06:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 493.908564] binder: BINDER_SET_CONTEXT_MGR already set [ 493.915851] binder: 7468:7469 ioctl 40046207 0 returned -16 22:06:41 executing program 7: r0 = socket$inet(0x2, 0x7, 0x0) ioctl(r0, 0x6, &(0x7f0000000100)="6afd0095788eef4c8a9ba77a54db387022c24c2d7b0d99d9bc6a7969cfd55409e06e1d599e072c044fa76069812c7debcdd9d812a079a41ad5dba3f558af997133cfb1f43c31e65e7d6a34ad13991cfd4bf58f988a56598ad09a8effe7054f0b40e6739c8a80e085419f868f884f3a47e535449e7efce5ec14d36ac9102469d75bc45eb8fad86956932ef8ee18854037549faf7330764e6aa3696635c66aa2761f44afedfd2fdc1d3674abdba32650cab8899d596d0e085bd53bca2a041770840a9f47574b6d85") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 494.036076] binder: BINDER_SET_CONTEXT_MGR already set 22:06:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x1d6) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf0ffffffffffff}], 0x492492492492805, 0x0) [ 494.061570] binder: 7475:7476 ioctl 40046207 0 returned -16 22:06:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc00e0000}], 0x492492492492805, 0x0) 22:06:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e08, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = dup(r0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x220) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xf4010000}}], 0x209, 0x0) 22:06:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/../file0/file0\x00', 0x1000000000800, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r2, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) r3 = dup3(r1, r2, 0x80000) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:42 executing program 7: r0 = socket$inet(0x2, 0x7, 0x0) ioctl(r0, 0x6, &(0x7f0000000100)="6afd0095788eef4c8a9ba77a54db387022c24c2d7b0d99d9bc6a7969cfd55409e06e1d599e072c044fa76069812c7debcdd9d812a079a41ad5dba3f558af997133cfb1f43c31e65e7d6a34ad13991cfd4bf58f988a56598ad09a8effe7054f0b40e6739c8a80e085419f868f884f3a47e535449e7efce5ec14d36ac9102469d75bc45eb8fad86956932ef8ee18854037549faf7330764e6aa3696635c66aa2761f44afedfd2fdc1d3674abdba32650cab8899d596d0e085bd53bca2a041770840a9f47574b6d85") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 494.424878] binder_transaction: 24 callbacks suppressed [ 494.424923] binder: 7504:7507 transaction failed 29201/-22, size 0-0 line 2970 22:06:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000001c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[{0x2, 0x6}], 0x1) connect$packet(r1, &(0x7f0000000240)={0x11, 0x1f, r2, 0x1, 0xd9a2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x1000, @remote, 0x1}, @in6={0xa, 0x4e21, 0x4, @remote}, @in6={0xa, 0x4e24, 0x1, @empty, 0x400}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e20, @rand_addr=0x535}], 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974792e1c00000065637572696479776c61010000007369785f61636c5f616363657373637075736574757365722f00"], &(0x7f0000000180)='wlan1em1nodev\x00', 0xe, 0x3) 22:06:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf000}], 0x492492492492805, 0x0) 22:06:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x44}, 0x0) 22:06:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x12) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='Kd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) [ 494.497093] binder: BINDER_SET_CONTEXT_MGR already set [ 494.504418] binder: 7504:7524 transaction failed 29189/-3, size 0-0 line 2970 [ 494.534965] binder: 7504:7507 ioctl 40046207 0 returned -16 22:06:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x4}], 0x492492492492805, 0x0) 22:06:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = semget(0x3, 0x3, 0x420) semctl$GETNCNT(r2, 0x3, 0xe, &(0x7f0000000180)=""/7) socket$bt_bnep(0x1f, 0x3, 0x4) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7ff, 0x2000) accept$alg(r3, 0x0, 0x0) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000080)=""/36) write$cgroup_type(r3, &(0x7f0000000140)='threaded\x00', 0x9) 22:06:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c616c6c954db6888fa67ebe7c2ff324f5be132601040000746865722c00"]) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x4000, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000440)={0x1, 'veth0_to_bridge\x00', 0x3}, 0x18) bind$pptp(r3, &(0x7f0000000400)={0x18, 0x2, {0x2, @remote}}, 0x1e) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) [ 494.748270] binder: 7549:7552 transaction failed 29201/-22, size 0-0 line 2970 [ 494.800135] binder_alloc_mmap_handler: 7 callbacks suppressed [ 494.800153] binder_alloc: binder_alloc_mmap_handler: 7549 20001000-20004000 already mapped failed -16 22:06:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x8000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0/../file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cuse\x00', 0x90200, 0x0) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f00000004c0)) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @rand_addr}, &(0x7f0000000600)=0xc) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000500)={{0x8, @remote, 0x4e20, 0x4, 'dh\x00', 0x11, 0xffff, 0x5f}, {@empty, 0x4e22, 0x0, 0x20, 0x7, 0x9}}, 0x44) [ 494.906811] binder: BINDER_SET_CONTEXT_MGR already set [ 494.912862] binder_release_work: 24 callbacks suppressed [ 494.912869] binder: undelivered TRANSACTION_ERROR: 29201 22:06:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0xfe52) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:42 executing program 7 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 494.957516] binder: 7549:7552 ioctl 40046207 0 returned -16 22:06:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x7000000}}], 0x209, 0x0) 22:06:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 495.146588] binder: 7583:7585 transaction failed 29201/-22, size 0-0 line 2970 [ 495.194277] binder_alloc: binder_alloc_mmap_handler: 7583 20001000-20004000 already mapped failed -16 [ 495.239340] binder: BINDER_SET_CONTEXT_MGR already set [ 495.254325] binder: 7583:7596 transaction failed 29189/-3, size 0-0 line 2970 22:06:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="b9372cc91425ec638033dfdafe199e1aebe80031ea91f3c8fb62ce49b3f9131f938a4e697e34b5008e12083b09d85fed4f8e16f7dca41e2c94d68822f9ee20eae3c5", 0x42) r1 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x2b03, 0x40000) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000280)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0xc0c00, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0x7fffffff}, 