) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x3, 0x1, 0xa0d, 0x2, 0x3}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000180)) [ 1855.838914] input: syz1 as /devices/virtual/input/input762 [ 1855.860841] binder: undelivered TRANSACTION_COMPLETE [ 1855.864321] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1855.897462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1855.901582] binder: undelivered TRANSACTION_ERROR: 29189 03:35:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0xc4ae0200}, 'syz0\x00'}) 03:35:45 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0xff, 0x101000) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') accept(0xffffffffffffff9c, &(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000240)=0x80) getsockname(0xffffffffffffff9c, &(0x7f0000000300)=@hci={0x1f, 0x0}, &(0x7f0000000380)=0x80) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x258, r1, 0x20, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0xb8, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x17c, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r7, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x11f}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071104800000000000000000000000000950000000000000081d7f9cfc5c9c72b2f98afefee3d16e8d6cb878152fa8ace63dd8a4febca9cbdc5fb350334d23bdb5c36c7831c63cbaeb2e59b43eb61bf53310d9a803fc7873813377749d8c21826f8b18642cd692971cc30ee6c3a5544a31fe5861938a5b3bd3a42dc44b89c2b051375d164e4d1a419c1f753213cdb1cacc3cbf967ceb8338c71dedf314de4c66d348dc12aa1e5045f76ae8c81ba6f78dd1ce0734cbe2e22bb1a902a62d9e42ddf1cf7fce75db20ac5fc38bc3de247d595bb674282b873d21be45b94d4696c8e15fb"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) [ 1855.941273] binder: release 13200:13201 transaction 5754 out, still active [ 1855.955872] binder: undelivered TRANSACTION_COMPLETE [ 1855.975059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1856.005690] input: syz1 as /devices/virtual/input/input763 [ 1856.039791] binder: send failed reply for transaction 5754, target dead [ 1856.041521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1856.101143] input: syz1 as /devices/virtual/input/input764 [ 1856.222140] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1856.239744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1856.316016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:35:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000580)="800000000002000019000000e60100006c000000000000000100000001000000004000c0004000c600000000000000ec6d5ebe5a0000ffff53ef3f74d03e5162445f2cd0b5688e49c419fb179c46ddb70798ac7a40", 0x55, 0x400}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="008544bd67d1ee388b41f56d950700008000000000b42f707bf3ffe4dd95dfe750dfa7eb1fb260bb2006b8dba34dedc7a36fcf49f6171efbafa136d3c310c711b75b3ebef391cd7bf73fdbbd759afeb8afeea86b28b7d43433ad3b1dc3c9f8a29358233d3206b6f58a45c4f834526fc7f577359731aa70c7c1dac85e45c992c2f7fe0ad827175af812b01a004331e1b538950c292d5fd2b9b2ea4f69a0e088190b8283c04fd0e7cbad6865408fe590928b7c6be100d6b5970ee29325f2e86269f1007a162bd0d376641b8f7ca98b71"]) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) getpgrp(0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000340)={0x300, 0x0, 0x0, 'queue0\x00', 0x90000000000000}) 03:35:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x30000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xa8, r3, 0x210, 0x30, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x3, 0x1, 0xa0d, 0x2, 0x3}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000180)) 03:35:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x3f00}, 'syz0\x00'}) 03:35:46 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8981, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000000)='./file0\x00', 0x6080, 0x148) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) dup2(r0, r1) 03:35:46 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000380), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0xba5f, 0x4ce081f6}, 'port1\x00', 0x2, 0x1420, 0x0, 0x7d5, 0x3, 0xe5bd, 0x10c, 0x0, 0x463b913756d1134c, 0x275}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0xc500) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r2, 0x4a, "04d119", "c1799d4a8d90ec06225f4e5167f41604f77199cdd8743dbbf1e14aa1e628e0ea0ee0d4e2a75f40a201fbc360b7f68947d27db83abe4c380b22717bfb27df96f29c847ceedf64736c50e74da9e8787918202c834fbc1cd0297d0d3f0409df0ad86a9ffd3703f1fbdae4883176261a24109d2374850ef293d85d2891f68e46aeff335e178cc48c908b3a287730574317da459e16fd6254dcb9c07f72761e8c0b2ef652ce6a853a860dd6e8db815b3ec21ef929c8b33987730fc84f8d362f8688d66401da2b8bf5bf87fafe04acdd96fc0f4187ea5332a397b1ff381492d9be8825d593e3635c9623e22bebfdfe097abcec0be8b6525635b3f050635ddc688c3b31"}}, 