0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 11:15:29 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000009600"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r3, 0x4, 0x2001) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x5cccad51, 0x5c, 0x9}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={r4, 0x8}, &(0x7f0000000200)=0x8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)) fcntl$getownex(r0, 0x10, &(0x7f0000000480)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000600)) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000440)='paUe\x0eh#\x0f') sendfile(r3, r6, 0x0, 0x10000000000443) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:29 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000000000000000000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r3, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, 0x0, 0x10000000000443) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encry\nted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 816.547362][T29411] binder: 29406:29411 transaction failed 29189/-22, size 24-8 line 2994 [ 816.580684][T29411] binder: undelivered TRANSACTION_ERROR: 29189 11:15:29 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x400001, 0x0) tkill(r1, 0x13) tkill(r0, 0x1000000000016) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000040)={0xab4f}) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 11:15:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00, 0xfeffffff}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:29 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) r3 = request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)='@\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) [ 816.746768][T29508] binder: 29504:29508 transaction failed 29189/-22, size 24-8 line 2994 [ 816.783264][T29508] binder: undelivered TRANSACTION_ERROR: 29189 11:15:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encry%ted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 11:15:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encryp\ned\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00, 0xff000000}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encryp%ed\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 816.976213][T29582] binder: 29579:29582 transaction failed 29189/-22, size 24-8 line 2994 [ 817.072281][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:15:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 817.253735][T29677] binder_alloc: 29676: binder_alloc_buf, no vma [ 817.306118][T29677] binder: 29676:29677 transaction failed 29189/-3, size 24-8 line 3147 [ 817.333642][ T7257] binder: undelivered TRANSACTION_ERROR: 29189 11:15:30 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r4, 0x4, 0x2001) fcntl$setlease(r1, 0x400, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r4, r5, 0x0, 0x10000000000443) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000040)=0x7) read(r0, &(0x7f0000000440)=""/72, 0x238) sendmsg$xdp(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypt\nd\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:30 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x1000000000016) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7f, 0x200000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040)=0x2, 0x4) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x48}}, 0x18) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00, 0xfffffffe}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:30 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x3b) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 11:15:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypt%d\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypt.d\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 817.643857][T29705] binder_alloc: 29697: binder_alloc_buf, no vma [ 817.684335][T29705] binder: 29697:29705 transaction failed 29189/-3, size 24-8 line 3147 11:15:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypte\n\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00, 0x1000000000000}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 817.734710][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:15:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 11:15:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypte%\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 817.916243][T29835] binder_alloc: 29834: binder_alloc_buf, no vma [ 817.955391][T29835] binder: 29834:29835 transaction failed 29189/-3, size 24-8 line 3147 [ 818.027073][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:15:31 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000000000000000000000"], 0x13) write$P9_RSYMLINK(r0, &(0x7f0000000140)={0x14, 0x11, 0x2, {0x2, 0x4, 0x4}}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r3, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, 0x0, 0x10000000000443) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'nlmon0\x00', 0x8000}) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x02', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:31 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x100}], 0xb955ddc61c713ce0, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x1000000000016) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7fffffff, 0x40) ioctl(r2, 0x8, &(0x7f0000000040)="69e869177f83a112fe038506aaa86b3129ea9d6b9ff0accba18e7f008702fe1ea7e6a837d7335d45c64dd6e9b4d988eeaed5e7119db5bb3097fe3d60e6fe618ab89b1642bff29fbacb0f3b006a3a360939d535b1b8c7c3d569b48851ea6601042b1e680b093abf77c323910cb7381ff041e665e2fcc2cab169c3f4fe31b8133ee3c5d1931918") sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00, 0x100000000000000}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:31 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80200, 0x0) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f00000001c0)=""/175, &(0x7f0000000140)=0xaf) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r4, 0x4, 0x2001) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000600)={0x0, 0xc5, "3c69c3dec7edcef224f48c93c9dc663f431099d55879cf7c5b7b89572aafad7b9ce43727035304dcd8d333283ab81c4299bb9402442cc323b294a406976ea9257c8fcdc97565100ae06bfd90a18faf37afd2faae6d94296a178da4db79e810a72960eb1af3f4e309041fcb651ab0e7e6d9bd5303ea4f881b0b6871635d73405bc8517eeea44af78e751f10013e1fcf208999829f02b2ed6413fa59f4c984bcadcd0e7dc64d542eb363706969520e7eb171ba51fc8516ebaea0a2fb935e3f739cd26c34b67c"}, &(0x7f00000002c0)=0xcd) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000340)={r5, 0x5, 0x800}, &(0x7f0000000380)=0x8) fcntl$setlease(r0, 0x400, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r4, r6, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0), 0x0) ioctl$CAPI_MANUFACTURER_CMD(r6, 0xc0104320, &(0x7f0000000480)={0x4, &(0x7f0000000440)="d2b3e711782b912c14aa6095550a159c697c90d8c5144bdd69c92d1c76d4915aad505960e20043ef0c4208fc6459d99789c1b545148fb6fa44fa54a0"}) read(r4, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 11:15:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x03', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 818.567164][T29871] binder: 29868:29871 transaction failed 29189/-22, size 24-8 line 2994 [ 818.581072][T29871] binder: undelivered TRANSACTION_ERROR: 29189 11:15:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 11:15:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x04', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00, 0x300000000000000}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:31 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) chroot(&(0x7f00000001c0)='./file0\x00') poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x181000, 0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000380)=r1) tkill(r0, 0x1000000000016) ptrace$setregset(0x4205, r0, 0x207, &(0x7f00000000c0)={&(0x7f0000000000)="1b8a67ad143bcc0eb496537a516fe2daca3a17019ade6a44466f20671380582c55f66f4a4a5a7f280b878f35c3003f2cab74659682da43bb6aa5e721bf5e8001b920d5abeceec339ea37dab9b6812f9660300b1095a7c34bfc66a1d33024f24604564d93fef93a2373c9cf6ab1ef853da3b9d6bf409bac85d46864683c7720fd4d1179e003c70d292a97cb229881e0a0a3ba46cfa62d44ebf23b6dfacb28e8a27851df29abb5c995c9c99bb2f2953f28ce73a87b5aa016118ca7e15cfe0231ed", 0xc0}) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0xd3, "22106f61ca47339d2561ac1fabae740016481ad1e0cc72dd55378d03bc4d282c8e15e88d7e7e4c4876e13ffd4e874475089d695f760cab9435eec37b5ffb2fe3f0bd3af629bf788cd4afaacb54dba485794fcafaa07cd7e5d45321fbbfb4660752e3420bc95cf3a9025d9f34b9724f1833316076b4ebeb0eca4cd04ac297f7df858299f2978ad06b1d06f1e28f997d01881d14598251d96e60fab704e87727387b3d559794d844993d36f57a380c1cb39614866159f056f3a65a92bf08b3d2fd51bd670a569367bbbd843a4806f6742c5b7c3b"}, &(0x7f0000000340)=0xdb) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0xfffffffffffffff8, 0x8000, 0x80c, 0x0, r3}, 0x10) [ 818.707287][T29887] binder: 29886:29887 transaction failed 29189/-22, size 24-8 line 2994 11:15:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x05', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 818.787032][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:15:32 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000000000000000000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000040)) 11:15:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 11:15:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x06', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00, 0x800000000000000}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:32 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:32 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000008000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x7, 0x0, [{0x9af, 0x0, 0x3a1d}, {0xa51, 0x0, 0xffffffff}, {0xbfb, 0x0, 0x2}, {0x9ca, 0x0, 0x8}, {0x4b564fff, 0x0, 0x6}, {0xbfd}, {0xb59, 0x0, 0x9}]}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2001) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r3, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\a', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 819.372992][T30027] binder: 30016:30027 transaction failed 29189/-22, size 24-8 line 2994 11:15:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00, 0xe00000000000000}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 819.453522][ T7257] binder: undelivered TRANSACTION_ERROR: 29189 11:15:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encryptedH', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 11:15:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encryptedL', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 11:15:32 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="b1000000d707000000000000000000530f625e9a740e00000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00, 0x3f00000000000000}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:32 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b100004ea5e04373ab1d9bde00d7"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted`', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:33 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encryptedh', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 11:15:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00, 0x4000000000000000}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encryptedl', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:33 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000001c0)=""/72) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encryptedt', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:33 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 820.448456][T30322] binder: release 30321:30322 transaction 87 out, still active [ 820.490149][T30322] binder: unexpected work type, 4, not freed [ 820.496467][T30322] binder: undelivered TRANSACTION_COMPLETE [ 820.550426][ T7257] binder: send failed reply for transaction 87, target dead 11:15:33 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x4c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) socket$netlink(0x10, 0x3, 0x15) r2 = shmget(0x1, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000000000000000000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r4, 0x4, 0x2001) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="a8000000cb50086dc5b6a093ca24315a966370a634776bcee7614bf9281932ad9750e7f9f738dad53dfe161f2e81c8b8b5e28f7844a188d202aafc", @ANYRES16=r5, @ANYBLOB="000628bd7000fedbdf25110000004000010014000300ac1414aa000000000000000000000000080009000500000008000500000000000800080004000000080006006468000008000b00736970004c00020008000b000a000000080005000000010008000b000200000008000500220e000008000200000800000800060009000000080004000004000008000b000a00000008000b020a0000000800060003000000"], 0xa8}}, 0x20000000) fcntl$setlease(r0, 0x400, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r4, r6, 0x0, 0x10000000000443) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000640)={0x2, 0xfff, 0x8200, 0x100000001, 0x3f, 0x6000000000000000, 0x7, 0x81, 0x0}, &(0x7f0000000680)=0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000800)={r7, 0x101}, &(0x7f0000000840)=0x8) read(r4, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encryptedz', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00, 0xfeffffff00000000}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 820.903183][T30437] binder: release 30434:30437 transaction 91 out, still active [ 820.923989][T30437] binder: unexpected work type, 4, not freed [ 820.930514][T30437] binder: undelivered TRANSACTION_COMPLETE [ 820.986380][ T7257] binder: send failed reply for transaction 91, target dead 11:15:34 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) fchmod(r2, 0x8) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:34 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000040)='net/snmp6\x00') setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r3, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:34 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00, 0xff00000000000000}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:34 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000000000000000000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) [ 821.247066][T30465] encrypted_key: hex blob is missing 11:15:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 821.289338][T30470] encrypted_key: hex blob is missing 11:15:34 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00, 0xffffffff00000000}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 821.414102][T30522] encrypted_key: hex blob is missing 11:15:34 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 821.457665][T30561] encrypted_key: hex blob is missing [ 821.554304][T30597] encrypted_key: hex blob is missing 11:15:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x2, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 821.584850][T30599] encrypted_key: hex blob is missing 11:15:35 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x11000000000016) sched_rr_get_interval(r0, &(0x7f00000001c0)) r2 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x401, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000240)={0x2, [0x0, 0x0]}, &(0x7f0000000280)=0xc) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x8) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x280000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r4, 0x0, 0x16b6, 0x10000}, 0x10) 11:15:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:35 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e70000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x3, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:35 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000005e80d73700000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 822.173793][T30615] binder_alloc: 30614: binder_alloc_buf, no vma [ 822.180119][T30615] binder: 30614:30615 transaction failed 29189/-3, size 24-8 line 3147 [ 822.194271][T30620] encrypted_key: hex blob is missing 11:15:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 822.226408][T30626] encrypted_key: hex blob is missing [ 822.278928][T29861] binder: undelivered TRANSACTION_ERROR: 29189 11:15:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x5, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 822.346697][T30678] encrypted_key: hex blob is missing [ 822.375336][T30700] encrypted_key: hex blob is missing 11:15:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 822.452555][T30749] binder_alloc: 30748: binder_alloc_buf, no vma [ 822.461873][T30749] binder: 30748:30749 transaction failed 29189/-3, size 24-8 line 3147 [ 822.478397][T30752] encrypted_key: hex blob is missing [ 822.486218][T30749] binder: undelivered TRANSACTION_ERROR: 29189 [ 822.495694][T30755] encrypted_key: hex blob is missing 11:15:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 822.590454][T30760] encrypted_key: hex blob is missing [ 822.645068][T30764] binder_alloc: 30763: binder_alloc_buf, no vma [ 822.658340][T30767] encrypted_key: hex blob is missing [ 822.678015][T30764] binder: 30763:30764 transaction failed 29189/-3, size 24-8 line 3147 [ 822.694564][T30764] binder: undelivered TRANSACTION_ERROR: 29189 11:15:36 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x20000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2002000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18c, r3, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x55}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x124, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd63e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x23}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8dbc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0000000000000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) tkill(r1, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x7, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:36 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000000bd6f0ede96793e0000fbfb91a0c2495296ae56aed0c50cb6ba09000000d8f775d1ad4c3bdea81053b5e5208fa3c87dd099016bc263d57d01fc758eabda531bf99e78a78d73cec32882afa515a14081451ea2113d442e878d1fcbd219367336c43f0a297f6885c23de96a1c517600732f0e0d6e934503f88fb504111ace0c06ca6f77c356b306f8306ce9d799f455c91ab912b700b62449c41d2404e3612ef0f0f4c80514ca00000000000000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) [ 823.099944][T30778] binder_alloc: 30777: binder_alloc_buf, no vma [ 823.144846][T30781] encrypted_key: hex blob is missing [ 823.147622][T30778] binder: 30777:30778 transaction failed 29189/-3, size 24-8 line 3147 [ 823.174342][T30789] encrypted_key: hex blob is missing 11:15:36 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x101040, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="b1000000d707000000000000000000000000001ba2b6f787dad1a5b4212a6b363024afdbfad831f489f7b26decf74e46fe68961f45be81300d6c3c538970d84d081f4ad2585173624659baebcb0b769c5d5a13648a2e7685528516bb215767617a1cd6063d61236a5b70cdd92c207c650982dbab500123eb6d1a3cd1939a69d6508432424c71d411e18949175633db822ca5a1ba865776635c17605651ca0aebfb7f20898e2f7b972ff75d60fde48b5d26a22385446ad2ec2464a56030eaa5b4e75f7fc630c6167b825dcc54"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 823.217158][T29861] binder: undelivered TRANSACTION_ERROR: 29189 [ 823.263951][T30879] encrypted_key: hex blob is missing 11:15:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x8, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 823.325911][T30905] encrypted_key: hex blob is missing 11:15:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:36 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40040, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000000c0)={0x77, @multicast2, 0x4e20, 0x4, 'lblcr\x00', 0x20, 0x53b, 0xc}, 0x2c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) tkill(r1, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xd6, 0x80) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000040)) [ 823.413293][T30909] binder_alloc: 30908: binder_alloc_buf, no vma [ 823.419607][T30909] binder: 30908:30909 transaction failed 29189/-3, size 24-8 line 3147 [ 823.490488][T30917] encrypted_key: hex blob is missing 11:15:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 823.521292][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:15:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0xa, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 823.644192][T30929] encrypted_key: hex blob is missing 11:15:36 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x70040, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000440)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000600)={r1, r2, 0x7}) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b100000000000000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r5, 0x4, 0x2001) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000640)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r5, r6, 0x0, 0x10000000000443) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r5, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x84, r7, 0x201, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1d}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2541}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}]}, 0x84}, 0x1, 0x0, 0x0, 0x11}, 0x20008001) 11:15:36 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = dup(0xffffffffffffff9c) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002400)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x38, r3, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x558}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x12cbf826}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) tkill(r1, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 823.680989][T30937] binder_alloc: 30932: binder_alloc_buf, no vma [ 823.691460][T30933] encrypted_key: hex blob is missing 11:15:36 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003000000592747c8c0933f831fcc9f998f9e2ef760cefa72246d5bdeafb2d524f23518e91cef90f24d7d5585e4f0b18075b78445576c80141a7e5a03976a051e7e8f1c87853e7790ca236c7ee85104b9c3c3198f63247f27002930f30fae15dddb8b41d8541e0b9c62db96f1b0df7bc1235feaaf939dfd20f7de97309f009f9879ad9b83692e609feff68bf8f7e11bac69724a9aef7856e10be2106a7686fa24ae126a66f48769c0813e188d8ef1c9b4934411623bed4f04a6dd9c1ba2accdf0cbbeceb81c21434939fcabff19be6146cb29eb6e0581c649a907"], 0x13) nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f0000000140)) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000380)="cc2f4f6d50e260fffea9e300570d956c", 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)}, 0x0) finit_module(r1, &(0x7f00000000c0)='pagemap\x00', 0x2) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f00000002c0)=0x2) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(0xffffffffffffffff) sched_rr_get_interval(r4, &(0x7f0000000180)) [ 823.740159][T30937] binder: 30932:30937 transaction failed 29189/-3, size 24-8 line 3147 11:15:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0xf, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 823.831691][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 [ 823.915962][T31012] encrypted_key: hex blob is missing 11:15:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\xff', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 823.947129][T31039] encrypted_key: hex blob is missing [ 823.978009][T31057] binder: 31049:31057 transaction failed 29189/-22, size 24-8 line 2994 [ 824.003610][T31057] binder: undelivered TRANSACTION_ERROR: 29189 11:15:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x3e, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 824.162705][T31082] binder: 31079:31082 transaction failed 29189/-22, size 24-8 line 2994 11:15:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x500, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 824.217034][T31084] encrypted_key: hex blob is missing [ 824.235339][T31082] binder: undelivered TRANSACTION_ERROR: 29189 11:15:37 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000f8e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000040)=""/7, &(0x7f0000000140)=0x7) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r0, &(0x7f00000003c0)=""/72, 0x48) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) [ 824.350528][T31093] encrypted_key: hex blob is missing [ 824.393363][T31099] encrypted_key: hex blob is missing 11:15:37 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x100000, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:37 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b100003da3b147d41a23ba37038cd07f08d6d0"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x57, 0x1}) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:37 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x20481, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x100, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000001c0)=""/72, 0x48) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) [ 824.738996][T31216] binder: 31214:31216 transaction failed 29189/-22, size 24-8 line 2994 [ 824.749126][T31220] encrypted_key: hex blob is missing [ 824.781414][T31228] cgroup: fork rejected by pids controller in /syz0 [ 824.782349][T31216] binder: undelivered TRANSACTION_ERROR: 29189 [ 824.826155][T31228] encrypted_key: hex blob is missing 11:15:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0xfffffffc, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:37 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000000300)={{0x0, 0x8}, {r2, r3+10000000}}, 0x0) tkill(r1, 0x13) msgget(0x3, 0x0) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x2, 0x4000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4) r6 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000040)=0x90) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 825.092075][T31349] encrypted_key: hex blob is missing 11:15:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000002c0)={0x5, 0x1, {0x0, 0x0, 0x101, 0x1, 0x7fffffff}}) r4 = dup2(r1, r0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e24, 0x40f31225, @rand_addr="333a1ba8e0b77e032568402c7c003f0a", 0x4}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {0xfffffffffffffffe, r5}}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCLINUX6(r4, 0x541c, &(0x7f0000000340)={0x6, 0x86}) poll(&(0x7f0000000100)=[{r6, 0xe00}], 0x1, 0x9ad) r7 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r7, 0x13) ioctl$GIO_FONT(r6, 0x4b60, &(0x7f0000000340)) r8 = dup3(r1, r6, 0x0) ioctl$VIDIOC_G_EDID(r4, 0xc0285628, &(0x7f0000000240)={0x0, 0x6, 0x0, [], &(0x7f0000000200)=0x80000000}) tkill(r2, 0x1000000000016) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000600)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r9, 0x1}}, 0x18) 11:15:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 825.196733][T31356] Unknown ioctl 1080054598 11:15:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 825.218841][T31358] encrypted_key: hex blob is missing 11:15:38 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x8000000080800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) [ 825.280148][T31382] Unknown ioctl 1080054598 11:15:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 825.380413][T31472] binder: 31471:31472 ioctl c0306201 0 returned -14 11:15:38 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000000000000000000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000040)={0x1, 0x8001, 0x80000000, 0x5e7, 0x1}) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xfffffffffffffffd, 0x19, 0x81, 0xd2}]}, 0x10) 11:15:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 825.687348][T31577] encrypted_key: hex blob is missing 11:15:38 executing program 2: r0 = gettid() r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40400, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0xf, &(0x7f00000000c0)=0x20000, 0x4) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f00000011c0)={{&(0x7f00000001c0)=""/4096, 0x1000}, &(0x7f0000000080), 0x4}, 0x20) write$eventfd(r2, &(0x7f0000000000)=0x4, 0x8) tkill(r0, 0x1000000000018) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:38 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000001c0)=""/72, 0x48) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x12000000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x4, 0x3, 0x4, 0x8, 0x100000001, 0x8001, 0x2, 0x20, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000200)={r5, 0xbc, "f87533bcf13b3152ee036422f69a2f6eddce5e97673e135c933cd494814de6a926edc517ccb068bc19e11b57dc598758b4d29fe4d95bdf42e362a53bebe559c7cfc776a0f94a684c1dacaf92ca11f6918f662dd499ff9ed36efc8aed96b0d42eab9f54d1f86a46fa3b40994b838e32798c2784f4c4021e420779c8777af8498087264e2d0fd7f4cd2aab8ebd12d4cc417260cbdc1ae27f487dd2565164e18e0140698801fb3b9bc6a2b12c4c8c4c534b2695c71e24f7cb673040288d"}, &(0x7f00000000c0)=0xc4) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 825.886583][T31700] encrypted_key: hex blob is missing 11:15:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 825.910696][T31704] binder: 31701:31704 ioctl c0306201 0 returned -14 11:15:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RCLUNK(r3, &(0x7f0000000240)={0x7, 0x79, 0x2}, 0x7) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) setpgid(r4, r1) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) pipe(&(0x7f0000000280)) r6 = dup3(r2, r0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000180)={0x0, r5, 0x1}) getsockopt$bt_hci(r6, 0x0, 0x1, &(0x7f0000000040)=""/95, &(0x7f00000000c0)=0x5f) tkill(r1, 0x1000000000016) [ 825.987668][T31720] encrypted_key: hex blob is missing 11:15:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:39 executing program 2: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r0 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 826.098434][T31882] binder: 31852:31882 ioctl c0306201 0 returned -14 11:15:39 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) getpeername$unix(r0, &(0x7f0000000700), &(0x7f00000002c0)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000000000000000000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:39 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000140)=@md5={0x1, "c2fd6e76be347d8ae38fe9dfe5866fa7"}, 0x11, 0x1) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) [ 826.642585][T31932] encrypted_key: hex blob is missing 11:15:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 826.926777][T32152] encrypted_key: hex blob is missing 11:15:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x18a) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000280)) r2 = gettid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000000)="b1491094a1da813e68dcc821b3ab8633ba7816b8b329a0a1637f1319049fa84d56672f0cf6a39415a83774ae3775ee0444bc762cfa2891c14f362b7cd38fa90ff3d73f0cbf7a8a76f20498a2afa53f6c9b740717919d15df362719aa1d4279c042fcd5b5d576161ada86b57d53c8c86dc0a4000089fb61d40a39e642039acaf18a24d76750ffe362e54593592879ac36cf67c15e180ad5c03ac4c9640e1cf9c980c5f6656be4db4c6f8ceed304cec8b1cdc11200642902f6d55cf1c067bada82a23fc8ba2fd98c5d99c04fbb1c4290ae170a879bdf1000b1889b38e9bd7e05c149654071b5e28d07fd45c34b91c6", &(0x7f0000000200)="d923717073048e12416434b0aa526edb1b948bbb2f322e5da1356737db44272b85de92e18883a72b2df394d21c68a015d6cff2123b8254740364ed74e3e18baffca31af1506b63dc1fd86ef89fc10bb1f44f413df1b920287d0bc57b7263170c7e"}}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) setuid(r4) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) r5 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r5, 0x13) pselect6(0x40, &(0x7f00000003c0)={0xff, 0x0, 0x38, 0xa000000000, 0x10000, 0x4, 0x9, 0x2}, &(0x7f0000000400)={0x5, 0xd7c2, 0xed, 0x40, 0x3, 0x48bd, 0x1f, 0x7ff}, &(0x7f0000000440)={0x0, 0x4, 0x200, 0x1, 0x10, 0x7, 0x7fffffff, 0xfffffffeffffffff}, &(0x7f0000000480)={0x77359400}, &(0x7f0000000500)={&(0x7f00000004c0)={0x8}, 0x8}) dup3(r0, r3, 0x0) tkill(r2, 0x1000000000016) 11:15:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:40 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffe000/0x2000)=nil) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x1000000000016) r2 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000280)=0x1, r3, 0x0, 0x0, 0x1}}, 0x20) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7fffffff, 0x100) ioctl$KDADDIO(r4, 0x4b34, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0) move_pages(r1, 0x4, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f00000001c0)=[0x100000001, 0x200, 0x200], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) openat(r5, &(0x7f0000000040)='./file0\x00', 0x2080, 0x4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000400)={0x6, 0x1, 0x1, r2}) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 11:15:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:40 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x7ffffffe) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000040)={0x3}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7d2aee06000000b1e82f62d38d0478326000000000c6d6184ca80c9a3eda938c1de28f9075f0b1c270a56c8617a0c364034c0356df1ca1f5a7ef123dee5cb32e3f1e012769588da65081ab2a0b86ed27da483695684ebe4d036cb311917193bddee54b008dc48488e80d4a1560522db648e48f9d64b117bb410b2d7c74f3ff85b869f3"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000001c0)={0x280000000000, {{0x2, 0x4e22, @empty}}}, 0x88) fcntl$setstatus(r3, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='`age\x8b\x7fp\xe7') sendfile(r3, r4, 0x0, 0x10000000000443) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000600)}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x800, 0x0) 11:15:40 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa0000000000400003000001000000000000002560b700fff0c30000000000000000000a00000006"]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x38e}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r5, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x4, 0x4, 0x5}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e24, 0x2, @local, 0x2}}, 0xd57, 0x80, 0x5ce0, 0xfffffffffffffffa, 0x5}, &(0x7f0000000300)=0x98) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000040)={0x0, @motion_det}) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 827.272012][T32282] encrypted_key: hex blob is missing 11:15:40 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x7fd) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="b1000000d707000000000000000000000000004ea503efedbf08224ff9e091435bf5d2c3b15d9661083228a49efa39f72e665cf7997bd6a1d59500c42c41a9b1ea0d16de507e224dee9b4a74961d97b73163788b837bc1f65beba26200020000f164cff858de3b28f17339e81edb3194f7754dc988fa93c880d0bc0947e2e1e9032ac908658116e915ec2c3db1db199a6720173ce1660929f63ffeea61cd153afd11d9c2ffcbdc485194498d8b0261e58e699833fb92525cb33a1bdc0cf4a5c04ef2e16084246ecac8d4"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000140)='/dev/dsp#\x00', &(0x7f00000001c0)='*\x00', &(0x7f0000000200)='cbc(blowfish)\x00', &(0x7f0000000240)='*\x00', &(0x7f00000002c0)='vmnet1\\vboxnet0^]\x00'], &(0x7f0000000600)=[&(0x7f0000000380)='/dev/dsp#\x00', &(0x7f0000000440)='pagemap\x00', &(0x7f0000000480)='skcipher\x00'], 0x100) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:40 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x4, 0x4000) creat(&(0x7f0000000380)='./file0\x00', 0x40) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x4800) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000400"], 0xe) r5 = dup3(r3, r2, 0x80000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x5}, &(0x7f0000000140)=0x8) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)={0x190, r7, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffeff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc84}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa9b}]}, @TIPC_NLA_BEARER={0x120, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x400, @dev={0xfe, 0x80, [], 0x24}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7fffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10000, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}}, 0x5, 0x401, 0x3, 0xff, 0xa}, &(0x7f00000002c0)=0x98) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r8 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r8, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r8, r9, 0x0, 0x10000000000443) writev(r8, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r8, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sched_setattr(r1, &(0x7f0000000000)={0x30, 0x7, 0x1, 0x4c, 0xffffffffffffffff, 0x3f, 0x6, 0x2}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x2) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 827.577952][T32500] encrypted_key: hex blob is missing [ 827.614681][T32508] binder: 32505:32508 got transaction with invalid offset (0, min 0 max 0) or object. [ 827.666019][T32508] binder: 32505:32508 transaction failed 29201/-22, size 0-8 line 3241 [ 827.717247][T29861] binder: undelivered TRANSACTION_ERROR: 29201 11:15:41 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001000000000000000300ff0100000000100084df183b8b06cfbbe000000100000000000000000000000000000000002000080a0000000000000066fd1d455d25f6911c521a5a5d18fe341c6d26f430c6cd02dcb338d4e8de86fb13826da2fa546aedca7b7c1b3c4088a3336852fad687c35778f4e1755abef97e3f6e17b81a003b4f5220c3c31114d4bba870c25092910cfd0646226d23c1f98d318501bc33dc6e5b08665736d4cf43782483154edb7db49039a734e246fc175495f59a83acbd5c897110d963b015ad6daf966ad3fbb8bba4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x32, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @empty={[0x4]}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:41 executing program 5: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x4, 0x80000) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000180)=0x5c7f, &(0x7f0000000200)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x399000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1007) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) select(0x40, &(0x7f0000000240)={0x8000, 0x0, 0x1000, 0x6, 0xa0f7, 0x8001, 0x0, 0x101}, &(0x7f0000000280)={0xb1d6, 0x794, 0x7f0000000000000, 0x2, 0x0, 0x4, 0x80, 0x401}, &(0x7f00000002c0)={0x2, 0x9, 0x1, 0xfffffffffffffffe, 0x3, 0x6, 0x4, 0x101}, &(0x7f0000000300)) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200002, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @local, 0x2}, 0x1c) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000380)={r4, 0x1}) ioctl$VIDIOC_S_JPEGCOMP(r4, 0x408c563e, &(0x7f0000000400)={0x6, 0x7, 0x10, "5de362b85d91699fc53582129e897b0863c5973698e5620d7da8d3ce5cd94cdd31443454aa34aea12d2db76a3bca34d21afca8ab161dd73ef9620af6", 0x2e, "204578e6c40c7f188062353d23dbde55f90fdb942c4b398d24b6a8d233201dfd25fee9e2730306692e072e5f377e3c9e53f62375aad882e4252a6981", 0x8}) r5 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r5, 0x13) r6 = dup3(r3, r0, 0xfffffffffffffffc) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000340)=0x74) ioctl$VIDIOC_S_AUDIO(r6, 0x40345622, &(0x7f00000003c0)={0x110, "6414e690a8d7b03052ff92480274cd44e54dd647cdf2456880e8d1debd0847bc", 0x3, 0x1}) tkill(r2, 0x1000000000016) 11:15:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:41 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x10000000000000, 0x0, 0x0, 0x0) [ 828.134131][T32727] binder: 32726:32727 got transaction with invalid offset (0, min 0 max 0) or object. [ 828.150207][T32728] encrypted_key: hex blob is missing [ 828.159115][T32727] binder: 32726:32727 transaction failed 29201/-22, size 0-8 line 3241 [ 828.174907][T32727] binder: undelivered TRANSACTION_ERROR: 29201 11:15:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 828.264675][ T367] binder: 329:367 got transaction with invalid offset (0, min 0 max 0) or object. [ 828.318611][ T367] binder: 329:367 transaction failed 29201/-22, size 0-8 line 3241 [ 828.333952][ T7095] binder: undelivered TRANSACTION_ERROR: 29201 11:15:41 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x420000, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x7f) r1 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000c70700020000000000000000000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r3, 0x4, 0x2001) fcntl$setlease(r1, 0x400, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, 0x0, 0x10000000000443) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 828.471767][ T475] binder: 474:475 got transaction with invalid offset (0, min 0 max 0) or object. [ 828.511992][ T475] binder: 474:475 transaction failed 29201/-22, size 0-8 line 3241 [ 828.520402][ T478] encrypted_key: hex blob is missing [ 828.581342][ T7095] binder: undelivered TRANSACTION_ERROR: 29201 11:15:41 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2001) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000700)={r2, 0xd9, "6462e2b6f43be6263e01695999ed1cbdc60e90b53937a3eb11701b9b7ddc394a3595f624b63828fb386cfc2a9210cd47ffe9c55fc78659151264b3ab588f1dc86eedd744be63d22993d0d01ad24ea0ec86dc18ac8d843419878a2a293057cdd5c40228690da6639e65ce55115e957f5cf9b87f4c694b7fd4777dcff69d9f29fbcd40addd3e5b182441aa59373518e9ccc14ec097810f1074b279d7985dd268bd17dc47efc7e5043a22d572516b5ceddca5b7484e9fdd4ffe8fd91d5ce0157fbddcbffdb97833c2328434f5bf729b62b9e35d7e12ce1c6cd7f7"}, &(0x7f00000001c0)=0xe1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r3, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 828.704501][ T589] binder: 572:589 got transaction with invalid offset (0, min 0 max 0) or object. [ 828.771981][ T589] binder: 572:589 transaction failed 29201/-22, size 0-8 line 3241 [ 828.797564][ T605] encrypted_key: hex blob is missing [ 828.804762][T29861] binder: undelivered TRANSACTION_ERROR: 29201 11:15:42 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r1, &(0x7f0000000040)) tkill(r2, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:42 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0xf) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) recvmmsg(r2, &(0x7f0000001800)=[{{&(0x7f00000001c0)=@ipx, 0x80, &(0x7f0000000040)=[{&(0x7f0000000700)=""/209, 0xd1}], 0x1, &(0x7f0000000600)=""/147, 0x93}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/11, 0xb}, {&(0x7f0000000240)=""/25, 0x19}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x3, &(0x7f0000000440)=""/113, 0x71}, 0x6}], 0x2, 0x40000000, &(0x7f0000000380)={0x0, 0x1c9c380}) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000002b40)=ANY=[@ANYBLOB="2249e2c9d9bc4bccb47b97f0385647815e9abe370a3d81923294d68cedf0743a027531a3db80caa2c8fab0c65d0a0d2e64bbfda86740a8746bf796e7e0bb1b25c303434f9192efbd51f03b62873d03a963b1a2f9b7a248b4a950dcce27f8e960638cec0709f4f8c4b64effcec577877c"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2001) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000018c0)={0x0, 0x0, [], @raw_data=[0x3, 0x1, 0x2, 0x7, 0x5176, 0x7, 0x8, 0x9, 0x1, 0x101, 0x0, 0x5, 0x1, 0x1, 0x7, 0x4, 0x6, 0x1000, 0x4, 0x0, 0x9, 0xfffffffffffffffb, 0x1029, 0x3, 0x9, 0x9, 0x9, 0x7, 0x1, 0x3, 0x8, 0x5]}) fcntl$setlease(r1, 0x400, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0x10000000000443) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(0xffffffffffffffff, &(0x7f00000003c0)=""/72, 0x100000104) write$UHID_CREATE(r4, &(0x7f0000002a00)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000001a00)=""/4096, 0x1000, 0x64, 0xffffffffffffffff, 0x80000001, 0x1, 0x2}, 0x120) write$input_event(r1, &(0x7f0000001880)={{0x77359400}, 0x0, 0x9, 0xaa2}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000019c0)=0x1000) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) r4 = gettid() clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r2, 0x4, &(0x7f0000000180)={{0x77359400}, {r5, r6+30000000}}, 0x0) tkill(r4, 0x13) dup3(r0, r3, 0x0) tkill(r1, 0x1000000000016) [ 829.080392][ T810] encrypted_key: hex blob is missing [ 829.103699][ T818] binder: 808:818 got transaction with invalid offset (0, min 0 max 0) or object. [ 829.158366][ T818] binder: 808:818 transaction failed 29201/-22, size 0-8 line 3241 [ 829.176623][T29861] binder: undelivered TRANSACTION_ERROR: 29201 11:15:42 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:42 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x0, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000240)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000000000000000000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={r4, 0x8}, &(0x7f0000000200)=0x8) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 829.297553][ T929] binder: 925:929 got transaction with invalid offset (0, min 0 max 24) or object. [ 829.307653][ T929] binder: 925:929 transaction failed 29201/-22, size 24-8 line 3241 [ 829.331739][ T929] binder: undelivered TRANSACTION_ERROR: 29201 11:15:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 829.418721][ T1008] encrypted_key: hex blob is missing [ 829.476468][ T1075] binder: 1060:1075 got transaction with invalid offset (0, min 0 max 24) or object. [ 829.486969][ T1075] binder: 1060:1075 transaction failed 29201/-22, size 24-8 line 3241 [ 829.517397][ T1075] binder: undelivered TRANSACTION_ERROR: 29201 11:15:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 829.645237][ T1159] encrypted_key: hex blob is missing [ 829.681824][ T1162] binder: 1160:1162 got transaction with invalid offset (0, min 0 max 24) or object. [ 829.691512][ T1162] binder: 1160:1162 transaction failed 29201/-22, size 24-8 line 3241 [ 829.700694][ T1162] binder: undelivered TRANSACTION_ERROR: 29201 11:15:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:42 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x9, 0x10000) fcntl$setstatus(r2, 0x4, 0x2001) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x2001) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x9) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r5, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000700)={0x0, 0x0, 0x1, 0x0, [], [{0x5, 0x1, 0xffffffff, 0x1, 0xd94, 0x8}, {0x0, 0x6, 0x6, 0x0, 0xfffffffffffffffb, 0x2}], [[]]}) 11:15:42 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xff, 0x240041) write$P9_RFLUSH(r2, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) 11:15:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 829.996451][ T1280] binder: release 1278:1280 transaction 140 out, still active [ 830.006157][ T1280] binder: undelivered TRANSACTION_COMPLETE [ 830.031708][ T1282] encrypted_key: hex blob is missing [ 830.072409][ T7095] binder: send failed reply for transaction 140, target dead 11:15:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c, 0x0, 0x21, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00'}, 0x30) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getgroups(0x7, &(0x7f0000000180)=[0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff, 0xee00, 0x0, 0xee01]) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={r1, r2, r3}, 0xc) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x600200) r6 = gettid() setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f0000000340)={0x2b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x4, 'none\x00', 0x20, 0xfff, 0x46}, 0x2c) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80010, r5, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0xe00}], 0x1, 0x9ad) r7 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r7, 0x13) dup3(r0, 0xffffffffffffffff, 0x0) tkill(r6, 0x1000000000016) 11:15:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:45 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setitimer(0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000000000000000000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) syncfs(r1) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000200)={0x50cad6e5b4079f8d, 0x0, [0x7fffffff, 0x2, 0x3ce, 0x7fff]}) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f00000001c0)={0x2, 0x1, 0x1, 0xffff, 0x4, 0xdb1}) 11:15:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:45 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000140)=0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="b1a94a210000000000010000fffef8602aba43d7f27566658fafad574d55b915f3b682e016dc5a02ef1a827990a3976914936c0f922afb7e"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:45 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2000000000008040, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$security_capability(r2, &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000500)=@v2={0x2000000, [{0x7f2, 0x1}, {0x71, 0x9}]}, 0x14, 0x3) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r3, 0x420, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) fcntl$setlease(r2, 0x400, 0x2) tkill(r1, 0x13) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000540)={0xfffffffffffff49d, {{0xa, 0x4e22, 0x800, @empty, 0x80000001}}, {{0xa, 0x4e22, 0x6, @mcast1, 0x439}}}, 0x108) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x4) pselect6(0x40, &(0x7f0000000080)={0x81, 0x3, 0x9, 0x4e45c590, 0x1ff, 0x1bc8e6eb, 0x2, 0xae0b}, &(0x7f00000001c0)={0x4, 0xffffffffffffffe1, 0x8, 0x1, 0x8, 0x6, 0x1, 0x1400000000000000}, &(0x7f0000000200)={0x0, 0x0, 0x9, 0x40, 0x2, 0x6, 0x7, 0xfffffffffffffbff}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={0x7fffffff}, 0x8}) tkill(r0, 0x1000000000016) fcntl$setlease(r2, 0x400, 0x3) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 832.144506][ T1504] binder: release 1498:1504 transaction 142 out, still active [ 832.154878][ T1505] encrypted_key: hex blob is missing [ 832.162908][ T1504] binder: undelivered TRANSACTION_COMPLETE [ 832.183562][T29861] binder: send failed reply for transaction 142, target dead 11:15:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 832.265154][ T1687] binder: release 1685:1687 transaction 144 out, still active [ 832.284453][ T1687] binder: undelivered TRANSACTION_COMPLETE [ 832.316806][ T1702] encrypted_key: hex blob is missing 11:15:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:45 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f0000000340)=""/72, 0x3e) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) [ 832.347529][ T7095] binder: send failed reply for transaction 144, target dead 11:15:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 832.416032][ T1838] binder: release 1807:1838 transaction 146 out, still active [ 832.443818][ T1838] binder: undelivered TRANSACTION_COMPLETE [ 832.498808][ T1850] encrypted_key: hex blob is missing 11:15:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 832.553750][ T7095] binder: send failed reply for transaction 146, target dead [ 832.639975][ T2030] binder: release 2021:2030 transaction 148 out, still active [ 832.655930][ T2030] binder: undelivered TRANSACTION_COMPLETE [ 832.732198][T29861] binder: send failed reply for transaction 148, target dead 11:15:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x20012}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:45 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000000000000000000000"], 0x13) fcntl$getflags(r2, 0x40a) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)={0x3b, 0x6, 0x0, {0x0, 0x4, 0x12, 0x0, '.