0xf) r3 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x1b1, 0x8, 0xff, 0x1442, 0x4, 0x3, 0x8, {0x0, @in6={{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x8001}, 0x1}}, 0x8, 0x1ff, 0x3, 0x200, 0x8}}, &(0x7f00000004c0)=0xb0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000600)={r4, @in={{0x2, 0x4e22, @local}}, 0x9, 0x101, 0x1, 0x0, 0x80}, &(0x7f00000006c0)=0x98) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x220) getgroups(0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0x0, 0x0]) connect$rds(r2, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10) setfsgid(r5) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) syz_open_pts(r1, 0x195081) recvmsg(r3, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x60000000}], 0x492492492492805, 0x0) 22:06:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10280, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000200)={0x8, 0x7, 0x24a4, 0x7b8e, 'syz1\x00', 0x4}) mkdirat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) r3 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$addseals(r3, 0x409, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1f000000ed2f2e086f8eea38338a0607767c73ea67f744206d13b490eca99f2ee03c56534756b79622c254ffb0e0c4ca0dce2b8031ae445090b6ddee3d157b4556d72ba7be10c6806438bb5e9bfa0000cda7aea4d70a378240ae00000000000000000000000000"], &(0x7f0000000140)=0x27) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r4, 0x7}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0xffffffffffffffd9) [ 495.287974] binder: 7583:7585 ioctl 40046207 0 returned -16 [ 495.299956] binder: undelivered TRANSACTION_ERROR: 29201 [ 495.314261] binder: undelivered TRANSACTION_ERROR: 29189 22:06:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x300}], 0x492492492492805, 0x0) 22:06:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x14) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 495.449004] binder: 7613:7614 transaction failed 29201/-22, size 0-0 line 2970 [ 495.481108] binder_alloc: binder_alloc_mmap_handler: 7613 20001000-20004000 already mapped failed -16 22:06:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xec0}], 0x492492492492805, 0x0) 22:06:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'trusted.', 'mime_type#$-selfwlan0,\\vboxnet1\x00'}, &(0x7f0000000140)='wlan1selfwlan0(,$}trusted\x00', 0x1a, 0x1) r1 = accept$alg(r0, 0x0, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) [ 495.524397] binder: BINDER_SET_CONTEXT_MGR already set [ 495.537262] binder: 7613:7614 ioctl 40046207 0 returned -16 22:06:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x6000}}], 0x209, 0x0) [ 495.617252] binder: 7613:7632 transaction failed 29189/-3, size 0-0 line 2970 [ 495.648573] binder: undelivered TRANSACTION_ERROR: 29201 [ 495.655414] binder: undelivered TRANSACTION_ERROR: 29189 22:06:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00fb"]) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000003c0)=@random={'btrfs.', '/dev/fuse\x00'}, &(0x7f00000002c0)=""/36, 0x15) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x60}], 0x492492492492805, 0x0) 22:06:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16], 0x220) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x42, 0x0) 22:06:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82e, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x33fe0}], 0x492492492492805, 0x0) 22:06:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) delete_module(&(0x7f00000004c0)='\x00', 0x200) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x1, 0x3, {0xa, 0x4e21, 0xfffffffffffffffd, @ipv4={[], [], @multicast2}, 0x8717}}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="a73f6b7472523c381c0ce8b30bd9c9f1e1cf9abe7da4a7e8439f6c911d948ffa8585bff189b4336111a737869c3e2eda3649827c1659da12b2109adc1708b5f6b5805f62ca7b53f724e54b77b1ae8fe3918c8ed7aa87c6dce0990286aff269ab32b61d9ebd8adee8064252f8796dabb695a5fd831ca50a132b01b909d8304c212f8ed515c45c7417c09f5326edf616da07c70e82df1ece53200728be5127e8ec662f858d45c3ad75327cb1acc4bc886270399758c287a96dd924fcb8f34183d74ef48d4810e7ca8f73d99c1e4e710ed38bb0acfc153f8d3c0b8884c531ea76600456d9fad65845f893", 0xe9}, {&(0x7f0000000000)="fa36bf24f674b0bc36e5d2f4be684c86aa04cf", 0x13}, {&(0x7f0000000400)="e18987b724d553e4b4a1a8244dd0742515e8ed0a86c4f55b9aeea5d6818aaea2f7d2add3b6847869a2dc46839f04fcf850d8e968600d0f4fddb889388279b38f4de5d34c1b60b5e1f8c67c081a1360664a32170e98424d7bfd48ee17281a8b7bd87098bbfaef29be9b7ab458e5920821e57621680b4604291bc5abd6eba2ed96fe9915c4d0", 0x85}, {&(0x7f0000000600)="c668427e7c80829b2c836f66b81b757cf6d078d5a5c6005a36c4ba6065620ecaac18f1f68f3bec858fc31f9c2cb6376c782fda7e79ba0efce368accd071d41a63d365cfc4abdc801be07addb4375ce8a7650b952151a44a9406515d6d3c528233efb7537f12dc77637d20bde4fec9fc7f74fc8cfe9cfec70f6c44b5d3eb391e04fca2a9b796207ee5b", 0x89}], 0x4, 0x0, 0x0, 0x20004040}, 0x4008880) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x220) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0x10}, {&(0x7f00000003c0)=""/50, 0x32}], 0x2, &(0x7f0000000800)=""/151, 0x97}, 0x0) socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000380)={0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x23fb, 0x100000000, 0x2, 0xbc, 0x80, 0x0, 0x3e, 0x5, 0x22c, 0x38, 0x10f, 0x8, 0x7f, 0x20, 0x2, 0x2, 0x0, 0x5be964fc}, [{0x7, 0x81, 0x800, 0xfffffffffffffbff, 0x6, 0x6, 0xffffffff, 0x100000000}], "bb81d3f8e766c592896530eaac2754d23ff065d47b0ae9304cddc2a09fe9e64a15a3df400b311eb1087498b5f1947c44452433891815b3dc66589824139a14fa74017493a5584ee1305ba320c65dfeb973c6e38ebae5de3d4f23cd1bee081ff2d9ffb3c9233e2cbc3b596e2a6c2b9c1c83cc0a", [[], [], []]}, 0x3cb) [ 495.891887] binder: 7653:7654 transaction failed 29201/-22, size 0-0 line 2970 [ 495.919723] binder_alloc: binder_alloc_mmap_handler: 7653 20001000-20004000 already mapped failed -16 [ 495.966248] binder: BINDER_SET_CONTEXT_MGR already set [ 495.994186] binder: 7653:7654 ioctl 40046207 0 returned -16 [ 495.994380] binder_alloc_new_buf_locked: 6 callbacks suppressed [ 495.994387] binder_alloc: 7653: binder_alloc_buf, no vma [ 496.011730] binder: 7653:7669 transaction failed 29189/-3, size 0-0 line 2970 [ 496.046161] binder: undelivered TRANSACTION_ERROR: 29201 [ 496.140803] binder: undelivered TRANSACTION_ERROR: 29189 22:06:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = accept(r1, &(0x7f00000003c0)=@pppol2tpv3in6, &(0x7f0000000380)=0x80) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r3 = accept(r0, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x80) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={0x0, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000440)={r4, 0x7}, &(0x7f0000000480)=0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="dc4542c948ac1171c5c03253f21bcf67e35071e3ca4d83bcbbd2b3719dfd24512a36fc75c723ae6687afade235140e56ec57ba5d3ce27bf3cec6a8eb62956733", @ANYRES16=r5, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x5) r6 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYRES16=r6], 0x220) recvmsg(r6, &(0x7f00000008c0)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780), 0x0, &(0x7f0000000800)=""/151, 0x97}, 0x0) 22:06:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f0000000000)={0x0, 0x100000, 0x7}, 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40200, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xfffffdef}], 0x492492492492805, 0x0) 22:06:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x2}}], 0x209, 0x0) 22:06:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x8000000000000000}], 0x492492492492805, 0x0) [ 496.269388] binder: 7694:7696 transaction failed 29201/-22, size 0-0 line 2970 22:06:44 executing program 0: r0 = gettid() r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x400900) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x3, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e23, 0x9, @remote, 0x53f}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) exit(0x0) setpriority(0x1, r0, 0x0) [ 496.321055] binder_alloc: binder_alloc_mmap_handler: 7694 20001000-20004000 already mapped failed -16 22:06:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 496.383451] binder: BINDER_SET_CONTEXT_MGR already set [ 496.389253] binder_alloc: 7694: binder_alloc_buf, no vma [ 496.411396] binder: 7694:7696 ioctl 40046207 0 returned -16 [ 496.415348] binder: undelivered TRANSACTION_ERROR: 29201 [ 496.431144] binder: undelivered TRANSACTION_ERROR: 29189 22:06:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000500)=0x0) kcmp(r2, r3, 0xec684f9def5ad011, r0, r1) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540)='/dev/nullb0\x00', 0x10200, 0x0) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f0000000600)={0x5, 0x6, 0x1}) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x4000000000000}], 0x492492492492805, 0x0) 22:06:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xffffffff00000000}}], 0x209, 0x0) 22:06:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x400) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 496.806532] binder_alloc: binder_alloc_mmap_handler: 7733 20001000-20004000 already mapped failed -16 22:06:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x1c}], 0x492492492492805, 0x0) [ 496.853578] binder: BINDER_SET_CONTEXT_MGR already set 22:06:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 496.884858] binder: 7733:7735 ioctl 40046207 0 returned -16 [ 496.911577] binder_alloc: 7733: binder_alloc_buf, no vma 22:06:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf00000000000000}], 0x492492492492805, 0x0) 22:06:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 496.939561] binder: undelivered TRANSACTION_ERROR: 29189 22:06:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc00e000000000000}], 0x492492492492805, 0x0) [ 497.102720] binder_alloc: binder_alloc_mmap_handler: 7771 20001000-20004000 already mapped failed -16 22:06:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 497.153850] binder: BINDER_SET_CONTEXT_MGR already set [ 497.153857] binder_alloc: 7771: binder_alloc_buf, no vma [ 497.210089] binder: 7771:7772 ioctl 40046207 0 returned -16 22:06:45 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmodL=0000000000000\x00\b\x00\x00\x00\x00\x00\x0000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) utime(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0xfffffffffffffffd}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r0, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 22:06:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc000000}], 0x492492492492805, 0x0) 22:06:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x3a00}}], 0x209, 0x0) 22:06:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:45 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$UI_DEV_CREATE(r0, 0x5501) 22:06:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000000bc0), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc00}], 0x492492492492805, 0x0) 22:06:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x4, 0x4, 0x6, 0x7d2, 0x6, 0x800, 0x36400, 0x0}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e20, 0x0, @mcast2, 0x2}}}, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 497.622679] [ 497.624390] ================================================ [ 497.630162] WARNING: lock held when returning to user space! [ 497.635935] 4.18.0+ #196 Not tainted [ 497.639628] ------------------------------------------------ [ 497.645401] syz-executor3/7753 is leaving the kernel with locks still held! [ 497.652479] 1 lock held by syz-executor3/7753: [ 497.657066] #0: 00000000f607379a (&fi->mutex){+.+.}, at: fuse_lock_inode+0xaf/0xe0 22:06:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc00e}], 0x492492492492805, 0x0) [ 497.709808] dccp_invalid_packet: P.Data Offset(66) too large [ 497.716370] binder_alloc: binder_alloc_mmap_handler: 7806 20001000-20004000 already mapped failed -16 [ 497.741117] dccp_invalid_packet: P.Data Offset(66) too large 22:06:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 497.766909] binder: BINDER_SET_CONTEXT_MGR already set 22:06:45 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 497.793960] binder: 7806:7808 ioctl 40046207 0 returned -16 [ 497.820503] binder_alloc: 7806: binder_alloc_buf, no vma 22:06:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xfffffff0}], 0x492492492492805, 0x0) 22:06:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 497.872346] dccp_invalid_packet: P.Data Offset(66) too large 22:06:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x60}}], 0x209, 0x0) 22:06:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xffffffff00000000}], 0x492492492492805, 0x0) 22:06:45 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$UI_DEV_CREATE(r0, 0x5501) 22:06:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 498.008426] dccp_invalid_packet: P.Data Offset(66) too large [ 498.027883] binder_alloc: binder_alloc_mmap_handler: 7858 20001000-20004000 already mapped failed -16 22:06:45 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$UI_DEV_CREATE(r0, 0x5501) 22:06:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x9effffff}], 0x492492492492805, 0x0) [ 498.087937] binder: BINDER_SET_CONTEXT_MGR already set [ 498.099199] binder: 7858:7859 ioctl 40046207 0 returned -16 [ 498.142386] binder_alloc: 7858: binder_alloc_buf, no vma [ 498.161864] dccp_invalid_packet: P.Data Offset(66) too large 22:06:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x64, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:46 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) pipe(&(0x7f0000000040)) 22:06:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x9, 0x2042) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="c2ad5b8e17fd1467aac71810000093754a5752ba1fa3c3d9647c5818e2989e533de71c9a09eda671be3d47af904d299a04a8d47ad2a9f82eb01e70e40ad64b72000000"]) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x100007f}], 0x492492492492805, 0x0) 22:06:46 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x10000) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000180)={@empty, @broadcast, @local}, 0xc) r1 = socket$inet6(0xa, 0x4, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000140)=0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) kcmp(r3, r4, 0x400000000000000, r2, r2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xa0000, 0x0) 22:06:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xf9010000}}], 0x209, 0x0) [ 498.562411] dccp_invalid_packet: P.Data Offset(66) too large [ 498.570196] binder_alloc: binder_alloc_mmap_handler: 7890 20001000-20004000 already mapped failed -16 22:06:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xfffffffffffff000}], 0x492492492492805, 0x0) 22:06:46 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 498.615367] binder: BINDER_SET_CONTEXT_MGR already set 22:06:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x10dd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x2, 0xe8030000}, [@ldst={0x7, 0x18d1fb, 0x0, 0x1d1}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r2, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) vmsplice(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)="289ea693e5c03210c73bd30109537377410e51d28fd1fa29e3dab3ad7a305d8d46723f0bdbb4f99d1a682fbefdabc05e3e13a6f3", 0x34}], 0x1, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:46 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r0, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 498.671418] binder: 7890:7893 ioctl 40046207 0 returned -16 [ 498.700320] dccp_invalid_packet: P.Data Offset(66) too large [ 498.703256] binder_alloc: 7890: binder_alloc_buf, no vma 22:06:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x5107000000000000}], 0x492492492492805, 0x0) 22:06:46 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 22:06:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x1c00}], 0x492492492492805, 0x0) [ 498.822485] binder: BINDER_SET_CONTEXT_MGR already set [ 498.843854] binder_alloc: 7940: binder_alloc_buf, no vma [ 498.869433] binder: 7940:7941 ioctl 40046207 0 returned -16 22:06:46 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r0, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:46 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 22:06:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00e0200, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xfffffffc}], 0x492492492492805, 0x0) [ 499.015133] binder: BINDER_SET_CONTEXT_MGR already set [ 499.020648] binder_alloc: 7967: binder_alloc_buf, no vma 22:06:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9421) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x202000, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{0x2, 0x4e23, @rand_addr=0x3ff}, {0x306, @broadcast}, 0x48, {0x2, 0x4e22}, 'bpq0\x00'}) 22:06:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x40000}}], 0x209, 0x0) 22:06:47 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 22:06:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xff03000000000000}], 0x492492492492805, 0x0) 22:06:47 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r0, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 499.060459] binder: 7967:7974 ioctl 40046207 0 returned -16 22:06:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x200000000000000}], 0x492492492492805, 0x0) 22:06:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:47 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 22:06:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c535e082514052b7940bcee2d83844b6e40210ae0285d64aa104fe5527e8083eb921f650a94fea1ac969204aee8d765581e24e3740a58e3f31d67947dce67268e17e1bcc61679f980e469473db7ef32496531e5ccd0d177ad2f791dba2a9c21e6635e19532b8dafb6c21ac1176ba0195dde35d1e27560fe1e1ffea50a6c8e9af7e43dcbce36092bd4d2b34ad6789925daab9962aa81e2f2135e64913492637d270f3b4debd5d66f6c"]) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x9}}], 0x209, 0x0) 22:06:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8916, &(0x7f00000001c0)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x600, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000040)=0x1) 22:06:47 executing program 4: ioctl(0xffffffffffffffff, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r0, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf0ffff}], 0x492492492492805, 0x0) 22:06:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 499.576522] binder_transaction: 15 callbacks suppressed [ 499.576537] binder: 8017:8019 transaction failed 29201/-22, size 0-0 line 2970 22:06:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) utimensat(r2, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000500)={{0x77359400}, {r3, r4/1000+10000}}, 0x0) 22:06:47 executing program 4: ioctl(0xffffffffffffffff, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r0, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 499.644261] binder: BINDER_SET_CONTEXT_MGR already set [ 499.650107] binder_alloc: 8017: binder_alloc_buf, no vma [ 499.655636] binder: 8017:8037 transaction failed 29189/-3, size 0-0 line 2970 [ 499.680805] binder: 8017:8036 ioctl 40046207 0 returned -16 22:06:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xffffff7f00000000}], 0x492492492492805, 0x0) 22:06:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x1c000000}], 