0x110) clock_gettime(0x1, &(0x7f0000000040)) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f00000004c0)={@loopback, @broadcast}, 0x8) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000400)=[0x6, 0x4, 0x3, 0x5, 0x200, 0x8, 0x7, 0x8c], 0x8, 0x0, 0x6, 0x9, 0x8001, 0x2, {0x5, 0xaa9e, 0x6, 0x9, 0x865, 0xfffffffffffffffb, 0x4, 0x84, 0x6, 0x3ff, 0x1, 0x20, 0xfffffffffffffff7, 0x3, "2acaa0224d16ede2b46e9a9349612349df5b252c556ec20e4a9a8ee0dcb25b0b"}}) [ 1856.369056] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1856.455939] binder: release 13224:13226 transaction 5757 out, still active [ 1856.464791] input: syz1 as /devices/virtual/input/input765 [ 1856.472643] binder: undelivered TRANSACTION_COMPLETE 03:35:46 executing program 2: msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="ac3ec16a7e28d8b545c86a3819017ce63f570ab53de428f6e2037b73124ccedf02aa1f5518af6c7d3ce044b3036b81e17cfc097eda4a5b54644f64c2053a16abf2102b7232b015711672dec944fdef"], 0x1, 0x0) r0 = msgget$private(0x0, 0x2) msgrcv(r0, &(0x7f0000000100)={0x0, ""/202}, 0xd2, 0x2, 0x2000) [ 1856.522065] input: syz1 as /devices/virtual/input/input766 03:35:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x30000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xa8, r3, 0x210, 0x30, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x3, 0x1, 0xa0d, 0x2, 0x3}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000180)) 03:35:46 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5451, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1856.577167] binder: send failed reply for transaction 5757, target dead 03:35:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000140)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x10, r1}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000200)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, &(0x7f0000000080)=""/115, &(0x7f0000000400)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000008c0)={0x1, 0x0, &(0x7f00000007c0)=""/225, &(0x7f0000000700)=""/29, &(0x7f0000000740)}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 03:35:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x2aea5}, 'syz0\x00'}) [ 1856.702087] binder: release 13244:13245 transaction 5760 out, still active [ 1856.709324] binder: undelivered TRANSACTION_COMPLETE 03:35:46 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8927, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1856.749640] input: syz1 as /devices/virtual/input/input767 03:35:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x30000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xa8, r3, 0x210, 0x30, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x3, 0x1, 0xa0d, 0x2, 0x3}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:46 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x20) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000740), &(0x7f0000000780)=0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)) r0 = socket(0x15, 0x3, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980), &(0x7f00000009c0)=0xc) msgget(0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000600), 0x8, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4a6dcd57f7f10eae8aa69bdefc837a361ac7469a9ff94cca43026131708220c7fc2c5483bbfa815f2832c3c69eb014b64f25df2c6930c03d7661e3b2d4ed85a3", "8d2f63b66744cc6934c2d68586cdf29fdc2bff8469b8c21f4b8dbe6582ec91a8"}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0}, 0xa0) [ 1856.804389] binder: send failed reply for transaction 5760, target dead [ 1856.812919] input: syz1 as /devices/virtual/input/input768 03:35:46 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8946, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e20, 0x2, @empty, 0x5}, {0xa, 0x4e22, 0x3ff, @local, 0x4}, 0xc1ba, [0x2, 0x1, 0x5, 0x1ff, 0x3, 0xfffffffffffffff8, 0x7, 0x8]}, 0x5c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="f6095d8b2dc0f433bd59d18b62b44a313f49cae8d938d0bde94eab4897f9272cdb27c52b1fa72986f042856e5825ae"], 0x8) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000000)) connect$inet6(r2, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) sync_file_range(r2, 0x5, 0x1f, 0x3) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x141002, 