$posix_acl_access'}}, 0x3b) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r4, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r4, r5, 0x0, 0x10000000000443) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r4, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:45 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000001c0)={[{0x7, 0xfffffffffffffffa, 0x2, 0xff00000000000000, 0x9, 0x9, 0x4b86, 0xfffffffffffffe01, 0x3, 0x546, 0x4, 0x2e00, 0x7}, {0x1, 0x1000, 0x8, 0x10000, 0x842, 0x2, 0xff, 0x80000000, 0x8, 0xff, 0x3f, 0x1, 0x8}, {0x3, 0x7, 0x5, 0xfa00, 0xffffffff, 0x69b0, 0x5, 0x7, 0x5, 0x4, 0xff, 0x8, 0x2008}], 0x3ff}) r3 = dup3(r1, r0, 0x80000) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f00000002c0)={0x5, 0xe0000000000000, 0x1f, 0x10001, 0x6, 0x4}) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b100000000000000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) futex(&(0x7f0000000040)=0x2, 0x0, 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000240)=0x1, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r4, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r4, r5, 0x0, 0x10000000000443) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r4, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:46 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000200)) tkill(r1, 0x13) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7ff, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000280)={0x0, 0xfffffffffffeffff}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000300)={r4, 0xdaa9}, 0x8) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$RTC_PLL_SET(r5, 0x40207012, &(0x7f0000000040)={0xef, 0x2, 0x4, 0xd, 0x5b24, 0x6, 0x3}) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 833.039074][ T2067] binder: release 2066:2067 transaction 150 out, still active [ 833.063184][ T2065] encrypted_key: hex blob is missing [ 833.091339][ T2067] binder: undelivered TRANSACTION_COMPLETE 11:15:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) [ 833.147810][T29861] binder: send failed reply for transaction 150, target dead [ 833.207775][T29861] binder: release 2151:2173 transaction 152 out, still active [ 833.225698][T29861] binder: unexpected work type, 4, not freed 11:15:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) [ 833.262455][T29861] binder: undelivered TRANSACTION_COMPLETE [ 833.316831][T29861] binder: send failed reply for transaction 152, target dead [ 833.416414][ T2290] encrypted_key: hex blob is missing [ 833.431756][ T2987] binder: release 2291:2292 transaction 156 out, still active [ 833.439896][ T2987] binder: unexpected work type, 4, not freed [ 833.452910][ T2987] binder: undelivered TRANSACTION_COMPLETE 11:15:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) [ 833.469091][ T2987] binder: send failed reply for transaction 156, target dead 11:15:46 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000000000000000000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da231a", 0x3c9) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 833.529487][T29861] binder: release 2395:2396 transaction 160 out, still active [ 833.548623][T29861] binder: unexpected work type, 4, not freed [ 833.607474][T29861] binder: undelivered TRANSACTION_COMPLETE [ 833.615144][ T2401] encrypted_key: hex blob is missing [ 833.637274][T29861] binder: send failed reply for transaction 160, target dead 11:15:49 executing program 5: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x2, 0x962, 0x4, 0xffff, 0xff, r1}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) dup3(r0, r3, 0x0) tkill(r1, 0x1000000000016) 11:15:49 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) fcntl$getown(r0, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000445) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="780f8252a562ef6a13780620a55a13c7e02c82e31f4d68d9850fdbe32d84b593d114dc2dbb", 0x25}, {&(0x7f00000001c0)="fb7c48be40ce6bed03014bf51dec78fca802f1c7123fb3e914316b1af4ef87b5f539a6d23272f9e87381f1c84ddccc69fad1fd11a1adda1b2d39cc585a2b5cf0a1e52ed56fe27401ca05cd326e8fe347379fbc7b0194b545eba6b9b3cc2f61adf2e0be", 0x63}, {&(0x7f0000000340)="b215e68eafc1b4a1d8ea89393a877b0cbeda0960965ef4feb4cc94ee47a119a8aed6841c2045deace49fcabb0536d44535f4eb84e8d07f92c3ee51bfbf3929f020dd8ebaff7b5c1c", 0x48}], 0x3}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:49 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000001c0)={[{0x7, 0xfffffffffffffffa, 0x2, 0xff00000000000000, 0x9, 0x9, 0x4b86, 0xfffffffffffffe01, 0x3, 0x546, 0x4, 0x2e00, 0x7}, {0x1, 0x1000, 0x8, 0x10000, 0x842, 0x2, 0xff, 0x80000000, 0x8, 0xff, 0x3f, 0x1, 0x8}, {0x3, 0x7, 0x5, 0xfa00, 0xffffffff, 0x69b0, 0x5, 0x7, 0x5, 0x4, 0xff, 0x8, 0x2008}], 0x3ff}) r3 = dup3(r1, r0, 0x80000) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f00000002c0)={0x5, 0xe0000000000000, 0x1f, 0x10001, 0x6, 0x4}) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b100000000000000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) futex(&(0x7f0000000040)=0x2, 0x0, 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000240)=0x1, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r4, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r4, r5, 0x0, 0x10000000000443) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r4, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:49 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000000000000000000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x0, 0x41, &(0x7f00000001c0)="c5758a033defa3447360f3e33460d71d86380e1e93119bfe70b4a8b58a9f3638a48329814e22d8fa2e858141152097d1f9cda56884b7ca1e49dacbded66a5251ab4c1ffaa3ea9a65eacc00c62d9cb146218062667666f67ff63cd7b2465d98a49a13efb46337f062e9520a30a777ae029f05a295ebfa36f042b97dd5f3d148e491f348524dc66aa3ce5ee88c3c40286041ae55fec6a12557cb7bdd44ac62d07a56", {0x6, 0x100000001, 0x59555956, 0x7, 0x6, 0x80, 0xb, 0x1f}}) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:49 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x400000, 0x0) poll(&(0x7f00000003c0)=[{r2, 0x40}, {r3, 0x2}, {r4, 0x1480}], 0x3, 0x5) tkill(r1, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) r5 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2a2, 0x200000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0xbc, 0x5, 0x8, 0xfff, 0x7, 0x534, 0x7, 0x3, 0x1, 0x81, 0x80000001, 0x401, 0x8000, 0x9, 0x8]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000080)={r6, 0x3}, &(0x7f00000000c0)=0x8) [ 836.130932][ T2520] encrypted_key: hex blob is missing 11:15:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 836.330305][ T2744] encrypted_key: hex blob is missing 11:15:49 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setitimer(0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000000000000000000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) syncfs(r1) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000200)={0x50cad6e5b4079f8d, 0x0, [0x7fffffff, 0x2, 0x3ce, 0x7fff]}) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f00000001c0)={0x2, 0x1, 0x1, 0xffff, 0x4, 0xdb1}) 11:15:49 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="b100a200d7e30000000000000000f2d6cce62a37ac78349bb2e343743cda64546a8691cab8058dada1fcc6ccd35395abc8d5ccefb3a6e9f77b53077681458b0ad330d19363385333e7a096ecc82565a82dd96a6c7f4645a7ed21ef43f7f84840273284f2070b1c0a5bdf1360179efbb0e7f98563f1bc16586e124ab86e96af2ee7dafd6619a608e34254967fafefb07ec6310e93f4"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r0, 0x0, 0x101) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:49 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000000000000000000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x0, 0x41, &(0x7f00000001c0)="c5758a033defa3447360f3e33460d71d86380e1e93119bfe70b4a8b58a9f3638a48329814e22d8fa2e858141152097d1f9cda56884b7ca1e49dacbded66a5251ab4c1ffaa3ea9a65eacc00c62d9cb146218062667666f67ff63cd7b2465d98a49a13efb46337f062e9520a30a777ae029f05a295ebfa36f042b97dd5f3d148e491f348524dc66aa3ce5ee88c3c40286041ae55fec6a12557cb7bdd44ac62d07a56", {0x6, 0x100000001, 0x59555956, 0x7, 0x6, 0x80, 0xb, 0x1f}}) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 836.689494][ T2872] encrypted_key: hex blob is missing 11:15:49 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x80, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x1, 0x101000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000001c0)={0x108, @tick=0x8, 0xffffffffffffffaa, {0x3, 0xff}, 0x8, 0x0, 0x3}) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r3, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, 0x0, 0x10000000000443) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) recvmsg$kcm(r3, &(0x7f0000000180)={&(0x7f0000000040)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/72, 0x48}], 0x1}, 0x40) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r1, 0x0) poll(&(0x7f0000000100)=[{r4, 0xe00}], 0x1, 0x9ad) r5 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r5, 0x13) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) fchownat(r3, &(0x7f0000000280)='./file0\x00', r6, r7, 0x1000) dup3(r1, r4, 0x0) tkill(r2, 0x1000000000016) 11:15:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:49 executing program 1: pipe(&(0x7f0000002200)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002240)='/dev/qat_adf_ctl\x00', 0x129802, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002280)='/dev/dsp\x00', 0x4080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r2, &(0x7f00000023c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0xafcc0b53656db26e) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) sendmmsg(r3, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)="0adadb5c62060620ddc6d223ed2bd162812d46b0ed71348d36593808e0eb3ac603389468357c1a0c4a3b066b55a50f95e1b5bc65d7a8b84d8fc8d47ff74c654d4834b624237a2c60749b5e7716e7ff38df94a6312c7b286cd1e7e95f6d04d5983d7e37bb70e1a54bd352fa0f1c98cff581078094e15acb73b5b9c4892dc1d83f0ad799470833298cd1fb1fbf761bd62f99375895f3c316134792d6140cd4c852fc17e06ca2baf516c0632c134f81c16e030b87813d2ca4f6b6500c50df6d895953505c5e1282ce4c4fb7caca7ae3995289424276ad4973df1d1e0019eef5430e54a148cf2e1a77d0", 0xe8}, {&(0x7f0000000040)="65c0c36f9719daaa581af4429c0a47ed03d2eee2665ca5782db93aa6c14923017a91448d9161eaad14349a", 0x2b}, {&(0x7f0000000140)="e8465577821305918b9b9fd3482b1bdb653aac", 0x13}, {&(0x7f00000001c0)="6127784ffbaeb15e012c41a71904d65eb2af4f27f958ad749e78c7744cb393ff4990bd71918878e4b3f23f536404c488fcffac67f9c7d743fe38c09b9048647f289fb3007d477bb5d51d67b532624f7f708c6ed0a5f98987a4dd21380aced5aff9", 0x61}], 0x4, &(0x7f0000000800)=[{0x40, 0x0, 0x1, "db8176b542f94ff691a4ab0f99aa83922b6442db9db586771cd1a2cf13277dd31b32c3160582ba7732bbf3"}, {0x68, 0x1ff, 0x80, "77fd02135ce98f08cff68ef1fc39336765aac69045a50cd10fe6edf63f3591d54bf8b5ff07efaa2d31c4daaf711d49447b30fc68469ce3f7f980add4294b3a50e885a18a64aa8b68c111f9ce3660291fba"}, {0x18, 0x100, 0x8, "77dc9d95d2c5be"}, {0xa8, 0x10f, 0x80, "0f5a6dca29e200dd54d6c24142e44d4e4d6224bdda0080bba5fbbffe7b0a246c19d3978e99c27ac463418fd6260929455d546bfb657a5771c87b7b832a8261341c35f96187001124d20bd772e5612549d3a74eb1d7176db2a030573422f72ee572f30cbca9cff86f3a1912daba5649e92b7c72ba107df78309f19700fc7f5ad571f658c21d76220d36996ceb28451e85169bd1fd"}, {0xe8, 0x89, 0xc4c7, "e8dd48f822d2d3056537682ee687effd497bac3d9da55179d5240cfdce63e1f086ec0c5be21356706b9c34cf6231ae4aee3b318009b9260a6c514dd00a323bce089d373c6b55df8d24ba4b543b44e4a99dffd721fdb2d5e8397a81a9c0abcbb04996e1f8d2db2abc54e36ee2c1ed2a4faf67342aede126c4a5a79f8ac67c069dcb7e2424813637404d8fddf4d2814e6e3057adaac019dbc3a3dcb895c4e5309d971741df911d51fddde452fbb02fcae75863b441b93dd7e2362494b14c422c55c2504fdfe1ff54c3567eb3b59f76fb6bf1"}, {0x18, 0x112, 0x1000, "b1e3f2"}, {0x40, 0x111, 0x8001, "9c325b52b8710e983addd84098e9ec5cb5b3ee2a102459a20ccac8d5a04699295b5d0e35fd292c44ef"}, {0xa8, 0x11a, 0x8, "a9591557c030d0b6bcb1c1c1834580b39356ff33d9b52e893481a1b78ad9636a3dc4417ac43110130fd35b74a7a9f18d45059f4b9954e4e85c1b483c5075784b0f47c66867a3bfa6f81f6778e8f63da1fb414be000c18558ed19be1e53de376ecadf639d718ac41dbe255573b412b65785511fae892cc19f015e89ac2b32ab6d2933544591b41047f1ab54953259b7f65b37beb7"}], 0x350}, 0x24000000}, {{&(0x7f0000000340)=@llc={0x1a, 0xffff, 0x65, 0x8, 0xfff, 0x3, @broadcast}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000002c0)="8a04b3ea61728c631605a500fe60", 0xe}, {&(0x7f0000000b80)="b9300fba060e8fd67f998ad14e904c1af90ea95eb0e4180ace4d81fe879578c2fc710fbf6bf92cd569905841d00141bad3fb3c5e471560880fd264638efa4fd2a526519861b2c7d0b23b0b9632799e42d009780d6973221ab179a026cd26aa6199e5540b4d361a403f1f13ffe2877bd96b8efec11d6d5a4920c54a2fc43f73c1c7bc84630db91c94ca041d35dbcae6c38d079d2ef35632f1f422e9204f012825aafc5f6c579794306e0bf55fa5f0e0bef5bd8d8a0469bae6594db2c5f00fdc486d005451f8669d4ac173551441fe09018c3c2f909374465780c1c6bcd4355a4cfc45665173bc54a6c0c4a4395e06", 0xee}, {&(0x7f0000000440)="54e75241bc1e0be21d5475a01ce23fe1b15dab7a4d5007f3be3ac4e391a3e506fb0fa1d8570b6cbbd2943a011978a47ead50639c87c64e2f63ffce40b3eb3b124b50f1bebfbc83531c45f8b8cb6d322b6f0a883286f3fb5fc8d51546804e068bee64e3acb407de", 0x67}, {&(0x7f0000000600)="66e9ebebadda0be7514e025c0e76662d8e51de4a0403a5b01de1ed7cb3699b7d2135e0b0a71d5a9afa0fcbc2d6649a27c80cddd41c1bdc144593dd6fd9458cc6a17b5c7e7a1a8d3b76e422e0677395d973f9b26c65eaec76249d68aaa404ca7f9d09967d26c4950827dfe85117", 0x6d}, {&(0x7f0000000c80)="023a685bec903369bcf4b70d956a28eb3d0a7ea00543d81c305218cc34703fe01a9b0ba4252b60e3d7db37d912cc1537594b155ed2838602717f025b206a6cc980a74b8a0b7236f7ef608b9441b247536d1e9b87fe1cc5b3592bdbf55e51b7b99f469eae89dfe140e6f29c9fea69a145fe7da79c1bffe356d5cf7c12fce4f63c146bc65672e516d07c", 0x89}, {&(0x7f0000000d40)="f9a060c7361b946f08369aa96bf13c8b87778321bcf73505e4bb84699735660c2b5cf865b423caa0477513651b160dc3e644c2dc4d23769a84a25ab8e20f6f54d1a8c9fdb5c25cb079436c7476f75bae22145022f81a1a9e4e83929ba4e9063c91e013bca799a414054b3ff8c35ab8a8eac317c961248470e8b4c3572694393171dc4cd14e42ad2a22a914977675114bd89a885ec708f1422e0de00610", 0x9d}], 0x6, &(0x7f0000002440)=ANY=[@ANYBLOB="80000000000000001e0100000300000068481dc275dd492bd45390111106da39e9b46d1d31ba8f8494f80cc688f056fdd655b4075c956b289c143b4c5646cd7132762018738dd5a1eaaacf4633b4a247435faf0edaa405cada046fe7369791ed88f519386bdc314e05382443c14bca659d90b7da24abc7be7a7604463b81c20098000000000000000000000000000000920ce7051efbb53b8e5bc6a5680f05b392c50423dbd39116028aba941990a9c6f4ace3eb68036bb49a7ede443611623b68a74f212aff39a77282b70ce406c779596ae3e9a64614b3f80da10d85e4a818abfb5cd9b1d76c12854039ff41d42b8e424fbd66f25710960c0414dd2b17ca46ffbd5a2b54e4ea91646029da23866b5cbc48570000000000380000000000000000000000be0300001c3b98af6ba31a136d129d5f7e74c65198e89839f1ef2c50eb56f7206b23eb70242c75827ca76392b0000000000000009901000040000000a6a3b500330e9879c6160bb21d0eec7c590f75e66726b9639d5d8b7258b59aec0df262e3b81328bb5a776e1b3221d75ea650d70a4742464fbd963bb79f675db85bfafd12ac05c183f9b965d3f2daa2bee61eddd45a444d052a0496e89bd3a0eed0750c3e9e265b6f028fdcc429f88105fc0b1461b4fad8a61a99d61112415db686b02b933eaf41eaea83fec302184fb37271ab5dc2c5d7262b1d000000005c70740000"], 0x200}, 0x1}, {{&(0x7f0000001080)=@pptp={0x18, 0x2, {0x1, @remote}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000001100)="4629b85f09bad73adb910db2743351860207ffe2875943f4c2d5efef57ed41f16ff8cd9112d766fdf68d735b335c0a234b04d785dcfe8302e4af065b40bfce2b219e2d37274563194e0e1938c3ecf88ef33b2cc8dd664e58563a3bc0f368032e6a5afcfc142f4fd2cac7e8a1d8ed8d7e54c477d2ebc4b0528db72d6f9d7932ef84a17b10939d4897bcb4673ef60c881fadb45b58349fb36be363f9e391fe6dd98f2e7b13719f81a6ab2ec8ff99879522e51e952db878600e270999ebcd802cc128e3e9ae781bcf7461a826d39e10f35e1f96b4e6390d", 0xd6}, {&(0x7f0000001200)="1c1edf1293d53e06fce0bceab5141e1a6d7d8fe6c8211405ef00cd72032ad4ddd9bde33033f246788bbf3b8ff7a7ec1fa24d7acce79ad041fbc3373e4df1e99d16f9b502955e51bfaa798199933d4abb3c2f5a", 0x53}, {&(0x7f0000001280)="870622f1da33205d4aa60e396fb80c0de1905e8a18bedb40582e72f25518a7b1253bb7aa314c05707ae3940dd793ef41dc79849f8cf2b78ad5c4b3f68317de9b6a1ae8b12cc96d11d8fae60380514491a792c1d714316a3877a326a0c5a88f685e3f6ff77230ffc03408e1e0ddc173b4ecb1ee32fa9e9bb3bf98c250515f3a5e077f32e37c478038fa6dc13a7b1da773117bf5", 0x93}, {&(0x7f0000001340)="de31c3ab85950b44831a19ce1b45cd678b448bcfd9164205c0e852056f6dbf2e7c53ca76e958d67f79f08d9a01faf368f0769817d4d35082c16bdffa23ccd428b6512fffe270a67e03d3e016ee98fedab55217eeaf7f12a4c568a0cd4d1025eb3826970336ec0bc844f314d770d50cc048d427353f3af25cec9146fa77ce4f9df9f78375c43a49862cf4839f4133eca61a521db1", 0x94}], 0x4, &(0x7f0000001400)=[{0x20, 0x116, 0xd, "f146810be47543e3786627"}, {0xe0, 0x0, 0x8001, "0a63e77ac3042f6b08666e4236dc5c68ddac6947b413b56d1c26aa81e08477ba89fc6da71fb794180f422219a4c9ba02a727deb71061ecf40af9d48344ba6368c8627c2ff7ab965203c255631369aa26c8d5f3c77f404530be7bd8f4328476729eba4a2bd96bb022013f36180d4e8edf950760c8a25ee1e7372e6fcde9d4ec5280bb16156b93e99622c7e0d46dd817e350fd9050854d88c4793898ce3d26abc5fcc4009c101aaa2ab4c014821d22982388368133493267f179b42115fe9f9d83f911b82dc0c2d467ef95b2ce21bb7d00"}, {0x80, 0x186, 0x3f, "7d78726d0e5f7cc2e34e0772c0fe7727d521b6bff3122b5502dd0ddc6205a648176a3635ee5dfa00ba23806789d90e758f04e0d62d54c2aee4617a12179fdefa43ea3df83b36820590540d9b8f18ff9a87369cf640a79ef425280efca350f9ac930a977c2cc76aa9c8ec"}, {0x68, 0x1bf, 0x800, "b88aad08f8e978bcd4e51b9e9dc1edd5b20eb2bc5cd82ce42be22013da81027a90843a5b663d12a180fa7fc12d2333f4d2b39f925cebcce404e4015bf1144b295f45910ce5647e4c70fecea412c041c49318"}], 0x1e8}, 0x2}, {{&(0x7f0000001600)=@llc={0x1a, 0x321, 0x0, 0x63, 0x3, 0xfffffffffffffffa, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001680)="7fc3690351e2275dfbb902cf6cf6a4f6cdb7ccd9266e5158895ba75d56773666f6213f101bed3ec1830c0338178e287511134f116e8c0a7e0ea6c369ba498e4bb5a6c4cc6a62204bda4dfba45fa7dbe4efd651e96426376ddc396f232820e271bf97eb068680042eebeb585b", 0x6c}, {&(0x7f0000001700)="741aeee9d20591094e7bf493ee50df74396b6c5f3ec8f3f35f316b2bd7ad28d1c5d4bb2bfbb211bfd7fe22d1611bae5695e27e66fb23147c76d11fb6d174f0f13b274dfbc4dd9483aaa26e3b4abd53311c9b547dc37b908cfb574ee2973ef23dcfa65948", 0x64}, {&(0x7f0000001780)="3b13fe520d104c2a953dc748f300298833e07edd43e339b4be5f752fa6e4a517bda0f28ac0469f43adbd61d831f6cd82ca10e73310773e7f475b335f98d6db69c6775b8b0a881df5bb1e2f66850a00d2334d1d8af8b87800a2eb260aa45d33b411c6f704404c6a7f80a22933294eb00c100490c6d3842b8fb07ee06875e588e862b681d5923bf72775b041237ebc66dd99a47c3cb6310777285432be", 0x9c}], 0x3, &(0x7f0000002680)=ANY=[@ANYBLOB="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"], 0x4c0}, 0x9}], 0x4, 0x0) fcntl$setstatus(r3, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') fsetxattr$trusted_overlay_upper(r1, &(0x7f0000001e40)='trusted.overlay.upper\x00', &(0x7f0000001e80)={0x0, 0xfb, 0x76, 0x4, 0x5923, "f82cc868f0ffb6de9b7384e02af21264", "eb2bdeddeea6b8cbba3f3911f17de0d9cc5dfbde2462b6a31ac534968e8612adbdfff3a3e4eb40b58823b4b164c291fa612c72d8d5c9f06be5380ad6f2d934793c2a9b5ea152828436f1c47f21ea8e4a31f489868f3b1029cb9fb11d56ae0844f9"}, 0x76, 0x2) sendfile(r3, r4, 0x0, 0x10000000000443) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001f40)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000021c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0xd0200080}, 0xc, &(0x7f0000002180)={&(0x7f0000001f80)={0x1f4, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x50df}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x34, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffff7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @loopback, 0x84}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2c00}]}, @TIPC_NLA_MEDIA={0x78, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x1f4}}, 0x8010) [ 836.967547][ T3218] encrypted_key: hex blob is missing 11:15:50 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x220000, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) tkill(r1, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='.\xafcgrWNI\x98sy\xfa0\x00]\xd7\xf4\xf0\xcf\xf0\xcd\n\x97\n\\\xd5\xb0\xdc~\xb9\xbd\xe6z\x8f3\b\xf0\xf5\x1bb\f$\xe6S#U}\f8\xb7\xeb\xc5\x11\xb3c43oz\xe1\xb4\x87\x8cj\x9b+\x15G\xcd\xcf\x19F\xc6\xd26\xf3\xa2\x98Y\xddV\x1d\x87\x8b\x9aK\xd5\xc5\xa0\a\x8a\xff\x0f\x1c+\xf6\x981v\x05S\fm{\xa8\x85i>\xbe,q\xf7\xbc\x16\xb7\xa9\xb3BP\xe6\xb2V\xd5\x91\xe7\xed\x9f\xc9\xb1\xc2j\x8c\xf4\xcb\x87\xac\v\xf2\xa32\xf8\xcd@V\xd4\x0f\nw\xd7\xaa\x11k\xd75a_]\x97\x1a\xf5]\xc6\fi', 0x200002, 0x0) 11:15:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 837.127576][ T3366] encrypted_key: hex blob is missing 11:15:50 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = dup(r0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000040)=0x100) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)='k\x00\x00\x00', 0x1) fcntl$setstatus(r3, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, 0x0, 0x10000000000443) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f00000001c0)={{0x400, 0x70}, 'port1\x00', 0x20, 0x20000, 0x1000, 0x7, 0x2b00000, 0x20, 0x7fffffff, 0x0, 0x2, 0xadc}) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000140)=""/26) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) msgget$private(0x0, 0x4) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xffff, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r2, 0xb20, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa9fc}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9ef}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x64}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40001}, 0x4040000) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r4, 0xe00}], 0x1, 0x9ad) r5 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000080)) openat$cgroup(r1, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) tkill(r5, 0x13) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4000, 0x0) sync_file_range(r4, 0x10000, 0x3, 0x2) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000040)={0x6, 0x3, 0x83a1, 0x10000}) dup3(r0, r4, 0x0) tkill(r3, 0x1000000000016) 11:15:50 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x101040, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="b1000000d707000000000000000000000000001ba2b6f787dad1a5b4212a6b363024afdbfad831f489f7b26decf74e46fe68961f45be81300d6c3c538970d84d081f4ad2585173624659baebcb0b769c5d5a13648a2e7685528516bb215767617a1cd6063d61236a5b70cdd92c207c650982dbab500123eb6d1a3cd1939a69d6508432424c71d411e18949175633db822ca5a1ba865776635c17605651ca0aebfb7f20898e2f7b972ff75d60fde48b5d26a22385446ad2ec2464a56030eaa5b4e75f7fc630c6167b825dcc54"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$SG_IO(r4, 0x2285, &(0x7f0000002200)={0x0, 0xffffffffffffffff, 0xcb, 0x9, @buffer={0x0, 0x1000, &(0x7f0000000200)=""/4096}, &(0x7f0000000000)="2cff8176e82d77b475ee1963f0e40faf81bb91c66d3e43767e7c2486b0c1367fa822cecba78e7f3637c470e937736c1d94da4069f44bcd9bff137059d6604336b70d191dab96d01a9c23df34e80602aa708022975f93e2a337c1a28ffda850778b7a270cb80a41141303fc175d7b9339d14c90002af53642eb3e1fe9aa587eea8866d5a884ddb2b75c6c66a6a8b5fa65a28f856735b375fd0759b021239a2fedc747cf4132a8b1f7f8030807b4b74a2f6b8c0b542a93600dc25678202096ac5fa9e077a76c647261700878", &(0x7f0000001200)=""/4096, 0x0, 0x10000, 0x2, &(0x7f0000000180)}) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 837.362753][ T3655] encrypted_key: hex blob is missing 11:15:50 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000000000000000000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x0, 0x41, &(0x7f00000001c0)="c5758a033defa3447360f3e33460d71d86380e1e93119bfe70b4a8b58a9f3638a48329814e22d8fa2e858141152097d1f9cda56884b7ca1e49dacbded66a5251ab4c1ffaa3ea9a65eacc00c62d9cb146218062667666f67ff63cd7b2465d98a49a13efb46337f062e9520a30a777ae029f05a295ebfa36f042b97dd5f3d148e491f348524dc66aa3ce5ee88c3c40286041ae55fec6a12557cb7bdd44ac62d07a56", {0x6, 0x100000001, 0x59555956, 0x7, 0x6, 0x80, 0xb, 0x1f}}) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:50 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = dup2(r0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r4, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r4, r5, 0x0, 0x10000000000443) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r4, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0xe00}], 0x1ffffffffffffed5, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 837.608564][ T3812] encrypted_key: hex blob is missing 11:15:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x220b00, 0x0) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000040)={0x400, 0x3}) dup3(r0, r2, 0x0) set_robust_list(&(0x7f0000000180)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x80000000}, 0x18) tkill(r1, 0x1000000000016) 11:15:50 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x101000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000100), 0x200000000000005a, 0x809ab) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0xf) fanotify_init(0x1c, 0x8000) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0xfffffffffffffeb6}}}, 0x24}}, 0x4004840) 11:15:50 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000005e80d73700000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:50 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r3}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000140)={0x4, [0x401, 0x8000, 0x2, 0x100]}, &(0x7f00000001c0)=0xc) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000380)=ANY=[], 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000000000000710000400000000d0200000000000000c9090000000000007b7e66b072562aa1ff0b0000000000000400000000000000"]) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = gettid() r7 = getpid() ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x7ff) kcmp(r6, r7, 0x4, r2, r2) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r5, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r5, r8, 0x0, 0x10000000000443) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r5, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:50 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000000000000000000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x0, 0x41, &(0x7f00000001c0)="c5758a033defa3447360f3e33460d71d86380e1e93119bfe70b4a8b58a9f3638a48329814e22d8fa2e858141152097d1f9cda56884b7ca1e49dacbded66a5251ab4c1ffaa3ea9a65eacc00c62d9cb146218062667666f67ff63cd7b2465d98a49a13efb46337f062e9520a30a777ae029f05a295ebfa36f042b97dd5f3d148e491f348524dc66aa3ce5ee88c3c40286041ae55fec6a12557cb7bdd44ac62d07a56", {0x6, 0x100000001, 0x59555956, 0x7, 0x6, 0x80, 0xb, 0x1f}}) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'\nyz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x40000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x20, 0xa69, 0x2, 0x2, 0x0, 0x3ff, 0x480, 0x2, 0x80, 0x1ffe00000, 0x9, 0x7, 0x80000001, 0xfff, 0x8, 0x0, 0x5, 0xdd, 0x8, 0x57, 0x1f, 0x9d, 0xfffffffffffffffd, 0x1, 0x6, 0x1, 0x5, 0x6, 0x81, 0x4, 0x1, 0xfffffffffffffffd, 0x16a, 0x3f, 0x4, 0x1ac, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x4000, 0x9, 0x1f, 0xf, 0x1, 0x800, 0x7ffe}, r3, 0x7, r4, 0x1) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) ptrace$getregs(0xc, r1, 0x2, &(0x7f0000000200)=""/4096) [ 838.004829][ T4042] encrypted_key: hex blob is missing 11:15:51 executing program 2: r0 = gettid() r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x6c, r2, 0x708, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x53e9}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) timer_create(0x7, &(0x7f0000000000)={0x0, 0x34, 0x5, @tid=r1}, &(0x7f0000000040)) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'%yz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x04', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 838.313430][ T4266] encrypted_key: hex blob is missing 11:15:51 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d70700000000000000000000000000"], 0x13) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x1000, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(r0, 0x400, 0x1) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000040)=0x200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) r4 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, r4) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) r5 = dup3(r1, r3, 0x0) tkill(r2, 0x1000000000016) sendmsg$unix(r1, &(0x7f0000001240)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)="21fd75aca91c214e48dc0c926308e978f8e43697d18e57de909c551b6abeea841cbfc3a8058fdac4b2519f89dd87133df86fdb177d7e2ae087b2f904a525612811666173040d2df4fabf8c4212", 0x4d}, {&(0x7f0000000200)="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", 0x1000}], 0x2, &(0x7f0000001200)=[@rights={0x20, 0x1, 0x1, [r5, r5, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0x38, 0x4}, 0x5) 11:15:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'.yz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:51 executing program 3 (fault-call:5 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:51 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000040)) [ 838.616980][ T4386] encrypted_key: hex blob is missing [ 838.630781][ T4389] binder: release 4385:4389 transaction 164 out, still active [ 838.645436][ T4389] binder: unexpected work type, 4, not freed [ 838.653654][ T4389] binder: undelivered TRANSACTION_COMPLETE 11:15:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:15:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x440, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 838.695233][T29861] binder: send failed reply for transaction 164, target dead [ 838.764713][ T4483] binder: release 4478:4483 transaction 168 out, still active [ 838.803424][ T4483] binder: unexpected work type, 4, not freed 11:15:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'Xyz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 838.836797][ T4483] binder: undelivered TRANSACTION_COMPLETE [ 838.879404][ T4603] encrypted_key: hex blob is missing 11:15:52 executing program 2: r0 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4}, &(0x7f0000044000)) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8003, &(0x7f0000000740)=0x4, 0x8001, 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x20040, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x367, 0xc7}, &(0x7f00000001c0)=0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r3}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], 0x95) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) io_setup(0x100000000, &(0x7f0000000200)=0x0) io_pgetevents(r4, 0x3, 0x9, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x8}, 0x8}) r5 = gettid() setrlimit(0x7, &(0x7f0000000000)={0x7fff}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r5, 0x13) tkill(r0, 0x1000000000016) syz_open_dev$amidi(&(0x7f0000000480)='/dev/amidi#\x00', 0x6, 0x400) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000002c0)={'batadv0\x00', {0x2, 0x4e22, @multicast2}}) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) r4 = dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x23, 0x3b, 0xe, 0x5, 0x5, 0x0, 0x3, 0xdc, 0x1}) bind$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) 11:15:52 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r3}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000140)={0x4, [0x401, 0x8000, 0x2, 0x100]}, &(0x7f00000001c0)=0xc) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000380)=ANY=[], 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000000000000710000400000000d0200000000000000c9090000000000007b7e66b072562aa1ff0b0000000000000400000000000000"]) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = gettid() r7 = getpid() ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x7ff) kcmp(r6, r7, 0x4, r2, r2) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r5, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r5, r8, 0x0, 0x10000000000443) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r5, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x2, 0x0) [ 839.112775][ T7257] binder: send failed reply for transaction 168, target dead 11:15:52 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="a7c943a31bfeda300000de7dde50dc0662ba441613910f3928c4d7e90dd6aa36b46256af957306aacfbde56ff00986402936870869d52451d750122ba6ae73824c2600703791a406ff2dc26ed4b8135022dcea5f133272d2267db012fd8bdf1c7e3438049feeb873a5a6b28d928a423a354c891ef650c9a3d16a"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'cyz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 839.197341][ T4722] binder_alloc: binder_alloc_mmap_handler: 4720 20001000-20004000 already mapped failed -16 [ 839.233672][ T4721] binder: BINDER_SET_CONTEXT_MGR already set [ 839.239865][ T4721] binder: 4720:4721 ioctl 40046207 0 returned -16 [ 839.250847][ T4722] binder_alloc: 4720: binder_alloc_buf, no vma [ 839.289504][ T7095] binder: release 4720:4721 transaction 172 out, still active 11:15:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100), 0x200000000000016d, 0x9ad) ioctl(r1, 0x7ff, &(0x7f0000000000)="950c57fa32c4fca8a60593d30012808b04b2060b2cb5092eb2400ea59b3ca763a3fa2a939029d964653829e49ba11cec334ba3a67442818009cf1438ce681b59cc221a081d05f323bdd35d4fd1cc7627b51789596853ca4347bacf7787acf9b5c8d37cdea12e2d4f9023a9cb30ac6a6eefa166d961d2edfe690131e288") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x13) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000180)=0x4) dup3(r0, r1, 0x0) tkill(0x0, 0x1000000000016) [ 839.297670][ T4722] binder: 4720:4722 transaction failed 29189/-3, size 24-8 line 3147 [ 839.308249][ T7095] binder: unexpected work type, 4, not freed [ 839.324125][ T4731] encrypted_key: hex blob is missing [ 839.337463][ T7095] binder: undelivered TRANSACTION_COMPLETE 11:15:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x5421, 0x0) 11:15:52 executing program 4 (fault-call:5 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}}], 0x18) [ 839.351460][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 [ 839.373694][ T7095] binder: send failed reply for transaction 172, target dead 11:15:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'dyz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x81, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x102) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r6, 0xe00}], 0x1, 0x9ad) r7 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r7, 0x13) dup3(r1, r6, 0x0) tkill(r5, 0x1000000000016) [ 839.490861][ T4910] binder_alloc: binder_alloc_mmap_handler: 4906 20001000-20004000 already mapped failed -16 11:15:52 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}}], 0x18) [ 839.585725][ T4907] binder: BINDER_SET_CONTEXT_MGR already set [ 839.592481][ T4949] encrypted_key: hex blob is missing [ 839.599080][ T4907] binder: 4906:4907 ioctl 40046207 0 returned -16 [ 839.618498][ T4953] binder_alloc: 4906: binder_alloc_buf, no vma [ 839.636330][ T4953] binder: 4906:4953 transaction failed 29189/-3, size 24-8 line 3147 [ 839.664956][ T7257] binder: release 4906:4907 transaction 177 out, still active [ 839.679306][ T7257] binder: unexpected work type, 4, not freed [ 839.695740][ T7257] binder: undelivered TRANSACTION_COMPLETE [ 839.715599][ T7257] binder: undelivered TRANSACTION_ERROR: 29189 [ 839.799723][ T7257] binder: send failed reply for transaction 177, target dead 11:15:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x2}], 0x18) 11:15:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x5450, 0x0) 11:15:55 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x3a) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000040)) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'iyz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:55 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b138d685019b760b31f3ac00"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r3 = open(&(0x7f0000000140)='./file0\x00', 0x100, 0x1) ioctl$TIOCCBRK(r3, 0x5428) fcntl$setstatus(r2, 0x4, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) connect$bt_rfcomm(r3, &(0x7f00000002c0)={0x1f, {0x3, 0x6, 0x7, 0x8, 0x6, 0x3ff}, 0x3ff}, 0xa) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r4, 0x0, 0x10000000000447) write$FUSE_GETXATTR(r0, &(0x7f0000000240)={0x18, 0xffffffffffffffda, 0x6, {0x7}}, 0x18) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r4, &(0x7f00000001c0)=""/72, 0x48) write$cgroup_type(r4, &(0x7f0000000040)='threaded\x00', 0x9) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) [ 842.180338][ T5076] binder_alloc: binder_alloc_mmap_handler: 5069 20001000-20004000 already mapped failed -16 [ 842.201835][ T5076] binder_alloc: 5069: binder_alloc_buf, no vma [ 842.204059][ T5073] encrypted_key: hex blob is missing [ 842.208878][ T5076] binder: 5069:5076 transaction failed 29189/-3, size 24-8 line 3147 [ 842.226904][ T5071] binder: BINDER_SET_CONTEXT_MGR already set [ 842.238943][ T5071] binder: 5069:5071 ioctl 40046207 0 returned -16 [ 842.258146][ T2987] binder: release 5069:5071 transaction 182 out, still active 11:15:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000040)={0xd1, 0x0, 0x800}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x4, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) tkill(r1, 0xa) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={{0x1, 0x7c5, 0x7, 0x5, 0x9}, 0xe8}) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) dup3(r0, r3, 0x0) tkill(r1, 0x1000000000016) 11:15:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x3}], 0x18) [ 842.282806][ T2987] binder: unexpected work type, 4, not freed [ 842.318117][ T2987] binder: undelivered TRANSACTION_COMPLETE 11:15:55 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = accept$alg(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8943, &(0x7f0000000000)={'ip6erspan0\x00', @ifru_map={0x20, 0x1, 0x1, 0x4, 0x2, 0xffff}}) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x5451, 0x0) [ 842.352677][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:15:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'lyz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 842.411432][ T2987] binder: send failed reply for transaction 182, target dead [ 842.464583][ T5286] binder_alloc: binder_alloc_mmap_handler: 5239 20001000-20004000 already mapped failed -16 [ 842.491894][ T5284] encrypted_key: hex blob is missing 11:15:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x4}], 0x18) [ 842.515341][ T5286] binder_alloc: 5239: binder_alloc_buf, no vma [ 842.527724][ T5286] binder: 5239:5286 transaction failed 29189/-3, size 24-8 line 3147 [ 842.594084][ T7257] binder: release 5239:5263 transaction 187 out, still active [ 842.615685][ T7257] binder: unexpected work type, 4, not freed 11:15:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x5452, 0x0) [ 842.641753][ T7257] binder: undelivered TRANSACTION_COMPLETE [ 842.648151][ T7257] binder: undelivered TRANSACTION_ERROR: 29189 [ 842.655382][ T7257] binder: send failed reply for transaction 187, target dead 11:15:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x5}], 0x18) 11:15:55 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="b1000000d7e3000000000000ed71778ce6d1bc7422e3c8240000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r1, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x102, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 11:15:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'oyz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x440000, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x80000000, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0xa, "e9ccc42c8f28bec11a76"}, &(0x7f0000000240)=0x12) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e20, 0x1000, @empty, 0x2722}}, 0xe884, 0x9c0d, 0x5, 0x6, 0x5}, &(0x7f0000000340)=0x98) r3 = gettid() kcmp(r3, r3, 0x5, r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r4, 0xe00}], 0x1, 0x9ad) r5 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f00000000c0)) tkill(r5, 0x13) dup3(r0, r4, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000000000), 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000180)) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000380)) tkill(r3, 0x1000000000016) [ 842.832401][ T5422] binder_alloc: binder_alloc_mmap_handler: 5415 20001000-20004000 already mapped failed -16 [ 842.879047][ T5426] encrypted_key: hex blob is missing [ 842.891470][ T5422] binder_alloc: 5415: binder_alloc_buf, no vma [ 842.900620][ T5422] binder: 5415:5422 transaction failed 29189/-3, size 24-8 line 3147 [ 842.901679][ T5417] binder: BINDER_SET_CONTEXT_MGR already set 11:15:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x11}], 0x18) [ 842.942608][ T5417] binder: 5415:5417 ioctl 40046207 0 returned -16 [ 842.949222][ T7095] binder: release 5415:5417 transaction 192 out, still active [ 842.965935][ T7095] binder: unexpected work type, 4, not freed 11:15:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x5460, 0x0) [ 843.008681][ T7095] binder: undelivered TRANSACTION_COMPLETE [ 843.037973][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 [ 843.070854][ T7095] binder: send failed reply for transaction 192, target dead [ 843.121042][ T5639] binder_alloc: binder_alloc_mmap_handler: 5637 20001000-20004000 already mapped failed -16 [ 843.152053][ T5638] binder: BINDER_SET_CONTEXT_MGR already set [ 843.158356][ T5638] binder: 5637:5638 ioctl 40046207 0 returned -16 [ 843.165537][ T5639] binder_alloc: 5637: binder_alloc_buf, no vma [ 843.172037][ T5639] binder: 5637:5639 transaction failed 29189/-3, size 24-8 line 3147 [ 843.180639][ T2987] binder: release 5637:5638 transaction 197 out, still active [ 843.203212][ T2987] binder: unexpected work type, 4, not freed [ 843.224030][ T2987] binder: undelivered TRANSACTION_COMPLETE [ 843.254687][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:15:56 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ptrace$pokeuser(0x6, r0, 0x0, 0x3) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'pyz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000040)='}ppp0\xdf^nodev%bdev\x00', &(0x7f0000000080)='/dev/ptmx\x00', &(0x7f00000000c0)='ppp0\x00', &(0x7f0000000180)='/dev/ptmx\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='security}]eth1user\x00', &(0x7f0000000280)='/dev/ptmx\x00', &(0x7f00000002c0)='/dev/ptmx\x00', &(0x7f0000000300)='/dev/ptmx\x00'], &(0x7f0000000640)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)='/dev/ptmx\x00', &(0x7f0000000440)='+$ppp0-!