0x492492492492805, 0x0) [ 499.831618] binder: 8061:8062 transaction failed 29201/-22, size 0-0 line 2970 [ 499.870384] binder_alloc_mmap_handler: 3 callbacks suppressed 22:06:47 executing program 4: ioctl(0xffffffffffffffff, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r0, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 499.870402] binder_alloc: binder_alloc_mmap_handler: 8061 20001000-20004000 already mapped failed -16 22:06:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x208}}], 0x209, 0x0) [ 499.926169] binder: BINDER_SET_CONTEXT_MGR already set 22:06:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 22:06:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 499.962433] binder: 8061:8062 ioctl 40046207 0 returned -16 [ 499.986929] binder_release_work: 15 callbacks suppressed [ 499.986935] binder: undelivered TRANSACTION_ERROR: 29201 22:06:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xc, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = getpid() setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000740)=0x20, 0x4) process_vm_writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/11, 0xb}, {&(0x7f0000000100)=""/180, 0xb4}, {&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/134, 0x86}, {&(0x7f0000000040)=""/22, 0x16}], 0x5, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/190, 0xbe}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000000580)=""/50, 0x32}, {&(0x7f00000005c0)=""/175, 0xaf}, {&(0x7f0000000680)=""/51, 0x33}], 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000780)="0a5cc80700315f85715070") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000007c0)={{0xa, 0x4e20, 0x2, @mcast1, 0x81}, {0xa, 0x4e23, 0x401}, 0x2, [0x5, 0x3, 0xf1b, 0x5, 0x4, 0x3, 0x8, 0x7f]}, 0x5c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), 0x4) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000008c0)) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) accept4(r0, &(0x7f0000000840)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x80, 0x80800) 22:06:47 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 500.057057] binder: 8086:8087 transaction failed 29201/-22, size 0-0 line 2970 [ 500.074688] binder_alloc: binder_alloc_mmap_handler: 8086 20001000-20004000 already mapped failed -16 [ 500.104201] binder: BINDER_SET_CONTEXT_MGR already set [ 500.125341] binder: 8086:8087 ioctl 40046207 0 returned -16 [ 500.144232] binder: 8086:8091 transaction failed 29189/-3, size 0-0 line 2970 [ 500.150623] binder: undelivered TRANSACTION_ERROR: 29201 22:06:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d08000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 500.178473] binder: undelivered TRANSACTION_ERROR: 29189 22:06:48 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x6000000000000000}], 0x492492492492805, 0x0) [ 500.295397] binder: 8113:8115 transaction failed 29201/-22, size 0-0 line 2970 [ 500.318939] binder_alloc: binder_alloc_mmap_handler: 8113 20001000-20004000 already mapped failed -16 [ 500.386354] binder: BINDER_SET_CONTEXT_MGR already set [ 500.426484] binder: 8113:8115 ioctl 40046207 0 returned -16 [ 500.432628] binder: undelivered TRANSACTION_ERROR: 29201 22:06:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf0ffffff}], 0x492492492492805, 0x0) 22:06:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xf5ffffff}}], 0x209, 0x0) 22:06:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:48 executing program 3: r0 = memfd_create(&(0x7f00000003c0)='usernodevself/,-GPLw{:+\x00', 0x2) ioctl$TIOCNXCL(r0, 0x540d) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r2, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000000000001, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:48 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x2) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x20400) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x9, 0xd7}, &(0x7f0000000100)=0x8) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e24, 0x9, @local, 0x6}}, 0x6, 0x1660000000}, &(0x7f0000000200)=0x90) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000380)=r0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000004c0)=0x0) wait4(r4, 0x0, 0x80000000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) r5 = dup(r0) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r6) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x17, 0x17, &(0x7f00000002c0)="19918abec9084dc9546d012b7fabb8a622c3e9a2af8c59"}) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000440), &(0x7f0000000480)=0xb) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000240)={0x7, 0x56a}) 22:06:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x400300}], 0x492492492492805, 0x0) [ 500.593043] binder: 8143:8153 transaction failed 29201/-22, size 0-0 line 2970 [ 500.627086] binder_alloc: binder_alloc_mmap_handler: 8143 20001000-20004000 already mapped failed -16 22:06:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xeffdffff}], 0x492492492492805, 0x0) [ 500.663119] binder: BINDER_SET_CONTEXT_MGR already set [ 500.677786] binder: 8143:8153 ioctl 40046207 0 returned -16 [ 500.696088] binder: 8143:8161 transaction failed 29189/-3, size 0-0 line 2970 22:06:48 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r0, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 500.734125] binder: undelivered TRANSACTION_ERROR: 29201 [ 500.740719] binder: undelivered TRANSACTION_ERROR: 29189 22:06:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x51070000}], 0x492492492492805, 0x0) 22:06:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc}], 0x492492492492805, 0x0) [ 500.837547] binder: 8189:8190 transaction failed 29201/-22, size 0-0 line 2970 [ 500.864905] binder_alloc: binder_alloc_mmap_handler: 8189 20001000-20004000 already mapped failed -16 22:06:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x100000000000000}}], 0x209, 0x0) 22:06:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) [ 500.910401] binder: BINDER_SET_CONTEXT_MGR already set [ 500.918776] binder: 8189:8203 transaction failed 29189/-3, size 0-0 line 2970 [ 500.942714] binder: 8189:8190 ioctl 40046207 0 returned -16 22:06:48 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r0, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 500.974168] binder: undelivered TRANSACTION_ERROR: 29201 [ 500.990130] binder: undelivered TRANSACTION_ERROR: 29189 