0x0) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f00000001c0)=0x6, 0x4) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000300)={0x19, 0x1, 0x3}) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x3a00000000000000) msgget(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000200)={0x900000000000000, 0x0, 0x10000, 0x9}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000240)={0x3, r4, 0x10001, 0x8001}) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) open(&(0x7f0000000280)='./file0\x00', 0x201, 0x3) [ 1856.911748] binder: release 13267:13268 transaction 5763 out, still active [ 1856.919286] binder: undelivered TRANSACTION_COMPLETE 03:35:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = getpgrp(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000ec5000)={0x2, r2}) r3 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000640)={0xf78}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)=0x0) get_robust_list(r4, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0x18) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000004540)='/dev/mixer\x00', 0x800, 0x0) accept$inet6(r5, &(0x7f0000004580)={0xa, 0x0, 0x0, @remote}, &(0x7f00000045c0)=0x1c) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) setsockopt$inet6_int(r6, 0x29, 0x3c, &(0x7f00000000c0)=0x1, 0x4) getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x44) r8 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000380)="f2ec00106ae99bcf6eeb14553d6ae807eb393310fb58313de0387dfda0c3dd72416bad0d518f2dd8413285a2dea2f28f4523fd5b0760e277d54dd4c7255c355bd32ffdf5be18e395ce65a9568ab22db93cd640b7283e35534dfb99223e01cb8ccf92029ea402d15725d066d97a310fd63a1487111f21f88510e375d7", 0x7c, 0xfffffffffffffffa) r9 = add_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)="f936686bc1b52cf1804e1020ce41765ccc447a51f24bd1a7f3b14758aba4c56792b7a6a3146f3b12368a0ba1542dc2c0acdfa75b4f251913fc74fe82ef72bf81d997d8d18be692fe167c8399bd2b0edc8deebb309a942a7a21cd2c4d8050ba69486ab8ce8943990de3d30dde9e55777621e59e2d5a1f435dc027213d94cc33017f25a5c1e23d3c8857fe098e54a9c967933bade1ea24985f2569e3afeb5f811e66b421f7ae4da9ab075b82b65877b790850db5386fe805eeb7080cbee11eea2d5ac9d83cf72cd131b2ad45df293287a65f1f813cffdd527bef1b340a21dbc0441eaf4a4aaebc927b7606c7", 0xeb, 0xfffffffffffffffb) keyctl$search(0xa, r8, &(0x7f0000000400)='.dead\x00', &(0x7f0000000440)={'syz', 0x3}, r9) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000200)) 03:35:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x500000000000000}, 'syz0\x00'}) [ 1856.997395] binder: send failed reply for transaction 5763, target dead [ 1857.051291] input: syz1 as /devices/virtual/input/input769 [ 1857.127171] input: syz1 as /devices/virtual/input/input770 03:35:47 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@setlink={0x2c, 0x13, 0x811, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000480)={{0x1, 0x0, 0x6, 0x5e4, 'syz1\x00', 0x7}, 0x0, [0xd6, 0x7, 0x1, 0x7, 0x0, 0x81, 0x7, 0x5, 0x7a2, 0x4, 0x0, 0x7, 0x3ff, 0x1, 0x1b, 0xf4d0, 0xffffffffffffffe1, 0x1, 0xff, 0x9, 0x0, 0x2, 0x4, 0x6, 0x401, 0x100000000, 0x0, 0x85, 0x2, 0x80000000, 0x8, 0x0, 0x30, 0x1f, 0x2, 0x0, 0xd73, 0x8, 0xbc4f, 0x401, 0x3, 0x3b9d, 0xa3, 0x800, 0x9, 0xfff, 0x1, 0x5, 0xc1bf, 0x1, 0x6, 0x7ee5bd36, 0x6, 0x0, 0x5f, 0x2, 0xfffffffffffffff7, 0x9, 0x0, 0x8001, 0x8, 0x5, 0x200, 0x6, 0x0, 0xdaa, 0x9, 0x7f, 0x5, 0x1, 0x8, 0x6, 0x2, 0x848b, 0x1, 0x401, 0x0, 0x10001, 0x6, 0x52, 0x200, 0x4, 0x6, 0x8, 0x7fffffff, 0x6, 0x3, 0x65, 0x65705431, 0x5, 0x436, 0x8, 0x6, 0x6, 0x2f, 0x7, 0x3, 0x200, 0x91, 0x7, 0x4, 0x7a, 0x7, 0xcd6, 0xfffffffffffffffa, 0x6, 0x7fff, 0x3, 0xde, 0x10000, 0xff, 0x8, 0x20, 0x4834, 0x2efd0000, 0x1f, 0x3f54, 0x3, 0xe1, 0x5, 0x4, 0x7fffffff, 0x4, 0xfc00000000, 0x5, 0x8, 0x4ae, 0x4]}) sync() 03:35:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x30000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xa8, r3, 0x210, 0x30, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x3, 0x1, 0xa0d, 0x2, 0x3}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:47 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8982, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = getpgrp(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000ec5000)={0x2, r2}) r3 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000640)={0xf78}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)=0x0) get_robust_list(r4, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0x18) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000004540)='/dev/mixer\x00', 0x800, 