\x00', &(0x7f0000000480)='/dev/ptmx\x00', &(0x7f00000004c0)='/dev/ptmx\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='/dev/ptmx\x00', &(0x7f0000000580)='/dev/ptmx\x00', &(0x7f00000005c0)='/dev/ptmx\x00', &(0x7f0000000600)='*%$\xd7,\x00']) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000006c0)=0xd, 0x4) gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x17) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:56 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x12}], 0x18) 11:15:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046205, 0x0) 11:15:56 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000140)) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000d7e30000000000000000"], 0xe) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x4e22, 0x0, @rand_addr="cf2c97458df6ca3c413085df460f794a"}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) [ 843.288439][ T2987] binder: send failed reply for transaction 197, target dead [ 843.350388][ T5650] binder: 5649:5650 ioctl 40046205 0 returned -22 [ 843.359022][ T5653] encrypted_key: hex blob is missing [ 843.405226][ T5659] binder_alloc: binder_alloc_mmap_handler: 5649 20001000-20004000 already mapped failed -16 [ 843.417272][ T5650] binder: BINDER_SET_CONTEXT_MGR already set [ 843.426723][ T5650] binder: 5649:5650 ioctl 40046207 0 returned -16 [ 843.427268][ T5659] binder_alloc: 5649: binder_alloc_buf, no vma [ 843.442369][ T5659] binder: 5649:5659 transaction failed 29189/-3, size 24-8 line 3147 11:15:56 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x14}], 0x18) [ 843.453425][ T5650] binder: 5649:5650 ioctl 40046205 0 returned -22 [ 843.460916][ T7257] binder: release 5649:5650 transaction 202 out, still active 11:15:56 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) sched_setparam(r1, &(0x7f0000000000)=0x6) 11:15:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x14}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x1000000005, 0x402) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000080)=[0x1, 0x2], 0x2) r4 = gettid() recvfrom(r3, &(0x7f0000000200)=""/203, 0xcb, 0x103, &(0x7f0000000300)=@in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x80) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x5) r5 = dup3(r0, r2, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000000)='\x00') tkill(r1, 0x1000000000016) [ 843.497637][ T7257] binder: unexpected work type, 4, not freed [ 843.555246][ T7257] binder: undelivered TRANSACTION_COMPLETE 11:15:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046207, 0x0) 11:15:56 executing program 1: faccessat(0xffffffffffffffff, &(0x7f00000000c0)='/', 0x5, 0x1000) 11:15:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'uyz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 843.594737][ T7257] binder: undelivered TRANSACTION_ERROR: 29189 [ 843.594803][ T7257] binder: send failed reply for transaction 202, target dead [ 843.683443][ T5877] binder: BINDER_SET_CONTEXT_MGR already set [ 843.683460][ T5877] binder: 5876:5877 ioctl 40046207 0 returned -16 [ 843.687278][ T5881] binder_alloc: binder_alloc_mmap_handler: 5876 20001000-20004000 already mapped failed -16 [ 843.718138][ T5882] encrypted_key: hex blob is missing 11:15:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000200)={{0x6, 0x0, 0x4, 0x8, 'syz1\x00', 0xbd}, 0x2, 0x40, 0x0, r1, 0x9, 0x0, 'syz0\x00', &(0x7f0000000040)=['/dev/ptmx\x00', '/dev/ptmx\x00', '@\x00', '\xbecpuset\x00', '{\x00', '/dev/ptmx\x00', '/dev/ptmx\x00', '\x00', '&\x00'], 0x37, [], [0x100, 0x0, 0x80000000, 0xfd9]}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x30, r3, 0x4, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x200, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x80) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r4, 0xe00}], 0x1, 0x9ad) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa4, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x814}, 0x20000080) r6 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r6, 0x13) dup3(r0, r4, 0x0) tkill(r1, 0x1000000000016) 11:15:56 executing program 1: 11:15:56 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x15}], 0x18) [ 843.739313][ T5881] binder_alloc: 5876: binder_alloc_buf, no vma [ 843.745863][ T5881] binder: 5876:5881 transaction failed 29189/-3, size 24-8 line 3147 [ 843.770509][ T7095] binder: release 5876:5877 transaction 207 out, still active [ 843.788571][ T7095] binder: unexpected work type, 4, not freed 11:15:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'xyz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046209, 0x0) [ 843.842957][ T7095] binder: undelivered TRANSACTION_COMPLETE [ 843.869792][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:15:56 executing program 1: [ 843.901631][ T7095] binder: send failed reply for transaction 207, target dead [ 843.940198][ T6000] binder: 5999:6000 ioctl 40046209 0 returned -22 11:15:56 executing program 1: [ 843.948559][ T5998] encrypted_key: hex blob is missing [ 843.970877][ T6006] binder_alloc: binder_alloc_mmap_handler: 5999 20001000-20004000 already mapped failed -16 [ 843.997924][ T6006] binder_alloc: 5999: binder_alloc_buf, no vma [ 843.999041][ T6000] binder: BINDER_SET_CONTEXT_MGR already set [ 844.029673][ T6000] binder: 5999:6000 ioctl 40046207 0 returned -16 [ 844.038301][ T6006] binder: 5999:6006 transaction failed 29189/-3, size 24-8 line 3147 [ 844.068844][ T7095] binder: release 5999:6000 transaction 212 out, still active [ 844.078767][ T7095] binder: unexpected work type, 4, not freed [ 844.093628][ T7095] binder: undelivered TRANSACTION_COMPLETE [ 844.099639][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 [ 844.117938][ T7095] binder: send failed reply for transaction 212, target dead 11:15:57 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x2000089) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x186) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x5) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x341800, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@deltaction={0x260, 0x31, 0x2, 0x70bd26, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x13, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x18, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x10, 0x15, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0x10, 0xc, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x10, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x2, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x10, 0x1e, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x9, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0x8, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x7, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x4, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x14, 0x15, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x6, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x10, 0xf, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x6, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0xa0, 0x1, [{0x10, 0x1, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffffffff8001}}, {0x14, 0x10, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x14, 0x17, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x10, 0x6, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0x14, 0x20, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x10, 0x3, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x8, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8, 0x3, 0x418}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x9, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffffffffffc}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffffffffff7}}, {0x10, 0x11, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x18, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xb, @TCA_ACT_INDEX={0x8, 0x3, 0x13}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0xa, @TCA_ACT_KIND={0x8, 0x1, 'xt\x00'}}, {0x10, 0x7, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) timer_create(0x5, &(0x7f0000000580)={0x0, 0x9, 0x0, @tid=r1}, &(0x7f00000005c0)) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'bridge_slave_1\x00', &(0x7f0000000480)=@ethtool_drvinfo={0x3, "694d217533b78f9b30dd5f7bedfffaf58245f72c3bea67fda22c293972c566fd", "d0672a5e9d6a2788cd708e7bd3c413f3b06e4ba5d98a2560ea02f1cdc89ef0cd", "6bf633334b1dbb318a0e947a30b794865d3fa88c702a983ad99b71c0f57d5910", "17423d1e922fe586aff2cbf74a01a7feb4f32e6a9b18958e20007050cce44de6", "9e945808c6490d1a1ed2e25291be3c2514f34b8c3286771c5f7bc850e41e090d", "7c0527c75e15e8a70b6bc5e8", 0x7fffffff, 0xfff, 0x3, 0x9}}) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:15:57 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x16}], 0x18) 11:15:57 executing program 1: 11:15:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'s\nz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x4004622f, 0x0) 11:15:57 executing program 1: [ 844.512567][ T6123] binder: 6118:6123 ioctl 4004622f 0 returned -22 [ 844.534871][ T6126] encrypted_key: hex blob is missing 11:15:57 executing program 1: [ 844.558699][ T6132] binder_alloc: binder_alloc_mmap_handler: 6118 20001000-20004000 already mapped failed -16 [ 844.602911][ T6123] binder: BINDER_SET_CONTEXT_MGR already set 11:15:57 executing program 1: 11:15:57 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1e}], 0x18) [ 844.610161][ T6123] binder: 6118:6123 ioctl 40046207 0 returned -16 [ 844.624721][ T6178] binder_alloc: 6118: binder_alloc_buf, no vma [ 844.640133][ T6178] binder: 6118:6178 transaction failed 29189/-3, size 24-8 line 3147 11:15:57 executing program 5: socketpair$unix(0x1, 0x8000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x600000, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001ff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x4, 0x0) tgkill(r2, r2, 0x2e) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) dup3(r0, r3, 0x0) tkill(r2, 0x1000000000016) [ 844.673596][ T6123] binder: 6118:6123 ioctl 4004622f 0 returned -22 [ 844.674739][ T7257] binder: release 6118:6123 transaction 217 out, still active 11:15:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'s%z'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 844.716719][ T7257] binder: unexpected work type, 4, not freed [ 844.752863][ T7257] binder: undelivered TRANSACTION_COMPLETE [ 844.784837][ T7257] binder: undelivered TRANSACTION_ERROR: 29189 [ 844.807368][ T7257] binder: send failed reply for transaction 217, target dead [ 844.808115][ T6250] encrypted_key: hex blob is missing 11:15:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046242, 0x0) 11:15:58 executing program 1: 11:15:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x180}], 0x18) 11:15:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x2}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:15:58 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000000c0)) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000200)=r3) r4 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:15:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) r5 = dup3(r1, r3, 0x0) tkill(r2, 0x1000000000016) dup3(r0, r1, 0x80000) sendmsg$netlink(r5, &(0x7f0000000080)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x100}, 0xc, &(0x7f0000000040)=[{&(0x7f0000000200)={0xfc, 0x42, 0x201, 0x70bd29, 0x25dfdbfd, "", [@nested={0xec, 0x15, [@typed={0x8, 0x77, @pid=r2}, @typed={0x74, 0x3a, @binary="06b033f09b38ff4e5eea567ef2b21cb9313b9af8fda291b7c3e41064611cce2deb507f343813de4fb512cfebf7a685cd3cb99e9b39ad067f9b825e905316aa5b0b9e7022a50322f37eb217c47173e22711478894080a6170e7c53d3089a509b93ce13bc95ca6986d9d625ce346958560"}, @generic="c8099fe009d065d834721c656701ca2271324c1f00fb2fc272fe95e0d062264c5db2bd6064f3f0f8d43a14e507097ff6e84711de026d9a9bccd03c25c5d8e62e6eef744d97ef39a1efb419f30bc87c3c38eec1a23ad5af2869d39d6ef4f163310a8fe3570e259cbef4"]}]}, 0xfc}], 0x1, 0x0, 0x0, 0x4000001}, 0x4804) [ 845.424922][ T6365] encrypted_key: hex blob is missing 11:15:58 executing program 1: [ 845.474611][ T6372] binder: 6371:6372 ioctl 40046242 0 returned -22 [ 845.485893][ T6419] binder_alloc: binder_alloc_mmap_handler: 6371 20001000-20004000 already mapped failed -16 [ 845.504759][ T6372] binder: BINDER_SET_CONTEXT_MGR already set 11:15:58 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x200, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000001c0)={0xa, 0x0, [{0xbb7, 0x0, 0x6}, {0xbf7, 0x0, 0x2}, {0x0, 0x0, 0x7fffffff}, {0xac8, 0x0, 0xdcbd}, {0x400000b1, 0x0, 0x8}, {0x842, 0x0, 0x8001}, {0x2df, 0x0, 0x8}, {0xfff, 0x0, 0x800}, {0x9be, 0x0, 0x40}, {0x97a, 0x0, 0x1000}]}) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x3ff, 0xfff, 0x9450, 0x5, 0x0, 0x9, 0x10, 0xa, 0x100000000, 0x1ff, 0xb1d9, 0x8, 0x6, 0x5, 0x7, 0x5, 0x4, 0xffff, 0x6, 0x8, 0x3f, 0xffff, 0x81, 0xff, 0xffffffffffffff81, 0x4, 0x0, 0x9, 0xfffffffffffffff8, 0x10001, 0xc95, 0x4, 0x4, 0x3, 0x200, 0x6, 0x0, 0x6, 0x3, @perf_config_ext={0x2, 0x401}, 0x0, 0x8, 0x17509b9, 0x7, 0xe1, 0x8f0, 0x35}, 0xffffffffffffffff, 0xf, r3, 0x3) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 11:15:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x300}], 0x18) [ 845.522231][ T6372] binder: 6371:6372 ioctl 40046207 0 returned -16 [ 845.543521][ T6419] binder_alloc: 6371: binder_alloc_buf, no vma 11:15:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x3}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 845.585340][ T7095] binder: release 6371:6372 transaction 222 out, still active [ 845.585673][ T6485] binder: 6371:6485 ioctl 40046242 0 returned -22 [ 845.593844][ T6419] binder: 6371:6419 transaction failed 29189/-3, size 24-8 line 3147 [ 845.612506][ T7095] binder: unexpected work type, 4, not freed 11:15:58 executing program 1: 11:15:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x240, 0x0) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000200)={"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"}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) ioprio_set$pid(0x1, r1, 0x7ff) [ 845.645734][ T7095] binder: undelivered TRANSACTION_COMPLETE [ 845.664625][ T7095] binder: send failed reply for transaction 222, target dead [ 845.678741][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 [ 845.695520][ T6493] encrypted_key: hex blob is missing 11:15:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046253, 0x0) 11:15:58 executing program 1: 11:15:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x500}], 0x18) 11:15:58 executing program 1: 11:15:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x4}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 845.815289][ T6590] binder: 6561:6590 ioctl 40046253 0 returned -22 [ 845.838611][ T6608] binder_alloc: binder_alloc_mmap_handler: 6561 20001000-20004000 already mapped failed -16 [ 845.856612][ T6590] binder: BINDER_SET_CONTEXT_MGR already set 11:15:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000040)={0x1, 0x2, 0x7ff, 0x7ff, 0x7}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000006c0)={0x28, 0x2, 0x0, {0x6, 0x7210000000000000, 0x7}}, 0x28) poll(&(0x7f0000000080), 0x0, 0x9ad) r5 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r5, 0x13) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) r7 = getegid() r8 = geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) sendmsg$netlink(r3, &(0x7f0000000680)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="a402000038001a0026bd7000fbdbdf2594021d0008001000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08009100", @ANYRES32=r0, @ANYBLOB="04005a00769e1806e36658d6938ebe2f04c4a3a23bbe317db91db8115f996742e499d93bcedbffcc723407af132055ac4a616a49acd2e9ab99e40b8db88c190d028394d4b03840ccdafa4fdbf3d40c3843d725ba9b06502d9b4e1811882da7545e7c00470030c5d95dacdd3cd0520a2451b06a923c7a34b27f66d4c7c04231cefe1dec9b66c210bc1a356a30dbc7508fe8c2115b50c0615fee434e0ebdb89ad0f08d0bae1804e435116007afc036c221d90aac51ab3278703b821a980ee22577bfc5b2753090b35e584e4355664bf2aa40121c786de98ff92cd70000000800110000000005"], 0x2a4}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="040f3900"], 0x68, 0x14}, 0x844) dup3(r1, r4, 0x0) tkill(r2, 0x1000000000016) 11:15:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1100}], 0x18) [ 845.886361][ T6590] binder: 6561:6590 ioctl 40046207 0 returned -16 [ 845.925649][ T6614] encrypted_key: hex blob is missing [ 845.941321][ T6615] binder: 6561:6615 ioctl 40046253 0 returned -22 [ 845.943106][ T6608] binder_alloc: 6561: binder_alloc_buf, no vma [ 845.954503][ T7257] binder: send failed reply for transaction 227 to 6561:6590 [ 845.977018][ T7257] binder: undelivered TRANSACTION_COMPLETE [ 845.985347][ T6618] QAT: Invalid ioctl [ 845.989351][ T7257] binder: undelivered TRANSACTION_ERROR: 29189 [ 846.000768][ T6608] binder: 6561:6608 transaction failed 29189/-3, size 24-8 line 3147 [ 846.020702][T29861] binder: undelivered TRANSACTION_ERROR: 29189 [ 846.768745][ T6703] QAT: Invalid ioctl 11:16:01 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:16:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") mmap(&(0x7f0000208000/0x3000)=nil, 0x3000, 0x7, 0x40031, 0xffffffffffffffff, 0x0) 11:16:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046263, 0x0) 11:16:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x5}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1200}], 0x18) 11:16:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0xf) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 848.624564][ T6734] binder: 6733:6734 ioctl 40046263 0 returned -22 [ 848.642492][ T6740] encrypted_key: hex blob is missing [ 848.655514][ T6744] binder_alloc: binder_alloc_mmap_handler: 6733 20001000-20004000 already mapped failed -16 11:16:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xf000000000000000, 0x240) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 848.675431][ T6744] binder: BINDER_SET_CONTEXT_MGR already set [ 848.683887][ T6744] binder: 6733:6744 ioctl 40046207 0 returned -16 [ 848.697812][ T6769] binder_alloc: 6733: binder_alloc_buf, no vma [ 848.705178][ T6769] binder: 6733:6769 transaction failed 29189/-3, size 24-8 line 3147 11:16:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1400}], 0x18) [ 848.724445][ T6734] binder: 6733:6734 ioctl 40046263 0 returned -22 [ 848.743417][ T7095] binder: release 6733:6734 transaction 232 out, still active [ 848.750988][ T7095] binder: unexpected work type, 4, not freed 11:16:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40049409, 0x0) 11:16:01 executing program 2: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000040)=0x7672e3e7, 0x4) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:16:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! .'], 0x4) close(r0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknod$loop(0x0, 0x40, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getgroups(0x0, &(0x7f00000000c0)) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 11:16:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x6}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 848.818956][ T7095] binder: undelivered TRANSACTION_COMPLETE [ 848.841724][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 [ 848.851839][ T7095] binder: send failed reply for transaction 232, target dead 11:16:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1500}], 0x18) [ 848.929857][ T6967] binder_alloc: binder_alloc_mmap_handler: 6965 20001000-20004000 already mapped failed -16 [ 848.936899][ T6964] encrypted_key: hex blob is missing 11:16:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) r4 = dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000000)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @multicast1}, 0x101, 0x0, 0x0, 0x0, 0xffffffffffffff83, 0x0, 0x7ff, 0x1, 0x800}) [ 848.988438][ T6966] binder: BINDER_SET_CONTEXT_MGR already set [ 849.010753][ T6966] binder: 6965:6966 ioctl 40046207 0 returned -16 [ 849.040069][ T7058] binder_alloc: 6965: binder_alloc_buf, no vma [ 849.046528][ T7058] binder: 6965:7058 transaction failed 29189/-3, size 24-8 line 3147 [ 849.068638][ T7257] binder: release 6965:6966 transaction 237 out, still active 11:16:02 executing program 1: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) semget(0x2, 0x0, 0x20) semctl$SEM_INFO(0x0, 0x4, 0x13, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 849.085626][ T7257] binder: unexpected work type, 4, not freed 11:16:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x7}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1600}], 0x18) [ 849.120356][ T7257] binder: undelivered TRANSACTION_COMPLETE 11:16:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x4018620d, 0x0) 11:16:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) sendmsg$nl_netfilter(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41080080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x114, 0x9, 0xb, 0x2, 0x70bd2d, 0x25dfdbfb, {0x5}, [@nested={0x58, 0x80, [@generic="c3d66ca6b077bba86d6311efea9d36053c8a1afe6ab7eef4102195d8986c895f6a516ccea3db0b31b2867b3df6ed99a5fd3c08b84d69db3303b45ea8aff21922f69b9a321237ccb7d332c2597812", @typed={0x4, 0x5}]}, @typed={0x8, 0x94, @uid=r6}, @nested={0xa0, 0x3, [@typed={0x8, 0x41, @pid=r4}, @typed={0x8, 0x13, @fd=r0}, @typed={0x14, 0x6b, @ipv6=@dev={0xfe, 0x80, [], 0x1f}}, @typed={0x14, 0x75, @ipv6=@dev={0xfe, 0x80, [], 0x12}}, @typed={0x4, 0x6}, @generic="f99aaa8b5e59d36b22e89d9368eb48841607e80611d1c9d50bc8dbe5cb7549b487b5f43d9ebaba3d9abe32c8a21d70929d4e91f9db128ae019c9ffafd623b3f7ccf9cf0abb872b2acd4c28aced80183cfbb60ff252712dc65d3445d3d23eb4"]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) dup3(r1, r3, 0x0) tkill(r2, 0x1000000000016) [ 849.173748][ T7257] binder: undelivered TRANSACTION_ERROR: 29189 [ 849.180078][ T7257] binder: send failed reply for transaction 237, target dead [ 849.204579][ T7191] encrypted_key: hex blob is missing [ 849.249641][ T7195] binder: 7193:7195 ioctl 4018620d 0 returned -22 [ 849.290998][ T7263] binder_alloc: binder_alloc_mmap_handler: 7193 20001000-20004000 already mapped failed -16 [ 849.309560][ T7195] binder: BINDER_SET_CONTEXT_MGR already set [ 849.316789][ T7195] binder: 7193:7195 ioctl 40046207 0 returned -16 [ 849.317513][ T7263] binder_alloc: 7193: binder_alloc_buf, no vma 11:16:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x48}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1e00}], 0x18) [ 849.342119][ T7263] binder: 7193:7263 transaction failed 29189/-3, size 24-8 line 3147 [ 849.350511][ T7257] binder: release 7193:7195 transaction 242 out, still active [ 849.372456][ T7257] binder: unexpected work type, 4, not freed [ 849.378480][ T7257] binder: undelivered TRANSACTION_COMPLETE [ 849.428462][ T7257] binder: undelivered TRANSACTION_ERROR: 29189 [ 849.450066][ T7257] binder: send failed reply for transaction 242, target dead [ 849.458460][ T7409] encrypted_key: hex blob is missing 11:16:02 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x1e40) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x1, r1, 0x1}) 11:16:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x4020940d, 0x0) 11:16:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x10000) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:16:02 executing program 1: r0 = epoll_create1(0x0) r1 = eventfd(0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) read$eventfd(r1, &(0x7f0000000200), 0x8) 11:16:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x4c}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1f00}], 0x18) [ 849.770407][ T7521] encrypted_key: hex blob is missing [ 849.797932][ T7545] binder_alloc: binder_alloc_mmap_handler: 7528 20001000-20004000 already mapped failed -16 [ 849.825284][ T7530] binder: BINDER_SET_CONTEXT_MGR already set [ 849.837288][ T7530] binder: 7528:7530 ioctl 40046207 0 returned -16 11:16:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000002, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) [ 849.840403][ T7545] binder_alloc: 7528: binder_alloc_buf, no vma [ 849.854596][ T7545] binder: 7528:7545 transaction failed 29189/-3, size 24-8 line 3147 [ 849.869107][ T7095] binder: release 7528:7530 transaction 247 out, still active 11:16:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x3f00}], 0x18) [ 849.895249][ T7095] binder: unexpected work type, 4, not freed [ 849.917864][ T7095] binder: undelivered TRANSACTION_COMPLETE 11:16:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0xc0045878, 0x0) 11:16:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x60}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:02 executing program 5: socketpair$unix(0x1, 0x2000000000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x16, 0x2) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000040)={0x3ff, 0x796}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x9ad) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000200)={0x9, 0x4}) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) r5 = dup3(r0, r3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) tkill(r2, 0x1000000000016) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000180)) [ 849.964805][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:16:03 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xc0000) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) tkill(r1, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 850.022628][ T7095] binder: send failed reply for transaction 247, target dead [ 850.060333][ T7891] encrypted_key: hex blob is missing 11:16:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw6\x00') ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000180)={0x8, "a96c5532b83f929fef234776104a5932efddd80a78b2024ea83ba23f36b085e1", 0x2, 0x1}) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000080)={{0x4, 0x1}, 0x4}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000300)={0x2, 0x0, 0x2080, {}, [], "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", "83a864309bbca163904744fc84780070bd0eafb3fbd108f52b85c5ef1448089eb3dc62d2c54953d64fc6d0d5411de9b593cee293f9f12712725a47d5aaa7974fdd0ae6ce5fb5710b3feca58084a6ec9a51ac876a7a0dfd7795bcb6175ecbd6b5cec35eaa559351adfa6f6bb1e8ead7b095284e5200aaacd7705a17276d80a696754901d04fd43deb3ca7779f169cb2040835aebe5b819d9853985ef4cb285974ff99d644058528c96ce79c1a7ba0156b2f63f0275d72a9caaab78e9acc7ab778a60eb05586597a4b3e7977259d9b6a41f1cbd0f4dc8f0c7d6c0b8c0d4b865ce556fde90e81d5d2e4e6da56738e96cf872d2e51277e16a364095b56133aded856f1f9fe0552c3c3d22766322eab062411b2ff76e8cfa396d66e8330050822f03918b4eb5ba0d07ada297218abe78d671f4a67e8f255e563fa007363aa9640e126615c364d562ec981430aa5da756bf4f12ee1dfeea0c5994b3b1f64a06e7d3a59513d766731ee904b9ea68a4d958c35cf4cb2188e0e30ea4877ada10385a583fe40f931d42040787802556d08e343b7bc5a0d9c3654457cca8133ea1db16bf8f3a177d9da17d48c2aff295b928a93093934e3a647dd2680b4192ebca93336a375c505132c78e5b77d08eee74711b0c05c0c31e3ec36eb0464423048ca744dd2d2fc04188face77937f560213e92a376a4f10a4414b616e6d8681c9f96c414ad9e30992983b8951c3e725df3c486b499504673357adb618e5bc5e93a635c5203c7e2927d62441d451cb67ef4ec8e561d3b4ae87d381aea5376ab590de53a4bb7b432633f44ce34e83eb2401aee96986a6547c1dc950d518beae1d64f0ad89ce8779a92127baa42292993801be8196eeef76701f0723939e4bbd064959f969e2be9abae85ded761073a0f4882e2206e5a16cd228c2ac64753ead3492a18b07a9295c641dcfbebc550bbb627b46ec39d054aa028e153e8144b22e6b540b95e6048d8fc928efcda2fd47b2385e0a4930ae7399e145813d624bc27d81f1555c7b74635a60d0233c173d7400cb9cf5f662751db08aac373114a80cdcf5454ec67ec18763ec84e4a99dedf53bf04371a36d97fdc0121c087f6625fc7f601f7c03f3d2d405ff6c9bbd356accdd53c0fd8ffc793f492b38759f1519bb127428b4072ea3c733834f6ff0eeccf3a5101cd9b7c09d2e5e2848bbe5b7299f299095455cc6eee5b5f46c72f58d024b2501305fb11fcad9b76107be21e401897adc486240a0aa706ab535d9142b3130d2ee90f7d2dfdbe755094a1dbc33b5c07ad72f219230194bc730370e35990c996f47924a083a46bc177a62f7dc185118bdb1bc722ecfef75787179012427860eac97103d6459330948b15209c2cc4774c29c588654917092732cfe979544e9dbe7d4528f8987e74a143424356783d3e5874f7d680ca5f1bf352e184db479e747ff62be7de8071254c59e40f2c701a92f9827cae6a51da4e45e2144d386daddf67b5de480970ff9a397142e3ffa7d7baeffd1d078325d29a90f9ab4334416a88911149801ee3e98f2e7e7d48ac16f4c43757f09891b029a8037e0c08435378b10c4f8dceda0965bf34cf94c0a390e72cea9b8b77614e14c3902ef472bfff645cce16a2b1147a2845f2ef298c777c962abe673ccf49c8e4b2f0d890d8700fac790e47c76188b18e67dc7e4f997d34e47baa6d4483fc3c6c1c05548921d9bfeaaea40cf603e091dbf65e587789c94b2734314e5f109974707cdb4211f3f8fe33fe8694aca8a9d4a42ed64abefaafc1a7397008a75ed8722a143ae2203e2f1bc8f8f57f28659a1ecfaabb1c34356df093c15b3536e4453fc84922dfe8e0ea5b4596b67f622041753814ec593b28245d29d5b887ca3310c0b73540477375a5737f18c6a8cc7c6eaa77ada23abc1e557fc13858e66536e80afb60cdf6cdc7e28bf648843c8e0bcf6a2f06aa243f93fea5b33fa80d474d0d1837a61e2b995094f93db40126ab647629e2085643b64d64119a158411a2e224ffb79c7e26e5299a644bd07bc034d74b539bca9475644e34e2a89e13189b1c2df79feac623467ef14e5996ccbd724094f9ea089215cf6b401ad8825c69921a0eea39e1a2b2b509cb7d5f34621b5edd3d9732e6cd70e4ecb7335a3babf986c5ccaa6960a1dabaa153408a3e2ee92d48e17ddeeb8be1119dffb42c54d310474b5299162731d2ac4678e5507e8bcc390c2ad96f5cd53800840cafd291bf7b07c869597e6046bc42b57d73fae852feb0c3cb8f345879828ac9ede2b2d78dbd7f4d47cec56a0084be9766f3f3412e83cd44b6593048bab106f938fd1defca01eaf95caab974e9be727700ab851bf4865650be0db27017610f99f86cb32cb11f2d2e8949c372020286ea8fcf992c26ce92c0c60d8ee51afc6f923f8f2882286c59c68875fb9f49a07da7a1ac93b4eea0e6762593b6d4b95be4e90ed97b43325835d48ea9bd7a3687888f6ba476a798fe1aa69536302bd1cb3e2c8562a71e9c9eeaa7a5224923bf5e4954fc64ad6983735a0e765a1246dff07338d638bb34ac726c2a854e99e43f1502eb5cea63d160ca1427dc2d8f7580a95c76929f1981cdeadcd2819b564b9fe72cf88240ad59256b23b19d0e8755aa05b6f27625ac6af1fa5c8836f6a36f3b99c0bae5b5dba757b6231a6c1778818634ba2b87fab54e76646813847fa35328a291f0557d93d46e2d212c6e95bea5ce25e796d42a803ea3bfba66117643f2b78bd6b40c77847ad57e9c9bd801f666acbe20db695007f1128c047acbc26d5bdbe7c3511d35d7adbeb6782830b77ca5c388347b4d55ec3cc236eef38e5c39d5ff52ac78e24c8d7c69ddbcabfd70b214bdecd5eca006b9fbb83ae03ea64cd3af52b6f5d990d03323ded17636fb41ecde9923ac7d36a403c0811e8f88061644d96a256f658730cf88f21fb301236f562cf90f814205356cbf3bf3e52312150f322735b228f4f2d47b9c2bc71a6ab48124bb83d3e42cdc7b5953ab31ef5b076f282f65a60a320063da531e423e0614e22e504c37c06f120aafb89e0176b4823ea953337b3311d878401baf7192ecf3db798c28269e9f270e534f76f68b85edf5046110da6409ce13d33c538285f545cfbc754255c497bf4f113855cce36a9d6bf7eb6b5687cf5d913575dfd1bbd3fb0a280de1e1fb4f3b25a2aea9afd5d3e92c666436ff3527d370e0c21986ac0140cd51360eeca4e496783f9c970c46f5c1e3b41644d764bb3a32e0c94afba74c3431edabc1493468b9525b903797feacf6e0357f16cb4e2aca59f1616795b51bbceafd354e0e7e3e027302e027f342aae1ea8db3829fece77cdc05bd569a7a5a4341e0fe6662378a9b10701a87d36d3cb4d8418204d7cf48da45feccaebaa74a6e4d4e19a39d7d42ee35104dc049c88c9ff82243523894aad3e46a79ccc6dea443f7be53b0aa0ed22a5a452af882f22d433f7b60b821a9df4d8134bf732893990c43a0091803508ab63904cd98dcb87c99b50a5636fd3a7a7267a6c75b6f39fae21ef22ba697de8284ac0899ddf3553a774f33ca9fd23679e30f94d0d0d51e6a918ffb8b4cccd45fa811139f7c809822443385dc0dc3f91c69114dbd3833e447ec288f73371f40b4c22c456dcec4c669ba900dd56f13676a3f6711110860c8b6289ca4beb39218a316061c284f5b23125592e950e1c7f1cacb7fdddf9cd3f1b25df5a779886e3ff3a17794409e9540c72df29397f33ff307bdbfee4190bdceaf299271642e820e744b9ac71d5c36c0bd8e47b874890825ad1176272f01c16d38e3ccf231c5953dc917921f5d5ef0d9f4b3761ff405d89e00a7a6f671f212eda7af67fbff349c4d865aa6d4e0f063839b08357205b0223550ee918c2310d7e2cd5ec705578df76c4d84211f44c9d224bc388c7225a6d9a8b6fac4c7b80b6fe04916f0db5bf03e725e88365f0bc65b5a0c6096f10c65b1d6a2727b4e66220276ddf101a8c732d15ab86b7a49a28a1b9d82b2e313fbc9beee9d46f7a1243e8a98c274e29eefb66b62a28fe216bbc1dd33b1e38e01dabde8baec14f7c936aefb5c63e0a7c8f83c86ac88430b1b75ebe2c8b395110beb50ed2a7a268141de3c46e275f91a9e54e027a7ad5a184f26d98f69c58f5f1187307dacd9ce3dfc2eb211517da78c7c06830846272113564f23436c4e22708074d0b17cb9a51d5076f7d94a1c35947485573d623a1017c17e44604ea17ff1eaffd704e428cc5973829a98adf2e8574f15a32d642486fede4c6cd96382c5800b588f22a13f31ef9aec0ba77668b4f7df22d0b5acd31040efbf3bfe9d23899251947c991dbfdfbcf6d3335af5674f00a0090fb63b8cdb7748e742da7f0f92fb57dfc46d4ccc1f1142a512c3167fa0a50eba92a840734a4f917e1794c40f11a7ac3dc2ece445b223b2e690e047c541de1a4da6914862fe289746b6471ea1966584d5bb35a2159990c953a8d02ab4db2584430b91a2eca66bef10a302af9c0606ef0d684792e7146c2a5787a1459261331dc51a4821c3e0ea654b8ad524a70f91dd5ece75d212a6fef3f32314f6c944cae909e310a51d31395def0b38a1770fc92b67c54a4520faff59513b120f7834f0561881e57930c39377cfb95b563c39a1ccd91ec8db769aae2ddf0ed911474eb8b2d0edccebb9d2514cf9dce49c2aded3ece5fa6eb5537a07b1e2d228a54d8b84918530ca207866b49ce737b6f5fe9dc205502b4407291d689a59be25a7ded79853e5d631bad0ed3f560c7736804f0c13cbb5933b5e3b3711079ceef7dedb00ed039d7b344b6d7c122e7942ebeda75c33ea7ffe7d34bbde4c8eb9492c2410a23f2db6a715ee0d90e233536f4652dd97ef204e02fa2ee8e4488f2e9a3cc5247fa4f6a678caea21c92b27ec35bb532921630edaaed43435baa9201447e739044ed7891ae47afd151ec274dfd6ebc88cdb50b63af60d8acb9f73189935edad9a91ae1e0c8f6cf8a039492632e1a5d79ed7467886962ebf476dbfc22ae10bd8fec9b6a74fe165f0fc8af1fd50237b2834b7cf2d83826a8690d622c744d32600d1be525943235da9c56b3b85f54221c9243e7583688915f2ecd1da37377fe5a9de55edd8a87e90698d27fcb4073222a76d5fe2f0e2077871ecbf882c61b4ed9e3446eb369b6a3f0f6f7b27d1429a8c1b676d51817f3798f32b2972e661d337533da8fc3cf9353a0910322634d193c83bb70cfa1ff223f3e20e1fd388461785c6f382a6a9b3f6426d793876c6a7c25f4bd7cc2ce2b8935d109d447c12b8cd7c8194073bb0b56cf636335d51f0d75b6688d069d2ad4550879096a6e7151caf00a0a3b15f93c1cb98fa31368e83bb9ce58ab3a181bb865421540d0c63a1aed4273839d2f40c92ceb7f29f32d30a4c0005b2e88fa61475c5b37896fb7ee5206519456dfea1d811932788b7ca3312d37c759d109beab91f8e687da3c5c48dc1085199fe14948e054e0246b57f49a9f192d622e27f22c6f6715a07033b55dcc3e14369f62511b3deaef331433d0c82094550177c0833d1310a209389772d09a36a40d9a6ebffd6b24a57115adfc6591d18c935f1ffad4d683e3c632779cc80f2f63ba612505fdff623ddc4d04d75dfff7d97d4d2064d5c3cef557ea58a3f13b59fa13a4cc4cfca5decdeca8caf73f554a4bb24ddc7f1bbaf32a1b1147fec0b390380762b0f9689545b3e942079da3a856302dd3893d2ae95bcfa81df79c5bd1df761090a58972834503f421e383450d66927505a9ce1cfba"}) setxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)=@ng={0x4, 0x10, "00a9e6f863bd069dea0ec5"}, 0xd, 0x3) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x300, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)='bridge_slave_0\x00', 0xfffffffffffffff7, 0x80000001, 0x2}) 11:16:03 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x4000}], 0x18) [ 850.089329][ T7904] binder_alloc: binder_alloc_mmap_handler: 7888 20001000-20004000 already mapped failed -16 [ 850.107425][ T7904] binder_alloc: 7888: binder_alloc_buf, no vma [ 850.110863][ T7903] binder: BINDER_SET_CONTEXT_MGR already set [ 850.128359][ T7903] binder: 7888:7903 ioctl 40046207 0 returned -16 [ 850.154705][ T7095] binder: release 7888:7903 transaction 252 out, still active [ 850.163906][ T7904] binder: 7888:7904 transaction failed 29189/-3, size 24-8 line 3147 [ 850.177291][ T7095] binder: unexpected work type, 4, not freed 11:16:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x68}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0xc0045878, 0x0) [ 850.208288][ T7095] binder: undelivered TRANSACTION_COMPLETE [ 850.241402][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:16:03 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x20000}], 0x18) [ 850.278206][ T7095] binder: send failed reply for transaction 252, target dead [ 850.292268][ T8044] encrypted_key: hex blob is missing [ 850.326595][ T8137] binder_alloc: binder_alloc_mmap_handler: 8091 20001000-20004000 already mapped failed -16 [ 850.364618][ T8137] binder_alloc: 8091: binder_alloc_buf, no vma [ 850.364861][ T8113] binder: BINDER_SET_CONTEXT_MGR already set 11:16:03 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x2f) [ 850.398031][ T8137] binder: 8091:8137 transaction failed 29189/-3, size 24-8 line 3147 [ 850.419230][ T8113] binder: 8091:8113 ioctl 40046207 0 returned -16 [ 850.438778][ T7095] binder: release 8091:8113 transaction 257 out, still active 11:16:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0xc0046209, 0x0) [ 850.453592][ T7095] binder: unexpected work type, 4, not freed [ 850.473991][ T7095] binder: undelivered TRANSACTION_COMPLETE 11:16:03 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1000000}], 0x18) [ 850.504515][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 [ 850.515744][ T8318] encrypted_key: hex blob is missing [ 850.529354][ T7095] binder: send failed reply for transaction 257, target dead 11:16:03 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) [ 850.558814][ T8363] binder: 8360:8363 ioctl c0046209 0 returned -22 [ 850.591854][ T8398] binder_alloc: binder_alloc_mmap_handler: 8360 20001000-20004000 already mapped failed -16 [ 850.650898][ T8363] binder: BINDER_SET_CONTEXT_MGR already set [ 850.683463][ T8363] binder: 8360:8363 ioctl 40046207 0 returned -16 [ 850.705707][ T8476] binder_alloc: 8360: binder_alloc_buf, no vma [ 850.718256][ T8476] binder: 8360:8476 transaction failed 29189/-3, size 24-8 line 3147 [ 850.738541][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 [ 850.751082][ T7095] binder: send failed reply for transaction 262 to 8360:8363 [ 850.774880][ T7095] binder: undelivered TRANSACTION_COMPLETE [ 850.780994][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:16:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1, 0xe00}], 0x1, 0x9ad) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) tkill(r2, 0x13) dup3(r0, r1, 0x0) tkill(r2, 0x1a) 11:16:04 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x20000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 11:16:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x74}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1800000}], 0x18) 11:16:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0xc018620b, 0x0) 11:16:04 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1, 0xe00}], 0x1, 0x9ad) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) r3 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000000)={0x1, 0x2, [@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}]}) tkill(r0, 0x1000000000016) 11:16:04 executing program 1: r0 = getegid() setfsgid(r0) r1 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x202, 0x400c000000100076) ioctl$KVM_SET_CPUID(r1, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="b313"]) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) [ 851.161846][ T8608] binder: 8598:8608 ioctl c018620b 0 returned -14 [ 851.168741][ T8606] vhci_hcd: default hub control req: b313 v0000 i0000 l0 [ 851.169659][ T8610] encrypted_key: hex blob is missing [ 851.185696][ T8614] binder_alloc: binder_alloc_mmap_handler: 8598 20001000-20004000 already mapped failed -16 [ 851.198433][ T8608] binder: BINDER_SET_CONTEXT_MGR already set [ 851.207232][ T8614] binder_alloc: 8598: binder_alloc_buf, no vma [ 851.208538][ T8608] binder: 8598:8608 ioctl 40046207 0 returned -16 [ 851.214365][ T8614] binder: 8598:8614 transaction failed 29189/-3, size 24-8 line 3147 [ 851.229709][ T7257] binder: release 8598:8608 transaction 267 out, still active [ 851.234755][ T8608] binder: 8598:8608 ioctl c018620b 0 returned -14 [ 851.239323][ T7257] binder: unexpected work type, 4, not freed 11:16:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0xc018620c, 0x0) 11:16:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x2000000}], 0x18) [ 851.270961][ T7257] binder: undelivered TRANSACTION_COMPLETE [ 851.287583][ T7257] binder: undelivered TRANSACTION_ERROR: 29189 [ 851.319236][ T8840] binder: BINDER_SET_CONTEXT_MGR already set 11:16:04 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/88, 0x58}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000180)=""/30, 0x1e}, 0xf3aa}, {{&(0x7f00000001c0)=@nl, 0x80, &(0x7f00000036c0)=[{&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000000280)=""/102, 0x66}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f00000013c0)=""/194, 0xc2}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/204, 0xcc}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/216, 0xd8}], 0x8, &(0x7f0000003740)=""/221, 0xdd}, 0x6}, {{&(0x7f0000003840)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000003c80)=[{&(0x7f00000038c0)=""/199, 0xc7}, {&(0x7f00000039c0)=""/225, 0xe1}, {&(0x7f0000003ac0)=""/76, 0x4c}, {&(0x7f0000003b40)=""/172, 0xac}, {&(0x7f0000003c00)=""/112, 0x70}], 0x5, &(0x7f0000003d00)=""/190, 0xbe}, 0x82c4}, {{&(0x7f0000003dc0)=@caif=@rfm, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f0000003e40)=""/29, 0x1d}], 0x2, &(0x7f0000003ec0)=""/219, 0xdb}, 0x4}], 0x4, 0x2000, &(0x7f00000040c0)={0x77359400}) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) socketpair(0xf, 0x800, 0x2, &(0x7f0000004100)) r1 = socket(0x80000000a, 0x3, 0x5) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8910, &(0x7f0000000380)={'bridge0\x00', 0x200000000b}) 11:16:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x7a}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 851.364741][ T7257] binder: send failed reply for transaction 267, target dead [ 851.373017][ T8840] binder: 8839:8840 ioctl 40046207 0 returned -16 11:16:04 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) poll(&(0x7f0000000100)=[{r1}], 0x116, 0x8009ad) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x0, {r3, r4+30000000}, 0x1f, 0x1000}) r5 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r5, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f00000000c0)={0x5, 0x10001, 0x5, 0x7, 0x4}) [ 851.408590][ T8847] encrypted_key: hex blob is missing [ 851.429986][ T8845] binder: 8839:8845 transaction failed 29189/-22, size 24-8 line 2994 [ 851.471793][ T8851] binder: 8839:8851 ioctl c018620c 0 returned -14 [ 851.487476][ T8845] binder_alloc: binder_alloc_mmap_handler: 8839 20001000-20004000 already mapped failed -16 [ 851.502045][ T8840] binder_alloc: 8839: binder_alloc_buf, no vma [ 851.508574][ T8840] binder: 8839:8840 transaction failed 29189/-3, size 24-8 line 3147 11:16:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x3000000}], 0x18) 11:16:04 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x1000000000016) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd) r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000080)=0x80, 0x80000) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000000c0)={@mcast1}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x4bf5d883}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000280)={r3, 0xffffffff}, 0x8) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 851.538925][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 [ 851.550683][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:16:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0xc0189436, 0x0) 11:16:04 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000140)=0x6cbf2b78) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x2, r1, 0x1, 0x3, 0x6, @remote}, 0x14) mremap(&(0x7f0000272000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f000057e000/0x3000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000080)=0xfffffffffffffffd, 0x8, 0x0) 11:16:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x300}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 851.677754][ T9073] binder_alloc: binder_alloc_mmap_handler: 9070 20001000-20004000 already mapped failed -16 [ 851.708391][ T9071] binder: BINDER_SET_CONTEXT_MGR already set [ 851.712657][ T9081] encrypted_key: hex blob is missing [ 851.723815][ T9071] binder: 9070:9071 ioctl 40046207 0 returned -16 [ 851.736868][ T9073] binder_alloc: 9070: binder_alloc_buf, no vma [ 851.745701][ T9073] binder: 9070:9073 transaction failed 29189/-3, size 24-8 line 3147 [ 851.760781][ T2987] binder: release 9070:9071 transaction 275 out, still active [ 851.774284][ T2987] binder: unexpected work type, 4, not freed [ 851.793606][ T2987] binder: undelivered TRANSACTION_COMPLETE [ 851.809054][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 [ 851.818658][ T2987] binder: send failed reply for transaction 275, target dead 11:16:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x88, 