22:06:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x14, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x9, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 501.108576] binder_alloc: binder_alloc_mmap_handler: 8221 20001000-20004000 already mapped failed -16 22:06:49 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r0, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 501.175563] binder: BINDER_SET_CONTEXT_MGR already set [ 501.191844] binder_alloc_new_buf_locked: 3 callbacks suppressed [ 501.191851] binder_alloc: 8221: binder_alloc_buf, no vma [ 501.216467] binder: 8221:8222 ioctl 40046207 0 returned -16 [ 501.228186] binder: undelivered TRANSACTION_ERROR: 29201 [ 501.240959] binder: undelivered TRANSACTION_ERROR: 29189 22:06:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0xffffffffffffff20) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) wait4(r2, &(0x7f0000000040), 0x80000000, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x400000000000000}}], 0x209, 0x0) 22:06:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e08000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xeffdffff00000000}], 0x492492492492805, 0x0) 22:06:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00bf"]) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) sendfile(r2, r1, &(0x7f00000003c0), 0xfffffffeffffffff) 22:06:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) 22:06:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 501.453094] binder_alloc: binder_alloc_mmap_handler: 8264 20001000-20004000 already mapped failed -16 22:06:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x1c00000000000000}], 0x492492492492805, 0x0) [ 501.499635] binder: BINDER_SET_CONTEXT_MGR already set [ 501.521351] binder: 8264:8265 ioctl 40046207 0 returned -16 [ 501.528008] binder_alloc: 8264: binder_alloc_buf, no vma 22:06:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x7f00000100000000}], 0x492492492492805, 0x0) 22:06:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x802}}], 0x209, 0x0) [ 501.642825] binder_alloc: binder_alloc_mmap_handler: 8289 20001000-20004000 already mapped failed -16 [ 501.652400] binder: BINDER_SET_CONTEXT_MGR already set [ 501.680350] binder: 8289:8290 ioctl 40046207 0 returned -16 22:06:49 executing program 5: r0 = socket$inet6(0xa, 0xfffffffffffe, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockname(r1, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x80) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @dev={[], 0x1e}}, 0xffffffffffffff71) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) dup2(r1, r1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) 22:06:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc0000000}], 0x492492492492805, 0x0) 22:06:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) 22:06:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf000000}], 0x492492492492805, 0x0) [ 501.812670] binder_alloc: binder_alloc_mmap_handler: 8315 20001000-20004000 already mapped failed -16 [ 501.870773] binder: BINDER_SET_CONTEXT_MGR already set 22:06:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x7f000001}], 0x492492492492805, 0x0) [ 501.900507] binder: 8315:8317 ioctl 40046207 0 returned -16 [ 501.914793] binder_alloc: 8315: binder_alloc_buf, no vma 22:06:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x5, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xff03}], 0x492492492492805, 0x0) 22:06:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) r2 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x8000, 0x620002) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x17) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xf401000000000000}}], 0x209, 0x0) 22:06:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rfkill\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000004c0)={{0x9, 0x3, 0x9, 0x8, 'syz1\x00', 0x5}, 0x1, [0x3c, 0x10001, 0x8, 0x8000, 0x7, 0x6, 0x4, 0x1, 0x5, 0x6, 0xfffffffffffffffe, 0x9, 0x7, 0x2b, 0xf86, 0xbd, 0x4, 0x5, 0x80000001, 0x1, 0x7, 0x4, 0x0, 0x4, 0x0, 0x100, 0xffffffff80000001, 0x1000000000000000, 0x7, 0x893, 0x0, 0x81, 0x0, 0x6, 0x2, 0x400, 0x7f, 0x8001, 0x8, 0x954, 0xa7, 0x2, 0x3, 0x8, 0x4, 0x3, 0x7f, 0x0, 0x7fffffff, 0x482, 0x100000001, 0x6, 0xdc64, 0x3, 0x50d, 0x2, 0x7f, 0x1ff, 0x1000, 0x8000, 0x401, 0x6, 0x200, 0x821, 0x8, 0x200, 0x1000, 0x7, 0xffffffffffffffff, 0x7f, 0x8, 0x0, 0x1f, 0x100, 0x100000000, 0x100000001, 0x40, 0x5, 0x100000001, 0x7f, 0x7fff, 0x3, 0xe4e7, 0x4, 0x1bf, 0x2, 0xc00000000000, 0x1000, 0x6, 0x5, 0x1, 0x9, 0xa0, 0x5, 0xa, 0x8, 0x0, 0x80, 0x100, 0x5, 0x5, 0x1, 0x5, 0x7, 0x3, 0x5, 0x5, 0x4, 0x0, 0xa5f1, 0x9, 0x9, 0x1ff, 0x9, 0xe9, 0x919, 0x100000001, 0x3f, 0x3f, 0xfffffffffffffffa, 0x3, 0x7f, 0x6, 0x0, 0x7, 0xc6e, 0x4, 0x5e8]}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0xffffffffffffffff}, &(0x7f0000000300)=0xc) getsockopt$inet6_buf(r0, 0x29, 0x44, &(0x7f0000000380)=""/164, &(0x7f00000009c0)=0xa4) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={r3, 0x800}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={r4, 0xf8, 0x3}, 0x378) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x9effffff00000000}], 0x492492492492805, 0x0) [ 502.352496] binder_alloc: binder_alloc_mmap_handler: 8353 20001000-20004000 already mapped failed -16 [ 502.394116] binder: BINDER_SET_CONTEXT_MGR already set 22:06:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 502.422964] binder: 8353:8359 ioctl 40046207 0 returned -16 22:06:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d08, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc000000000000000}], 0x492492492492805, 0x0) 22:06:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 502.565412] binder: BINDER_SET_CONTEXT_MGR already set 22:06:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xfcffffff}], 0x492492492492805, 0x0) 22:06:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 502.592320] binder_alloc: 8391: binder_alloc_buf, no vma [ 502.613781] binder: 8391:8392 ioctl 40046207 0 returned -16 22:06:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x40030000000000}], 0x492492492492805, 0x0) 22:06:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 502.725936] binder: BINDER_SET_CONTEXT_MGR already set [ 502.725942] binder_alloc: 8413: binder_alloc_buf, no vma [ 502.752435] binder: 8413:8414 ioctl 40046207 0 returned -16 [ 502.898279] sctp: [Deprecated]: syz-executor7 (pid 8435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.898279] Use