0x181800) recvmmsg(r0, &(0x7f0000004380)=[{{&(0x7f0000000040), 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000000200)=""/125, 0x7d}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/161, 0xa1}], 0x4, &(0x7f0000001340)=""/82, 0x52}, 0xb1f}, {{&(0x7f00000013c0)=@alg, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001440)=""/6, 0x6}, {&(0x7f0000001480)=""/26, 0x1a}, {&(0x7f00000014c0)=""/227, 0xe3}, {&(0x7f00000015c0)=""/83, 0x53}, {&(0x7f0000001640)=""/130, 0x82}, {&(0x7f0000001700)=""/181, 0xb5}], 0x6, &(0x7f0000001840)=""/82, 0x52}, 0x3}, {{&(0x7f00000018c0)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001940)=""/202, 0xca}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/95, 0x5f}, {&(0x7f0000002ac0)=""/175, 0xaf}], 0x4, &(0x7f0000002bc0)=""/16, 0x10}, 0x3}, {{&(0x7f0000002c00)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000002c80)=""/78, 0x4e}, {&(0x7f0000002d00)=""/175, 0xaf}, {&(0x7f0000002dc0)=""/170, 0xaa}, {&(0x7f0000002e80)=""/196, 0xc4}, {&(0x7f0000002f80)=""/231, 0xe7}, {&(0x7f0000003080)=""/199, 0xc7}, {&(0x7f0000003180)=""/201, 0xc9}, {&(0x7f0000003280)=""/4096, 0x1000}], 0x8, &(0x7f0000004300)=""/111, 0x6f}, 0x10000000}], 0x4, 0x10000, &(0x7f0000004480)={0x77359400}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000044c0)={r4, 0x1, 0x6, @remote}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) setpriority(0x0, r2, 0x9) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r5, 0xe00}], 0x1, 0x9ad) r6 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r6, 0x13) dup3(r1, r5, 0x80000) tkill(r2, 0x1000000000016) 11:16:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x4000000}], 0x18) 11:16:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x500}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0xc020660b, 0x0) 11:16:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.cpus\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x16, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback}}, {{@in6=@local}, 0x0, @in6}}, 0xe8) syz_emit_ethernet(0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) clock_settime(0x1, &(0x7f0000000100)={0x0, 0x1c9c380}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x0, 0x5, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x880, 0x7d03}, 0x0, 0x0, r2, 0x0) r5 = socket(0x15, 0xa, 0x0) r6 = syz_open_dev$admmidi(&(0x7f00000012c0)='/dev/admmidi#\x00', 0x2, 0x150d1c6b1b09fa8f) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0x9, "ce0048db8b9457f114"}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001300)={r7, 0x7fffffff}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000001740)={r8, @in={{0x2, 0x4e24, @multicast2}}, 0x100, 0x100000000000}, 0x90) rt_sigprocmask(0x1, &(0x7f0000000440)={0x3}, &(0x7f00000006c0), 0xffffffffffffffdc) recvfrom$unix(r5, &(0x7f0000000300)=""/121, 0x79, 0x10002, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000380), 0x0) sendto$inet(r6, &(0x7f0000000000)="ed5e683e4aff75573525928ec56ee3b5b639cb05d129112eac4216ea3ef2c86e003b8f1048ad68d3b3c6cc15ebb90ded100f2f4adfcd18bb2826e6ecbeb68e7ca2222e58ec1707640af76bdd6870c93188b083e037fe99a1117fcd49f1c0938f56defffac1a42583eabfae96cc32efcda7c4b95283d08efd30952a16537473cef491214a45062c0cf58c0d42cd99c2145f9430460555acb21bedfdd668db21b8f6b4d26464912f2922099b2598b317982023a36925c3199dc493c66c6fa19f24871dabee920a44e90cf3260fd75b18e066d230a4c5211017862a226f739d52af01e76fc5d807a13381d7ec2169dfcb5f", 0xf0, 0x1, 0x0, 0x0) lstat(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)) ioctl$DRM_IOCTL_VERSION(r6, 0xc0246400, &(0x7f0000000400)={0x8001, 0x200, 0xffff, 0x31d, &(0x7f0000000b80)=""/216, 0xca, &(0x7f0000000a80)=""/202, 0x49, &(0x7f0000000800)=""/73}) fcntl$setsig(r5, 0xa, 0x2b) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000240)={'ip_vti0\x00', {0x2, 0x4e24}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, @perf_bp, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001340)=@broute={'broute\x00', 0x20, 0x3, 0x97e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f00000003c0), &(0x7f0000001800)=ANY=[@ANYBLOB="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"]}, 0x9f6) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000740)={r8, 0x4, 0x9, 0x400, 0x9, 0x1, 0xf1d, 0x3, {r8, @in={{0x2, 0x4e23, @remote}}, 0x10000, 0x80000000, 0x3f, 0xfffffffffffffeff, 0x4}}, &(0x7f0000000880)=0xb0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1, 0x1, 0x2009, 0x20000000000001, 0x1, 0x0}, 0x2c) [ 852.047826][ T9288] encrypted_key: hex blob is missing [ 852.059353][ T9294] binder_alloc: binder_alloc_mmap_handler: 9285 20001000-20004000 already mapped failed -16 [ 852.083137][ T9294] binder_alloc: 9285: binder_alloc_buf, no vma 11:16:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4040, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000040)={0x6578bb03, 0x101}) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 852.097074][ T9291] binder: BINDER_SET_CONTEXT_MGR already set [ 852.112784][ T9294] binder: 9285:9294 transaction failed 29189/-3, size 24-8 line 3147 11:16:05 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x5000000}], 0x18) [ 852.147323][ T7257] binder: release 9285:9291 transaction 280 out, still active [ 852.156268][ T9291] binder: 9285:9291 ioctl 40046207 0 returned -16 [ 852.168583][ T7257] binder: unexpected work type, 4, not freed [ 852.196538][ T7257] binder: undelivered TRANSACTION_COMPLETE 11:16:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x600}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 852.226250][ T7257] binder: undelivered TRANSACTION_ERROR: 29189 [ 852.262110][ T7257] binder: send failed reply for transaction 280, target dead [ 852.305007][ T9506] encrypted_key: hex blob is missing 11:16:05 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x141800, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x1ff, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000080)) r2 = semget(0x2, 0x4, 0x406) semop(r2, &(0x7f00000000c0)=[{0x6, 0x7f, 0x800}, {0x7c0915339a67ef51, 0x5, 0x1000}, {0x1, 0x0, 0x800}, {0x5, 0x3, 0x1000}, {0x4, 0x4, 0x1000}, {0x3, 0x6a8, 0x1800}, {0x1, 0x0, 0x1800}, {0x7, 0x2, 0x800}, {0x3, 0xfb, 0x1800}], 0x9) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) gettid() tkill(r3, 0x13) tkill(r1, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) tee(r0, r0, 0x4, 0x0) 11:16:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0xc0306201, 0x0) 11:16:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x2, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x20000) getpgrp(r1) write$P9_RSTATFS(r4, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x8000, 0x774, 0x8008, 0x4, 0xff, 0x3, 0x3f, 0x9, 0x3}}, 0x43) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:16:05 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x11000000}], 0x18) 11:16:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x700}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x802) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000100)={0x1, 0xdb, "c4de25c22fa0da7c9f7b484c4139fe24d3b20d7a8651b7c976d661f438b9e63577927dd968300779bbc0c2c1a758fcbd4a6a3a1bebdd0f618aa3d026b2ece1cc88af9cce1fdcf2116b4de1c814096c970b615a7bedc580ebfcad8aa6e00805c9bdd113d15d13b75331cdbc1349e90c7aa44faa836b2ef535c513fbfc19f76863010f2c1eb0ff84e76ead2b35890c5482b911e89a50e09b807a0176931d4eb7e7709a0932427e23c0975089bb9c0cc34ebfe96b25a2bed02db2634890028332e25c2cc7694c467b1e8f6a9875ece46f8a0e187ddfe77e2f171d6ca5"}) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0xab7, 0x6a, 0x0, 0x2}, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0xfdffffff}, 0xc, &(0x7f0000000440)={0x0}}, 0x0) socket(0x17, 0x5, 0x401) [ 852.521775][ T9627] encrypted_key: hex blob is missing [ 852.527414][ T9625] binder: 9619:9625 ioctl c0306201 0 returned -14 [ 852.538352][ T9633] binder_alloc: binder_alloc_mmap_handler: 9619 20001000-20004000 already mapped failed -16 [ 852.569406][ T9625] binder: BINDER_SET_CONTEXT_MGR already set [ 852.580259][ T9625] binder: 9619:9625 ioctl 40046207 0 returned -16 [ 852.593056][ T9633] binder_alloc: 9619: binder_alloc_buf, no vma [ 852.599388][ T9633] binder: 9619:9633 transaction failed 29189/-3, size 24-8 line 3147 [ 852.614789][ T9625] binder: 9619:9625 ioctl c0306201 0 returned -14 11:16:05 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x12000000}], 0x18) 11:16:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x2000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 852.615173][ T7257] binder: send failed reply for transaction 285 to 9619:9625 [ 852.643536][ T7257] binder: undelivered TRANSACTION_COMPLETE 11:16:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x2) 11:16:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0xc0045401, &(0x7f0000a07fff)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x2, 0x4, 0x9, 0x7, 0x3}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={r2, @in={{0x2, 0x4e21, @local}}, [0x9, 0x10001, 0x1ff, 0x5, 0x80000000, 0x3, 0x1, 0x6, 0x8000, 0x5, 0x3, 0x1, 0x400, 0xfffffffffffff898, 0x2]}, &(0x7f0000000240)=0x100) 11:16:05 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 852.731666][ T9852] encrypted_key: hex blob is missing [ 852.792094][ T9903] binder: release 9855:9903 transaction 290 out, still active [ 852.818653][ T9903] binder: unexpected work type, 4, not freed 11:16:05 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x14000000}], 0x18) 11:16:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x4800}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 852.838871][ T9983] binder_alloc: binder_alloc_mmap_handler: 9855 20001000-20004000 already mapped failed -16 [ 852.868661][ T9903] binder: BINDER_SET_CONTEXT_MGR already set [ 852.877410][ T9903] binder: 9855:9903 ioctl 40046207 0 returned -16 [ 852.884384][ T9983] binder_alloc: 9855: binder_alloc_buf, no vma 11:16:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x141000, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x4) ioctl$PPPIOCGL2TPSTATS(r1, 0x80047437, &(0x7f0000000100)="279cfd89f87b9aac6e6a9d1c2360fdd6662013a54872762a63014ea7941d08b88813fa4afa81c2a0e0ac5e8459b48e4e85a942ac44b840866048") recvfrom(r1, 0x0, 0x440, 0xfffdfffffffffffc, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80001, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x34f7) bind$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) [ 852.891841][ T7257] binder: send failed reply for transaction 290, target dead [ 852.930321][T10071] encrypted_key: hex blob is missing 11:16:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3f) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) tee(r2, r2, 0x8, 0x5) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:16:08 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x10001, 0xe9, 0x7f, 0x8, 0x70, r0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:16:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x3) 11:16:08 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x15000000}], 0x18) 11:16:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x4c00}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x2) [ 855.529960][T10285] binder: release 10284:10285 transaction 295 out, still active [ 855.556070][T10285] binder: unexpected work type, 4, not freed [ 855.563620][T10292] encrypted_key: hex blob is missing [ 855.566544][T10285] binder_release_work: 1 callbacks suppressed [ 855.566549][T10285] binder: undelivered TRANSACTION_COMPLETE [ 855.582425][T10293] binder: BINDER_SET_CONTEXT_MGR already set [ 855.588421][T10293] binder: 10288:10293 ioctl 40046207 0 returned -16 [ 855.600560][T10320] binder_alloc: binder_alloc_mmap_handler: 10284 20001000-20004000 already mapped failed -16 [ 855.600650][T10293] binder: release 10288:10293 transaction 298 out, still active [ 855.611828][T10285] binder: BINDER_SET_CONTEXT_MGR already set [ 855.628642][T10320] binder_alloc: 10284: binder_alloc_buf, no vma [ 855.631497][T10293] binder: unexpected work type, 4, not freed [ 855.635369][T10285] binder: 10284:10285 ioctl 40046207 0 returned -16 [ 855.644408][T10293] binder: undelivered TRANSACTION_COMPLETE [ 855.662768][T10320] binder_transaction: 1 callbacks suppressed [ 855.662831][T10320] binder: 10284:10320 transaction failed 29189/-3, size 24-8 line 3147 11:16:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x100) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x5, 0xa80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 11:16:08 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x16000000}], 0x18) [ 855.664234][ T7257] binder: send failed reply for transaction 295, target dead 11:16:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x6000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:08 executing program 2: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x3) r1 = inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x40000800) inotify_rm_watch(r0, r1) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) epoll_create(0x800) prctl$PR_GET_SECUREBITS(0x1b) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000001c0)=""/41) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000200)={0x3, 0x7fffffff, [{0xfffffffffffffff9, 0x0, 0x1ff}, {0x0, 0x0, 0xeb}, {0x2, 0x0, 0x8}]}) ptrace$getregset(0x4204, r2, 0x4, &(0x7f0000000340)={&(0x7f0000000240)=""/228, 0xe4}) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xb9fa, 0x400000) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f0000000040)={0x9, 0x7, 0xfffffffffffff566}) tkill(r2, 0x13) tkill(0x0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 855.761302][ T7257] binder: send failed reply for transaction 298, target dead [ 855.795564][ T7257] binder_release_work: 3 callbacks suppressed [ 855.795571][ T7257] binder: undelivered TRANSACTION_ERROR: 29189 11:16:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4) 11:16:08 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = semget$private(0x0, 0x40000000000000, 0x22b) clock_gettime(0x200, 0x0) semtimedop(r1, &(0x7f00000001c0)=[{0x0, 0xa8cd, 0x800}, {0x1, 0x4, 0x1800}, {0x2, 0x20, 0x1800}], 0x3, &(0x7f0000000380)) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x2000000000}, 0x1c) r4 = syz_open_dev$midi(&(0x7f00000004c0)='/dev/midi#\x00', 0x957, 0x640000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, r2, 0x0, 0xb, &(0x7f0000000300)='/dev/midi#\x00'}, 0x30) fcntl$lock(r0, 0x27, &(0x7f00000003c0)={0x2, 0x4, 0x4, 0x80000001, r5}) listen(r3, 0x200000000002) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x7ff}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000280)=""/3, &(0x7f0000000180)=0xfffffffffffffdc1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r7 = userfaultfd(0x80002) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000400)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000600)=ANY=[@ANYBLOB="1a4908005b7533b47ca708216f8045e94ed78553c7cc43cda489645db53618ee27e5000000000000a3f4c1f1ebbc6b2e1a193a05495384454712574dd278e3f0d2edf438a12e40698e4beaa6b75820b41f973bb146d92eeec6379f52ef4d51d9eada6213cc0501839d540cf63ba3df94d7157cf232a273c50dec9d58574638477a80bc73051fabe71fc0fe6708b8afd03c9b1b62b0a851d1e28c8246bf4b389d9e62746a846eca8c950c80080005000000000073259a12d4692b176a5bfe568efa8e177a41a91c0cf01d0287840fdaa7a364da"], 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x3}, &(0x7f0000000240)=0x8) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x1b, &(0x7f0000000040), 0x4) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000000c0)=0xc7) getgroups(0x9, &(0x7f0000000440)=[0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01, 0xee01, 0xee00, 0xee00, 0xffffffffffffffff]) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) [ 855.814953][T10410] encrypted_key: hex blob is missing 11:16:08 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1e000000}], 0x18) [ 855.854679][T10417] binder: release 10416:10417 transaction 303 out, still active [ 855.905732][T10417] binder: unexpected work type, 4, not freed 11:16:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x6800}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:08 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1f000000}], 0x18) [ 855.963108][T10417] binder: undelivered TRANSACTION_COMPLETE [ 855.988126][T10564] binder_alloc: binder_alloc_mmap_handler: 10416 20001000-20004000 already mapped failed -16 [ 856.049068][T10417] binder: BINDER_SET_CONTEXT_MGR already set [ 856.061581][T10617] encrypted_key: hex blob is missing [ 856.073691][T10417] binder: 10416:10417 ioctl 40046207 0 returned -16 [ 856.089375][T10653] binder_alloc: 10416: binder_alloc_buf, no vma 11:16:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x3f000000}], 0x18) [ 856.098403][T10653] binder: 10416:10653 transaction failed 29189/-3, size 24-8 line 3147 11:16:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) [ 856.142229][ T7095] binder: send failed reply for transaction 303, target dead [ 856.157859][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:16:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x6c00}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 856.218970][T10740] binder: release 10739:10740 transaction 308 out, still active [ 856.258848][T10740] binder: unexpected work type, 4, not freed [ 856.306454][T10740] binder: undelivered TRANSACTION_COMPLETE [ 856.337479][T10743] encrypted_key: hex blob is missing [ 856.349959][T10746] binder_alloc: binder_alloc_mmap_handler: 10739 20001000-20004000 already mapped failed -16 [ 856.374092][T10740] binder: BINDER_SET_CONTEXT_MGR already set [ 856.400983][T10740] binder: 10739:10740 ioctl 40046207 0 returned -16 [ 856.444943][T10420] binder: send failed reply for transaction 308, target dead [ 856.455479][T10746] binder: 10739:10746 transaction failed 29189/-22, size 24-8 line 2994 [ 856.481541][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:16:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) r3 = getpid() kcmp(r2, r3, 0x1, r1, r0) r4 = gettid() socketpair(0x7, 0x5, 0x200, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x5, 0x4}, &(0x7f0000000040)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r6, 0xe00}], 0x1, 0x9ad) fsetxattr$security_ima(r5, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000180)=@ng={0x4, 0x11, "7b8034e2754a3f2bab5bc711014d707a77b067"}, 0x15, 0x2) r7 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r7, 0x13) dup3(r1, r6, 0x0) tkill(r4, 0x1000000000016) 11:16:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x40000000}], 0x18) 11:16:09 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = semget$private(0x0, 0x40000000000000, 0x22b) clock_gettime(0x200, 0x0) semtimedop(r1, &(0x7f00000001c0)=[{0x0, 0xa8cd, 0x800}, {0x1, 0x4, 0x1800}, {0x2, 0x20, 0x1800}], 0x3, &(0x7f0000000380)) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x2000000000}, 0x1c) r4 = syz_open_dev$midi(&(0x7f00000004c0)='/dev/midi#\x00', 0x957, 0x640000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, r2, 0x0, 0xb, &(0x7f0000000300)='/dev/midi#\x00'}, 0x30) fcntl$lock(r0, 0x27, &(0x7f00000003c0)={0x2, 0x4, 0x4, 0x80000001, r5}) listen(r3, 0x200000000002) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x7ff}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000280)=""/3, &(0x7f0000000180)=0xfffffffffffffdc1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r7 = userfaultfd(0x80002) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000400)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000600)=ANY=[@ANYBLOB="1a4908005b7533b47ca708216f8045e94ed78553c7cc43cda489645db53618ee27e5000000000000a3f4c1f1ebbc6b2e1a193a05495384454712574dd278e3f0d2edf438a12e40698e4beaa6b75820b41f973bb146d92eeec6379f52ef4d51d9eada6213cc0501839d540cf63ba3df94d7157cf232a273c50dec9d58574638477a80bc73051fabe71fc0fe6708b8afd03c9b1b62b0a851d1e28c8246bf4b389d9e62746a846eca8c950c80080005000000000073259a12d4692b176a5bfe568efa8e177a41a91c0cf01d0287840fdaa7a364da"], 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x3}, &(0x7f0000000240)=0x8) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x1b, &(0x7f0000000040), 0x4) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000000c0)=0xc7) getgroups(0x9, &(0x7f0000000440)=[0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01, 0xee01, 0xee00, 0xee00, 0xffffffffffffffff]) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) 11:16:09 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() tkill(r1, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:16:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6) 11:16:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x7400}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1000000000000}], 0x18) [ 856.676411][T10865] encrypted_key: hex blob is missing [ 856.682851][T10866] binder: release 10864:10866 transaction 313 out, still active [ 856.701533][T10866] binder: unexpected work type, 4, not freed [ 856.714183][T10866] binder: undelivered TRANSACTION_COMPLETE [ 856.733358][T10944] binder_alloc: binder_alloc_mmap_handler: 10864 20001000-20004000 already mapped failed -16 [ 856.768203][T10866] binder: BINDER_SET_CONTEXT_MGR already set [ 856.775644][T10866] binder: 10864:10866 ioctl 40046207 0 returned -16 11:16:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7) 11:16:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x7a00}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 856.775875][T10944] binder_alloc: 10864: binder_alloc_buf, no vma [ 856.789195][T10944] binder: 10864:10944 transaction failed 29189/-3, size 24-8 line 3147 [ 856.799548][ T7095] binder: send failed reply for transaction 313, target dead [ 856.813961][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:16:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x2000000000000}], 0x18) [ 856.919928][T11083] binder: release 11082:11083 transaction 318 out, still active [ 856.931044][T11083] binder: unexpected work type, 4, not freed [ 856.947098][T11081] encrypted_key: hex blob is missing [ 856.969741][T11083] binder: undelivered TRANSACTION_COMPLETE [ 857.009690][T11111] binder_alloc: binder_alloc_mmap_handler: 11082 20001000-20004000 already mapped failed -16 [ 857.032899][T11083] binder: BINDER_SET_CONTEXT_MGR already set [ 857.048213][T11111] binder_alloc: 11082: binder_alloc_buf, no vma [ 857.056408][T11083] binder: 11082:11083 ioctl 40046207 0 returned -16 [ 857.068772][T11111] binder: 11082:11111 transaction failed 29189/-3, size 24-8 line 3147 11:16:10 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x100000000000000}], 0x18) [ 857.086652][ T7095] binder: send failed reply for transaction 318, target dead [ 857.106551][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:16:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0xfeffff}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 857.251720][T11196] encrypted_key: hex blob is missing 11:16:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)={r2, 0x7fff}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r4, 0xe00}], 0x1, 0x9ad) wait4(r3, &(0x7f0000000000), 0x1, &(0x7f0000000040)) ptrace$setregs(0xf, r3, 0x400, &(0x7f0000000140)="55108aa95545509bb5b52589767b824ce28a843e10a78730ee703d54762df1370064f899c24df390014380568c1b2d80a508edb5ec2fe7c3087c4dea0ab9b7a789c76734e7ce8c45c49005139e3bf6420105744e57d100da7af341efdbc2b6d3fb0a7b2cc6baac4d27cd8d25aa9b5530d69825efc38a") r5 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sched_getscheduler(r3) tkill(r5, 0x13) dup3(r0, r4, 0x0) tkill(r3, 0x1000000000016) 11:16:12 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001300), 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x800876c9) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x1ff) syz_emit_ethernet(0x74, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60d8652b00140000fe8000000000000000000d00000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500262d701bbab000090780000"], 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="5002000090780000"], 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10002, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000240)={'veth1_to_team\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}}) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="ed5e683e4aff75573525928ec56ee3b5b639cb05d129112eac4216ea3ef2c86e003b8f1048ad68d3b3c6cc15ebb90ded100f2f4adfcd18bb2826e6ecbeb68e7ca2222e58ec1707640af76bdd6870c93188b083e037fe99a1117fcd49f1c0938f56defffac1a42583eabfae96cc32ef4da7c4b95283d08efd30952a16537473cef491214a45062c0cf58c0d42cd99c2145f9430460555acb21bedfdd668db21b8f6b4d26464912f2922099b2598b317982023a36925c3199dc493c66c6fa19f24871dabee920a44e90cf3260fd75b1ae066d230a4c5211017862a226f739d52af01e76fc5d807a13381d7ec2169dfcb5f", 0xf0, 0x1, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x8000000039) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000180)) 11:16:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x1000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 859.633240][T11302] encrypted_key: hex blob is missing 11:16:12 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400002, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040)) tkill(r1, 0x13) tkill(r0, 0x1022) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:16:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x48) 11:16:12 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x180000000000000}], 0x18) 11:16:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$capi20_data(r3, &(0x7f0000000080)={{0x10, 0x800, 0x83, 0x83, 0x8, 0x10001}, 0x2, "3896"}, 0x14) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 859.749200][T11467] binder: release 11465:11467 transaction 323 out, still active [ 859.775639][T11467] binder: unexpected work type, 4, not freed 11:16:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x2000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 859.796431][T11467] binder: undelivered TRANSACTION_COMPLETE 11:16:12 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001300), 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x800876c9) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x1ff) syz_emit_ethernet(0x74, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60d8652b00140000fe8000000000000000000d00000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500262d701bbab000090780000"], 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="5002000090780000"], 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10002, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000240)={'veth1_to_team\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}}) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="ed5e683e4aff75573525928ec56ee3b5b639cb05d129112eac4216ea3ef2c86e003b8f1048ad68d3b3c6cc15ebb90ded100f2f4adfcd18bb2826e6ecbeb68e7ca2222e58ec1707640af76bdd6870c93188b083e037fe99a1117fcd49f1c0938f56defffac1a42583eabfae96cc32ef4da7c4b95283d08efd30952a16537473cef491214a45062c0cf58c0d42cd99c2145f9430460555acb21bedfdd668db21b8f6b4d26464912f2922099b2598b317982023a36925c3199dc493c66c6fa19f24871dabee920a44e90cf3260fd75b1ae066d230a4c5211017862a226f739d52af01e76fc5d807a13381d7ec2169dfcb5f", 0xf0, 0x1, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x8000000039) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000180)) [ 859.825232][T11520] binder_alloc: binder_alloc_mmap_handler: 11465 20001000-20004000 already mapped failed -16 [ 859.856111][T11522] encrypted_key: hex blob is missing 11:16:12 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x200000000000000}], 0x18) [ 859.870172][T11467] binder: BINDER_SET_CONTEXT_MGR already set [ 859.879429][T11467] binder: 11465:11467 ioctl 40046207 0 returned -16 [ 859.893921][T11520] binder_alloc: 11465: binder_alloc_buf, no vma 11:16:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) fsetxattr$security_evm(r1, &(0x7f0000000180)='security.evm\x00', &(0x7f0000000200)=@v2={0x3, 0x3, 0x14, 0x1, 0x4, "80a90f39"}, 0xe, 0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) r4 = gettid() fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000240)) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000000)="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") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) r5 = dup3(r1, r3, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x2a, &(0x7f0000000280)=""/147, &(0x7f0000000340)=0x93) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) tkill(r2, 0x1000000000016) [ 859.916578][T10420] binder: send failed reply for transaction 323, target dead [ 859.922093][T11520] binder: 11465:11520 transaction failed 29189/-3, size 24-8 line 3147 11:16:12 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001300), 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x800876c9) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x1ff) syz_emit_ethernet(0x74, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60d8652b00140000fe8000000000000000000d00000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500262d701bbab000090780000"], 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="5002000090780000"], 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10002, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000240)={'veth1_to_team\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}}) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="ed5e683e4aff75573525928ec56ee3b5b639cb05d129112eac4216ea3ef2c86e003b8f1048ad68d3b3c6cc15ebb90ded100f2f4adfcd18bb2826e6ecbeb68e7ca2222e58ec1707640af76bdd6870c93188b083e037fe99a1117fcd49f1c0938f56defffac1a42583eabfae96cc32ef4da7c4b95283d08efd30952a16537473cef491214a45062c0cf58c0d42cd99c2145f9430460555acb21bedfdd668db21b8f6b4d26464912f2922099b2598b317982023a36925c3199dc493c66c6fa19f24871dabee920a44e90cf3260fd75b1ae066d230a4c5211017862a226f739d52af01e76fc5d807a13381d7ec2169dfcb5f", 0xf0, 0x1, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x8000000039) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000180)) 11:16:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x3000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 859.988955][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:16:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x300000000000000}], 0x18) 11:16:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4c) [ 860.058481][T11641] encrypted_key: hex blob is missing [ 860.196416][T11681] binder: release 11670:11681 transaction 328 out, still active [ 860.211407][T11681] binder: unexpected work type, 4, not freed [ 860.235757][T11681] binder: undelivered TRANSACTION_COMPLETE [ 860.267739][T11756] binder_alloc: binder_alloc_mmap_handler: 11670 20001000-20004000 already mapped failed -16 [ 860.278268][T11681] binder: BINDER_SET_CONTEXT_MGR already set [ 860.286042][T11681] binder: 11670:11681 ioctl 40046207 0 returned -16 [ 860.292805][T11756] binder_alloc: 11670: binder_alloc_buf, no vma [ 860.292846][T11756] binder: 11670:11756 transaction failed 29189/-3, size 24-8 line 3147 [ 860.293740][ T2987] binder: send failed reply for transaction 328, target dead [ 860.299528][T11756] binder: undelivered TRANSACTION_ERROR: 29189 11:16:15 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x7fff, 0x7ff, 0xff, 0x4, 0x0, 0x7fff, 0x4, 0x2, 0x200, 0x1, 0x40, 0x401, 0x10a5, 0x4000, 0x9, 0x9, 0x8, 0x3, 0x8000, 0x6, 0x2bbff659, 0x1, 0x8, 0xfffffffffffffc01, 0xcc, 0x1f, 0x81, 0x3, 0x0, 0x5, 0x6, 0x8, 0x3, 0x49d2, 0x1, 0x8f0, 0x0, 0x1e, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x10000, 0x6, 0x7fff, 0x8, 0x0, 0x4, 0x5}, r1, 0xb, r2, 0x401eddbf34166a95) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000300)) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r3, 0x108, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x6}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, 0x0, 0x20000041) 11:16:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0xc0, 0x0, 0x1f, "a0c612c6914421d8d5d9050b29b1d69b", "d9428cf6fc51e4eda7ee0354a1dc6139f1d59137dd821104bb0e325ebe361d223e71ffb685914358b85f0f864cf007db116b12d1dd2a33b40ae90f46f5b7eef4b50386275b336a465d0f1c638e9056c9081e5b8e7597f0540c9689b5919c8b851d3c939347ba8a700641b06127b0306a1062c86b9a9a28d0f8b7c0dc3dc95541ce6883a090d2820142eef761ec02a78d7d0d0914fe7e8208239a675960e1e499cd4d81e37e66d97ff18ae5"}, 0xc0, 0x2) 11:16:15 executing program 1: r0 = socket$isdn(0x22, 0x3, 0x25) open_by_handle_at(r0, &(0x7f0000000100)={0x1008, 0x7fffffff, "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"}, 0x327800) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000000c0)={'batadv0\x00', 0x6}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_bridge\x00', &(0x7f0000000000)=@ethtool_eee={0x48}}) 11:16:15 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x400000000000000}], 0x18) 11:16:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x4000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x60) [ 862.823581][T11762] encrypted_key: hex blob is missing [ 862.827949][T11769] binder: release 11760:11769 transaction 333 out, still active [ 862.859164][T11769] binder: unexpected work type, 4, not freed [ 862.877054][T11769] binder: undelivered TRANSACTION_COMPLETE [ 862.888683][T11867] binder_alloc: binder_alloc_mmap_handler: 11760 20001000-20004000 already mapped failed -16 [ 862.907175][T11769] binder: BINDER_SET_CONTEXT_MGR already set [ 862.917022][T11867] binder_alloc: 11760: binder_alloc_buf, no vma 11:16:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) semget(0x3, 0x7, 0x0) semget$private(0x0, 0x6, 0x400) r0 = semget(0x2, 0x7, 0x2) semctl$SEM_STAT(r0, 0x1, 0x12, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x4, 0x0, 0x7fffffff, 0x0, 0xb94, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x6e5c, 0x0, 0x0, 0x384, 0x0, 0x0, 0x9, 0x401, 0xea6, 0x972, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, 0x0, 0x0, 0x0, 0x9, 0x22c5, 0x5, 0x7, 0x0, 0x20, 0x2, @perf_bp={0x0, 0x1}, 0x20000, 0xffffffff80000001, 0xffffffff00000000, 0x0, 0x8001, 0x8}, 0x0, 0x0, 0xffffffffffffff9c, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = getpgid(0xffffffffffffffff) r4 = fcntl$getown(r1, 0x9) kcmp(r3, r4, 0x3, r1, r1) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200002, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000200)={0x7, 0x1c00000000000000, 0x0, 0x0, 0x7}) 11:16:15 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x500000000000000}], 0x18) 11:16:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x5000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 862.929430][T11769] binder: 11760:11769 ioctl 40046207 0 returned -16 [ 862.938772][T11867] binder: 11760:11867 transaction failed 29189/-3, size 24-8 line 3147 [ 862.954169][ T2987] binder: send failed reply for transaction 333, target dead 11:16:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x6, 0x303800) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f00000000c0)={0x80, 0x1ff, 0x6}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) write$apparmor_exec(r3, &(0x7f0000000040)={'stack ', '/dev/ptmx\x00'}, 0x10) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r4, 0xe00}], 0x1, 0x9ad) r5 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r5, 0x13) dup3(r0, r4, 0x0) tkill(r1, 0x1000000000016) 11:16:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x68) [ 863.017526][T10420] binder: undelivered TRANSACTION_ERROR: 29189 [ 863.043339][T11985] encrypted_key: hex blob is missing 11:16:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r3, @in={{0x2, 0x4e23, @broadcast}}, [0xc9b9, 0x6, 0x1, 0x1, 0x9, 0x20, 0x9, 0x1, 0x0, 0x7f, 0x6, 0x3, 0x2, 0x3b, 0x8]}, &(0x7f00000000c0)=0x100) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r4, 0xe00}], 0x1, 0x9ad) r5 = gettid() ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000180)=0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r5, 0x800018) dup3(r0, r4, 0x0) tkill(r1, 0x14) [ 863.151802][T12142] binder: release 12108:12142 transaction 338 out, still active [ 863.179336][T12142] binder: unexpected work type, 4, not freed [ 863.199716][T12142] binder: undelivered TRANSACTION_COMPLETE [ 863.223852][T12197] binder_alloc: binder_alloc_mmap_handler: 12108 20001000-20004000 already mapped failed -16 [ 863.259731][T12142] binder: BINDER_SET_CONTEXT_MGR already set [ 863.277246][T12142] binder: 12108:12142 ioctl 40046207 0 returned -16 [ 863.311823][T10420] binder: send failed reply for transaction 338, target dead [ 863.319767][T12197] binder: 12108:12197 transaction failed 29189/-22, size 24-8 line 2994 [ 863.335255][T10420] binder: undelivered TRANSACTION_ERROR: 29189 11:16:16 executing program 2: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r0 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x13) tkill(r0, 0x200000014) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:16:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1100000000000000}], 0x18) 11:16:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x6000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6c) 11:16:16 executing program 1: r0 = socket$kcm(0x10, 0x200, 0x10) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000007e35e062e0cdcc364a43232613c3ee000000b0fb0000000000000400000000000000", @ANYRES32=r0, @ANYBLOB="00000000010000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000040000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000030000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="f0ffff0400000000000000000000b71cc4e70000000000000000009c"]) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008107e00f80ecdb4cb9d91563190400000000000000fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) 11:16:16 executing program 5: lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f0000000080)='/dev/ptmx\x00', 0xa, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 863.750218][T12212] binder: release 12211:12212 transaction 343 out, still active [ 863.772911][T12212] binder: unexpected work type, 4, not freed [ 863.775190][T12217] encrypted_key: hex blob is missing [ 863.782753][T12212] binder: undelivered TRANSACTION_COMPLETE 11:16:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}}, 0x0) [ 863.799066][T12250] binder_alloc: binder_alloc_mmap_handler: 12211 20001000-20004000 already mapped failed -16 [ 863.810861][T12212] binder: BINDER_SET_CONTEXT_MGR already set [ 863.824111][T12212] binder: 12211:12212 ioctl 40046207 0 returned -16 [ 863.837679][T12250] binder_alloc: 12211: binder_alloc_buf, no vma 11:16:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1200000000000000}], 0x18) 11:16:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1, 0xe00}], 0x1, 0x9ad) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/net\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x800080, 0x16, 0x5, 0xbd6, 0x6, 0x8, 0x3f}) r3 = dup3(r0, r1, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 863.869856][ T2987] binder: send failed reply for transaction 343, target dead [ 863.878140][T12250] binder: 12211:12250 transaction failed 29189/-3, size 24-8 line 3147 11:16:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x74) [ 863.931466][ T5] binder: undelivered TRANSACTION_ERROR: 29189 11:16:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x7000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1400000000000000}], 0x18) [ 864.054371][T12442] binder: release 12440:12442 transaction 348 out, still active [ 864.068649][T12442] binder: unexpected work type, 4, not freed [ 864.080149][T12442] binder: undelivered TRANSACTION_COMPLETE [ 864.097912][T12449] binder_alloc: binder_alloc_mmap_handler: 12440 20001000-20004000 already mapped failed -16 [ 864.108578][T12446] encrypted_key: hex blob is missing [ 864.117464][T12442] binder: BINDER_SET_CONTEXT_MGR already set [ 864.125431][T12442] binder: 12440:12442 ioctl 40046207 0 returned -16 [ 864.141496][T12449] binder_alloc: 12440: binder_alloc_buf, no vma [ 864.176865][ T2987] binder: send failed reply for transaction 348, target dead [ 864.189628][T12449] binder: 12440:12449 transaction failed 29189/-3, size 24-8 line 3147 [ 864.214961][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:16:17 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) gettid() tkill(r0, 0x4001000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 11:16:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x20000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7a) 11:16:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1500000000000000}], 0x18) 11:16:17 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x4003, &(0x7f0000000080)=0x5, 0x6) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) clone(0x3, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x1) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1000}, &(0x7f00000003c0)=0x10) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x404000, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SVE_SET_VL(0x32, 0xef05) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={{0x5, 0x944, 0x8, 0x8, 0x81, 0x1000}, 0x9}) socket$inet6(0xa, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) [ 864.686439][T12670] binder: release 12664:12670 transaction 353 out, still active [ 864.694165][T12668] encrypted_key: hex blob is missing [ 864.714221][T12670] binder: unexpected work type, 4, not freed [ 864.725588][T12670] binder: undelivered TRANSACTION_COMPLETE 11:16:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x48000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1600000000000000}], 0x18) [ 864.738066][T12733] binder_alloc: binder_alloc_mmap_handler: 12664 20001000-20004000 already mapped failed -16 [ 864.748882][T12670] binder: BINDER_SET_CONTEXT_MGR already set [ 864.756984][T12733] binder_alloc: 12664: binder_alloc_buf, no vma [ 864.765609][T12670] binder: 12664:12670 ioctl 40046207 0 returned -16 [ 864.773180][T12733] binder: 12664:12733 transaction failed 29189/-3, size 24-8 line 3147 11:16:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 864.811613][ T2987] binder: send failed reply for transaction 353, target dead [ 864.826170][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:16:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x300) 11:16:17 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) capget(&(0x7f0000000080)={0x20080522, r0}, &(0x7f00000000c0)={0x2, 0x4, 0x7, 0x4, 0x7fff, 0x2}) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x100000001, 0xffffffff, 0xfffffffffffffff9, 0xfffffffffffffff9, 0x3, 0x1, 0x6, 0x10000000000000, 0x3439, 0x75e0}) [ 864.899953][T12846] encrypted_key: hex blob is missing 11:16:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1e00000000000000}], 0x18) 11:16:17 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000400)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000005c0)={'nat\x00'}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) r3 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x2, 0x8040) add_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000580)) getegid() getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180), 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)={0xfffffffffffffff9, 0x1bb}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@broadcast}}}, 0x0) connect$vsock_dgram(r3, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) read(r0, &(0x7f00000004c0)=""/152, 0x98) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r1, r2, 0x0, 0x102000002) [ 864.968125][T12900] binder: release 12899:12900 transaction 358 out, still active [ 865.007914][T12900] binder: unexpected work type, 4, not freed 11:16:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x4c000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 865.049432][T12900] binder: undelivered TRANSACTION_COMPLETE 11:16:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f0000000040)={0x4000009, 0x0, 0x0, 0x1, 0x10001, {0x9, 0x101}}) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r5 = geteuid() r6 = getuid() r7 = getegid() sendmsg$netlink(r3, &(0x7f00000019c0)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x21000000}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000200)={0x20c, 0x3e, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8, 0x83, @u32=0x23}, @nested={0x90, 0x17, [@generic="1231d78e458fd4e31cce4c43dd11232e8797c879b946c3f18caeeaee0c6b91a3b39f77b92540f77135e98c48be11272755b7874010deea7a07b276f69d017d4982a0dfa7a387546cd0b8761f21bf298626e1593568894c33d6d30f9e2885693422f0e18e5bf98d77b3c6d5bcf4c9b489fc004d", @typed={0x8, 0x3a, @ipv4=@loopback}, @typed={0x8, 0x83, @ipv4=@multicast2}, @typed={0x8, 0x4a, @ipv4=@empty}]}, @nested={0x40, 0x24, [@typed={0x8, 0x4c, @uid=r5}, @generic="667096ab5019665e1a9ac1e1797f4a5dd6415a6dcd05cf255d94c7401c68285bd7", @typed={0x10, 0x3a, @str='/dev/ptmx\x00'}]}, @generic="1e9e249035ae3ef779871f303bc234bcf02144", @generic="88b0f8", @nested={0xe4, 0x66, [@generic="178950bc3994d618b9bebd928a9314137df03552c032bfc390d288e5d5621a30675869fb3fe9747dc4eaea1f56ea6887c01dce87b6eb3a02182e17837bd2c88d6c9daafc81d4391d29b7c9749d1d50e8d51f7b25d38e2eca04081aa7dbaa5b414a03e548842dd216138500da903ac4bc94accb31ba1c5ca091d84083f53ec8715cfe02fda57172514f0eb2e05b0d6b886fd6e3482414818790888e7af36cb3f6d8415cc8c1963b96cbd5e5c185413e5da90f8cbae7558a2d6f9c9e9cc80f9ce0c0519a7a832fe9c4de5e195794cebcfd9ea83192a05c8742e48679cc74"]}, @generic="c52998376700f07e48346364ede0f247904ad619da259d3ab6e1b52d13708121", @typed={0x8, 0x77, @ipv4=@rand_addr=0x8}]}, 0x20c}, {&(0x7f0000000440)={0x1a8, 0x19, 0x418, 0x70bd2b, 0x25dfdbfd, "", [@nested={0xec, 0x73, [@typed={0x4, 0xb}, @typed={0x8, 0x35, @u32=0x8}, @generic="d6c3bd6bacbdee6e640116f1102f82c063640af9b7aafc1647e62bca0931f309c3bd2c0c76ba800102926b6c33ed64344dd10b282b51452cda9651ab1c937ff99c0fe1e71f7825c846abb35da48f0c6716796a9d91e53afdb0a94da37992", @generic="aae514f46c0ea56afe6a2ab9642e", @generic="86475f0850022c916850510b9d2ddd56ab67d140d2a34fd5fb1da10ae2168a3a201829387b2b84f3aff69e3ceb7530c83aa75f8a09936f50b177ac661c5bc7d0915d597c6dafd9031c9da91cd23b1f821261e7c1a1decec292096cea0a7a46789d51d933c0233beeb3f7df", @typed={0x4, 0x76}]}, @typed={0x8, 0x45, @pid=r4}, @generic="1e5796777b0ff15d2f77f9d3c769f68bbd87ae93fd5242c577ac2bf68ba90623ad72f5b6253db97a3bce9f2dbc8ee43a984c72befd1580f37e6beb21e856d4bbae8102d588f7632e6a73445e112473aa001da39990b6203ca2dc91ba48d0ae8d642be23c4df9cb5be942185784f7febadc9835562e12e70b8094a5458ea5ef76f8db096825a2a4ff9a2842af86a618c3689c30dafb1dd92390e0552f300888297ab8fa"]}, 0x1a8}, {&(0x7f0000000600)={0x1280, 0x23, 0x2, 0x70bd2c, 0x25dfdbfe, "", [@generic="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", @generic="ffb525142bf64c5f9dd515abb981d69a6cf60f12d8ed8215ac9c5418d178d992070b", @typed={0x4, 0x6}, @nested={0x184, 0x4a, [@typed={0x8, 0x96, @u32=0xd6}, @generic="626b6d4158d7da1d0267a86cc6f5c2a8bfc86dafadb2fbd2ab03372356da756d24ecb846d75aab210830a2b5583898b6e15d19e520b91913bbb890d521024cc5b7bcca10781bb718f50b38d13a80f9a4c4ff43d7e029d94fbc93e107f8f67463ebea163c8c3388ec01b18a342c3134a48f41395500080924faeeb6f54c17bfb424", @typed={0xf4, 0xd, @binary="cbcdef68d6458b9c5fa8036a06cfb04a0b808033160736f732bd38d8d0eca71575460f01dd036f03e3029584bd449b4cc357ec9a79c4cd835fc7a9e7ec6d8b542476e49a36a68f07061dda02668500e783c2a865873969ba6f5c85a376803ce54543e9e3d7ccb07b27f302cc1de9c6f74bdf067b2bba976901f023478c69b569462f970ac6afd9e5e6bc930a54f8f98bd6c992447481387d42f911ca797e9c5b4a421017a4063ab7f2f1c7bf02e068b7fde94f514c8e4c3477fd206f4be2c744e58398d1832e5fb01341a0f69efc994ff0b26b93bfbcf2a1b4acefbcdbd796e97f141d1df55c46fae3461aec43b9"}]}, @generic="4da8950d80144f2745349cb5163850933c9a209d901a1290f4d53587fd5b6ced2fbf86406040291611ea7b6ea42c98fe2a5a51742958f3cdb947a12b17e21e77519af4ee160614b3391a1def1940160f658fabf67bfb703d3de159753beddc51f37d5b92fd8ce4dcfd9111706bc214c1b677badd2b31bcc0dffc397f0d0e45e1f445149d39ea679ae7608b51d6136d0a05844299a402ba69b715387382b615061c4442c348867452dccba6e3427b0f37731eaa16ed5bcb854d60beb7b4a431d4c574191b9e"]}, 0x1280}, {&(0x7f0000001880)={0xc4, 0x16, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@generic="5a097cb37ae90dbd93bf410fb91f1b4172b8c44db8e31312b54d040d6ccc64f45008670313e8cf447c52", @typed={0x14, 0x59, @ipv6=@ipv4={[], [], @broadcast}}, @nested={0x74, 0x7c, [@typed={0x8, 0x51, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="189084e84096dea8b145f57f437ccd5c4c87adb98bf0f4f6202b0fa2ef0f6a06d9f53a53fc91e72ceacf23fa0d871a492ab9aa405b54a01d99ec8cdf6797e020b5ce9441ea8dc213236379f9b7cd262623848bf1f522170c3ccd6a306b1dcfec23d6c4f79f"]}]}, 0xc4}], 0x4, &(0x7f0000001980)=[@cred={0x20, 0x1, 0x2, r1, r6, r7}], 0x20, 0x400c1}, 0x80) tkill(r4, 0x13) dup3(r0, r2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) tkill(r1, 0x1000000000016) [ 865.095068][T13007] binder_alloc: binder_alloc_mmap_handler: 12899 20001000-20004000 already mapped failed -16 11:16:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x1f00000000000000}], 0x18) [ 865.139765][T12900] binder: BINDER_SET_CONTEXT_MGR already set [ 865.167416][T13012] encrypted_key: hex blob is missing [ 865.174405][T12900] binder: 12899:12900 ioctl 40046207 0 returned -16 [ 865.220630][T13025] binder_alloc: 12899: binder_alloc_buf, no vma [ 865.250964][T13025] binder: 12899:13025 transaction failed 29189/-3, size 24-8 line 3147 [ 865.277305][ T2987] binder: send failed reply for transaction 358, target dead [ 865.304737][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:16:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x500) 11:16:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc8) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000280)={0x4, 0x1, &(0x7f0000000240)="1e20f006844d5b361003323c54a2957902d6659e626c133e93db28ce0946497876372b8a223d4f9deef8eab5489ab5d0143c68aa244471e44c", {0xff, 0x7f, 0x0, 0x0, 0xfffffffffffffc00, 0x4, 0xa, 0x81}}) r2 = gettid() fchmodat(r1, &(0x7f00000002c0)='./file0\x00', 0x100) timer_create(0xfffffffffffffffe, &(0x7f0000044000)={0x0, 0xc}, &(0x7f0000000180)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0xfffff7fffffffffc, 0x0) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x400) tkill(r4, 0x13) dup3(r0, r3, 0x0) clock_gettime(0x6, &(0x7f0000000200)) truncate(&(0x7f0000000140)='./file0\x00', 0xffff) tkill(r2, 0x1000000000016) getsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 11:16:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x3f00000000000000}], 0x18) 11:16:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x60000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 865.473346][T13191] binder: release 13189:13191 transaction 363 out, still active [ 865.481827][T13191] binder: unexpected work type, 4, not freed [ 865.490618][T13191] binder: undelivered TRANSACTION_COMPLETE [ 865.505446][T13227] encrypted_key: hex blob is missing 11:16:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sched_setaffinity(r1, 0x8, &(0x7f0000000280)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x20000000, {0x77359400}, {0x5, 0xe, 0x5, 0xffffffffffff7fff, 0x4, 0xffffffff, '1Q\'H'}, 0x1c, 0x1, @userptr=0x9b51, 0x4}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f00000000c0)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 865.519184][T13238] binder_alloc: binder_alloc_mmap_handler: 13189 20001000-20004000 already mapped failed -16 [ 865.548756][T13191] binder: BINDER_SET_CONTEXT_MGR already set [ 865.559154][T13191] binder: 13189:13191 ioctl 40046207 0 returned -16 11:16:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x4000000000000000}], 0x18) [ 865.578858][T13238] binder_alloc: 13189: binder_alloc_buf, no vma [ 865.616766][ T2987] binder: send failed reply for transaction 363, target dead [ 865.629363][T13238] binder: 13189:13238 transaction failed 29189/-3, size 24-8 line 3147 [ 865.648333][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 [ 865.720790][T12962] syz-executor.1 (12962) used greatest stack depth: 21832 bytes left 11:16:18 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x5, 0x400) fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000000c0)={0x8, 0x4, r0, 0x0, r3, 0x0, 0x7fffffff, 0x7fff}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) poll(&(0x7f0000000040)=[{r4, 0x2}], 0x1fffffffffffffaa, 0x1) r5 = gettid() symlink(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00') timer_settime(r1, 0x0, &(0x7f0000000300)={{}, {0x0, 0x989680}}, 0x0) tkill(r5, 0x10) tkill(r0, 0xf) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000280)={0x0, 0xfffffffffffffffc}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000380)=r6, 0x4) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xa0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44000) 11:16:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x68000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x600) 11:16:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000200)={0x0, 0x9, 0x6, [], &(0x7f0000000180)=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r4, 0xe00}], 0x1, 0x9ad) r5 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r5, 0x13) r6 = dup3(r4, r0, 0x80000) tkill(r3, 0x1000000000016) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$sndseq(r6, &(0x7f0000000040)=[{0xe5, 0x4, 0x6, 0x0, @tick=0x2, {0xfffffffffffffdd8, 0x7}, {0x7, 0x7}, @raw32={[0x7fffffff, 0x800, 0x2]}}, {0x2, 0x8, 0x4, 0x1, @time={r7, r8+10000000}, {0xfffffffffffeffff}, {0xf24}, @queue={0x0, {0x7f, 0x2}}}], 0x60) 11:16:18 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000400)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000005c0)={'nat\x00'}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) r3 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x2, 0x8040) add_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000580)) getegid() getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180), 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)={0xfffffffffffffff9, 0x1bb}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@broadcast}}}, 0x0) connect$vsock_dgram(r3, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) read(r0, &(0x7f00000004c0)=""/152, 0x98) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r1, r2, 0x0, 0x102000002) 11:16:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0xffffffff00000000}], 0x18) [ 865.873448][T13363] encrypted_key: hex blob is missing [ 865.886694][T13367] binder: release 13364:13367 transaction 368 out, still active 11:16:18 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000100)=[{}], 0x1, 0x9ad) gettid() r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x2, 0x0, @pic={0xffffffffffffffe1, 0x5, 0x7, 0x3, 0xff, 0x400, 0x9, 0x19, 0x4, 0xd22, 0x5, 0x2, 0xfff, 0x2, 0x2, 0x2}}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 865.931472][T13367] binder: unexpected work type, 4, not freed [ 865.944378][T13367] binder: undelivered TRANSACTION_COMPLETE [ 865.964941][T13402] binder_alloc: binder_alloc_mmap_handler: 13364 20001000-20004000 already mapped failed -16 11:16:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x2}], 0x18) [ 865.979436][T13367] binder: BINDER_SET_CONTEXT_MGR already set [ 866.004594][T13402] binder_alloc: 13364: binder_alloc_buf, no vma [ 866.048415][T10420] binder: send failed reply for transaction 368, target dead [ 866.058876][T13367] binder: 13364:13367 ioctl 40046207 0 returned -16 11:16:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x6c000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 866.093555][T13402] binder: 13364:13402 transaction failed 29189/-3, size 24-8 line 3147 [ 866.119065][T10420] binder: undelivered TRANSACTION_ERROR: 29189 11:16:19 executing program 2: unshare(0x8000400) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9bd, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) mmap(&(0x7f0000001000/0xe000)=nil, 0xe000, 0x0, 0x10031, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000080)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x71a}) mq_timedsend(r1, &(0x7f0000000040), 0x174, 0x0, &(0x7f0000000040)) mq_timedreceive(r1, &(0x7f00000021c0)=""/4096, 0x1000, 0x0, &(0x7f0000000380)) 11:16:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x700) [ 866.195727][T13487] encrypted_key: hex blob is missing 11:16:19 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x3}], 0x18) [ 866.220903][T13492] binder: release 13491:13492 transaction 373 out, still active [ 866.235890][T13492] binder: unexpected work type, 4, not freed 11:16:19 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@local, @multicast1, 0x0}, &(0x7f0000000140)=0xc) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x3, 0x40, 0x20, {0x0, 0x7530}, {}, {0x2, 0x3, 0x100000001, 0x8879}, 0x1, @can={{0x0, 0xfff, 0x8, 0xffffffffffff0001}, 0x5, 0x3, 0x0, 0x0, "16c444b612d191df"}}, 0x48}, 0x1, 0x0, 0x0, 0x24048840}, 0x8000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x40) bind$unix(r3, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e) [ 866.282103][T13492] binder: undelivered TRANSACTION_COMPLETE [ 866.324880][T13536] binder_alloc: binder_alloc_mmap_handler: 13491 20001000-20004000 already mapped failed -16 [ 866.349162][T13492] binder: BINDER_SET_CONTEXT_MGR already set [ 866.366002][T13492] binder: 13491:13492 ioctl 40046207 0 returned -16 11:16:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x74000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) fsetxattr(r1, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000080)='+@\x00', 0x3, 0x0) syz_emit_ethernet(0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800460000180000000000339078ac1414aa800000004404000000000000", @ANYRES32=0x41424344, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES64=r1], @ANYBLOB], 0x0) [ 866.386767][T13536] binder_alloc: 13491: binder_alloc_buf, no vma [ 866.398728][T10420] binder: send failed reply for transaction 373, target dead [ 866.405026][T13536] binder: 13491:13536 transaction failed 29189/-3, size 24-8 line 3147 [ 866.432114][T13648] encrypted_key: hex blob is missing [ 866.438318][T10420] binder: undelivered TRANSACTION_ERROR: 29189 11:16:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x4081) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffffffffffff) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) tkill(r3, 0x13) dup3(r0, r2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@loopback, @remote}, &(0x7f0000000180)=0xc) 11:16:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x7a000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x2000) 11:16:19 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x4}], 0x18) 11:16:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x700) 11:16:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') getsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev, 0x1004000000}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @ipv4={[0xf0ffff], [], @local}}}}}]}]}, 0x5c}}, 0x0) [ 866.711023][T13831] encrypted_key: hex blob is missing [ 866.721724][T13833] binder: release 13832:13833 transaction 378 out, still active [ 866.729671][T13838] binder: BINDER_SET_CONTEXT_MGR already set [ 866.740863][T13833] binder: unexpected work type, 4, not freed [ 866.747054][T13838] binder: 13827:13838 ioctl 40046207 0 returned -16 [ 866.760366][T13833] binder: undelivered TRANSACTION_COMPLETE [ 866.763916][T13838] binder: unexpected work type, 4, not freed [ 866.769484][T13931] binder_alloc: binder_alloc_mmap_handler: 13832 20001000-20004000 already mapped failed -16 [ 866.789227][T13833] binder: BINDER_SET_CONTEXT_MGR already set [ 866.796257][T13833] binder: 13832:13833 ioctl 40046207 0 returned -16 11:16:19 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x5}], 0x18) 11:16:19 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001200)='/proc/capi/capi20ncci\x00', 0x404101, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x709cfbd0c86796, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000001480)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x9, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0xfd0a) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000001100)={0x2, 0x4e23, @empty}, 0x10) fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1) r2 = open(&(0x7f00000003c0)='./file0\x00', 0x20141042, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000001240)=0x7fff, &(0x7f0000001280)=0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000001180)='IPVS\x00') perf_event_open(&(0x7f0000000000)={0x20000000000006, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$vsock_stream(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x28) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) rt_sigpending(0x0, 0x3e) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000400)={0x3f, 0x6, 0x7, "417693249ac9be65a2281be0ef5ca114c69cf31df6024cbb1869898c6909ac4b532975dc34cab2ab647398dabd97514441716c95a10a6df5fd527db1ea2bc0"}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000011c0)=0x1, 0x4) semget$private(0x0, 0x207, 0x0) pkey_alloc(0x0, 0xdc87119f1b80aa3) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) [ 866.813586][T13931] binder_alloc: 13832: binder_alloc_buf, no vma [ 866.820160][T13931] binder: 13832:13931 transaction failed 29189/-3, size 24-8 line 3147 11:16:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000440)='/dev/amidi#\x00', 0x0, 0x5c1200) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) r5 = getgid() chown(&(0x7f0000000180)='./file0\x00', r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x200000) ioctl$ASHMEM_GET_PROT_MASK(r6, 0x7706, &(0x7f00000000c0)) r7 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) bind$pptp(r6, &(0x7f0000000340)={0x18, 0x2, {0x2, @remote}}, 0x1e) poll(&(0x7f00000003c0)=[{r0, 0x3000}, {r8, 0xc640}, {r8, 0x4}, {r8, 0x8}, {r1, 0x8000}, {r0, 0x1}, {r0, 0x3ffe}, {r8, 0x4044}, {r1, 0x106}], 0x23d0, 0x9ad) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000300)=r2, 0x4) r9 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r9, 0x13) dup3(r1, r8, 0x0) tkill(r7, 0x1000000000016) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', '/dev/ptmx\x00'}) 11:16:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x801, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x400544, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x400840) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000300)=0xfffffffffffffffa) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000480)={0xa0, 0x19, 0x2, {0x1c01, {0x0, 0x4, 0x80000001}, 0x8, r3, r4, 0x1e9a6cef, 0x638, 0x1, 0x0, 0x40, 0xffffffffffffffff, 0x3, 0xdd50, 0xfffffffffffffffa, 0x7fff, 0x4, 0x7ff, 0x2, 0x80000001, 0x9}}, 0xa0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x6, 0x10, 0x572}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r5, @in={{0x2, 0x4e23, @multicast2}}, 0x3ff, 0x6, 0x5, 0x3, 0x8}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r5, 0x4, 0x9, 0x71, 0x6, 0x8}, 0x14) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1ff, 0x2) write$P9_RLOPEN(r0, 0x0, 0xb7) [ 866.875821][ T2987] binder: send failed reply for transaction 378, target dead [ 866.891893][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:16:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0xfffffe00}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x9, 0x20000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x800, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x6, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x90000000000000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x24200, 0x0) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) r5 = dup3(r0, r3, 0x0) tkill(r2, 0x1000000000016) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4000, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 11:16:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4800) 11:16:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0)=0x8, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x2c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x1ff, @empty, 0x2}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r0, 0x4) io_setup(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x0) io_setup(0x5, &(0x7f0000000040)=0x0) io_cancel(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffd5, 0x101, 0x0, 0x80000000000}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000140)={0x3000000, 0x1}) r4 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1) r5 = getuid() ioprio_set$uid(0x3, r5, 0x81) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) [ 867.046682][T14058] encrypted_key: hex blob is missing [ 867.061548][T14066] binder: unexpected work type, 4, not freed 11:16:20 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x11}], 0x18) [ 867.107474][T14066] binder: BINDER_SET_CONTEXT_MGR already set [ 867.114546][T14091] binder_alloc: 14065: binder_alloc_buf, no vma [ 867.131677][T14066] binder: 14065:14066 ioctl 40046207 0 returned -16 11:16:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r4, 0xe00}], 0x1, 0x9ad) r5 = gettid() timer_settime(r3, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = fcntl$dupfd(r0, 0x0, r1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000080)=0xbc, 0x8) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='@+,vboxnet0vboxnet1\x00', r6}, 0x10) tkill(r5, 0x13) r8 = dup3(r1, r7, 0x80) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x1}, 0x10) fsetxattr$security_capability(r8, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v1={0x1000000, [{0x3, 0x2}]}, 0xc, 0x3) tkill(r2, 0x1000000000016) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) setfsuid(r9) 11:16:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4c00) 11:16:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x8000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc8, r1, 0x708, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x40, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe87}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000000}]}, @TIPC_NLA_SOCK={0x50, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfa}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x781}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe0000000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffc00}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40014}, 0x20040801) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x10000001002, 0x0, [0xfffffffe]}) close(r2) read(r2, &(0x7f00000000c0)=""/197, 0xc5) 11:16:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0xfeffff00000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 867.332828][T14283] binder: unexpected work type, 4, not freed [ 867.359165][T14283] binder: BINDER_SET_CONTEXT_MGR already set 11:16:20 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x12}], 0x18) [ 867.392931][T14283] binder: 14282:14283 ioctl 40046207 0 returned -16 [ 867.400520][T14291] encrypted_key: hex blob is missing 11:16:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6000) 11:16:20 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x14}], 0x18) [ 867.514627][T14415] binder: unexpected work type, 4, not freed [ 867.526260][T14415] binder: BINDER_SET_CONTEXT_MGR already set [ 867.536177][T14415] binder: 14403:14415 ioctl 40046207 0 returned -16 11:16:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x3cc}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x4, 0x6, 0x9, 0x10001, 0x3f}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000200)={r3, 0x9, 0x0, 0x6, 0x782e6906, 0x8000, 0x6, 0x600000, {r4, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xbf2a, 0xc6, 0x3ff, 0x800, 0x8000}}, &(0x7f00000002c0)=0xb0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20}}) 11:16:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x100000000000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6800) 11:16:20 executing program 1: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'e \x00\b\x00', 0x4}, 0x261) r0 = socket(0xa, 0x1, 0x6) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) execve(&(0x7f0000000d40)='./file0\x00', 0x0, 0x0) ioctl(r1, 0x8912, 0x0) ioctl(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @local}}) ioctl(r0, 0x8936, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xc4, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x47}, @in6={0xa, 0x4e21, 0xa7, @mcast1, 0x3}, @in6={0xa, 0x4e21, 0x40, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x1}, @in6={0xa, 0x4e21, 0x3, @loopback}, @in6={0xa, 0x4e23, 0x80, @empty, 0x6}, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x11}, 0x10000}, @in6={0xa, 0x4e21, 0x10000, @empty, 0x400}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={r3, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000500)=0x84) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x8001, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480), &(0x7f00000004c0)=0x14) setsockopt$inet6_int(r4, 0x29, 0x18, &(0x7f0000000080)=0x1003, 0x4) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='yam0\x00', 0x8e8, 0x5}) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[], 0xffdc) read(r4, &(0x7f0000000200)=""/165, 0xa4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) truncate(&(0x7f00000000c0)='./file0\x00', 0xe876) 11:16:20 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x15}], 0x18) [ 867.693140][T14508] encrypted_key: hex blob is missing [ 867.724431][T14519] binder: unexpected work type, 4, not freed [ 867.758688][T14519] binder: BINDER_SET_CONTEXT_MGR already set [ 867.774261][T14519] binder: 14513:14519 ioctl 40046207 0 returned -16 [ 867.830699][T14520] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:16:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgid(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000000080)='net/sco\x00') r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) r4 = gettid() r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000200)=ANY=[@ANYBLOB="bf0f0000000000000728ffffffff0806090003000000000000110000fffffffffffff5000000000040009200000000000000c204000000080830c94e582fb4ad6de5b49ff14c21e5230dffd3694eb3d73b8101cd47b456975fa6f18028190e1b78b8b846ca15e0851b3c050201c91000000000000000000000000000000001000000000000000000"], 0x88) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) r6 = dup3(r0, r3, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000000)={0x1, r6, 0x1}) prctl$PR_SVE_SET_VL(0x32, 0x1f1ba) tkill(r2, 0x1000000000016) 11:16:21 executing program 2: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000098e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') semget$private(0x0, 0x6, 0x10) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) sendmsg$nl_generic(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) sendmsg$can_raw(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000340)={&(0x7f00000001c0)=@can={{0x1, 0x3ff, 0x7f, 0x869}, 0x4, 0x3, 0x0, 0x0, "d4e38df5bf0254c9"}, 0x10}, 0x1, 0x0, 0x0, 0x4080}, 0x80) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_NETID(r2, 0x0, 0x20000800) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)='vmnet1!eth0%ppp1^wlan0selfmd5sum\x00', 0x21) getresgid(0x0, 0x0, &(0x7f00000003c0)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1c, r5, 0x500, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r6 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r6, &(0x7f0000000700), 0x100000000000000d) 11:16:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6c00) 11:16:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x200000000000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:21 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x16}], 0x18) 11:16:21 executing program 1: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'e \x00\b\x00', 0x4}, 0x261) r0 = socket(0xa, 0x1, 0x6) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) execve(&(0x7f0000000d40)='./file0\x00', 0x0, 0x0) ioctl(r1, 0x8912, 0x0) ioctl(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @local}}) ioctl(r0, 0x8936, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xc4, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x47}, @in6={0xa, 0x4e21, 0xa7, @mcast1, 0x3}, @in6={0xa, 0x4e21, 0x40, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x1}, @in6={0xa, 0x4e21, 0x3, @loopback}, @in6={0xa, 0x4e23, 0x80, @empty, 0x6}, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x11}, 0x10000}, @in6={0xa, 0x4e21, 0x10000, @empty, 0x400}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={r3, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000500)=0x84) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x8001, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480), &(0x7f00000004c0)=0x14) setsockopt$inet6_int(r4, 0x29, 0x18, &(0x7f0000000080)=0x1003, 0x4) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='yam0\x00', 0x8e8, 0x5}) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[], 0xffdc) read(r4, &(0x7f0000000200)=""/165, 0xa4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) truncate(&(0x7f00000000c0)='./file0\x00', 0xe876) [ 868.156803][T14733] binder_thread_release: 5 callbacks suppressed [ 868.156816][T14733] binder: release 14730:14733 transaction 406 out, still active [ 868.156860][T14736] encrypted_key: hex blob is missing [ 868.177878][T14733] binder: unexpected work type, 4, not freed [ 868.194047][T14733] binder_release_work: 5 callbacks suppressed [ 868.194054][T14733] binder: undelivered TRANSACTION_COMPLETE [ 868.236437][T14774] binder_alloc_mmap_handler: 4 callbacks suppressed [ 868.236456][T14774] binder_alloc: binder_alloc_mmap_handler: 14730 20001000-20004000 already mapped failed -16 [ 868.260294][T14733] binder: BINDER_SET_CONTEXT_MGR already set [ 868.267928][T14733] binder: 14730:14733 ioctl 40046207 0 returned -16 [ 868.268181][T14774] binder_alloc_new_buf_locked: 3 callbacks suppressed 11:16:21 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1e}], 0x18) 11:16:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 868.268195][T14774] binder_alloc: 14730: binder_alloc_buf, no vma [ 868.298162][T14774] binder_transaction: 4 callbacks suppressed [ 868.298182][T14774] binder: 14730:14774 transaction failed 29189/-3, size 24-8 line 3147 [ 868.320632][ T7095] binder_send_failed_reply: 5 callbacks suppressed [ 868.320641][ T7095] binder: send failed reply for transaction 406, target dead 11:16:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x300000000000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7400) 11:16:21 executing program 1: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'e \x00\b\x00', 0x4}, 0x261) r0 = socket(0xa, 0x1, 0x6) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) execve(&(0x7f0000000d40)='./file0\x00', 0x0, 0x0) ioctl(r1, 0x8912, 0x0) ioctl(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @local}}) ioctl(r0, 0x8936, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xc4, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x47}, @in6={0xa, 0x4e21, 0xa7, @mcast1, 0x3}, @in6={0xa, 0x4e21, 0x40, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x1}, @in6={0xa, 0x4e21, 0x3, @loopback}, @in6={0xa, 0x4e23, 0x80, @empty, 0x6}, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x11}, 0x10000}, @in6={0xa, 0x4e21, 0x10000, @empty, 0x400}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={r3, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000500)=0x84) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x8001, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480), &(0x7f00000004c0)=0x14) setsockopt$inet6_int(r4, 0x29, 0x18, &(0x7f0000000080)=0x1003, 0x4) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='yam0\x00', 0x8e8, 0x5}) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[], 0xffdc) read(r4, &(0x7f0000000200)=""/165, 0xa4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) truncate(&(0x7f00000000c0)='./file0\x00', 0xe876) [ 868.421701][ T7095] binder_release_work: 4 callbacks suppressed [ 868.421708][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 [ 868.522483][T14955] binder: release 14953:14955 transaction 411 out, still active [ 868.530175][T14955] binder: unexpected work type, 4, not freed [ 868.537254][T14957] encrypted_key: hex blob is missing [ 868.560369][T14955] binder: undelivered TRANSACTION_COMPLETE 11:16:21 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x180}], 0x18) [ 868.585376][T14992] binder_alloc: binder_alloc_mmap_handler: 14953 20001000-20004000 already mapped failed -16 [ 868.605215][T14955] binder: BINDER_SET_CONTEXT_MGR already set [ 868.617712][T14955] binder: 14953:14955 ioctl 40046207 0 returned -16 [ 868.647421][T14992] binder_alloc: 14953: binder_alloc_buf, no vma 11:16:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) tkill(r1, 0x1000000000016) [ 868.691591][T14992] binder: 14953:14992 transaction failed 29189/-3, size 24-8 line 3147 [ 868.716463][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 868.734045][ T5] binder: send failed reply for transaction 411, target dead 11:16:21 executing program 2: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'e \x00\b\x00', 0x4}, 0x261) r0 = socket(0xa, 0x1, 0x6) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) execve(&(0x7f0000000d40)='./file0\x00', 0x0, 0x0) ioctl(r1, 0x8912, 0x0) ioctl(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @local}}) ioctl(r0, 0x8936, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xc4, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x47}, @in6={0xa, 0x4e21, 0xa7, @mcast1, 0x3}, @in6={0xa, 0x4e21, 0x40, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x1}, @in6={0xa, 0x4e21, 0x3, @loopback}, @in6={0xa, 0x4e23, 0x80, @empty, 0x6}, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x11}, 0x10000}, @in6={0xa, 0x4e21, 0x10000, @empty, 0x400}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={r3, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000500)=0x84) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x8001, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480), &(0x7f00000004c0)=0x14) setsockopt$inet6_int(r4, 0x29, 0x18, &(0x7f0000000080)=0x1003, 0x4) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='yam0\x00', 0x8e8, 0x5}) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[], 0xffdc) read(r4, &(0x7f0000000200)=""/165, 0xa4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) truncate(&(0x7f00000000c0)='./file0\x00', 0xe876) 11:16:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7a00) 11:16:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x400000000000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:21 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x300}], 0x18) 11:16:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7400) 11:16:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x400, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x940, 0x0) ioctl$CAPI_GET_FLAGS(r2, 0x80044323, &(0x7f0000000040)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0xfffffffffffffffc, 0x0) getpgrp(r1) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x13) dup3(r0, r3, 0x0) tkill(r1, 0x1000000000016) [ 868.914679][T15181] binder: release 15180:15181 transaction 416 out, still active [ 868.925866][T15185] binder: BINDER_SET_CONTEXT_MGR already set [ 868.938279][T15187] encrypted_key: hex blob is missing [ 868.963148][T15185] binder: 15184:15185 ioctl 40046207 0 returned -16 [ 868.990930][T15181] binder: unexpected work type, 4, not freed [ 869.005285][T15181] binder: undelivered TRANSACTION_COMPLETE [ 869.028526][T15307] binder_alloc: binder_alloc_mmap_handler: 15180 20001000-20004000 already mapped failed -16 11:16:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x500}], 0x18) 11:16:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x500000000000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 869.042199][T15307] binder: BINDER_SET_CONTEXT_MGR already set [ 869.089538][T15228] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 869.119902][T15307] binder: 15180:15307 ioctl 40046207 0 returned -16 [ 869.144486][T15360] encrypted_key: hex blob is missing [ 869.150591][T15316] binder_alloc: 15180: binder_alloc_buf, no vma [ 869.174770][T15316] binder: 15180:15316 transaction failed 29189/-3, size 24-8 line 3147 [ 869.180744][ T5] binder: send failed reply for transaction 416, target dead 11:16:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7400) 11:16:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1100}], 0x18) 11:16:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x1000000) [ 869.216914][ T5] binder: undelivered TRANSACTION_ERROR: 29189 11:16:22 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_proto_private(r0, 0x89ee, &(0x7f0000000040)="593e58950a68e717358c0d6493f1f4874b9836ad512c5b6786a7e063f6d0dfca1687902c5e4ec46b6db90678b263258fb3fff98328c2b0432b481ea73d4bf05d113f36b57fddd2caf0b30bcf1ae589da3daa3fff5d8ab684403e510cffdd07f6ca1638888da06b47b98c") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xb0b0, 0x2000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) recvfrom$packet(r1, &(0x7f0000000140)=""/179, 0xb3, 0x2000, &(0x7f0000000240)={0x11, 0x4, r2, 0x1, 0x4, 0x6, @random="34c6a96ec920"}, 0x14) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'nlmon0\x00', {0x2, 0x4e22, @remote}}) [ 869.306660][T15508] binder: release 15507:15508 transaction 421 out, still active [ 869.324499][T15514] binder: BINDER_SET_CONTEXT_MGR already set [ 869.339430][T15514] binder: 15513:15514 ioctl 40046207 0 returned -16 [ 869.347904][T15508] binder: unexpected work type, 4, not freed 11:16:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x600000000000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1200}], 0x18) [ 869.355277][T15514] binder: release 15513:15514 transaction 424 out, still active [ 869.363464][T15508] binder: undelivered TRANSACTION_COMPLETE [ 869.369382][T15514] binder: unexpected work type, 4, not freed [ 869.377099][T15514] binder: undelivered TRANSACTION_COMPLETE [ 869.396222][T15517] binder_alloc: binder_alloc_mmap_handler: 15513 20001000-20004000 already mapped failed -16 11:16:22 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0xb, @sliced={0x7f, [0x9, 0x2e7, 0x2, 0x0, 0x20, 0x1000, 0x3, 0x2, 0xb, 0x20, 0xcd, 0x7, 0x9c, 0x4, 0x0, 0x400, 0x0, 0x2031d7eb, 0x4, 0x8, 0x7fff, 0x401, 0x1, 0x401, 0x2, 0x5, 0x0, 0x7, 0x3, 0x10001, 0xffff, 0x9, 0x6, 0x3, 0x80000001, 0xdbc, 0x7ff, 0x4, 0x100000000, 0x5, 0x7, 0x4b, 0xffffffff, 0x80000001, 0x5, 0x9, 0x0, 0x8859], 0x57}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x7c7e7f5f, 0x7}}) [ 869.446073][ T5] binder: send failed reply for transaction 421, target dead [ 869.451677][T15522] encrypted_key: hex blob is missing [ 869.470613][ T5] binder: send failed reply for transaction 424, target dead [ 869.481410][T15531] binder_alloc: 15513: binder_alloc_buf, no vma 11:16:22 executing program 2: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000100)) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1, @multicast2}, &(0x7f00000000c0)=0xc) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x5) getresuid(&(0x7f0000000240), &(0x7f0000000500), &(0x7f0000000540)) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0x1ff, 0x0, 0x10000, 0x7}) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000300)={0xffffffffffffff81, 0x7, 0x0, [{0x7fff, 0x6, 0x29, 0x100000001, 0x6, 0x8, 0x81}, {0xff, 0x7, 0x800, 0x2, 0xe4f1, 0x99b, 0x401}, {0xffffffff, 0x7fff, 0x200, 0x80000001, 0x2080000000000, 0x7fffffff, 0x3ff}, {0x1, 0x4, 0x7, 0x800, 0x1, 0xc05c, 0x7}, {0x44, 0x4, 0x4, 0x2, 0x80000000, 0x8, 0x6}, {0x4, 0x7fffffff, 0x0, 0x5, 0x0, 0x9, 0x800}, {0x100000001, 0xfbc5, 0xfffffffffffffeff, 0x6, 0xdf5, 0x7fffffff, 0x44}]}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000001c0)={0x2, r4}) r5 = socket$netlink(0x10, 0x3, 0x4000000000000004) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0xffffffffffffff62, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x257) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) 11:16:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1400}], 0x18) [ 869.524447][T15531] binder: 15513:15531 transaction failed 29189/-3, size 24-8 line 3147 [ 869.548089][ T5] binder: undelivered TRANSACTION_ERROR: 29189 11:16:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) r4 = dup3(r0, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000000)={0x2, 0x4, 0x8, {0x0, 0x1c9c380}, 0xfffffffffffff000, 0x5}) tkill(r1, 0x1000000000016) 11:16:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x700000000000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x2000000) 11:16:22 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000040)=""/46) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x0, 0x30}, &(0x7f0000000200)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) r3 = getegid() getgroups(0x1, &(0x7f0000000340)=[0xee01]) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) setresgid(r3, r4, r5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000440)="903a1ea10d5cf26ff18156a4e8d7461a75ca089811ff3b3194db7bf989ce946c564d52a26841e69ce4dc24fa1f4a04e28a3f46c606a148a70a567dff940ad17a336189151ea6c76d8a9a1220d736ce2f88d4dede8dceb3060b8b9e1c0bd8227507c2d22ba844b27ed0cf33b73c702098d8c90cf9985032f69d2ab91e56a5cab7fbdd372412fcef81282ba80161a52e2e7de3af5964cee41d670229713057692300eafe4aee5eea3a2f0015e1214f870f4bd372fd3e049495fc832ec3fe681c14", 0xc0, r0}, 0x68) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000580)={r0, r0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000600)={r6, 0x1, 0x6, @broadcast}, 0x10) r7 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000640)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000006c0)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r8) fsetxattr$trusted_overlay_upper(r7, &(0x7f0000000700)='trusted.overlay.upper\x00', &(0x7f0000000740)={0x0, 0xfb, 0x2e, 0x92485523fa235caa, 0x6, "11dddf46b9f6c1d67efa7f74ec31577e", "4d453d7f395d1579ff78f4e1c7a907d56c20f5e953193ac955"}, 0x2e, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780)='/dev/zero\x00', 0x101000, 0x0) capget(&(0x7f00000007c0)={0x20080522, r8}, &(0x7f0000000800)={0x6, 0x10000, 0x8, 0x4, 0xfff, 0xf9}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000840)={r7}) ioctl$VIDIOC_ENUMAUDOUT(r9, 0xc0345642, &(0x7f0000000880)={0x8000, "bd3e59b928a0f91044d7426f4797138557442d42ed5d78e23fbe2bcc722a0d4c"}) ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f0000000980)={0x11, 0x90, &(0x7f00000008c0)="2bd1d6dcdcf8b1e22821b26685bd792e2490e27e59645e44163571c9e1823ddfc373c91a4e64c41d392ae8d135922d8f55e24a2aa3030185e75ed109a92e38d476df11f9d06630165535b441d4b6ed1d7c353407d9ad0d7c77daec341cb47202c8a8e3c91365dbd46fdeb12d3e69f1c50522be1546f4972ee0531f83c2a03cc3aa9a9fd01b3da6bc13a56968a78a901d"}) ioctl$NBD_DISCONNECT(r9, 0xab08) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000ac0)={0x1f, 0xc6, &(0x7f00000009c0)="bdd3f645f10be8d3e72d087bd5532ff90e0aeae2abfbb9f3cbae2e75011781ab45d1eeb402a27fa5651f2f765db05ff257f4ed7bfc556c37183cb0ff458fe71c8bf6c6ef178f9b5748744e2690f0570684d4e9198184c7e322f4514eaffaa5ab82c32d022810db7072f53410eb201b8299aace9200e6417971d3dacf0af8778e56ec5d19d5e9f4c7343c2b995391ec864057730dbbc6cb95fc34cb54d0c0b83bddada6e7e9b1dae70cf5227572d0383b3fe603cf2fb09c7aa6c7bfccb68b93743de18f2d7034"}) r10 = syz_open_dev$sndpcmp(&(0x7f0000000b00)='/dev/snd/pcmC#D#p\x00', 0x48, 0x400000) ioctl$DRM_IOCTL_GET_STATS(r10, 0x80f86406, &(0x7f0000000b40)=""/80) 11:16:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1500}], 0x18) 11:16:22 executing program 2: socketpair(0x1f, 0x7, 0x28000000000000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)) r4 = gettid() r5 = fcntl$getown(r3, 0x9) setpgid(r4, r5) [ 869.870253][T15748] binder: release 15747:15748 transaction 430 out, still active [ 869.887473][T15754] encrypted_key: hex blob is missing 11:16:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x7, @local, 0x312}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x39, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) [ 869.921294][T15748] binder: unexpected work type, 4, not freed [ 869.941399][T15748] binder: undelivered TRANSACTION_COMPLETE [ 869.952751][T15805] binder_alloc: binder_alloc_mmap_handler: 15747 20001000-20004000 already mapped failed -16 [ 869.965107][T15748] binder: BINDER_SET_CONTEXT_MGR already set 11:16:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1600}], 0x18) [ 869.972833][T15748] binder: 15747:15748 ioctl 40046207 0 returned -16 [ 869.979827][T15805] binder_alloc: 15747: binder_alloc_buf, no vma [ 869.987094][T15805] binder: 15747:15805 transaction failed 29189/-3, size 24-8 line 3147 11:16:23 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff}) r1 = socket(0x22, 0x2, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000000)) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 11:16:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x8000000000000012}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0, 0x40}, {r3, 0x8}, {r0, 0x101}, {r3, 0x600}, {r3, 0x100}, {r1, 0x428}, {r0, 0x1}], 0x7, 0x9b1) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000200)='/dev/md0\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x3) r5 = shmget(0x3, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x3000) r6 = gettid() r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f0000000040)={0x0, @reserved}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r6, 0x13) dup3(r1, r3, 0x0) tkill(r2, 0x3e) [ 870.066930][ T5] binder: undelivered TRANSACTION_ERROR: 29189 [ 870.105548][ T5] binder: send failed reply for transaction 430, target dead 11:16:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x3000000) 11:16:23 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000272000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f00000000c0)={0xfb, 0x0, 0x7, {0x0, 0x989680}, 0x8001, 0x1e62461a}) 11:16:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x2000000000000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80000000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) dup3(r0, r3, 0x0) tkill(r2, 0x1000000000016) 11:16:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1e00}], 0x18) [ 870.281176][T16073] binder: release 16072:16073 transaction 435 out, still active [ 870.300704][T16089] encrypted_key: hex blob is missing 11:16:23 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f00000013c0)='E', 0x1}], 0x1, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0xfffffffffffffea2) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0xff, 0x0) [ 870.321609][T16073] binder: unexpected work type, 4, not freed [ 870.337622][T16073] binder: undelivered TRANSACTION_COMPLETE [ 870.350031][T16116] binder_alloc: binder_alloc_mmap_handler: 16072 20001000-20004000 already mapped failed -16 11:16:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1f00}], 0x18) 11:16:23 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc08c5336, &(0x7f00000013c0)) [ 870.388021][T16073] binder: BINDER_SET_CONTEXT_MGR already set [ 870.419487][T16116] binder_alloc: 16072: binder_alloc_buf, no vma [ 870.437300][ T7095] binder: send failed reply for transaction 435, target dead [ 870.452189][T16073] binder: 16072:16073 ioctl 40046207 0 returned -16 11:16:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:16:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x4800000000000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4000000) [ 870.489462][T16116] binder: 16072:16116 transaction failed 29189/-3, size 24-8 line 3147 [ 870.513208][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:16:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x11) sendmsg(r1, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1302}}, 0x80, 0x0}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000, 0x2) getpeername$netlink(r2, &(0x7f00000000c0), &(0x7f0000000100)=0xc) [ 870.599664][T16315] encrypted_key: hex blob is missing 11:16:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x3f00}], 