struct sctp_sack_info instead [ 502.950300] sctp: [Deprecated]: syz-executor7 (pid 8435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.950300] Use struct sctp_sack_info instead 22:06:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x7, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0xe803}}], 0x209, 0x0) 22:06:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc00000000000000}], 0x492492492492805, 0x0) 22:06:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000000bc0), 0x1000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="62745666732e656d3100457372e67a06ad2e4a1c03dff92d7286b8c298ac07ab1b1402a70df20100e23e55fc"], &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc8070031") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:51 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc000}], 0x492492492492805, 0x0) [ 503.222139] binder: BINDER_SET_CONTEXT_MGR already set [ 503.234468] binder_alloc: 8450: binder_alloc_buf, no vma [ 503.247472] binder: 8450:8451 ioctl 40046207 0 returned -16 22:06:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc8070031") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x100000000000000}], 0x492492492492805, 0x0) [ 503.389209] binder: BINDER_SET_CONTEXT_MGR already set [ 503.407915] binder_alloc: 8477: binder_alloc_buf, no vma 22:06:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x3000000}], 0x492492492492805, 0x0) 22:06:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf00}], 0x492492492492805, 0x0) [ 503.429957] binder: 8477:8478 ioctl 40046207 0 returned -16 [ 503.521691] binder: BINDER_SET_CONTEXT_MGR already set [ 503.553423] binder_alloc: 8497: binder_alloc_buf, no vma [ 503.564102] binder: 8497:8498 ioctl 40046207 0 returned -16 22:06:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0xd, &(0x7f0000000100)={0x0, 0x400, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:51 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x4000000000000}}], 0x209, 0x0) 22:06:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc8070031") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') read(r0, &(0x7f0000000040)=""/120, 0x12d) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) r1 = socket$inet6(0xa, 0x1000000000002, 0x9) ioctl(r1, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") write$FUSE_STATFS(r0, &(0x7f0000000640)={0x60, 0xfffffffffffffffe, 0x5, {{0x4, 0x2, 0x0, 0x1, 0x2, 0x0, 0x5, 0xff}}}, 0x60) stat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f0000000700)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) read(r1, &(0x7f0000003000)=""/4096, 0x1000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="62747266812e656d310019ef5263bbf53d26fff3d9a8c251b5f2e378b296bb25846a951fa6cb837b27cd8127b9b29ad9cac171febe21ded0dbbaf9257dca52652923f2ca0ef2"], &(0x7f00000002c0)=""/36, 0x24) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000940)=@assoc_value={0x0, 0x1fed}, &(0x7f0000000980)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000009c0)={r3, @in6={{0xa, 0x4e23, 0x80000000, @ipv4={[], [], @multicast2}, 0xfb1}}, [0x4, 0x7, 0x80, 0x5, 0x6d, 0x7, 0x200, 0x400, 0x8001, 0x1, 0x8000, 0xdbc, 0x8e1b, 0x4, 0x3]}, &(0x7f0000000ac0)=0x100) read$FUSE(r2, &(0x7f0000002000), 0x1000) lstat(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000900)) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000003c0), &(0x7f00000004c0)=0x40) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000840)={0x0, 0x6d, "58f8bf7bae5987864ef341e67748b6e7bc320759c69ba010dfcb8b112efa1254b5dd530dcf27cc52a0541d9ba2311c1a799ad7a1b0e281eed9732c046ad7ddfc962d0d0f2eb64ba70184f21b986a2ab058b090239e053d57587ba2332ad143ab1bf701b5dca3873cc1249343f9"}, &(0x7f0000000540)=0x75) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000008c0)={r5, 0x7fff, 0x4, 0x5, 0xfff, 0xed7b}, 0x14) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000280)={@multicast1, @loopback}, &(0x7f0000000600)=0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={r4, r0, 0xd, 0x3}, 0x10) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0xfffffff0}], 0x492492492492805, 0x0) 22:06:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x8, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 503.706164] binder_alloc: 8516: binder_alloc_buf, no vma [ 503.738372] binder: BINDER_SET_CONTEXT_MGR already set 22:06:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f857150708f23c53cfa7a8cfe9c50c4d1e01c3e6e505f6b20e2e95bac08f55364b3b25d18b75466e7ecc561") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 503.767616] binder: 8516:8518 ioctl 40046207 0 returned -16 22:06:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f8571") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 503.888638] binder: BINDER_SET_CONTEXT_MGR already set 22:06:51 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x802000000000000}}], 0x209, 0x0) [ 503.915169] binder_alloc: 8550: binder_alloc_buf, no vma [ 503.936906] binder: 8550:8551 ioctl 40046207 0 returned -16 22:06:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f8571") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0x8000000000000000}], 0x492492492492805, 0x0) [ 504.046177] binder: BINDER_SET_CONTEXT_MGR already set [ 504.078466] binder: 8570:8571 ioctl 40046207 0 returned -16 22:06:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f8571") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) [ 504.250909] binder: BINDER_SET_CONTEXT_MGR already set 22:06:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f0000000100)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x2, 0x0) 22:06:52 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 504.286687] binder: 8586:8587 ioctl 40046207 0 returned -16 22:06:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') read(r0, &(0x7f0000000040)=""/120, 0x12d) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) r1 = socket$inet6(0xa, 0x1000000000002, 0x9) ioctl(r1, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") write$FUSE_STATFS(r0, &(0x7f0000000640)={0x60, 0xfffffffffffffffe, 0x5, {{0x4, 0x2, 0x0, 0x1, 0x2, 0x0, 0x5, 0xff}}}, 0x60) stat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f0000000700)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) read(r1, &(0x7f0000003000)=""/4096, 0x1000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="62747266812e656d310019ef5263bbf53d26fff3d9a8c251b5f2e378b296bb25846a951fa6cb837b27cd8127b9b29ad9cac171febe21ded0dbbaf9257dca52652923f2ca0ef2"], &(0x7f00000002c0)=""/36, 