0x18) 11:16:23 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc08c5336, &(0x7f00000013c0)) [ 870.657986][T16331] binder: release 16318:16331 transaction 440 out, still active [ 870.691399][T16331] binder: unexpected work type, 4, not freed 11:16:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x4c00000000000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 870.716931][T16331] binder: undelivered TRANSACTION_COMPLETE [ 870.778791][T16519] binder_alloc: binder_alloc_mmap_handler: 16318 20001000-20004000 already mapped failed -16 [ 870.800696][T16519] binder_alloc: 16318: binder_alloc_buf, no vma [ 870.808123][T16331] binder: BINDER_SET_CONTEXT_MGR already set [ 870.814639][T16532] encrypted_key: hex blob is missing [ 870.819766][T16331] binder: 16318:16331 ioctl 40046207 0 returned -16 11:16:23 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x8000) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000080)=0x1) 11:16:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x4000}], 0x18) [ 870.827536][T16519] binder: 16318:16519 transaction failed 29189/-3, size 24-8 line 3147 [ 870.880072][ T7095] binder: send failed reply for transaction 440, target dead 11:16:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x1010c0, 0x0) syz_open_dev$evdev(0x0, 0x8000, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)='\x00', 0x4) ftruncate(r2, 0x1000000) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000140)="77385f889099c320eed0f9d8a1561d7b97e4863789fbe00c771e78ebd240f58cebff294765b20f4ce1e86caa917e9878fb4c17d010549fd4ce2c8cd0a31f397dd75a46a3eef20dc122f60aff41a9cfe34f") sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), 0x4) 11:16:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x6000000000000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5000000) [ 870.926172][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 [ 870.994418][T16685] encrypted_key: hex blob is missing [ 871.038981][T16736] binder: release 16728:16736 transaction 445 out, still active [ 871.060987][T16736] binder: unexpected work type, 4, not freed [ 871.069969][T16736] binder: undelivered TRANSACTION_COMPLETE [ 871.078350][T16782] binder_alloc: binder_alloc_mmap_handler: 16728 20001000-20004000 already mapped failed -16 [ 871.089761][T16736] binder: BINDER_SET_CONTEXT_MGR already set [ 871.097537][T16736] binder: 16728:16736 ioctl 40046207 0 returned -16 [ 871.107307][T16782] binder_alloc: 16728: binder_alloc_buf, no vma [ 871.114017][T16782] binder: 16728:16782 transaction failed 29189/-3, size 24-8 line 3147 [ 871.123267][ T7095] binder: send failed reply for transaction 445, target dead [ 871.133573][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:16:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x2, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:16:26 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x20000}], 0x18) 11:16:26 executing program 1: socket$inet6_dccp(0xa, 0x6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffffbc, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r0, 0xae9a) openat$mixer(0xffffffffffffff9c, 0x0, 0x20001, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 11:16:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6000000) 11:16:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x6800000000000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext, 0x20000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x620080, 0x2) write$P9_RWALK(r0, &(0x7f0000000040)={0x30, 0x6f, 0x2, {0x3, [{0x0, 0x1, 0x1}, {0x0, 0x4, 0x6}, {0x1, 0x2}]}}, 0x30) [ 873.568157][T16866] binder: release 16864:16866 transaction 450 out, still active [ 873.590612][T16870] encrypted_key: hex blob is missing [ 873.596450][T16866] binder: unexpected work type, 4, not freed [ 873.596468][T16866] binder: undelivered TRANSACTION_COMPLETE 11:16:26 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f00000000c0)={@initdev, @initdev, 0x0}, &(0x7f0000000100)=0xc) recvmmsg(r0, &(0x7f0000004d80)=[{{&(0x7f00000022c0)=@rc, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002340)=""/173, 0xad}, {&(0x7f0000002400)=""/80, 0x50}, {&(0x7f0000002480)=""/251, 0xfb}, {&(0x7f0000002580)=""/56, 0x38}], 0x4, &(0x7f0000002600)=""/4096, 0x1000}, 0x1ff}, {{&(0x7f0000003600)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003680)=""/201, 0xc9}], 0x1, &(0x7f00000037c0)=""/85, 0x55}, 0x7}, {{&(0x7f0000003840)=@ax25={{0x3, @rose}, [@null, @rose, @null, @bcast, @netrom, @remote, @default, @default]}, 0x80, &(0x7f0000003b40)=[{&(0x7f00000038c0)=""/192, 0xc0}, {&(0x7f0000003980)=""/165, 0xa5}, {&(0x7f0000003a40)=""/4, 0x4}, {&(0x7f0000003a80)=""/150, 0x96}], 0x4, &(0x7f0000003b80)=""/130, 0x82}}, {{&(0x7f0000003c40)=@can, 0x80, &(0x7f0000004d40)=[{&(0x7f0000003cc0)}, {&(0x7f0000003d00)=""/39, 0x27}, {&(0x7f0000003d40)=""/4096, 0x1000}], 0x3}, 0x5}], 0x4, 0x10000, 0x0) r5 = accept$packet(r1, &(0x7f0000001000)={0x11, 0x0, 0x0}, &(0x7f0000004f80)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000004fc0)={0x0, @local, @local}, &(0x7f0000005000)=0xc) accept4$packet(0xffffffffffffff9c, &(0x7f0000008900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000008940)=0x14, 0x800) getsockname$packet(0xffffffffffffff9c, &(0x7f0000009d80)={0x11, 0x0, 0x0}, &(0x7f0000009dc0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000009e00)={0x0, @dev, @empty}, &(0x7f0000009e40)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000009e80)={0x0, @initdev, @initdev}, &(0x7f0000009ec0)=0xc) r12 = accept(r0, &(0x7f0000009f00)=@hci={0x1f, 0x0}, &(0x7f0000009f80)=0x80) accept4$packet(r5, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000a100)=0xff09, 0x80800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f000000a140)={@loopback, 0x0}, &(0x7f000000a180)=0x14) accept(r12, &(0x7f000000a200)=@hci={0x1f, 0x0}, &(0x7f000000a280)=0xffffffffffffff1c) accept$packet(r12, &(0x7f000000a2c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000a300)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f000000a4c0)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f000000a5c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f000000a600)={@rand_addr, @multicast2, 0x0}, &(0x7f000000a640)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f000000a680)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f000000a780)=0xe8) recvmsg(r0, &(0x7f000000bcc0)={&(0x7f000000b980)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f000000bbc0)=[{&(0x7f000000ba00)=""/138, 0x8a}, {&(0x7f000000bac0)=""/38, 0x26}, {&(0x7f000000bb00)=""/165, 0xa5}], 0x3, &(0x7f000000bc00)=""/180, 0xb4}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f000000bd00)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f000000be00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000000be40)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f000000bf40)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000bf80)={'rose0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f000000bfc0)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f000000c0c0)=0xe8) getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f000000c340)={0x0, @broadcast, @loopback}, &(0x7f000000c380)=0x145) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000c3c0)={'ip_vti0\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f000000c400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000c440)=0x14) recvmmsg(r0, &(0x7f000000ff00)=[{{&(0x7f000000c4c0)=@x25={0x9, @remote}, 0x80, &(0x7f000000c700)=[{&(0x7f000000c540)=""/151, 0x97}, {&(0x7f000000c600)=""/196, 0xc4}], 0x2}, 0x31296c7c}, {{&(0x7f000000c740)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f000000fbc0)=[{&(0x7f000000c7c0)=""/198, 0xc6}, {&(0x7f000000c8c0)=""/216, 0xd8}, {&(0x7f000000c9c0)=""/4096, 0x1000}, {&(0x7f000000d9c0)=""/4096, 0x1000}, {&(0x7f000000e9c0)=""/4096, 0x1000}, {&(0x7f000000f9c0)=""/221, 0xdd}, {&(0x7f000000fac0)=""/254, 0xfe}], 0x7, &(0x7f000000fc40)=""/81, 0x51}, 0x1f}, {{&(0x7f000000fcc0)=@x25, 0x80, &(0x7f000000fe80)=[{&(0x7f000000fd40)=""/1, 0x1}, {&(0x7f000000fd80)=""/32, 0x20}, {&(0x7f000000fdc0)=""/81, 0x51}, {&(0x7f000000fe40)=""/61, 0x3d}], 0x4, &(0x7f000000fec0)=""/45, 0x2d}, 0x4}], 0x3, 0x40000000, &(0x7f000000ffc0)) accept4$packet(0xffffffffffffff9c, &(0x7f0000010000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000010040)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000100c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000010140)={@ipv4={[], [], @loopback}, 0x0}, &(0x7f0000010180)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000101c0)={@broadcast, @rand_addr, 0x0}, &(0x7f0000010200)=0xc) accept4(r0, &(0x7f0000010240)=@can={0x1d, 0x0}, &(0x7f00000102c0)=0x80, 0x80800) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000011140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000011100)={&(0x7f0000000140)=ANY=[@ANYBLOB="ec0d0000", @ANYRES16=r2, @ANYBLOB="00002cbd7000fbdbdf250000000008000100", @ANYRES32=r3, @ANYBLOB="8400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040001000000080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000000000008000100", @ANYRES32=r4, @ANYBLOB="2402020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040008000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040013ad000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400570100003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="500202003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004004800000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400983a000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400e49c000008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004008000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400425b000008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000800000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040007000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004001f00000008000100", @ANYRES32=r13, @ANYBLOB="4001020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004001f00000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r14, @ANYBLOB="080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000500000008000600", @ANYRES32=r15, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040018f1ffff4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r16, @ANYBLOB="1c01020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ff07000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004002000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400040000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000700000008000100", @ANYRES32, @ANYBLOB="8400020040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="1402020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100000008000600", @ANYRES32=r20, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ac0000006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000003c0004000080bf3f030000003f00dbff03000000fffb0598240e000007008802000000003e0003fe000000007e00057f02000000090008ff010001003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r21, @ANYBLOB="40000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000700000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r22, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="300202003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="380001002400110061637469f665706f7274000000000000000000000000000000000000000000000800030003000000080004006289cddb89cbc9665d4b1b31a18c67bb2f2ad7885693726b75921901c1351e4fa97e2521ebc088e5dcf447bf0ceb2ebf33790a3d369e29e44e836d3c30061f8e8fe917bf652b7315ddc5ebf5e3dfe978f6348626279dbb1b6ad04ab65dfcf274c5f19ad511fe3d3a17dbe5b3eead4bb44dd91b1cd05e4076b14eee797da9c042616259fb058e7ca2f8eea829bd7447922274513475fa917a873f2100", @ANYRES32=r25, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000900000008000600", @ANYRES32=r26, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400c853c87a08000600", @ANYRES32=r27, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000400000008000600", @ANYRES32=r28, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400018000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r29, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000800000008000600", @ANYRES32=r30, @ANYBLOB="08000100", @ANYRES32=r31, @ANYBLOB="b400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400ff0f0000080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000800000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000500000008000100", @ANYRES32=r32, @ANYBLOB="b80002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r33, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000600000008000600", @ANYRES32=r34, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040006000000"], 0xdec}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 11:16:26 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1000000}], 0x18) [ 873.668276][T17013] binder_alloc: binder_alloc_mmap_handler: 16864 20001000-20004000 already mapped failed -16 [ 873.690701][T16866] binder: BINDER_SET_CONTEXT_MGR already set 11:16:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x6c00000000000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 873.720337][T16866] binder: 16864:16866 ioctl 40046207 0 returned -16 11:16:26 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x70, 0x40, 0x3, 0xfffffffffffffffb, 0xf269, 0x0, 0x1, 0x20100, 0x0, 0x2, 0xf07e, 0x9524, 0x80, 0x271, 0x8001, 0x5, 0x0, 0x5, 0x18e5, 0x5, 0x4410, 0x8000000, 0x4, 0x43, 0x1f, 0x7, 0xb3f, 0x8, 0x3f, 0x3, 0x2, 0x2, 0x6, 0x7, 0x2, 0x9, 0x7, 0x0, 0x1, 0x1, @perf_config_ext={0xde}, 0x53, 0x3, 0x5, 0x5, 0x1f, 0xfffffffffffffffa, 0x8}, 0xffffffffffffff9c, 0xf, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x72ae) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000180)="420f01df48b80c000000000000000f23d80f21f835800000300f23f8450f01c866400f38067086263e3e67660f38825b00b805000000b993dd0df60f01c147f4c744240057000000c74424027b920000ff2c24c422b1910463460f01c8", 0x5d}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:16:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7000000) [ 873.773134][ T7095] binder: send failed reply for transaction 450, target dead [ 873.782109][T17013] binder: 16864:17013 transaction failed 29189/-22, size 24-8 line 2994 [ 873.787782][T17088] encrypted_key: hex blob is missing [ 873.803766][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:16:26 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1800000}], 0x18) [ 873.880493][T17165] binder: release 17164:17165 transaction 455 out, still active [ 873.899639][T17165] binder: unexpected work type, 4, not freed [ 873.919824][T17165] binder: undelivered TRANSACTION_COMPLETE [ 873.964557][T17200] binder_alloc: binder_alloc_mmap_handler: 17164 20001000-20004000 already mapped failed -16 [ 873.996698][T17200] binder_alloc: 17164: binder_alloc_buf, no vma [ 873.999464][T17165] binder: BINDER_SET_CONTEXT_MGR already set [ 874.009822][T17200] binder: 17164:17200 transaction failed 29189/-3, size 24-8 line 3147 [ 874.010723][T17165] binder: 17164:17165 ioctl 40046207 0 returned -16 [ 874.019627][ T7095] binder: send failed reply for transaction 455, target dead [ 874.026103][T17200] binder: undelivered TRANSACTION_ERROR: 29189 11:16:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) getpriority(0x3, r1) 11:16:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x7400000000000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x20000000) 11:16:29 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x2000000}], 0x18) 11:16:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0)=0x10000, 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') r2 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x4) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0xfb) r3 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) writev(r3, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000001031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000300)=""/206) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=""/76, 0x4c) 11:16:29 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e000000110081aee405d10200000e00fa076b000900000000f3ff500befccd77f00000000081c5eda00b0eba06a", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) [ 876.632592][T17310] encrypted_key: hex blob is missing [ 876.644324][T17315] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 876.663697][T17321] binder: release 17319:17321 transaction 460 out, still active [ 876.692507][T17315] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 876.695218][T17321] binder: unexpected work type, 4, not freed [ 876.715177][T17321] binder: undelivered TRANSACTION_COMPLETE 11:16:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0xffffffffffffffff, 0x7a00000000000000}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:29 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$sock_ifreq(r1, 0x893e, &(0x7f0000000000)={'yam0\x00', @ifru_hwaddr}) r2 = dup3(r1, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000040)={{0x80000001, 0x8}, 'port0\x00', 0x2, 0x3, 0x9f3, 0x9, 0x9, 0x20, 0x3, 0x0, 0x0, 0x100000000}) unshare(0x400000001ffff) 11:16:29 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x3000000}], 0x18) [ 876.749106][T17484] binder_alloc: binder_alloc_mmap_handler: 17319 20001000-20004000 already mapped failed -16 11:16:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x10800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400202) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r3, 0x25) [ 876.812144][T17513] encrypted_key: hex blob is missing 11:16:29 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x9fd) r1 = syz_open_dev$dri(&(0x7f0000000540)='/dev/dri/card#\x00', 0x3ff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={0x0}) r2 = open(&(0x7f0000000500)='./file0\x00', 0x40000, 0x1) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000100)={"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"}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) write$FUSE_ENTRY(r2, &(0x7f0000000600)={0x90, 0x0, 0x8, {0x0, 0x2, 0xa4, 0x6, 0xffffffffffff8001, 0x6ba, {0x3, 0x9, 0xfffffffffffffe01, 0x0, 0x0, 0x7f, 0x8, 0x7, 0x30000000, 0xfffffffffffffc00, 0x0, r4, r5, 0x3, 0x7e0}}}, 0x90) fcntl$lock(r1, 0x25, &(0x7f00000005c0)={0x2, 0x7, 0x7, 0x5957, r3}) [ 876.858762][ T2987] binder: send failed reply for transaction 460, target dead 11:16:29 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x4000000}], 0x18) 11:16:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x48000000) 11:16:29 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x80000001}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) getpriority(0x2, r1) 11:16:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xfffff, 0xfffffffffffffffe) 11:16:30 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x2000000000000203, 0xdc) r3 = gettid() syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x400) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4000, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000200)={0x8, {{0x2, 0x4e24, @local}}}, 0x88) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000040)={0x8001009, 0x1000, 0x2}) tkill(r3, 0x13) dup3(r0, r2, 0x0) r6 = getegid() lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r6, r7) tkill(r1, 0x1000000000016) [ 876.998435][T17671] binder: release 17670:17671 transaction 464 out, still active [ 877.060530][T17671] binder: unexpected work type, 4, not freed 11:16:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4000009f, 0xfffffffffffffffd, 0x40004000009f, 0x10]}) [ 877.101458][T17671] binder: undelivered TRANSACTION_COMPLETE [ 877.116192][T17763] binder_alloc: binder_alloc_mmap_handler: 17670 20001000-20004000 already mapped failed -16 [ 877.138286][T17671] binder: BINDER_SET_CONTEXT_MGR already set 11:16:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x5000000}], 0x18) [ 877.156228][T17763] binder_alloc: 17670: binder_alloc_buf, no vma [ 877.218201][T10420] binder: send failed reply for transaction 464, target dead [ 877.221505][T17671] binder: 17670:17671 ioctl 40046207 0 returned -16 [ 877.251390][T17763] binder: 17670:17763 transaction failed 29189/-3, size 24-8 line 3147 11:16:30 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x80000001}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) getpriority(0x2, r1) 11:16:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x200002f1, 0xfffffffffffffffe) 11:16:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x11000000}], 0x18) [ 877.269024][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:16:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4c000000) 11:16:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x400, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x1) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000080)=0x4771, 0x4) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x40640) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 877.447027][T17985] binder: release 17984:17985 transaction 469 out, still active [ 877.465801][T17985] binder: unexpected work type, 4, not freed [ 877.477400][T17985] binder: undelivered TRANSACTION_COMPLETE 11:16:30 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x80000001}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) getpriority(0x2, r1) 11:16:30 executing program 1: syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffffd}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4500b091e5fb29cbdd2e7b4a6bcd1aee7b49d540820202a45fcbf9c9c86a32e1286ec7ad5269a445251954d4895f2b460900006602899f17bf3243d03db2717aeb5719ee70dd179bc6dd3943c3031659eab8d6efefa19fbc9994b538b61b63396d269b350f231be666702002c7010000802b7b097d23b2529aa0f000000000"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="21032cbd7000fcdbdf250a000000240001000800030009000000100001006574683a62707130000000000800030006000000f000010038000400200001000a004e22ffffffffff010000000000000000000000000001800000001400020002004e21ac1e0101000000000000000044000400200001000a004e2300000000ff020000000000000000000000000001a60d0000200002000a004e200000008dfe8000000000000000000000000000bb0000000044000400200001000a004e24000000bcfe80000000000000000000000000001481000000200002000a004e200000000800000000000000000000ffff7f0000010a0000000c000200080004000000000008000300c80a0000180001006574683a6272696467655f736c6176655f300000"], 0x1}}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000040)) 11:16:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x12000000}], 0x18) [ 877.517968][T18061] binder_alloc: binder_alloc_mmap_handler: 17984 20001000-20004000 already mapped failed -16 11:16:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0xc002) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) r4 = gettid() timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x8}}, 0x0) tkill(r4, 0x13) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$invalidate(0x15, r5) dup3(r0, r3, 0x0) tkill(r1, 0x1000000000016) 11:16:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000040)=0x2) [ 877.635724][T17985] binder: BINDER_SET_CONTEXT_MGR already set 11:16:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x10}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1, 0xe00}], 0x1, 0x9ad) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) r3 = dup3(r0, r1, 0x0) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000000)={0x0, @capture={0x1000, 0x1, {0x4, 0x20}, 0x5, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'ip6tnl0\x00', r4}) tkill(r2, 0x1000000000016) [ 877.701653][T17985] binder: 17984:17985 ioctl 40046207 0 returned -16 [ 877.714908][T18116] encrypted_key: hex blob is missing [ 877.739148][T18114] binder_alloc: 17984: binder_alloc_buf, no vma 11:16:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x14000000}], 0x18) [ 877.764516][ T7095] binder: send failed reply for transaction 469, target dead [ 877.773149][T18114] binder: 17984:18114 transaction failed 29189/-3, size 24-8 line 3147 11:16:30 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x80000001}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) getpriority(0x2, r1) [ 877.830419][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:16:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x60000000) 11:16:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:30 executing program 5: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x80800, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x24}, &(0x7f0000044000)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r5, 0xe00}], 0x1, 0x9ad) r6 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r6, 0x8) dup3(r0, r5, 0x3) tkill(r3, 0x26) 11:16:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x15000000}], 0x18) [ 878.016377][T18327] binder: release 18321:18327 transaction 474 out, still active 11:16:31 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, &(0x7f0000000000)={0x8}, &(0x7f0000000400)={0x0, 0x989680}, 0x0) [ 878.068970][T18331] encrypted_key: insufficient parameters specified [ 878.095793][T18327] binder: unexpected work type, 4, not freed [ 878.107628][T18327] binder: undelivered TRANSACTION_COMPLETE [ 878.151648][T18374] binder_alloc: binder_alloc_mmap_handler: 18321 20001000-20004000 already mapped failed -16 11:16:31 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) r1 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x1, 0x102) ioctl$UI_DEV_DESTROY(r1, 0x5502) sync() r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ppp\x00', 0x1000002000101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000002c0)=""/246) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1, 0x0) r4 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000240)="531ca8", 0x3}], 0x1, 0x81003) ioctl$VIDIOC_DBG_G_REGISTER(r3, 0xc0385650, &(0x7f00000003c0)={{0x3, @addr=0x6}, 0x8, 0x6, 0x5}) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000400)='trusted.overlay.origin\x00', &(0x7f0000000440)='y\x00', 0x2, 0x3) sendfile(r0, r4, &(0x7f0000000280)=0x20000, 0x6) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000480)) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x5, 0x5}}, 0x43) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x80) 11:16:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x16000000}], 0x18) 11:16:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x40200) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000080)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, r4}, 0xc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r5, 0xe00}], 0x1, 0x9ad) r6 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r6, 0x13) dup3(r1, r0, 0x2) tkill(r2, 0x1000000000016) [ 878.230312][T18327] binder: BINDER_SET_CONTEXT_MGR already set [ 878.249040][T18434] binder_alloc: 18321: binder_alloc_buf, no vma 11:16:31 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) fstat(0xffffffffffffff9c, 0x0) geteuid() getresuid(&(0x7f0000000180), 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) chdir(&(0x7f0000000440)='./file0\x00') utimes(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)={{0x0, 0x7530}, {0x0, 0x2710}}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000200)={0x2, [0x548, 0x8]}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000840)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev(r0, &(0x7f00000007c0)=[{&(0x7f0000000240)="5051e49c597a1497df693668fdd48925220a57d94b03f38e122b7945852a86e25e56557bae4a48ac4bb944384cc23d", 0x2f}, {&(0x7f0000000480)="ffc82eb83c6759e2b691d68794dc3582efff0633fe9bcc0149176e5774403b2d0df62ea0aece82dfdc479361b4a163c6a585695b9f37000c255318c8881e3a17a5df5202c50ae172a8043672e719c9ae4abf61ea468af97d11da2058f1c47ff423c1f029adbe4da0f957cd1eb21464e8764dff04b96e52ffb06604a2d349ac674545c65193cbad726495948a84552c51ee241197ef41fa5a79ef92a7e337677a82f4a6003f2fb6ca14d1cbf502bf12fa88d63a037b14f1aa4e82", 0xba}, {&(0x7f0000000540)="2e65222d937e9412871d5590e17c1b47c4415b92a08d0f12f4a47a5aece1fc242aada85ae2531de20093d29226c51be733b858a476dfb9b7a8a61a5df6121fa35bc554f62a180844ac74f2cfda9d08cc2037a92a6614c9f9dc295542cca573ee3520a10d9097fdfd1c6deaa9073eea2a25ca9b6e6365bcf3857fa8e56e88e39ec31d3de66ba3e69cf7f26a7d5ec5343ce5d2e7", 0x93}, {&(0x7f0000000600)="52a078969bc1d905a03cf477afb3bc89df679f55eaca7c8ed8ae42dd2d63b88490ec59218af7246d459d2a367d14a0e7187636aa8d5813c3b0c80e2a9fc4632ae7ba0f402b81afdef238c8cfa1fb7b6ea91ca7613ba5c0e21aecc08043b8bdf41999934ff27b62249fe33ae6707f0fe5e9131962feb4ebc7e605028402bfc1b203af627761b5a56c41cd1073446c90", 0x8f}, {&(0x7f00000006c0)="70ebfa30e29bf7964fdfbfe995af36622541ff4e170b461b0012e568ea7cadbc79998a14a971a75941f5e16e8eecb38c125b854fe31c0eeedde8181d2710", 0x3e}, {&(0x7f0000000700)="12122f4e96e5a33f87053d660aac95dd85a353a7dbc7104c302174b966594a06b0f8ee6b980ec6fd1a72b994b5eb93e7b136a3ca21031a169fd1b04375cbbafa5b4c2d97619a7d7176", 0x49}], 0x6, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000140)={0x6, 0x2}) ftruncate(r1, 0x208200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380), 0x113, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f0000000340), 0x0, {0xa, 0x0, 0x3, @mcast1, 0x3}}}, 0x38) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) [ 878.283367][T18327] binder: 18321:18327 ioctl 40046207 0 returned -16 [ 878.301648][T18434] binder: 18321:18434 transaction failed 29189/-3, size 24-8 line 3147 [ 878.307686][T10420] binder: send failed reply for transaction 474, target dead 11:16:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x101000, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x40) [ 878.349476][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:16:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) inotify_init() dup3(r0, r2, 0x0) tkill(r1, 0x2b) 11:16:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1e000000}], 0x18) 11:16:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x68000000) [ 878.466605][ T26] audit: type=1804 audit(1553598991.431:32): pid=18476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/923/file0/bus" dev="ramfs" ino=228200 res=1 [ 878.520394][T18505] encrypted_key: hex blob is missing [ 878.530931][T18514] binder: release 18503:18514 transaction 479 out, still active [ 878.559317][T18514] binder: unexpected work type, 4, not freed 11:16:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x6000, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 878.567995][T18514] binder: undelivered TRANSACTION_COMPLETE [ 878.582901][T18582] binder_alloc: binder_alloc_mmap_handler: 18503 20001000-20004000 already mapped failed -16 11:16:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1f000000}], 0x18) [ 878.696871][T18514] binder: BINDER_SET_CONTEXT_MGR already set [ 878.728629][T18514] binder: 18503:18514 ioctl 40046207 0 returned -16 [ 878.795095][T10420] binder: send failed reply for transaction 479, target dead [ 878.805559][T18582] binder: 18503:18582 transaction failed 29189/-22, size 24-8 line 2994 11:16:31 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x74, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000002500)={0x8, 0xffffffffffffffbd, 0xfa00, {0x4, {0x6, 0x5, "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", 0x17, 0x101, 0x0, 0x209, 0x6, 0xc, 0x3, 0x1}}}, 0x128) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="8adc1f12bc123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000002700)=ANY=[@ANYBLOB="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"], 0x1, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000300)={0x1, 0x0, 0x2080, {0x0, 0xf000, 0x3}, [], "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", "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"}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002380)=0x1, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000000)=""/226, &(0x7f00000001c0)=0xe2) add_key(&(0x7f0000000240)='fncrypted\x00\xcc\x12\xd8\xb7U\x04U\xbf\x11 \"\x1ai\xec=\xac\xed\xdb\x05\x8c:\x03\xb2m%{p\xb8\xa8\x87\v\xdb\xfb\xbc\xfc\x11>\xe8L<\xc4\xe4\xef}+Z\xbci\xa9\'{{\x12\x03q\xa4\xc4\xf0&\x8811u\x0fU=(\x1cn\v\x05k\xe1\xbf\xa1.\x83SK\x80\xb7\xa1\x85kY\n4\xb6\xbf\xadT5W_y*\xb2\xf5\xb1\"H\xa8\xfd\xa4d\x85\xeb\x8bOX3% \xbeC\x9e3\xeb\x0e\r\xd2f\x88!\b\xee\xf6\x01q\xaeA@\x8aS\x9c\xc4!-dH>\v\xbb\xbf}\x1a\xbeFY]\x8eFU\x91', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 11:16:31 executing program 1: r0 = socket$kcm(0x10, 0x3, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.syz\x00', &(0x7f0000000080)='trustedprocposix_acl_accessbdev]\'\x00', 0x22, 0x1) sendmsg$kcm(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000002980)="230000006600015bbfa9d345e7eb8d99c1ffffffffffffff43050c000000000000e2d7", 0x23}], 0x1}, 0x0) 11:16:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x3f000000}], 0x18) [ 878.860245][T10420] binder: undelivered TRANSACTION_ERROR: 29189 11:16:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6c000000) [ 878.986652][T18681] QAT: Invalid ioctl [ 879.049609][T18719] binder: release 18717:18719 transaction 484 out, still active [ 879.063423][T18719] binder: unexpected work type, 4, not freed [ 879.070511][T18719] binder: undelivered TRANSACTION_COMPLETE 11:16:32 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x40000000}], 0x18) [ 879.096381][T18817] binder_alloc: binder_alloc_mmap_handler: 18717 20001000-20004000 already mapped failed -16 [ 879.140015][T18719] binder: BINDER_SET_CONTEXT_MGR already set [ 879.180521][T18719] binder: 18717:18719 ioctl 40046207 0 returned -16 [ 879.212660][T18893] binder_alloc: 18717: binder_alloc_buf, no vma [ 879.244540][ T7095] binder: send failed reply for transaction 484, target dead [ 879.252970][T18893] binder: 18717:18893 transaction failed 29189/-3, size 24-8 line 3147 [ 879.256702][ T26] audit: type=1804 audit(1553598992.221:33): pid=18896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/923/file0/file0/bus" dev="ramfs" ino=228288 res=1 [ 879.267496][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:16:32 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x1c56846099b4f9d1, 0x0) timerfd_gettime(r0, &(0x7f0000000300)) syz_open_dev$video4linux(0x0, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) write$UHID_INPUT(r1, &(0x7f0000002300)={0x8, "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", 0x1000}, 0x1006) fstat(0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000180)='\xd2h\x0f\xab\xec\v \xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000040)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000280)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x1b}}, 0x10) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) 11:16:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f0000000040)='encrypted\x00', 0xa, 0x2) 11:16:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x74000000) 11:16:32 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt(r1, 0x82c, 0x0, &(0x7f0000000180)="7642d0e170dc4ccf0325cf7e1766eff19b81e930b722c60c02771a615d66b43415247216c519d3de6bb4a404a948225dbe7f139e5765191264b88e9b30b169c947861346cf", 0x45) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x280, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140), 0x2cf}}], 0xa0cbcb, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) kcmp(r2, r3, 0x5, r0, r1) 11:16:32 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1000000000000}], 0x18) [ 879.467933][T18904] binder: release 18903:18904 transaction 489 out, still active [ 879.489256][T18908] encrypted_key: hex blob is missing [ 879.494107][T18904] binder: unexpected work type, 4, not freed [ 879.527729][T18904] binder: undelivered TRANSACTION_COMPLETE [ 879.552947][T18923] binder_alloc: binder_alloc_mmap_handler: 18903 20001000-20004000 already mapped failed -16 11:16:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) r4 = dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) ioctl$KVM_DEASSIGN_PCI_DEVICE(r4, 0x4040ae72, &(0x7f0000000000)={0x0, 0x7, 0x7fffffff, 0x1, 0x76b}) 11:16:32 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x2000000000000}], 0x18) [ 879.580235][T18904] binder: BINDER_SET_CONTEXT_MGR already set [ 879.625441][T18923] binder_alloc: 18903: binder_alloc_buf, no vma [ 879.662284][ T2987] binder: send failed reply for transaction 489, target dead 11:16:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000200)={@dev}, &(0x7f0000000240)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000540)={0x11, 0x0, 0x0}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@bridge_dellink={0xc8, 0x11, 0x0, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x2000, 0x40000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x5d8}, @IFLA_MTU={0x8, 0xe, 0x95}, @IFLA_PROTO_DOWN={0x8, 0x27, 0xccce}, @IFLA_CARRIER={0x8, 0x21, 0x5}, @IFLA_PORT_SELF={0x74, 0x19, [@IFLA_PORT_REQUEST={0x8, 0x6, 0xeb23}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x3f}, @IFLA_PORT_PROFILE={0x8, 0x2, 'sit\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0059b08bc55d3ece12f09baa608a7081"}, @IFLA_PORT_VF={0x8, 0x1, 0x2c}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e0a79ab415a1213fcf424ac2cf9b3866"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "73785b52639f2518c0785eca0f6f1a92"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "017b881ca6d94509b7ddaf9acbe7a11a"}]}, @IFLA_OPERSTATE={0x8, 0x10, 0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_IFALIASn={0x4}]}, 0x31d}, 0x1, 0x0, 0x0, 0x100000000000000}, 0x8080) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0xd5, 0x7, 0x1}}) [ 879.670283][T18904] binder: 18903:18904 ioctl 40046207 0 returned -16 11:16:32 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x4) fcntl$getownex(0xffffffffffffff9c, 0x10, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000400)=ANY=[@ANYBLOB="000062004c2d07000004000000003d48b7dfb33a9cc921237805aeb3498607000000000000adb132f35b93a8b540f8e2058b2c488b395f18c0aceb68c904f35593c71f4e7473d79808c9041cd0085acc979056cb47c57aabfc1340"]) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000001c0)=""/118) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000005c0)=""/185) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) recvmmsg(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f00000006c0)=@ipx, 0x80, 0x0}}], 0x1, 0x40, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000080)=0xe8) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000740)='auxv\x00') r3 = geteuid() syz_open_dev$sndpcmc(&(0x7f0000000580)='/dev/snd/pcmC#D#c\x00', 0x5, 0x40000) setreuid(r1, r3) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12002, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000040)=0x401) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000009, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f00000017c0), 0x1a1, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x2, 0x7, 0x400, 0x75f, 0x8, 0xffffffffffff0000, 0x7fff, {0x0, @in={{0x2, 0x4e22, @local}}, 0xffff, 0x5, 0x80, 0x200000000000, 0xffffffffffff7fff}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)={r7, 0x3f}, &(0x7f0000000540)=0x8) fadvise64(r6, 0x0, 0xb43, 0x7) 11:16:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 879.705384][T18923] binder: 18903:18923 transaction failed 29189/-3, size 24-8 line 3147 11:16:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RGETLOCK(r3, &(0x7f0000000300)={0x28, 0x37, 0x2, {0x1, 0x5, 0x4, r1, 0xa, '/dev/ptmx\x00'}}, 0x28) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x4) r6 = dup3(r0, r2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x101, @empty, 0x5}}, [0x6000000000000000, 0x65ae, 0xc751, 0x6, 0x6, 0x1, 0x9, 0x2a5fbb7a, 0x100, 0x2, 0x9, 0x60fa, 0x1, 0x8000, 0xd9d5]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000080)={r7, 0x2}, 0x8) tkill(r1, 0x1000000000016) ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f00000000c0)={{0x1, @addr=0x101}, 0x8, 0x2f5, 0x8e}) [ 879.771703][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 [ 879.772564][T19135] encrypted_key: insufficient parameters specified 11:16:32 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x100000000000000}], 0x18) 11:16:32 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x4, 0x4a081) r2 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x2, 0x10002) syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000140), 0x4) recvmmsg(r4, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:16:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7a000000) 11:16:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) dup3(r3, r0, 0x80000) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) dup3(r1, r3, 0x0) tkill(r2, 0x1000000000016) [ 879.960488][T19230] binder: release 19227:19230 transaction 494 out, still active [ 879.972583][T19230] binder: unexpected work type, 4, not freed [ 879.978633][T19230] binder: undelivered TRANSACTION_COMPLETE 11:16:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0x0) close(r0) 11:16:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x180000000000000}], 0x18) 11:16:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e7578201446dda751811b0ed6bc9a4ed6a4750a659baf5472d63a521c2a5a5f6f1f9e6bfbbe6aaed6f0e51efdbe1c0ff8ea3cd58a65d29efc705d1d06642b5db09ae04a509b2f2a58198a8fe41f5969"], 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40000, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 880.047553][T19354] binder_alloc: binder_alloc_mmap_handler: 19227 20001000-20004000 already mapped failed -16 [ 880.093781][T19354] binder: BINDER_SET_CONTEXT_MGR already set [ 880.123618][T19381] encrypted_key: insufficient parameters specified [ 880.127989][T19355] binder_alloc: 19227: binder_alloc_buf, no vma [ 880.149882][T19354] binder: 19227:19354 ioctl 40046207 0 returned -16 [ 880.168901][ T2987] binder: send failed reply for transaction 494, target dead [ 880.179669][T19355] binder: 19227:19355 transaction failed 29189/-3, size 24-8 line 3147 11:16:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) r4 = gettid() timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0xd000}) tkill(r4, 0x13) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) dup3(r0, r3, 0x0) tkill(r1, 0x1000000000016) [ 880.195288][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:16:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r5, 0x1}}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000007, 0x15012, r3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x10000014c) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 11:16:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x200000000000000}], 0x18) 11:16:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xfdfdffff) 11:16:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400080, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 880.376417][T19579] binder: release 19578:19579 transaction 499 out, still active [ 880.384855][T19582] encrypted_key: hex blob is missing [ 880.398381][T19579] binder: unexpected work type, 4, not freed [ 880.405957][T19579] binder: undelivered TRANSACTION_COMPLETE 11:16:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x300000000000000}], 0x18) [ 880.419502][T19711] binder_alloc: binder_alloc_mmap_handler: 19578 20001000-20004000 already mapped failed -16 [ 880.437643][T19579] binder: BINDER_SET_CONTEXT_MGR already set [ 880.444175][T19579] binder: 19578:19579 ioctl 40046207 0 returned -16 [ 880.494522][ T2987] binder: send failed reply for transaction 499, target dead [ 880.507411][T19711] binder: 19578:19711 transaction failed 29189/-22, size 24-8 line 2994 [ 880.530280][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:16:33 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x8, 0x12) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:16:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80900, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r2, r3}}, 0x18) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:33 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x83, 0x800000000000201) ioctl$int_in(r0, 0x800000c0045006, &(0x7f00000000c0)=0x80000000009) ioctl$int_in(r0, 0x801000c0045002, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80000, 0x0) poll(&(0x7f0000000040)=[{r1, 0x2020}], 0x1, 0x8001) 11:16:33 executing program 1: r0 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000180)={0x2, 0x4e20}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000c00)=0xffffffffffffffff, 0x4) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x141, &(0x7f0000000380), 0x0, &(0x7f0000000400)=""/41, 0x29}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000140)=""/42, &(0x7f00000002c0)=0x2a) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000100)=0xffff) socket$isdn_base(0x22, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000440)="dd", 0x1, 0x0, 0x0, 0x0) sysfs$3(0x3) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/193, 0xc1}], 0x1}, 0x0) 11:16:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xfffffdfd) 11:16:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x400000000000000}], 0x18) [ 880.764099][T19805] binder: release 19804:19805 transaction 504 out, still active [ 880.777427][T19801] encrypted_key: hex blob is missing [ 880.791550][T19805] binder: unexpected work type, 4, not freed [ 880.797667][T19805] binder: undelivered TRANSACTION_COMPLETE 11:16:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x500000000000000}], 0x18) [ 880.825905][T19863] binder_alloc: binder_alloc_mmap_handler: 19804 20001000-20004000 already mapped failed -16 [ 880.843738][T19805] binder: BINDER_SET_CONTEXT_MGR already set [ 880.856787][T19805] binder: 19804:19805 ioctl 40046207 0 returned -16 [ 880.865859][T19863] binder_alloc: 19804: binder_alloc_buf, no vma 11:16:33 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x4e24, @local}}) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xfffffffffffffffd, @perf_config_ext, 0x10408}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000ac5000)=0x6, 0x4) syz_open_dev$media(0x0, 0xfffffffffffffffa, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x3b, 0x0) [ 880.906135][ T2987] binder: send failed reply for transaction 504, target dead [ 880.920150][T19863] binder: 19804:19863 transaction failed 29189/-3, size 24-8 line 3147 11:16:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372796074667320747275737465643aea6d699170d556dad96b5737aec13a7a5740"], 0x1, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x6000, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040), 0x1) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 880.968155][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:16:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x100000000000000) 11:16:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1100000000000000}], 0x18) [ 881.111385][T20026] encrypted_key: master key parameter 'ecry`tfs' is invalid [ 881.121069][T20028] binder: release 20027:20028 transaction 509 out, still active [ 881.173303][T20028] binder: unexpected work type, 4, not freed [ 881.219737][T20028] binder: undelivered TRANSACTION_COMPLETE [ 881.247043][T20207] binder_alloc: binder_alloc_mmap_handler: 20027 20001000-20004000 already mapped failed -16 11:16:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") r1 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="75d931a19c11bbbe6121a829d7b3c74f2566e02537ac4a491c0b64e9727745976c9d223dab2761702ea5c4be34e52e0cc889030159b002c5953ee32c23c94429fdd6c37e53cef4f05b4250716e4f22126037fa04a59a8715dcb842e98e76c480a7eaacd9a8bfa89b2cc136724e607fcaacc8686b87a53daea49667dab9b746c5b33adb239e33e6f3b51cda1438276533cfde1f35dc449895aaa0b9", 0x9b, 0xfffffffffffffffc) keyctl$revoke(0x3, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000300)="5e82b7af1bf4e6693a9b1fcc77f928695d3043cc259dc4800f21", 0x46a, 0xfffffffffffffffe) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x9, 0x25, 0x1f, 0x40, 0x4}) [ 881.276880][T20028] binder: BINDER_SET_CONTEXT_MGR already set [ 881.286770][T20028] binder: 20027:20028 ioctl 40046207 0 returned -16 [ 881.296746][T20207] binder_alloc: 20027: binder_alloc_buf, no vma [ 881.306893][T20207] binder: 20027:20207 transaction failed 29189/-3, size 24-8 line 3147 [ 881.369534][T20245] encrypted_key: insufficient parameters specified [ 881.369936][ T2987] binder: send failed reply for transaction 509, target dead 11:16:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = open(&(0x7f0000000000)='./file0\x00', 0x101003, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000040)={0xfffffffffffffff8, 0xffff, 0x220, 'queue0\x00', 0xfffffffffffffeff}) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:16:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x200000000000000) [ 881.414439][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 [ 881.486342][T20340] binder: release 20337:20340 transaction 514 out, still active [ 881.507884][T20340] binder: unexpected work type, 4, not freed [ 881.515692][T20340] binder: undelivered TRANSACTION_COMPLETE [ 881.524318][T20358] binder_alloc: binder_alloc_mmap_handler: 20337 20001000-20004000 already mapped failed -16 [ 881.535469][T20340] binder: BINDER_SET_CONTEXT_MGR already set [ 881.542202][T20340] binder: 20337:20340 ioctl 40046207 0 returned -16 [ 881.549035][T20358] binder_alloc: 20337: binder_alloc_buf, no vma [ 881.556038][T20358] binder: 20337:20358 transaction failed 29189/-3, size 24-8 line 3147 [ 881.565897][T10420] binder: send failed reply for transaction 514, target dead [ 881.573592][T10420] binder: undelivered TRANSACTION_ERROR: 29189 11:16:34 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x8, 0x12) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:16:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1200000000000000}], 0x18) 11:16:34 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x4e24, @local}}) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xfffffffffffffffd, @perf_config_ext, 0x10408}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000ac5000)=0x6, 0x4) syz_open_dev$media(0x0, 0xfffffffffffffffa, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x3b, 0x0) 11:16:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x300000000000000) 11:16:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f61642065637079707466fa3d62732074727d737465643ae86d7a910200000000000000"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x210000, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000040)=0x10f000) 11:16:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000300)=@ethtool_eeprom={0xc, 0x7ff, 0x53d8, 0x87, "6092fc5b0d51edf2e4bfe45ab7b3e9c79d894a38dcdd6d397a6ff681c8007758dddb507c99cc6a6f2f1ff09cc5df828578245ffbbde2256c0bdd07c352c255a82f8ab0b0a47f7bedb48604694c343d8df04f42c910ed93af67e7b061f69321854744659fc130bb6e73ca190061842bfe9344c3ede5614aa63a9126edb886c1726cd72540cd3daf"}}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.swap.current\x00', 0x0, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000000440)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES64=r3], &(0x7f0000000400)=0x2) open_by_handle_at(r5, &(0x7f0000000200)={0xc4, 0x1, "5fea0243a07743df597be00e223b52033794a4fbcb2b1056ebc5e591c418203f772e1ba6302ff779f28eeef8b26712846b3349d53d40467542504deefc3a6a25ccc45d1231a51e5ebf7f7c3f0136380bb99712f29e94b925536e28a7fc372f50bb1e947f01b23a7cbd07704c434319b73a9fe68de816a80bffc8076607a21fee015247298a06eaccd6fbb726025c40d24d963d63c536af48ab0a30650199a7e8b3e5625bd197066b0cff2679ea5025253583f3dafe057563501314d2"}, 0x80000) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000000c0)={r6, 0x30}, 0x8) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) r7 = gettid() syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfa2, 0x4000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r7, 0x13) dup3(r0, r3, 0x0) tkill(r2, 0x2) [ 881.743053][T20368] binder: release 20367:20368 transaction 519 out, still active [ 881.753497][T20375] encrypted_key: master key parameter 'ecpyptfú=bs' is invalid [ 881.779127][T20368] binder: unexpected work type, 4, not freed [ 881.807232][T20368] binder: undelivered TRANSACTION_COMPLETE [ 881.827790][T20402] binder_alloc: binder_alloc_mmap_handler: 20367 20001000-20004000 already mapped failed -16 11:16:34 executing program 5: socketpair$unix(0x1, 0x400000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 11:16:34 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x4e24, @local}}) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xfffffffffffffffd, @perf_config_ext, 0x10408}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000ac5000)=0x6, 0x4) syz_open_dev$media(0x0, 0xfffffffffffffffa, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x3b, 0x0) 11:16:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1400000000000000}], 0x18) [ 881.873115][T20368] binder: BINDER_SET_CONTEXT_MGR already set [ 881.890668][T20402] binder_alloc: 20367: binder_alloc_buf, no vma 11:16:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) r1 = dup(r0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) [ 881.970988][ T2987] binder: send failed reply for transaction 519, target dead [ 881.988087][T20368] binder: 20367:20368 ioctl 40046207 0 returned -16 [ 882.018021][T20402] binder: 20367:20402 transaction failed 29189/-3, size 24-8 line 3147 11:16:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) r4 = dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) recvfrom$inet(r4, &(0x7f0000000040)=""/33, 0x21, 0x2060, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) 11:16:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x400000000000000) [ 882.083423][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 [ 882.084226][T20496] encrypted_key: hex blob is missing [ 882.217683][T20537] binder: release 20510:20537 transaction 524 out, still active [ 882.281815][T20537] binder: unexpected work type, 4, not freed [ 882.290711][T20537] binder: undelivered TRANSACTION_COMPLETE [ 882.316406][T20613] binder_alloc: binder_alloc_mmap_handler: 20510 20001000-20004000 already mapped failed -16 [ 882.349602][T20537] binder: BINDER_SET_CONTEXT_MGR already set [ 882.357202][T20613] binder_alloc: 20510: binder_alloc_buf, no vma [ 882.378382][T20537] binder: 20510:20537 ioctl 40046207 0 returned -16 [ 882.385276][T20613] binder: 20510:20613 transaction failed 29189/-3, size 24-8 line 3147 [ 882.400742][T10420] binder: send failed reply for transaction 524, target dead [ 882.410852][T10420] binder: undelivered TRANSACTION_ERROR: 29189 11:16:35 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x8, 0x12) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:16:35 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1500000000000000}], 0x18) 11:16:35 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x4e24, @local}}) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xfffffffffffffffd, @perf_config_ext, 0x10408}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000ac5000)=0x6, 0x4) syz_open_dev$media(0x0, 0xfffffffffffffffa, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x3b, 0x0) 11:16:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465641b3aea6d699e70d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000240)="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") 11:16:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfffffffffffffffe) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}}, 0x0) tkill(r4, 0x13) dup3(r0, r3, 0x0) tkill(r2, 0x1000000000016) 11:16:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x500000000000000) [ 882.621012][T20623] QAT: Invalid ioctl [ 882.629322][T20621] encrypted_key: insufficient parameters specified [ 882.638256][T20625] binder: release 20624:20625 transaction 529 out, still active 11:16:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x0) fstatfs(r0, &(0x7f0000000040)=""/104) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 882.693930][T20625] binder: unexpected work type, 4, not freed [ 882.721602][T20625] binder: undelivered TRANSACTION_COMPLETE [ 882.755800][T20735] binder_alloc: binder_alloc_mmap_handler: 20624 20001000-20004000 already mapped failed -16 11:16:35 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x1004e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) close(r0) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r3 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x3, 0x0, [{0x0, 0x81, 0x2, 0x8, 0xffffffff80000001, 0xffffffffffffffff, 0x6302}, {0x80000008, 0x54, 0x3, 0x2, 0x800000000, 0x5, 0x4}, {0x0, 0x253, 0x0, 0xe2f4, 0xfffffffffffffff7, 0x6b, 0x2}]}) prctl$PR_SET_PTRACER(0x59616d61, r2) 11:16:35 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1600000000000000}], 0x18) [ 882.799630][T20625] binder: BINDER_SET_CONTEXT_MGR already set [ 882.806331][T20737] encrypted_key: insufficient parameters specified [ 882.813251][T20625] binder: 20624:20625 ioctl 40046207 0 returned -16 [ 882.822677][T20735] binder_alloc: 20624: binder_alloc_buf, no vma 11:16:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x600000000000000) 11:16:35 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1e00000000000000}], 0x18) 11:16:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x121000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x804}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00032bbd7000fedb00000600000008ffff00070000000800401d7cf1573264bdaf2ea9ed5ac339a21bf068a61d000000005cc95951247eae30ee46fc9c3a5102e4f6fa9d8d125c7a71ae8e8aa306c8f07a66775b273ee5baa6ced06320de361bbf849fa6a20d820f20c7cca846a7359f6ef89c87c81b7c88921e8803233d00000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f023c123f31080070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 883.054715][T20954] binder: unexpected work type, 4, not freed [ 883.117029][T20957] encrypted_key: hex blob is missing [ 883.125778][T20954] binder: BINDER_SET_CONTEXT_MGR already set [ 883.141036][T20954] binder: 20953:20954 ioctl 40046207 0 returned -16 [ 883.146019][T20961] binder_alloc: 20953: binder_alloc_buf, no vma 11:16:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x700000000000000) 11:16:36 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x8, 0x12) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:16:36 executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) lstat(0x0, &(0x7f0000000480)) socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r3 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r3, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U-', 0x392}, 0x28, 0x2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000200)={0x10000000002, 0x0, @ioapic={0x0, 0xff00000000000000}}) 11:16:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) write$P9_RREAD(r1, &(0x7f0000000240)={0x1e, 0x75, 0x1, {0x13, "3189dd468639726ed50000000000000000000010f5a836d638f217fdd6f821446ae1ba6e94fa617c074bbd75ff4a0d597d099711a6e9893a1ef1e1ecb146ceebc1ca00e57a416bd81b6b0a9bd593f20064047aa21d971c6c3f11e6e25314c129e6e0be3dd77f870d96f5d806e8feb0557df753c2d391f807bedc03b47444ee18e6286195bb9965170c4f84cfe8f824e68e0403341a5b8d3e84800e20c2d6e896a59122bf044cbc906bd051ea82efab00ffebceed7890d96f77199d339fa7f3732e1e86fd"}}, 0xffffff32) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) keyctl$instantiate(0xc, r2, &(0x7f0000000040)=@encrypted_load={'load ', 'default', 0x20, 'user:', 'syz', 0x20, 0x7, 0x20, [0x62]}, 0x2d, 0xfffffffffffffffe) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) fadvise64(r1, 0x0, 0x20, 0x5) [ 883.496149][T21067] binder: unexpected work type, 4, not freed [ 883.504247][T21071] encrypted_key: hex blob is missing [ 883.516269][T21067] binder: BINDER_SET_CONTEXT_MGR already set [ 883.527495][T21067] binder: 21065:21067 ioctl 40046207 0 returned -16 11:16:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x2000000000000000) 11:16:38 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x1f00000000000000}], 0x18) 11:16:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") r1 = add_key(&(0x7f00000000c0)='.dead\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000002c0)='{ppp1\x00', r1) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000340)) r3 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000240)="14a0e5d0005b6f5ad5000000", 0xc, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:38 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="900007bf10bc741e7ac394770978fb35fc000000b1e3e0872cc3105d7e72890bc1cdf9783c7642ebe6624d6356801d93e518ede3d3923e3dcaf888ecdc122dd7bf1885c0281e576cd775c19e6ce7fb3028b13585f2cb030aec4545d2a856c0b10f98f132c9128d061334c7dabdc2ae241120cadf81ce9a3bde97d6df6bae3859a840fe0f3079719d3ceb2533f20eb5f77def5a0c110dcc6ccaa368f1aaec8d9b9b28c7c5fa47760e9d00b0ee6a2725e7374edf13bc3c4b0270df45f67ded8abaddfd613330d76c633feb91413417d366b6b8c1ca8ed0cc5b8c4712a7c82ac3634f64c4b82e2369f6a44850618e1a2424853b0fab0b568ebf639db3be994d62241a853bb099af6864ac4df33e067a7b97197ab46b48a7a5524f6f5b1229de9a7b52d6e301bdb1e8dfef05bd57d2398694ee33a4fcc5f97d36743da6dbd8dc6a4aaa1db7d6d571c5215b733f2fa7473e7698f381b4907013ac7ad47c4ebf6b25f7f8154090948e5c3b21b0acfa79230995c610bb7143ba5b0a322a34358a23e0894a5d723d177adc962e7de56e7c21b996afb154b0f35a4b2b613961fb1a0773d5d853fc4c0207a5653c7e59ceca424c1a6952006f6e85754ba5eea74729f5d08792f10072da17000000000000"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x8, 0x12) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:16:38 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x2, 0x7fff, 0xa7b, 0xfffffffffffffffb, 0x0, 0x800, 0xc0, 0xf, 0x2, 0x0, 0x100, 0x0, 0x3bb4, 0x8000, 0x0, 0x2, 0x4, 0x5, 0x2, 0x7df, 0x200000000000000, 0x80000000, 0x3, 0x9, 0xf41, 0x1e92, 0x1, 0x5, 0x3, 0x3, 0x0, 0x8, 0x20, 0x716, 0x7ff, 0x5, 0x0, 0x1, 0x0, @perf_config_ext={0xd6}, 0x301, 0x7ff, 0x0, 0x0, 0x1, 0x40, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r4, 0xe00}], 0x1, 0x9ad) r5 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r5, 0x13) r6 = dup3(r2, r4, 0x0) tkill(r3, 0x1000000000016) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000200)={r7, 0x8, 0x3ef5, 0x3, 0x100000000000000}, &(0x7f0000000240)=0x14) 11:16:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) restart_syscall() add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="b109a4a7c55255c53940a016c459f9961552dcfea797b348953ccdc94ef469ce01a6bbfce76be59b8a02ae4b9090ed663db09fe12a7927a4c416ecfda46b5ab3bcb12b3aaa959379b5e3160830b79831247fe012c4", 0x55, 0xfffffffffffffffe) [ 885.651489][T21286] encrypted_key: insufficient parameters specified [ 885.672365][T21297] binder_thread_release: 2 callbacks suppressed [ 885.672378][T21297] binder: release 21296:21297 transaction 544 out, still active [ 885.711699][T21297] binder: unexpected work type, 4, not freed [ 885.718033][T21297] binder_release_work: 2 callbacks suppressed [ 885.718039][T21297] binder: undelivered TRANSACTION_COMPLETE [ 885.747321][T21465] binder_alloc_mmap_handler: 2 callbacks suppressed 11:16:38 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x3f00000000000000}], 0x18) [ 885.747338][T21465] binder_alloc: binder_alloc_mmap_handler: 21296 20001000-20004000 already mapped failed -16 11:16:38 executing program 0: socket$inet6(0xa, 0x6, 0x6f5f) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6f61642065637279707466732e7472757374656404ea6d699170d5a09bc05d0551e75e38c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:16:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") r1 = add_key(&(0x7f00000000c0)='.dead\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000002c0)='{ppp1\x00', r1) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000340)) r3 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000240)="14a0e5d0005b6f5ad5000000", 0xc, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 885.797375][T21297] binder: BINDER_SET_CONTEXT_MGR already set 11:16:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) capset(&(0x7f0000000080)={0x20080522, r2}, &(0x7f00000000c0)={0x4, 0x9087, 0xfffffffffffffffb, 0xb521, 0x40}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r3, 0xe00}], 0x1, 0x9ad) r4 = gettid() madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x13) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) dup3(r0, r3, 0x0) tkill(r2, 0x1000000000016) [ 885.866895][T21297] binder: 21296:21297 ioctl 40046207 0 returned -16 [ 885.891923][T21513] encrypted_key: insufficient parameters specified [ 885.897201][T21516] binder_alloc_new_buf_locked: 1 callbacks suppressed [ 885.897210][T21516] binder_alloc: 21296: binder_alloc_buf, no vma 11:16:38 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x4, 0xfffff024}, {0x80000006}]}, 0x10) r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xf92d, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000140)=""/186, 0xba}, {&(0x7f0000000200)=""/86, 0x56}, {&(0x7f0000000280)=""/159, 0x9f}], 0x5, 0x0) [ 885.923876][T21517] encrypted_key: insufficient parameters specified [ 885.959304][ T7095] binder_send_failed_reply: 3 callbacks suppressed [ 885.959313][ T7095] binder: send failed reply for transaction 544, target dead 11:16:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e7578da588b20"], 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000340)=""/229, &(0x7f00000001c0)=0xe5) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200, 0x0) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000240)="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") io_setup(0x5, &(0x7f00000000c0)=0x0) r5 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000680)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 885.978711][T21516] binder_transaction: 3 callbacks suppressed [ 885.978729][T21516] binder: 21296:21516 transaction failed 29189/-3, size 24-8 line 3147 [ 886.005629][ T7095] binder_release_work: 3 callbacks suppressed [ 886.005636][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:16:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4800000000000000) 11:16:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x4000000000000000}], 0x18) 11:16:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0xffffffff00000000}], 0x18) [ 886.129794][T21654] encrypted_key: insufficient parameters specified [ 886.142681][T21682] binder: release 21671:21682 transaction 549 out, still active [ 886.162784][T21682] binder: unexpected work type, 4, not freed [ 886.208324][T21682] binder: undelivered TRANSACTION_COMPLETE [ 886.238381][T21836] binder_alloc: binder_alloc_mmap_handler: 21671 20001000-20004000 already mapped failed -16 [ 886.271423][T21682] binder: BINDER_SET_CONTEXT_MGR already set [ 886.280546][T21682] binder: 21671:21682 ioctl 40046207 0 returned -16 [ 886.288751][T21836] binder_alloc: 21671: binder_alloc_buf, no vma [ 886.295593][T21836] binder: 21671:21836 transaction failed 29189/-3, size 24-8 line 3147 [ 886.313681][ T2987] binder: send failed reply for transaction 549, target dead [ 886.325492][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:16:39 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x8, 0x12) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:16:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) r3 = getuid() getgroups(0x6, &(0x7f0000001540)=[0xee01, 0xee01, 0xee00, 0xee01, 0x0, 0x0]) sendmsg$unix(r0, &(0x7f00000015c0)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="74bd8bbe171c6c5b6a5d88ba54e4d9ddf1e21767c85a8be4643f65353aa3771503ee322e301e89eaf7db07bfba00b39dd23763f58984c510e413f15845df979a049c74b51ed51c2e2c78cac4c1e063dabf96795ef23754a725360bb56a579b2369f85af5d9e10f834f4583fbbb28bab3d63804c5168ef4442fa7e74e0c9c093e8316ccd8a2ab3b2ac8bda94136e29c15425cdc13ce9672a705d0be3d08583a496b37e56632de639006550e3c7bbc7845c05fc7ebbc33aa7e3aa3a64936160c0e6f60aa688c", 0xc5}, {&(0x7f0000000080)="5a01866b3209672aaa2a15b6e917", 0xe}, {&(0x7f0000001300)="66100a13c613d700828614c85eb7a81ac222d4ddd0d1d8455a10573dfcf0eba21df11fe8c80e54c6d7d0f84957fca791486d883570b521e773251a0b9dd9e0a69bb2ec24408ba6484b7f51b3e4b68e5130b290f4c7a60237c6e79d4ac82324da22b8bda6b8681f9303cd20a6ff991207022f3a3bc0b1e29e4ca4bcbc5b99a2cf7afffb600eb03d664b37afb94e319f0aa7249044862827227284925f212ff8f9a254c8b920f6547f18ada1fb0daaf1d95f43b1266d4d69a6abe1cdd2489264e14242985ec2798ff46f0f5e994f67098e212cccb22131", 0xd6}, {&(0x7f0000001400)="17f11d4f43154effcc69c02c4e68caa8519272a52ce2de225a87c1e78589a8c07c2c32a0fa328224ce41ad6997318c3db27e968e89e2cd5d94d9d2af9c2731c6090b48898d32af44d343c316ab798c9afe8ca874007da81a09ee46c90a6f6be9d7a678aa5642e0d06f8507d464a69cc07b67f45f372791903275355ffdd273b6b0c84a9f14e86a9eded64704e6d645f87ffdf42bd50e8db5a6b0d8773e74ba3985a9123e", 0xa4}], 0x5, &(0x7f0000001580)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x4}, 0xe1b5dd273305c35f) r5 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r6, 0xe00}], 0x1, 0x9ad) r7 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r7, 0x13) dup3(r1, r6, 0x0) tkill(r5, 0x1000000000016) 11:16:39 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000)=0x40, 0x3b2) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0x8, 0x4) close(r0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0x1000, "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"}, &(0x7f0000000100)=0x1008) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e20, 0x1, @empty, 0x8001}}, 0x5, 0x9, 0xffffffff, 0x910, 0x85}, &(0x7f00000012c0)=0x98) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0xf0ff7f) 11:16:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x2}], 0x18) 11:16:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4c00000000000000) 11:16:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="0e7ab06151189572345b4a7390ed151d32cbde400dc581e636cdb61a9842ba7106434a00fc46b37d21a82ce3a0f45a859d6f5498d2d7e7e20e9ea98b120c7a24ecd24c8fc05b0487ec2ee56a5dcb39a0d8c12008a101e73aa8072c58b891af67c80bd3df729443b2bb747378f3d855331d49b3541d5e29c595bb68dec3ff46c1172bd2c01b0578056e19dab8ddfb8db055914af961f86bf8ac5f", 0x9a, 0xfffffffffffffffd) keyctl$instantiate(0xc, r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 886.481809][T21848] encrypted_key: insufficient parameters specified [ 886.492616][T21854] binder: release 21853:21854 transaction 554 out, still active [ 886.522167][T21854] binder: unexpected work type, 4, not freed [ 886.536448][T21854] binder: undelivered TRANSACTION_COMPLETE [ 886.556274][T21965] binder_alloc: binder_alloc_mmap_handler: 21853 20001000-20004000 already mapped failed -16 11:16:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x3}], 0x18) 11:16:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/4096, 0x1000) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80088) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 886.568408][T21854] binder: BINDER_SET_CONTEXT_MGR already set [ 886.575670][T21854] binder: 21853:21854 ioctl 40046207 0 returned -16 [ 886.576304][T21965] binder_alloc: 21853: binder_alloc_buf, no vma 11:16:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000040)={0x3}, 0x4) poll(&(0x7f0000000100)=[{r2, 0xe00}], 0x1, 0x9ad) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x13) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) [ 886.628059][T10420] binder: send failed reply for transaction 554, target dead [ 886.638291][T21965] binder: 21853:21965 transaction failed 29189/-3, size 24-8 line 3147 [ 886.658146][T22033] encrypted_key: hex blob is missing [ 886.737645][T10420] binder: undelivered TRANSACTION_ERROR: 29189 11:16:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6000000000000000) 11:16:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x4}], 0x18) [ 886.858803][T22173] binder: release 22138:22173 transaction 559 out, still active 11:16:39 executing program 0: syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x103000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 886.901372][T22173] binder: unexpected work type, 4, not freed [ 886.941272][T22173] binder: undelivered TRANSACTION_COMPLETE [ 886.959142][T22186] binder_alloc: binder_alloc_mmap_handler: 22138 20001000-20004000 already mapped failed -16 [ 886.989913][T22189] encrypted_key: hex blob is missing [ 886.990644][T22173] binder: BINDER_SET_CONTEXT_MGR already set [ 887.008449][T22173] binder: 22138:22173 ioctl 40046207 0 returned -16 [ 887.015454][T22186] binder_alloc: 22138: binder_alloc_buf, no vma [ 887.021974][T22186] binder: 22138:22186 transaction failed 29189/-3, size 24-8 line 3147 [ 887.031478][T10420] binder: send failed reply for transaction 559, target dead [ 887.039292][T10420] binder: undelivered TRANSACTION_ERROR: 29189 11:16:40 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="900007bf10bc741e7ac394770978fb35fc000000b1e3e0872cc3105d7e72890bc1cdf9783c7642ebe6624d6356801d93e518ede3d3923e3dcaf888ecdc122dd7bf1885c0281e576cd775c19e6ce7fb3028b13585f2cb030aec4545d2a856c0b10f98f132c9128d061334c7dabdc2ae241120cadf81ce9a3bde97d6df6bae3859a840fe0f3079719d3ceb2533f20eb5f77def5a0c110dcc6ccaa368f1aaec8d9b9b28c7c5fa47760e9d00b0ee6a2725e7374edf13bc3c4b0270df45f67ded8abaddfd613330d76c633feb91413417d366b6b8c1ca8ed0cc5b8c4712a7c82ac3634f64c4b82e2369f6a44850618e1a2424853b0fab0b568ebf639db3be994d62241a853bb099af6864ac4df33e067a7b97197ab46b48a7a5524f6f5b1229de9a7b52d6e301bdb1e8dfef05bd57d2398694ee33a4fcc5f97d36743da6dbd8dc6a4aaa1db7d6d571c5215b733f2fa7473e7698f381b4907013ac7ad47c4ebf6b25f7f8154090948e5c3b21b0acfa79230995c610bb7143ba5b0a322a34358a23e0894a5d723d177adc962e7de56e7c21b996afb154b0f35a4b2b613961fb1a0773d5d853fc4c0207a5653c7e59ceca424c1a6952006f6e85754ba5eea74729f5d08792f10072da17000000000000"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x8, 0x12) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:16:40 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x5}], 0x18) 11:17:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @dev}, 0x10) close(r0) 11:17:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6800000000000000) 11:17:39 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x1, 0x0, 0x0) 11:17:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x11}], 0x18) 11:17:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000080)=0x80, 0x80800) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@nat={'nat\x00', 0x19, 0x2, 0x470, [0x20000240, 0x0, 0x0, 0x20000650, 0x20000680], 0x0, &(0x7f00000000c0), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x9, 0x40, 0xe8f9, 'caif0\x00', 'vcan0\x00', 'teql0\x00', 'teql0\x00', @remote, [0x0, 0xff, 0x0, 0x0, 0xff], @remote, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x1d0, 0x240, 0x278, [@comment={'comment\x00', 0x100}, @mac={'mac\x00', 0x10, {{@remote, 0x1}}}]}, [@snat={'snat\x00', 0x10, {{@random="ae94edbd05b1", 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x10}, 0xffffffffffffffff}}}]}, @snat={'snat\x00', 0x10, {{@remote, 0x10}}}}, {{{0x19, 0x0, 0x0, 'hsr0\x00', 'veth1_to_hsr\x00', 'ipddp0\x00', 'team0\x00', @random="f26b485cd088", [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @empty, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xf8, 0x130, 0x168, [@ip={'ip\x00', 0x20, {{@broadcast, @remote, 0xff, 0xff000000, 0xfe, 0xff, 0x13, 0xc, 0x4e24, 0x4e24, 0x4e20, 0x4e20}}}, @quota={'quota\x00', 0x18, {{0x0, 0x0, 0x6, 0x2}}}]}, [@snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="393818c75829", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x4e8) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000140)=0xe813, 0x4) 11:17:39 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 946.993324][T22312] binder: release 22310:22312 transaction 564 out, still active [ 947.042632][T22312] binder: unexpected work type, 4, not freed [ 947.063518][T22312] binder: undelivered TRANSACTION_COMPLETE 11:17:40 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x12}], 0x18) 11:17:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f0000000140)="cd80c20000b0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b02db5d90000007cc4c4e3a95fd965ea262e410f0ff5bb408064797f41dfdf400e01efc4a1fd28d29d7d2f67450f483b1c0a1a63460fc4c161fc4d96040476789f") [ 947.108222][T22413] binder_alloc: binder_alloc_mmap_handler: 22310 20001000-20004000 already mapped failed -16 11:17:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e7578202f278e635160745fc9718b1305c4a097e012c9ff04b78e0496e5c508a397b244f66f9de9ea8c84c099a692f6f2385749221aa0a23719b839da77b48665b31e4423fdf5f5a2948a36ac33175c89a4f7f9e9c3e358b2493d6f"], 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8400, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000240)=""/21) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x5, 0x92}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x8000, 0x6, [0x0, 0x8, 0x2, 0x20, 0x7, 0x1]}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x200, 0x7, 0x4000000000000, 0x100000000, 0x1}, 0x14) add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 11:17:40 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) [ 947.210452][T22312] binder: BINDER_SET_CONTEXT_MGR already set [ 947.244850][T22312] binder: 22310:22312 ioctl 40046207 0 returned -16 11:17:40 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x14}], 0x18) [ 947.311503][ T7095] binder: send failed reply for transaction 564, target dead 11:17:40 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 949.042228][T22565] IPVS: ftp: loaded support on port[0] = 21 [ 949.103268][T22565] chnl_net:caif_netlink_parms(): no params data found [ 949.130838][T22565] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.138051][T22565] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.145649][T22565] device bridge_slave_0 entered promiscuous mode [ 949.153954][T22565] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.161027][T22565] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.168858][T22565] device bridge_slave_1 entered promiscuous mode [ 949.185011][T22565] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 949.195236][T22565] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 949.211434][T22565] team0: Port device team_slave_0 added [ 949.217955][T22565] team0: Port device team_slave_1 added [ 949.283909][T22565] device hsr_slave_0 entered promiscuous mode [ 949.321531][T22565] device hsr_slave_1 entered promiscuous mode [ 949.390042][T22565] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.397137][T22565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.404527][T22565] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.411659][T22565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.447713][T22565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.458850][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 949.467086][T10420] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.485959][T10420] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.494674][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 949.506911][T22565] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.516828][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 949.525255][T10420] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.532335][T10420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.543476][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 949.552029][ T7095] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.559061][ T7095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.576116][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 949.592286][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 949.600330][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 949.609320][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 949.618325][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 949.628746][T22565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 949.648573][T22565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.685351][T22570] device lo entered promiscuous mode [ 949.692370][T22570] device lo left promiscuous mode [ 949.743328][T22571] device lo entered promiscuous mode [ 949.748706][T22569] device lo left promiscuous mode 11:17:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=@routing, 0x8) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) msgget(0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3f, 0x0, &(0x7f0000000100)) 11:17:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6c00000000000000) 11:17:42 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) socket$inet(0x2, 0x3, 0x7f) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:17:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x19e2, 0x2) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000240)={"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"}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:17:42 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x15}], 0x18) 11:17:42 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:17:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") listen(r0, 0x7) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) [ 949.886398][T22580] binder: release 22579:22580 transaction 568 out, still active [ 949.900962][T22582] encrypted_key: hex blob is missing [ 949.903403][T22580] binder: unexpected work type, 4, not freed [ 949.951575][T22580] binder: undelivered TRANSACTION_COMPLETE [ 949.961257][ C1] net_ratelimit: 10 callbacks suppressed [ 949.961265][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 949.972691][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:17:42 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x16}], 0x18) [ 950.004033][T22670] binder_alloc: binder_alloc_mmap_handler: 22579 20001000-20004000 already mapped failed -16 11:17:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x8d, "3217ed35ac5c90016101421d9ae616433a022ebeba5317f6920a3ff4e97086e3e501803769aaa0c9bd3fca61f88d0fbbe9ee193d778df7d94043a34f34a4d0b21f777ef55f024eccb0a3cd8d16be002c217e1e3598e585cd07b710e51f9609810205fabd991b695ff09035f80860264fa003ad73a022380f52e7d112bc10d97479dafcc72d57a131eeeb7afed3"}, &(0x7f00000001c0)=0x95) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240)={r2, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000300)=0x84) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000340)={0xfffffffffffffff9, 0x646a4368, 0x2, 0x3f}, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f6164d2d56372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 950.080066][T22670] binder_alloc: 22579: binder_alloc_buf, no vma [ 950.091224][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 950.097086][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 950.121684][T22699] encrypted_key: keyword 'loadÒÕcryptfs' not recognized [ 950.146050][T10420] binder: send failed reply for transaction 568, target dead [ 950.147713][T22670] binder: 22579:22670 transaction failed 29189/-3, size 24-8 line 3147 11:17:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7400000000000000) [ 950.177368][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:17:43 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x1e}], 0x18) 11:17:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)='encrypted\x00', 0xfffffffffffffffa) keyctl$read(0xb, r1, &(0x7f0000000240)=""/41, 0x29) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000040)) [ 950.283488][T22811] binder: release 22810:22811 transaction 573 out, still active [ 950.291601][T22811] binder: unexpected work type, 4, not freed [ 950.297839][T22811] binder: undelivered TRANSACTION_COMPLETE [ 950.308797][T22812] binder_alloc: binder_alloc_mmap_handler: 22810 20001000-20004000 already mapped failed -16 [ 950.327720][T22811] binder: BINDER_SET_CONTEXT_MGR already set 11:17:43 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 950.348044][T22811] binder: 22810:22811 ioctl 40046207 0 returned -16 [ 950.359457][T22815] encrypted_key: hex blob is missing [ 950.369440][T22812] binder_alloc: 22810: binder_alloc_buf, no vma [ 950.389332][T10420] binder: send failed reply for transaction 573, target dead [ 950.397378][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 950.397417][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 950.401193][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 950.404067][T22812] binder: 22810:22812 transaction failed 29189/-3, size 24-8 line 3147 [ 950.409035][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 950.409112][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 950.434632][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:17:43 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x180}], 0x18) [ 950.446510][T10420] binder: undelivered TRANSACTION_ERROR: 29189 11:17:43 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:17:43 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x410600, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000001c0), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:17:43 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x300}], 0x18) 11:17:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7a00000000000000) [ 950.791494][T22936] encrypted_key: hex blob is missing 11:17:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") listen(r0, 0x7) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:17:43 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 950.817645][T22941] binder: release 22940:22941 transaction 578 out, still active [ 950.841372][T22941] binder: unexpected work type, 4, not freed [ 950.847366][T22941] binder: undelivered TRANSACTION_COMPLETE [ 950.918247][T23041] binder_alloc: binder_alloc_mmap_handler: 22940 20001000-20004000 already mapped failed -16 [ 950.936739][T22941] binder: BINDER_SET_CONTEXT_MGR already set [ 950.944872][T22941] binder: 22940:22941 ioctl 40046207 0 returned -16 [ 950.959210][T23041] binder_alloc: 22940: binder_alloc_buf, no vma 11:17:43 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x500}], 0x18) 11:17:43 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3f, 0x40000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000240)="f4c63abff472182493e0b83755ebb064e0c9a78ec370a4b505817083e82bf089edc9403341668e439913c76fd2403928ffdc0d7107811dcedfb5dd6cca92ed3e96dcd6a6b603440e6affabea2d36f7aad359de06e635ae03ff75502f0a7216e801bbdf4fc810f83f9e92e3bb2d5bb9db7500d4d65894911301d935234cd3f6e7f1ef3532ab88b55e7b47b08c57a2920a5cd8afc821eeb2d845ac264a9625826688c4292d304a2313d2a44ea6321f00020d65abc59c09e0cc1ab66c351efac049bf74e2c493e92a2541"}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0xa02, 0x4, 0x5, 0xe0fc, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x0, 0x30}, &(0x7f0000000340)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e7581c3"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 950.967389][T23041] binder: 22940:23041 transaction failed 29189/-3, size 24-8 line 3147 [ 950.994098][ T7095] binder: send failed reply for transaction 578, target dead [ 951.011728][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:17:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xfdfdffff00000000) [ 951.108820][T23058] encrypted_key: keylen parameter is missing [ 951.172564][T23062] binder: release 23061:23062 transaction 583 out, still active [ 951.206893][T23062] binder: unexpected work type, 4, not freed [ 951.219731][T23062] binder: undelivered TRANSACTION_COMPLETE 11:17:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x1100}], 0x18) [ 951.228732][T23113] binder_alloc: binder_alloc_mmap_handler: 23061 20001000-20004000 already mapped failed -16 [ 951.268557][T23062] binder: BINDER_SET_CONTEXT_MGR already set [ 951.294099][T23062] binder: 23061:23062 ioctl 40046207 0 returned -16 11:17:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) mq_unlink(&(0x7f0000000000)='syz') 11:17:44 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:17:44 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="900007bf10bc741e7ac394770978fb35fc000000b1e3e0872cc3105d7e72890bc1cdf9783c7642ebe6624d6356801d93e518ede3d3923e3dcaf888ecdc122dd7bf1885c0281e576cd775c19e6ce7fb3028b13585f2cb030aec4545d2a856c0b10f98f132c9128d061334c7dabdc2ae241120cadf81ce9a3bde97d6df6bae3859a840fe0f3079719d3ceb2533f20eb5f77def5a0c110dcc6ccaa368f1aaec8d9b9b28c7c5fa47760e9d00b0ee6a2725e7374edf13bc3c4b0270df45f67ded8abaddfd613330d76c633feb91413417d366b6b8c1ca8ed0cc5b8c4712a7c82ac3634f64c4b82e2369f6a44850618e1a2424853b0fab0b568ebf639db3be994d62241a853bb099af6864ac4df33e067a7b97197ab46b48a7a5524f6f5b1229de9a7b52d6e301bdb1e8dfef05bd57d2398694ee33a4fcc5f97d36743da6dbd8dc6a4aaa1db7d6d571c5215b733f2fa7473e7698f381b4907013ac7ad47c4ebf6b25f7f8154090948e5c3b21b0acfa79230995c610bb7143ba5b0a322a34358a23e0894a5d723d177adc962e7de56e7c21b996afb154b0f35a4b2b613961fb1a0773d5d853fc4c0207a5653c7e59ceca424c1a6952006f6e85754ba5eea74729f5d08792f10072da17000000000000"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 951.351080][T10420] binder: send failed reply for transaction 583, target dead [ 951.359244][T23113] binder: 23061:23113 transaction failed 29189/-22, size 24-8 line 2994 [ 951.385564][T10420] binder: undelivered TRANSACTION_ERROR: 29189 11:17:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) 11:17:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x1200}], 0x18) [ 951.430929][T23181] encrypted_key: hex blob is missing [ 951.523364][T23199] binder: release 23190:23199 transaction 588 out, still active [ 951.533149][T23199] binder: unexpected work type, 4, not freed [ 951.570778][T23199] binder: undelivered TRANSACTION_COMPLETE [ 951.604047][T23218] binder_alloc: binder_alloc_mmap_handler: 23190 20001000-20004000 already mapped failed -16 [ 951.625274][T23199] binder: BINDER_SET_CONTEXT_MGR already set [ 951.636494][T23199] binder: 23190:23199 ioctl 40046207 0 returned -16 [ 951.646823][T23218] binder_alloc: 23190: binder_alloc_buf, no vma [ 951.657538][T23218] binder: 23190:23218 transaction failed 29189/-3, size 24-8 line 3147 11:17:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x1400}], 0x18) [ 951.670834][ T7095] binder: send failed reply for transaction 588, target dead 11:17:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") listen(r0, 0x7) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) [ 951.716281][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:17:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000100)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x100000c, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101001, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)={0x6000, 0x10000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="85060733250027190c", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 11:17:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x5, 0x9, 0xb6a, 0x3, 0x20, 0x80000000, 0x7, 0xfe}, &(0x7f0000000040)={0x100000001, 0x3, 0x0, 0x3, 0xfff, 0x1ff, 0x1000, 0x1000}, &(0x7f0000000080)={0x2, 0x2, 0x81, 0xfff, 0x8, 0xffffffffffffffff, 0x800000000000, 0x5}, &(0x7f00000001c0)={r1, r2/1000+10000}) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="ac7e24fe7205daed63cc9b78ecefa0d6b4ad8ebf005c89610892956422ad0644efb026c55759be5c663ff78d36669ccc55fcff9cb96b1eefc58065fc079b48c94897fb5486cb27bf5b28c3a538a2f71695b89af8f6ed9e24f4cf80730ab861384edacb6fe8dc88b2c407abab875717d1fac1611c1f5c1a0c94c83f2f6c4c945e0bedd701743fe82c404ddcb92ddda2eab55de4b596ab23813d32481d8f22e646234f588b9e5d495cda89be8a687ae0429b905648534e1a702d4d4e7816bb46d41f4876542a730b372cfa906b07aca5273beca209d3a9ba5583f1193ae75e5db753e66da589ac", 0xe6, 0xfffffffffffffff9) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=ANY=[], 0x0, r3) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:17:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x1500}], 0x18) [ 951.910779][T23316] binder: 23309:23316 got transaction with invalid offset (0, min 0 max 24) or object. [ 951.970700][T23316] binder: 23309:23316 transaction failed 29201/-22, size 24-8 line 3241 [ 951.983768][T23321] encrypted_key: insufficient parameters specified 11:17:45 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:17:45 