0x24) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000940)=@assoc_value={0x0, 0x1fed}, &(0x7f0000000980)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000009c0)={r3, @in6={{0xa, 0x4e23, 0x80000000, @ipv4={[], [], @multicast2}, 0xfb1}}, [0x4, 0x7, 0x80, 0x5, 0x6d, 0x7, 0x200, 0x400, 0x8001, 0x1, 0x8000, 0xdbc, 0x8e1b, 0x4, 0x3]}, &(0x7f0000000ac0)=0x100) read$FUSE(r2, &(0x7f0000002000), 0x1000) lstat(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000900)) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000003c0), &(0x7f00000004c0)=0x40) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000840)={0x0, 0x6d, "58f8bf7bae5987864ef341e67748b6e7bc320759c69ba010dfcb8b112efa1254b5dd530dcf27cc52a0541d9ba2311c1a799ad7a1b0e281eed9732c046ad7ddfc962d0d0f2eb64ba70184f21b986a2ab058b090239e053d57587ba2332ad143ab1bf701b5dca3873cc1249343f9"}, &(0x7f0000000540)=0x75) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000008c0)={r5, 0x7fff, 0x4, 0x5, 0xfff, 0xed7b}, 0x14) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000280)={@multicast1, @loopback}, &(0x7f0000000600)=0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={r4, r0, 0xd, 0x3}, 0x10) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x1000000}}], 0x209, 0x0) 22:06:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f857150") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0xeffdffff00000000}], 0x492492492492805, 0x0) 22:06:52 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0xfffffffffffffffd, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 504.561259] binder: BINDER_SET_CONTEXT_MGR already set 22:06:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x9, 0x800, 0x0, 0x7fffffff, 0x99b, 0x20, 0x3, {0x0, @in6={{0xa, 0x4e24, 0x4de0000000, @loopback, 0x48}}, 0x2, 0x4, 0x0, 0x7, 0x10000}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={r2, 0x4e, "cc1474db1702dd04be80817da1e0055148213172ca98c06de1e68ec47b8549c7cdfa174537f0af5615e565dcfad903937c3529fa84b8f45263748a0c8d08897b9b08a04fbf151195fcb5e4b3e3e5"}, &(0x7f0000000040)=0x56) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 504.586185] binder_transaction: 27 callbacks suppressed [ 504.586200] binder: 8616:8631 transaction failed 29189/-3, size 0-0 line 2970 [ 504.622443] binder: 8616:8617 ioctl 40046207 0 returned -16 22:06:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f857150") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 504.747891] binder: 8652:8653 transaction failed 29201/-22, size 0-0 line 2970 [ 504.775454] binder: BINDER_SET_CONTEXT_MGR already set [ 504.786705] binder: 8652:8658 transaction failed 29189/-3, size 0-0 line 2970 22:06:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00e020000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0xc2d}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0x40000}], 0x492492492492805, 0x0) [ 504.814024] binder: 8652:8653 ioctl 40046207 0 returned -16 22:06:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f857150") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f0000002000), 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1b, 0x3, 0x4000, 0x2b8e2a12, 0xffffffff, 0x7f, 0x7}}, 0x50) 22:06:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) 22:06:52 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), 0x4) [ 504.901233] binder: 8666:8668 transaction failed 29201/-22, size 0-0 line 2970 [ 504.950391] binder_alloc_mmap_handler: 11 callbacks suppressed [ 504.950408] binder_alloc: binder_alloc_mmap_handler: 8666 20001000-20004000 already mapped failed -16 [ 504.993718] binder: BINDER_SET_CONTEXT_MGR already set [ 505.001473] binder: 8666:8668 ioctl 40046207 0 returned -16 [ 505.017133] binder: 8666:8680 transaction failed 29189/-3, size 0-0 line 2970 [ 505.039981] binder_release_work: 28 callbacks suppressed [ 505.039986] binder: undelivered TRANSACTION_ERROR: 29201 [ 505.068399] binder: undelivered TRANSACTION_ERROR: 29189 22:06:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 22:06:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740), 0x0, 0x0, 0x0, 0x0}}], 0x209, 0x0) 22:06:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') read(r0, &(0x7f0000000040)=""/120, 0x12d) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) r1 = socket$inet6(0xa, 0x1000000000002, 0x9) ioctl(r1, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") write$FUSE_STATFS(r0, &(0x7f0000000640)={0x60, 0xfffffffffffffffe, 0x5, {{0x4, 0x2, 0x0, 0x1, 0x2, 0x0, 0x5, 0xff}}}, 0x60) stat(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f0000000700)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) read(r1, &(0x7f0000003000)=""/4096, 0x1000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="62747266812e656d310019ef5263bbf53d26fff3d9a8c251b5f2e378b296bb25846a951fa6cb837b27cd8127b9b29ad9cac171febe21ded0dbbaf9257dca52652923f2ca0ef2"], &(0x7f00000002c0)=""/36, 0x24) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000940)=@assoc_value={0x0, 0x1fed}, &(0x7f0000000980)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000009c0)={r3, @in6={{0xa, 0x4e23, 0x80000000, @ipv4={[], [], @multicast2}, 0xfb1}}, [0x4, 0x7, 0x80, 0x5, 0x6d, 0x7, 0x200, 0x400, 0x8001, 0x1, 0x8000, 0xdbc, 0x8e1b, 0x4, 0x3]}, &(0x7f0000000ac0)=0x100) read$FUSE(r2, &(0x7f0000002000), 0x1000) lstat(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000900)) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000003c0), &(0x7f00000004c0)=0x40) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) lstat(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000b40)) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000840)={0x0, 0x6d, "58f8bf7bae5987864ef341e67748b6e7bc320759c69ba010dfcb8b112efa1254b5dd530dcf27cc52a0541d9ba2311c1a799ad7a1b0e281eed9732c046ad7ddfc962d0d0f2eb64ba70184f21b986a2ab058b090239e053d57587ba2332ad143ab1bf701b5dca3873cc1249343f9"}, &(0x7f0000000540)=0x75) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000008c0)={r5, 0x7fff, 0x4, 0x5, 0xfff, 0xed7b}, 0x14) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000280)={@multicast1, @loopback}, &(0x7f0000000600)=0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={r4, r0, 0xd, 0x3}, 0x10) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0x10) 22:06:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lgetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', 'em1\x00'}, &(0x7f00000002c0)=""/36, 0x24) read$FUSE(r1, &(0x7f000000