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x1600}], 0x18) [ 952.036958][T23322] binder: BINDER_SET_CONTEXT_MGR already set [ 952.044866][T23316] binder_alloc: binder_alloc_mmap_handler: 23309 20001000-20004000 already mapped failed -16 [ 952.066190][T23322] binder: 23309:23322 ioctl 40046207 0 returned -16 11:17:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") socket$bt_cmtp(0x1f, 0x3, 0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 952.129717][T23399] binder_alloc: 23309: binder_alloc_buf, no vma [ 952.165009][T23399] binder: 23309:23399 transaction failed 29189/-3, size 24-8 line 3147 [ 952.211987][ T7095] binder: undelivered TRANSACTION_ERROR: 29201 [ 952.212683][T23436] encrypted_key: insufficient parameters specified [ 952.227447][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:17:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000080)=0x80, 0x80800) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@nat={'nat\x00', 0x19, 0x2, 0x470, [0x20000240, 0x0, 0x0, 0x20000650, 0x20000680], 0x0, &(0x7f00000000c0), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x9, 0x40, 0xe8f9, 'caif0\x00', 'vcan0\x00', 'teql0\x00', 'teql0\x00', @remote, [0x0, 0xff, 0x0, 0x0, 0xff], @remote, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x1d0, 0x240, 0x278, [@comment={'comment\x00', 0x100}, @mac={'mac\x00', 0x10, {{@remote, 0x1}}}]}, [@snat={'snat\x00', 0x10, {{@random="ae94edbd05b1", 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x10}, 0xffffffffffffffff}}}]}, @snat={'snat\x00', 0x10, {{@remote, 0x10}}}}, {{{0x19, 0x0, 0x0, 'hsr0\x00', 'veth1_to_hsr\x00', 'ipddp0\x00', 'team0\x00', @random="f26b485cd088", [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @empty, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xf8, 0x130, 0x168, [@ip={'ip\x00', 0x20, {{@broadcast, @remote, 0xff, 0xff000000, 0xfe, 0xff, 0x13, 0xc, 0x4e24, 0x4e24, 0x4e20, 0x4e20}}}, @quota={'quota\x00', 0x18, {{0x0, 0x0, 0x6, 0x2}}}]}, [@snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="393818c75829", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x4e8) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000140)=0xe813, 0x4) 11:17:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:17:45 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x1e00}], 0x18) 11:17:45 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="900007bf10bc741e7ac394770978fb35fc000000b1e3e0872cc3105d7e72890bc1cdf9783c7642ebe6624d6356801d93e518ede3d3923e3dcaf888ecdc122dd7bf1885c0281e576cd775c19e6ce7fb3028b13585f2cb030aec4545d2a856c0b10f98f132c9128d061334c7dabdc2ae241120cadf81ce9a3bde97d6df6bae3859a840fe0f3079719d3ceb2533f20eb5f77def5a0c110dcc6ccaa368f1aaec8d9b9b28c7c5fa47760e9d00b0ee6a2725e7374edf13bc3c4b0270df45f67ded8abaddfd613330d76c633feb91413417d366b6b8c1ca8ed0cc5b8c4712a7c82ac3634f64c4b82e2369f6a44850618e1a2424853b0fab0b568ebf639db3be994d62241a853bb099af6864ac4df33e067a7b97197ab46b48a7a5524f6f5b1229de9a7b52d6e301bdb1e8dfef05bd57d2398694ee33a4fcc5f97d36743da6dbd8dc6a4aaa1db7d6d571c5215b733f2fa7473e7698f381b4907013ac7ad47c4ebf6b25f7f8154090948e5c3b21b0acfa79230995c610bb7143ba5b0a322a34358a23e0894a5d723d177adc962e7de56e7c21b996afb154b0f35a4b2b613961fb1a0773d5d853fc4c0207a5653c7e59ceca424c1a6952006f6e85754ba5eea74729f5d08792f10072da17000000000000"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x8, 0x12) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:17:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6f616420656372c214718e4043173308df14eb9a797074000020747275737465643aea6d699170d5ae0aea601f732170839345b47e49cf8a8f975a6d2a83a4d281c0049ae4f0496ca125f1407047f778e2eccc78d25483a3404654d76b0c1194d289141ac0dc5091e03a3a0ba83369a0793b4f8a005625791adfd077423b60d654c60ad30553f3168af75dc4b1bb791ca92295b49af9fd404400000000000000000000000000000000b634f587"], 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x104, 0x974f26c169aaf90d) ioctl$NBD_CLEAR_QUE(r1, 0xab05) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000100)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 952.395581][T23544] binder: release 23541:23544 transaction 596 out, still active [ 952.411442][T23544] binder: unexpected work type, 4, not freed [ 952.427262][T23544] binder: undelivered TRANSACTION_COMPLETE [ 952.462655][T23554] binder_alloc: binder_alloc_mmap_handler: 23541 20001000-20004000 already mapped failed -16 [ 952.500330][T23544] binder: BINDER_SET_CONTEXT_MGR already set [ 952.509301][T23558] encrypted_key: insufficient parameters specified [ 952.536046][T23544] binder: 23541:23544 ioctl 40046207 0 returned -16 [ 952.562894][T23554] binder_alloc: 23541: binder_alloc_buf, no vma [ 952.569174][T23554] binder: 23541:23554 transaction failed 29189/-3, size 24-8 line 3147 [ 952.577825][ T7095] binder: send failed reply for transaction 596, target dead [ 952.596145][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:17:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") listen(r0, 0x7) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:17:45 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="900007bf10bc741e7ac394770978fb35fc000000b1e3e0872cc3105d7e72890bc1cdf9783c7642ebe6624d6356801d93e518ede3d3923e3dcaf888ecdc122dd7bf1885c0281e576cd775c19e6ce7fb3028b13585f2cb030aec4545d2a856c0b10f98f132c9128d061334c7dabdc2ae241120cadf81ce9a3bde97d6df6bae3859a840fe0f3079719d3ceb2533f20eb5f77def5a0c110dcc6ccaa368f1aaec8d9b9b28c7c5fa47760e9d00b0ee6a2725e7374edf13bc3c4b0270df45f67ded8abaddfd613330d76c633feb91413417d366b6b8c1ca8ed0cc5b8c4712a7c82ac3634f64c4b82e2369f6a44850618e1a2424853b0fab0b568ebf639db3be994d62241a853bb099af6864ac4df33e067a7b97197ab46b48a7a5524f6f5b1229de9a7b52d6e301bdb1e8dfef05bd57d2398694ee33a4fcc5f97d36743da6dbd8dc6a4aaa1db7d6d571c5215b733f2fa7473e7698f381b4907013ac7ad47c4ebf6b25f7f8154090948e5c3b21b0acfa79230995c610bb7143ba5b0a322a34358a23e0894a5d723d177adc962e7de56e7c21b996afb154b0f35a4b2b613961fb1a0773d5d853fc4c0207a5653c7e59ceca424c1a6952006f6e85754ba5eea74729f5d08792f10072da17000000000000"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:17:45 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x1f00}], 0x18) 11:17:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x7fc) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0xc2e9100218386392, 0x0) write$P9_RLOCK(r2, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x3}, 0x8) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x95b, 0x10001, 0x7, 0x7f, 0x2, 0x3e, 0x9, 0x3c2, 0x40, 0x2a0, 0x8, 0x1, 0x38, 0x1, 0x8000000000000, 0x9, 0x9}, [{0x7, 0x1, 0x6, 0x8000, 0x10001, 0x5b, 0x8, 0x4}, {0x60000007, 0x7, 0x9, 0x0, 0x4, 0x1, 0x7f, 0x17b}], "", [[], [], [], [], [], [], [], []]}, 0x8b0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) dup2(r2, r2) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x800000000002806, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:17:45 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 952.773318][T23673] encrypted_key: hex blob is missing [ 952.786388][T23669] binder: 23666:23669 ioctl 40086602 20000080 returned -22 [ 952.828706][T23686] binder: BINDER_SET_CONTEXT_MGR already set [ 952.852916][T23686] binder: 23666:23686 ioctl 40046207 0 returned -16 [ 952.859916][T23686] binder: 23666:23686 ioctl 40086602 20000080 returned -22 11:17:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x210a02, 0x0) getsockopt(r2, 0x5, 0x1, &(0x7f0000000040)=""/103, &(0x7f00000000c0)=0x67) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:17:45 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x3f00}], 0x18) 11:17:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x3, 0x1, [0x5]}, &(0x7f0000000080)=0xa) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={r2, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 953.038437][T23790] binder: release 23789:23790 transaction 602 out, still active [ 953.107302][T23790] binder: unexpected work type, 4, not freed [ 953.121094][T23796] encrypted_key: hex blob is missing [ 953.124728][T23790] binder: undelivered TRANSACTION_COMPLETE [ 953.144102][T23809] binder_alloc: binder_alloc_mmap_handler: 23789 20001000-20004000 already mapped failed -16 11:17:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x4000}], 0x18) [ 953.166156][T23790] binder: BINDER_SET_CONTEXT_MGR already set [ 953.185804][T23790] binder: 23789:23790 ioctl 40046207 0 returned -16 [ 953.185839][T23809] binder_alloc: 23789: binder_alloc_buf, no vma 11:17:46 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 953.221637][T23809] binder: 23789:23809 transaction failed 29189/-3, size 24-8 line 3147 [ 953.230781][ T7095] binder: send failed reply for transaction 602, target dead [ 953.261279][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:17:46 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x8, 0x12) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:17:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0x5dd39b394c57c3b1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x44000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 953.366168][T23912] encrypted_key: hex blob is missing 11:17:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") listen(r0, 0x7) shutdown(r0, 0x0) 11:17:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="006d55219299ed0000000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000040)) 11:17:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x20000}], 0x18) 11:17:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40000) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 953.616890][T24023] binder_alloc: 24022: binder_alloc_buf size 9007201536442368 failed, no address space [ 953.638697][T24027] encrypted_key: hex blob is missing 11:17:46 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:17:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") listen(r0, 0x7) shutdown(r0, 0x0) 11:17:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x1000000}], 0x18) [ 953.688779][T24023] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 953.761434][T24023] binder: 24022:24023 transaction failed 29201/-28, size 134217728-9007201402224640 line 3147 [ 953.801903][T24063] binder_alloc: binder_alloc_mmap_handler: 24022 20001000-20004000 already mapped failed -16 11:17:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 953.850999][T24023] binder_alloc: 24022: binder_alloc_buf, no vma [ 953.876181][T24145] binder: BINDER_SET_CONTEXT_MGR already set 11:17:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") listen(r0, 0x7) shutdown(r0, 0x0) 11:17:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x1800000}], 0x18) [ 953.902047][T24145] binder: 24022:24145 ioctl 40046207 0 returned -16 [ 953.910177][T10420] binder: undelivered TRANSACTION_ERROR: 29201 [ 953.935213][T24149] encrypted_key: hex blob is missing [ 954.175055][T24261] FS-Cache: Duplicate cookie detected [ 954.180532][T24261] FS-Cache: O-cookie c=000000003068234e [p=000000006f441ecd fl=222 nc=0 na=1] [ 954.189568][T24261] FS-Cache: O-cookie d=0000000004236121 n=000000003a770137 [ 954.196822][T24261] FS-Cache: O-key=[10] '0200020000a07f000008' [ 954.202973][T24261] FS-Cache: N-cookie c=000000002fde000c [p=000000006f441ecd fl=2 nc=0 na=1] [ 954.211697][T24261] FS-Cache: N-cookie d=0000000004236121 n=00000000129561f1 [ 954.218902][T24261] FS-Cache: N-key=[10] '0200020000a07f000008' 11:17:47 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:17:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x802, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000040)={0x9, 0x1}) 11:17:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:17:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0x7, 0x1]) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:17:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x2000000}], 0x18) 11:17:47 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 954.295553][T24271] QAT: Invalid ioctl [ 954.309252][T24271] encrypted_key: hex blob is missing 11:17:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:17:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x40000, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:17:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x3000000}], 0x18) [ 954.440476][T24296] binder_alloc: 24290: binder_alloc_buf, no vma 11:17:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) [ 954.504922][T24296] binder: BINDER_SET_CONTEXT_MGR already set [ 954.550535][T24333] binder_alloc: 24290: binder_alloc_buf, no vma [ 954.594315][T24296] binder: 24290:24296 ioctl 40046207 0 returned -16 11:17:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:17:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x4000000}], 0x18) [ 954.734134][T24404] FS-Cache: Duplicate cookie detected [ 954.739603][T24404] FS-Cache: O-cookie c=0000000030e4afa3 [p=000000006f441ecd fl=222 nc=0 na=1] [ 954.748731][T24404] FS-Cache: O-cookie d=0000000004236121 n=00000000bf7be7d5 [ 954.756148][T24404] FS-Cache: O-key=[10] '0200020000a07f000008' [ 954.762320][T24404] FS-Cache: N-cookie c=0000000011ff1611 [p=000000006f441ecd fl=2 nc=0 na=1] [ 954.770994][T24404] FS-Cache: N-cookie d=0000000004236121 n=0000000035a15dea [ 954.778237][T24404] FS-Cache: N-key=[10] '0200020000a07f000008' 11:17:47 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="900007bf10bc741e7ac394770978fb35fc000000b1e3e0872cc3105d7e72890bc1cdf9783c7642ebe6624d6356801d93e518ede3d3923e3dcaf888ecdc122dd7bf1885c0281e576cd775c19e6ce7fb3028b13585f2cb030aec4545d2a856c0b10f98f132c9128d061334c7dabdc2ae241120cadf81ce9a3bde97d6df6bae3859a840fe0f3079719d3ceb2533f20eb5f77def5a0c110dcc6ccaa368f1aaec8d9b9b28c7c5fa47760e9d00b0ee6a2725e7374edf13bc3c4b0270df45f67ded8abaddfd613330d76c633feb91413417d366b6b8c1ca8ed0cc5b8c4712a7c82ac3634f64c4b82e2369f6a44850618e1a2424853b0fab0b568ebf639db3be994d62241a853bb099af6864ac4df33e067a7b97197ab46b48a7a5524f6f5b1229de9a7b52d6e301bdb1e8dfef05bd57d2398694ee33a4fcc5f97d36743da6dbd8dc6a4aaa1db7d6d571c5215b733f2fa7473e7698f381b4907013ac7ad47c4ebf6b25f7f8154090948e5c3b21b0acfa79230995c610bb7143ba5b0a322a34358a23e0894a5d723d177adc962e7de56e7c21b996afb154b0f35a4b2b613961fb1a0773d5d853fc4c0207a5653c7e59ceca424c1a6952006f6e85754ba5eea74729f5d08792f10072da17000000000000"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:17:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xa0000, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x30000002}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2c}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xbf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x81) 11:17:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet_udplite(0x2, 0x2, 0x88) listen(r0, 0x7) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) [ 954.808983][T24409] binder: release 24408:24409 transaction 615 out, still active [ 954.823694][T24409] binder: unexpected work type, 4, not freed [ 954.829813][T24409] binder: undelivered TRANSACTION_COMPLETE [ 954.845016][T24410] binder_alloc: binder_alloc_mmap_handler: 24408 20001000-20004000 already mapped failed -16 11:17:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x5000000}], 0x18) [ 954.890787][T24409] binder: BINDER_SET_CONTEXT_MGR already set [ 954.913831][T24418] encrypted_key: hex blob is missing [ 954.932046][T24409] binder: 24408:24409 ioctl 40046207 0 returned -16 [ 954.940746][ T7095] binder: send failed reply for transaction 615, target dead 11:17:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 955.078438][T24526] binder: release 24525:24526 transaction 620 out, still active 11:17:48 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="900007bf10bc741e7ac394770978fb35fc000000b1e3e0872cc3105d7e72890bc1cdf9783c7642ebe6624d6356801d93e518ede3d3923e3dcaf888ecdc122dd7bf1885c0281e576cd775c19e6ce7fb3028b13585f2cb030aec4545d2a856c0b10f98f132c9128d061334c7dabdc2ae241120cadf81ce9a3bde97d6df6bae3859a840fe0f3079719d3ceb2533f20eb5f77def5a0c110dcc6ccaa368f1aaec8d9b9b28c7c5fa47760e9d00b0ee6a2725e7374edf13bc3c4b0270df45f67ded8abaddfd613330d76c633feb91413417d366b6b8c1ca8ed0cc5b8c4712a7c82ac3634f64c4b82e2369f6a44850618e1a2424853b0fab0b568ebf639db3be994d62241a853bb099af6864ac4df33e067a7b97197ab46b48a7a5524f6f5b1229de9a7b52d6e301bdb1e8dfef05bd57d2398694ee33a4fcc5f97d36743da6dbd8dc6a4aaa1db7d6d571c5215b733f2fa7473e7698f381b4907013ac7ad47c4ebf6b25f7f8154090948e5c3b21b0acfa79230995c610bb7143ba5b0a322a34358a23e0894a5d723d177adc962e7de56e7c21b996afb154b0f35a4b2b613961fb1a0773d5d853fc4c0207a5653c7e59ceca424c1a6952006f6e85754ba5eea74729f5d08792f10072da17000000000000"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:17:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699174d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:17:48 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x11000000}], 0x18) [ 955.145845][T24526] binder: unexpected work type, 4, not freed [ 955.181637][T24526] binder: undelivered TRANSACTION_COMPLETE [ 955.206163][T24537] binder_alloc: binder_alloc_mmap_handler: 24525 20001000-20004000 already mapped failed -16 [ 955.222373][T24535] encrypted_key: hex blob is missing [ 955.239712][T24526] binder: BINDER_SET_CONTEXT_MGR already set [ 955.248070][T24526] binder: 24525:24526 ioctl 40046207 0 returned -16 11:17:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x802, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000040)={0x9, 0x1}) [ 955.263405][T24537] binder_alloc: 24525: binder_alloc_buf, no vma [ 955.295770][ T7095] binder: send failed reply for transaction 620, target dead [ 955.303961][T24537] binder_transaction: 6 callbacks suppressed 11:17:48 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x12000000}], 0x18) [ 955.303980][T24537] binder: 24525:24537 transaction failed 29189/-3, size 24-8 line 3147 11:17:48 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:17:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6f616420650500791203f12a7074667320747275737465643aea6d699170d5a09bc0c91e656c699fbfa82a4c999ac5a972ed750de59302dfaddbf08cce3ada76934c7ee962afde03afbeeef959bf8e5ed1e54f5d63b446afda10df3beed700595698665df1c7d884aa6e86d8cfe453"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 955.334135][T24629] binder: 24628:24629 transaction failed 29189/-22, size 24-8 line 2994 11:17:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x5, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x24b, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0}) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x2) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) 11:17:48 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff, r1}) [ 955.433441][T10420] binder_release_work: 6 callbacks suppressed [ 955.435758][T10420] binder: undelivered TRANSACTION_ERROR: 29189 [ 955.457418][T10420] binder: undelivered TRANSACTION_ERROR: 29189 [ 955.467878][T24658] encrypted_key: insufficient parameters specified [ 955.559654][T24688] binder: 24664:24688 unknown command 0 [ 955.580450][T24688] binder: 24664:24688 ioctl c0306201 20000140 returned -22 [ 955.606380][T24744] binder: 24664:24744 ioctl 4c03 20000080 returned -22 [ 955.639341][T24744] binder_alloc: binder_alloc_mmap_handler: 24664 20001000-20004000 already mapped failed -16 [ 955.661760][T24688] binder: BINDER_SET_CONTEXT_MGR already set 11:17:48 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet_udplite(0x2, 0x2, 0x88) listen(r0, 0x7) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:17:48 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x14000000}], 0x18) 11:17:48 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:17:48 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) inotify_init() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mremap(&(0x7f00007c0000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000054000/0x2000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)}, &(0x7f00000005c0)=0x10) ioctl(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x0) fsync(r4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000013000)) r6 = dup3(r5, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000040), 0x4) rt_sigsuspend(&(0x7f0000000080)={0x5}, 0x88) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, 0x0, &(0x7f0000000240)) ioctl$KDSKBMETA(r6, 0x4b63, &(0x7f0000000140)=0x40080) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000280)={0x7, 0x2, 0x7, 0x4, 0x11, 0x6, 0x0, 0x1c0000000000000, 0x0, 0x200, 0x4bf, 0x9}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f00009b2000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000300)="0f212bf30f0866baf80cb800ad1385ef66bafc0cedc4e2e5a798920000000f060fc7a8f4010000c4e17e16601866b89f008ed00fc7afe1e330c90fc71d8000c0fe", 0x41}], 0xaaaaaaaaaaaaaff, 0x4, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)={0x1b9}, &(0x7f00000002c0), 0x0) 11:17:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320707275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 955.695526][T24744] binder: 24664:24744 unknown command 0 [ 955.704076][T24688] binder: 24664:24688 ioctl 40046207 0 returned -16 [ 955.706236][T24744] binder: 24664:24744 ioctl c0306201 20000140 returned -22 [ 955.740516][T24780] encrypted_key: master key parameter 'prusted:êmi‘pÕ ›ÀÉelinux' is invalid 11:17:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="852a6273000000c90cffe699c1df4e1fc3c6b82dbbc35cc98f0cf21a8adf6bb158ce93cf957d83ec083f05b115101690c7da66143f03f59431d0958c3c82ca526900fda780c2f4993e58b991038efb188b1b61d088eb26865b498f9f5d7fda3b65549fd3218a26c393f92af7aafcf59b58e6b43df758c9a490726ee90f3603cb48cf4ae2fa4d22ec751a6a81f9486eb94960ba6acdd1dfc16e57fcc4369e95242d2914e089604d52e9cef54a491376010465949645dbc7856ea5ee2f41ee69e1d2fbc46fdb374a5d179662ff0901ac0e9895125bb36c03345bab7665998e87a3b3020d902872756569cd88cd336454bb11e110261fcb6115cd", @ANYRES64=0x0, @ANYBLOB="0000000000000000e466921caa4ff92154db13fd79fa158a48aa289a68fe8b9e792befd7d751c6355116e213e97c34957cb0eb8692d590c8ae4ce57364f23e1e663dc154b40f50b8385d74b768270bffeee9288b97001aa432d729e011342a"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:17:48 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x15000000}], 0x18) [ 955.894510][T24857] binder: release 24833:24857 transaction 627 out, still active [ 955.922140][T24857] binder: unexpected work type, 4, not freed [ 955.922150][T24857] binder: undelivered TRANSACTION_COMPLETE 11:17:48 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='+vmnet1\x00', 0xfffffffffffffffe) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 955.946716][T24901] binder_alloc: binder_alloc_mmap_handler: 24833 20001000-20004000 already mapped failed -16 11:17:49 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x16000000}], 0x18) [ 956.014544][T24857] binder: BINDER_SET_CONTEXT_MGR already set [ 956.021532][T24857] binder: 24833:24857 ioctl 40046207 0 returned -16 [ 956.040269][T24905] encrypted_key: hex blob is missing [ 956.046738][T24901] binder_alloc: 24833: binder_alloc_buf, no vma 11:17:49 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet_udplite(0x2, 0x2, 0x88) listen(r0, 0x7) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:17:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a6273040000005a9907f2ba6de96f40fde9be5dac1d2db89b1530d70776cd71cc312352a1526d0a2ed6be3f953a", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) geteuid() r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0x8021, 0x1}) [ 956.089172][ T7095] binder: send failed reply for transaction 627, target dead [ 956.097349][T24901] binder: 24833:24901 transaction failed 29189/-3, size 24-8 line 3147 [ 956.108719][ T7095] binder: undelivered TRANSACTION_ERROR: 29189 11:17:49 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x1e000000}], 0x18) [ 956.219110][T25017] binder: 25016:25017 ioctl 6611 0 returned -22 [ 956.239670][T25017] binder_alloc: 25016: binder_alloc_buf size 774056185954336 failed, no address space [ 956.262833][T25017] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 956.274920][T25017] binder: 25016:25017 transaction failed 29201/-28, size 140737488355328-633318697599008 line 3147 [ 956.288697][T25023] binder_alloc: binder_alloc_mmap_handler: 25016 20001000-20004000 already mapped failed -16 [ 956.299229][T25017] binder: BINDER_SET_CONTEXT_MGR already set [ 956.300085][T25023] binder: 25016:25023 ioctl 6611 0 returned -22 [ 956.305877][T25017] binder: 25016:25017 ioctl 40046207 0 returned -16 [ 956.318968][T25017] binder_alloc: 25016: binder_alloc_buf, no vma [ 956.320557][ T7257] binder: undelivered TRANSACTION_ERROR: 29201 [ 956.325715][T25017] binder: 25016:25017 transaction failed 29189/-3, size 140737488355328-633318697599008 line 3147 [ 956.342274][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:17:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet_udplite(0x2, 0x2, 0x88) listen(r0, 0x7) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:17:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a0b50d000000000000aa7c6b"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:17:49 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:17:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x801) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x20011, r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r4 = request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='security$\x00', 0xfffffffffffffffb) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000380)={0x3, 0xb4, "90b088bdbbb4c5ca96d5b3c50f3c7d4131a2060fe01c8e53d9380acae4e041199f505d91ea6410a73fecc76f236e46ece323242523953cd199ef81517a33692af244615bb69d719c77ae83096ed16bd255d11f903d4b23d6b9718349e52e1bf504b21bbeb48db4d17777c08968079ede4e6ca5ca11755d89dec381573d05618b8f72a3d12cf1fc89e84e15736463788d80e2a57c3ce4f87adf702357e5cdcdbf5a02b655cb42d200885a0a14c396233cc6620b26"}) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087703, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f00000001c0)) keyctl$get_persistent(0x16, r3, r4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:17:49 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x1f000000}], 0x18) [ 956.613219][T25031] binder: 25029:25031 ioctl c0046686 20000380 returned -22 [ 956.627879][T25035] encrypted_key: keylen parameter is missing [ 956.646637][T25031] binder: 25029:25031 got transaction with invalid offset (0, min 0 max 24) or object. [ 956.669826][T25031] binder: 25029:25031 transaction failed 29201/-22, size 24-8 line 3241 [ 956.679663][T25031] binder: undelivered TRANSACTION_ERROR: 29201 [ 956.689643][T25031] binder: 25029:25031 ioctl c0046686 20000380 returned -22 [ 956.698905][T25072] binder_alloc: 25029: binder_alloc_buf, no vma [ 956.701053][T25031] binder: BINDER_SET_CONTEXT_MGR already set 11:17:49 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x3f000000}], 0x18) [ 956.720624][T25072] binder: 25029:25072 transaction failed 29189/-3, size 24-8 line 3147 [ 956.729847][T25031] binder: 25029:25031 ioctl 40046207 0 returned -16 11:17:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x7, &(0x7f0000000040)={0x0, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @empty}}}, 0x108) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000080)=@srh={0x33, 0xa, 0x4, 0x5, 0x4da3, 0x10, 0x102, [@local, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="46485e7d999bb5b54a502fb85826adc7", @mcast1]}, 0x58) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x1, 0x0) add_key(&(0x7f0000000140)='encr{pdvd\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0), 0x238, 0xfffffffffffffffe) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x11, 0x4) [ 956.818719][T10420] binder: undelivered TRANSACTION_ERROR: 29189 11:17:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xffffffffffffffff, 0x4010, r1, 0x1003) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x420000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000280)={0x0, 0x1080000}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={r3, 0x80000, r4}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="006340400000000000000000000000040000000000180000000000000000000094fbdceb2874133900008000000000000000000078ff41909467592443026f6b69ece191b55eb10935e215018aeddf2a909d6a9ab6559dd54a7b5a7c82c1fb2162486a785481a4e88594aafceda1269e4cceb69d484f68da155b81c4db530ce692f35269da26714283a4e75630b61564664dad1a125ded2f8e65f05b00c3ad1d12ddcefd", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f0000000100)) 11:17:49 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="900007bf10bc741e7ac394770978fb35fc000000b1e3e0872cc3105d7e72890bc1cdf9783c7642ebe6624d6356801d93e518ede3d3923e3dcaf888ecdc122dd7bf1885c0281e576cd775c19e6ce7fb3028b13585f2cb030aec4545d2a856c0b10f98f132c9128d061334c7dabdc2ae241120cadf81ce9a3bde97d6df6bae3859a840fe0f3079719d3ceb2533f20eb5f77def5a0c110dcc6ccaa368f1aaec8d9b9b28c7c5fa47760e9d00b0ee6a2725e7374edf13bc3c4b0270df45f67ded8abaddfd613330d76c633feb91413417d366b6b8c1ca8ed0cc5b8c4712a7c82ac3634f64c4b82e2369f6a44850618e1a2424853b0fab0b568ebf639db3be994d62241a853bb099af6864ac4df33e067a7b97197ab46b48a7a5524f6f5b1229de9a7b52d6e301bdb1e8dfef05bd57d2398694ee33a4fcc5f97d36743da6dbd8dc6a4aaa1db7d6d571c5215b733f2fa7473e7698f381b4907013ac7ad47c4ebf6b25f7f8154090948e5c3b21b0acfa79230995c610bb7143ba5b0a322a34358a23e0894a5d723d177adc962e7de56e7c21b996afb154b0f35a4b2b613961fb1a0773d5d853fc4c0207a5653c7e59ceca424c1a6952006f6e85754ba5eea74729f5d08792f10072da17000000000000"], 0x1, 0x1) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 956.908378][T25235] binder: 25231:25235 ioctl 6609 0 returned -22 [ 956.918551][T25235] binder: 25231:25235 transaction failed 29189/-22, size 36028797976540200-0 line 2994 11:17:49 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet_udplite(0x2, 0x2, 0x88) listen(r0, 0x7) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:17:49 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x40000000}], 0x18) 11:17:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f6175737465643aea6d699170d5a09bc0c91e656c696f757820"], 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x121) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x820a, 0x7fffffff, 0xfff, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e20, 0x6, @rand_addr="88232d881389da1bd6d53040185e4273", 0xffffffff}}, 0x100000001}, 0x90) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000400)={@ipv4={[], [], @remote}, @remote, @ipv4={[], [], @loopback}, 0x3ff, 0x0, 0x9, 0x100, 0x1, 0x1000080, r3}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0xfffffffffffffc90, 0xfffffffffffffffe) [ 956.955528][T25235] binder: undelivered TRANSACTION_ERROR: 29189 [ 956.977710][T25235] binder: 25231:25235 ioctl 6609 0 returned -22 11:17:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") listen(r0, 0x7) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:17:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11:17:50 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x1000000000000}], 0x18) 11:17:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) mlockall(0x3) keyctl$invalidate(0x15, r1) [ 957.456775][T25386] binder: 25384:25386 got transaction to context manager from process owning it [ 957.470848][T25390] encrypted_key: hex blob is missing [ 957.481214][T25386] binder: 25384:25386 transaction failed 29201/-22, size 24-8 line 2985 [ 957.502120][T25386] binder: undelivered TRANSACTION_ERROR: 29201 [ 957.510150][T25394] binder_alloc: binder_alloc_mmap_handler: 25384 20001000-20004000 already mapped failed -16 [ 957.528919][T25386] binder: BINDER_SET_CONTEXT_MGR already set [ 957.535163][T25386] binder: 25384:25386 ioctl 40046207 0 returned -16 [ 957.535222][T25394] binder_alloc: 25384: binder_alloc_buf, no vma 11:17:50 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x2000000000000}], 0x18) 11:17:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000280)=0xa0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xffffffffffffffe6, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x8, 0x6, 0x1, 0x3, 0x9, 0xb92, 0x10000, 0x0, 0x2, 0x4, 0x9, 0x1, 0x8, 0x7, 0x0, 0xc}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000100)={{0x7fffffff, 0x2}, 'port0\x00', 0x602c02a3ce1d9b57, 0x9, 0x33dc, 0xffffffffffffff7f, 0x0, 0x97b, 0x4, 0x0, 0x2, 0x5}) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000480)="69de87c87ee2bfcca890db87bbe322f911e36fafe2022a0b6776714bb3fc18df58dbe506b94f44508764816aab82bc6a43c706c2f3503e939726f22b518f5b32ea8af35dd7b9b51ac8194850bef6fcb5adaf16b84774eb16cbc79c7fe5ace018c1f9e98545b96c7bb09c511be8bcaa6544faac46c9d41f664b5261ad94162c1abeaadf1ef78745d7de17224dada24ca9fdbd27e79454701ea3554d9a501a3ee12e81d75108040383dee353874132f56c61da3e34230a73", 0xb7, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r4, 0x2) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 957.549288][T25394] binder: 25384:25394 transaction failed 29189/-3, size 24-8 line 3147 [ 957.558481][ T2987] binder: undelivered TRANSACTION_ERROR: 29189 11:17:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x28000, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6b61642065d3afffef182d0bc8747275657465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 957.650973][T25501] binder: 25500:25501 ioctl 127d 20000280 returned -22 [ 957.678278][T25503] binder_alloc: binder_alloc_mmap_handler: 25500 20001000-20004000 already mapped failed -16 [ 957.691846][T25501] binder: BINDER_SET_CONTEXT_MGR already set 11:17:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1d7080, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000040)={0xfffffffffffffff7, 0x7d7f7777, 0x42f, 0x4da0, 0x3, @discrete={0x8}}) [ 957.698395][T25503] binder: 25500:25503 ioctl 127d 20000280 returned -22 [ 957.705259][T25506] encrypted_key: master key parameter 'eÓ¯ÿï- Ètrueted:êmi‘pÕ ›ÀÉelinux' is invalid [ 957.717479][T25501] binder: 25500:25501 ioctl 40046207 0 returned -16 [ 957.764927][T25596] binder: release 25584:25596 transaction 643 out, still active [ 957.776591][T25596] binder: unexpected work type, 4, not freed [ 957.791850][T25596] binder: undelivered TRANSACTION_COMPLETE [ 957.800224][T25615] binder_alloc: binder_alloc_mmap_handler: 25584 20001000-20004000 already mapped failed -16 [ 957.818962][T25596] binder: BINDER_SET_CONTEXT_MGR already set [ 957.829095][T25596] binder: 25584:25596 ioctl 40046207 0 returned -16 [ 957.854629][T25615] binder_alloc: 25584: binder_alloc_buf, no vma 11:17:50 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 957.863859][ T2987] binder: send failed reply for transaction 643, target dead 11:17:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet_udplite(0x2, 0x2, 0x88) listen(r0, 0x7) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:17:50 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x100000000000000}], 0x18) 11:17:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@empty}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 957.963094][T25625] encrypted_key: insufficient parameters specified 11:17:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") listen(r0, 0x7) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:17:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x98, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='/dev/binder#\x00') 11:17:51 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x180000000000000}], 0x18) 11:17:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400002, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000240)=""/204) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7164206d6872797074667320747275737465643aea6d699170d5a0fe15e5a2ef557ca69bc0c9"], 0x1, 0x0) socketpair(0x1, 0xe0eabb91030bec10, 0x7, &(0x7f0000000040)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0x1) 11:17:51 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 958.322156][T25745] encrypted_key: master key parameter 'mhryptfs' is invalid [ 958.333172][T25746] binder: release 25739:25746 transaction 648 out, still active [ 958.355305][T25746] binder: unexpected work type, 4, not freed 11:17:51 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x200000000000000}], 0x18) [ 958.369939][T25746] binder: undelivered TRANSACTION_COMPLETE [ 958.384405][T25771] binder_alloc: binder_alloc_mmap_handler: 25739 20001000-20004000 already mapped failed -16 [ 958.397941][T25746] binder: BINDER_SET_CONTEXT_MGR already set [ 958.405120][T25746] binder: 25739:25746 ioctl 40046207 0 returned -16 [ 958.412511][T25771] binder_alloc: 25739: binder_alloc_buf, no vma [ 958.434691][ T7095] binder: send failed reply for transaction 648, target dead 11:17:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="1000000000000040"]], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 11:17:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) fstat(r0, &(0x7f0000000000)) [ 958.552375][T25859] ------------[ cut here ]------------ [ 958.557908][T25859] kernel BUG at drivers/android/binder_alloc.c:1141! [ 958.589257][T25859] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 958.595365][T25859] CPU: 1 PID: 25859 Comm: syz-executor.3 Not tainted 5.1.0-rc2+ #37 [ 958.603341][T25859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.613504][T25859] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 958.614754][T25864] encrypted_key: hex blob is missing [ 958.620013][T25859] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 bf f9 23 fc 4c 89 e6 4c 89 ef e8 d4 fa 23 fc 4d 39 e5 76 07 e8 aa f9 23 fc <0f> 0b e8 a3 f9 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 b1 [ 958.620022][T25859] RSP: 0018:ffff8880a6107550 EFLAGS: 00010216 11:17:51 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 11:17:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") add_key(&(0x7f0000000500)='rxrpc_s\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000440)="ca5ae597b5c4f930c1aca0aca4092ff447417166bbc0cb697c545334fa91d02a9fe2da72b5e7742cb839ca8d9c82694fce64c7687194e3749bac7e6f25552c463bb259882341fb7a1d2de64a44fcd592af1157c26077d396feaae00ca55ce139d33c526f13fe8e522b11e5204425b2491715195dc3e4d8961a8836e0e5ed939ebf1c4857a1029e6d5903d0ab37e5a47f401b8c463b5f9a9baa633bc36013ce7fdce875c6ba0a770bcb", 0x173, 0xfffffffffffffffa) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="fe497484ff8c1c041b799cf2bb3f44f6523df907", 0x14, 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0x1, r1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x4e24, @remote}}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mISDNtimer\x00', 0x10000, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) [ 958.620034][T25859] RAX: 0000000000040000 RBX: 0000000020001000 RCX: ffffc9000c45a000 [ 958.620042][T25859] RDX: 00000000000003bf RSI: ffffffff854c77d6 RDI: 0000000000000006 [ 958.620058][T25859] RBP: ffff8880a61075d0 R08: ffff8880a9784100 R09: 0000000000000028 [ 958.674861][T25859] R10: ffffed1014c20f01 R11: ffff8880a610780f R12: 0000000000000020 [ 958.682841][T25859] R13: 0000000000000028 R14: ffff88808a2b8f90 R15: 0000000000000000 [ 958.690806][T25859] FS: 00007fe2bdcdf700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 958.699725][T25859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.706310][T25859] CR2: 00007f48b56ed000 CR3: 000000004b406000 CR4: 00000000001406e0 [ 958.711325][T25971] encrypted_key: insufficient parameters specified [ 958.714275][T25859] Call Trace: [ 958.714298][T25859] ? memcpy+0x46/0x50 [ 958.714318][T25859] binder_alloc_copy_from_buffer+0x37/0x42 [ 958.714408][T25859] binder_get_object+0xc3/0x200 [ 958.723380][ T3876] kobject: 'loop2' (00000000149f7ab3): kobject_uevent_env [ 958.724111][T25859] binder_transaction+0x2b4a/0x6690 [ 958.724141][T25859] ? binder_thread_read+0x3d50/0x3d50 [ 958.728112][ T3876] kobject: 'loop2' (00000000149f7ab3): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 958.733888][T25859] ? __lock_acquire+0x548/0x3fb0 [ 958.733957][T25859] ? __might_fault+0x12b/0x1e0 [ 958.733978][T25859] ? lock_downgrade+0x880/0x880 [ 958.742601][ T3876] kobject: 'loop0' (00000000a3f6de29): kobject_uevent_env [ 958.745907][T25859] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 958.745925][T25859] ? _copy_from_user+0xdd/0x150 11:17:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643aea6d699170d5a09bc0c91e656c696e757820"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0xffff) [ 958.745944][T25859] binder_thread_write+0x64a/0x2820 [ 958.745965][T25859] ? binder_transaction+0x6690/0x6690 [ 958.751842][ T3876] kobject: 'loop0' (00000000a3f6de29): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 958.756504][T25859] ? __might_fault+0x12b/0x1e0 [ 958.756533][T25859] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 958.756555][T25859] ? _copy_from_user+0xdd/0x150 [ 958.816150][ T3876] kobject: 'loop0' (00000000a3f6de29): kobject_uevent_env [ 958.820007][T25859] binder_ioctl+0x1033/0x183b [ 958.820029][T25859] ? binder_thread_write+0x2820/0x2820 [ 958.829802][ T3876] kobject: 'loop0' (00000000a3f6de29): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 958.831478][T25859] ? tomoyo_path_number_perm+0x263/0x520 [ 958.831494][T25859] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 958.831528][T25859] ? binder_thread_write+0x2820/0x2820 [ 958.848121][T26078] encrypted_key: hex blob is missing [ 958.853570][T25859] do_vfs_ioctl+0xd6e/0x1390 [ 958.853588][T25859] ? ioctl_preallocate+0x210/0x210 [ 958.853601][T25859] ? __fget+0x381/0x550 [ 958.853629][T25859] ? ksys_dup3+0x3e0/0x3e0 [ 958.853664][T25859] ? nsecs_to_jiffies+0x30/0x30 [ 958.909041][T25859] ? tomoyo_file_ioctl+0x23/0x30 [ 958.913983][T25859] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 958.920232][T25859] ? security_file_ioctl+0x93/0xc0 [ 958.925351][T25859] ksys_ioctl+0xab/0xd0 [ 958.929523][T25859] __x64_sys_ioctl+0x73/0xb0 [ 958.934121][T25859] do_syscall_64+0x103/0x610 [ 958.938718][T25859] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 958.944615][T25859] RIP: 0033:0x458209 [ 958.948515][T25859] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 958.968142][T25859] RSP: 002b:00007fe2bdcdec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 958.972286][ T3876] kobject: 'loop0' (00000000a3f6de29): kobject_uevent_env [ 958.976575][T25859] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 958.991670][T25859] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 11:17:51 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet_udplite(0x2, 0x2, 0x88) listen(r0, 0x7) shutdown(r0, 0x0) [ 959.000221][T25859] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 959.000354][ T3876] kobject: 'loop0' (00000000a3f6de29): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 959.008188][T25859] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe2bdcdf6d4 [ 959.008196][T25859] R13: 00000000004bf49a R14: 00000000004d0e80 R15: 00000000ffffffff [ 959.008210][T25859] Modules linked in: [ 959.021541][T25859] ---[ end trace 95923268440d20b2 ]--- [ 959.075265][T25859] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 959.082572][T25859] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 bf f9 23 fc 4c 89 e6 4c 89 ef e8 d4 fa 23 fc 4d 39 e5 76 07 e8 aa f9 23 fc <0f> 0b e8 a3 f9 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 b1 [ 959.094092][ T3876] kobject: 'loop5' (0000000061c03858): kobject_uevent_env [ 959.108737][T25859] RSP: 0018:ffff8880a6107550 EFLAGS: 00010216 [ 959.114040][ T3876] kobject: 'loop5' (0000000061c03858): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 959.123791][T25859] RAX: 0000000000040000 RBX: 0000000020001000 RCX: ffffc9000c45a000 [ 959.126501][ T3876] kobject: 'loop4' (000000009ee260c7): kobject_uevent_env [ 959.136834][T25859] RDX: 00000000000003bf RSI: ffffffff854c77d6 RDI: 0000000000000006 [ 959.149031][T25859] RBP: ffff8880a61075d0 R08: ffff8880a9784100 R09: 0000000000000028 [ 959.149044][ T3876] kobject: 'loop4' (000000009ee260c7): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 959.149443][ T3876] kobject: 'loop5' (0000000061c03858): kobject_uevent_env 11:17:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") listen(r0, 0x7) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:17:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f6164206563727983c73a9f26b26d08007466732074727573746564e9c958cd0cf5ee699bc0c9"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 11:17:52 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x49, 0x200000000000002}], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x0, 0x0, 0x300000000000000}], 0x18) 11:17:52 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet_udplite(0x2, 0x2, 0x88) shutdown(r0, 0x0) 11:17:52 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x82, 0x0, 0x1}, 0x8000}}, 0x18) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = getgid() fstat(r2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, r3}, 0xc) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 959.159948][T25859] R10: ffffed1014c20f01 R11: ffff8880a610780f R12: 0000000000000020 [ 959.172354][ T3876] kobject: 'loop5' (0000000061c03858): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 959.177951][T25859] R13: 0000000000000028 R14: ffff88808a2b8f90 R15: 0000000000000000 [ 959.185676][ T3876] kobject: 'loop2' (00000000149f7ab3): kobject_uevent_env 11:17:52 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet_udplite(0x2, 0x2, 0x88) shutdown(r0, 0x0) [ 959.227946][T25859] FS: 00007fe2bdcdf700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 959.242265][ T3876] kobject: 'loop2' (00000000149f7ab3): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 959.249625][T25859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.260057][T26193] encrypted_key: master key parameter 'ecryƒÇ:Ÿ&²m' is invalid [ 959.273677][T25859] CR2: 0000001b30223000 CR3: 000000004b406000 CR4: 00000000001406e0 [ 959.281039][ T3876] kobject: 'loop1' (000000002f90eea0): kobject_uevent_env [ 959.286516][T25859] Kernel panic - not syncing: Fatal exception [ 959.295567][T25859] Kernel Offset: disabled [ 959.299888][T25859] Rebooting in 86400 seconds..