0x0) accept$inet6(r5, &(0x7f0000004580)={0xa, 0x0, 0x0, @remote}, &(0x7f00000045c0)=0x1c) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) setsockopt$inet6_int(r6, 0x29, 0x3c, &(0x7f00000000c0)=0x1, 0x4) getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x44) r8 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000380)="f2ec00106ae99bcf6eeb14553d6ae807eb393310fb58313de0387dfda0c3dd72416bad0d518f2dd8413285a2dea2f28f4523fd5b0760e277d54dd4c7255c355bd32ffdf5be18e395ce65a9568ab22db93cd640b7283e35534dfb99223e01cb8ccf92029ea402d15725d066d97a310fd63a1487111f21f88510e375d7", 0x7c, 0xfffffffffffffffa) r9 = add_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)="f936686bc1b52cf1804e1020ce41765ccc447a51f24bd1a7f3b14758aba4c56792b7a6a3146f3b12368a0ba1542dc2c0acdfa75b4f251913fc74fe82ef72bf81d997d8d18be692fe167c8399bd2b0edc8deebb309a942a7a21cd2c4d8050ba69486ab8ce8943990de3d30dde9e55777621e59e2d5a1f435dc027213d94cc33017f25a5c1e23d3c8857fe098e54a9c967933bade1ea24985f2569e3afeb5f811e66b421f7ae4da9ab075b82b65877b790850db5386fe805eeb7080cbee11eea2d5ac9d83cf72cd131b2ad45df293287a65f1f813cffdd527bef1b340a21dbc0441eaf4a4aaebc927b7606c7", 0xeb, 0xfffffffffffffffb) keyctl$search(0xa, r8, &(0x7f0000000400)='.dead\x00', &(0x7f0000000440)={'syz', 0x3}, r9) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000200)) 03:35:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x3f00000000000000}, 'syz0\x00'}) 03:35:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x1, 0xb5, 0x8}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x5) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x845f9f3d) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r1, r2) [ 1857.565845] input: syz1 as /devices/virtual/input/input771 [ 1857.576837] binder: 13297:13299 got transaction with invalid handle, 0 03:35:47 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8929, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:47 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000001c0)={'bcsf0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mkdirat(r1, &(0x7f0000000080)='./bus\x00', 0x14) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x800, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) get_robust_list(r2, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f00000002c0)={&(0x7f0000000240)}}, &(0x7f0000000440)=0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x4) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000380)=""/148) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffef6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x4, 0x4011, r3, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000004c0)={0x8, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000500)={r5, 0xc}) ftruncate(r4, 0x7fff) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000280)={'bond_slave_1\x00'}) [ 1857.625355] binder: 13297:13299 transaction failed 29201/-22, size 24-8 line 3062 [ 1857.650509] input: syz1 as /devices/virtual/input/input772 [ 1857.660721] binder: undelivered TRANSACTION_ERROR: 29201 03:35:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="2302202e2f66696c653020232120"], 0xe) close(r0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) close(0xffffffffffffffff) getresgid(&(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000540)) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x2000, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize'}}], [{@smackfsdef={'smackfsdef', 0x3d, "2d0e5b73656c696e7578"}}, {@fsname={'fsname'}}, {@obj_type={'obj_type', 0x3d, 'proccgroup'}}]}}) setreuid(0x0, 0x0) 03:35:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x30000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xa8, r3, 0x210, 0x30, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x3, 0x1, 0xa0d, 0x2, 0x3}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x7400000000000000}, 'syz0\x00'}) 03:35:47 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x891d, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$vhci(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/vhci\x00', 0x2001, 0x0) io_setup(0x101, &(0x7f00000001c0)=0x0) io_getevents(r2, 0x0, 0x800000000000114, &(0x7f0000000040), &(0x7f0000000140)={0x0, 0x1c9c380}) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140)}]) [ 1857.802115] binder: 13318:13319 got transaction with invalid handle, 0 [ 1857.828375] input: syz1 as /devices/virtual/input/input773 [ 1857.844896] binder: 13318:13319 transaction failed 29201/-22, size 24-8 line 3062 [ 1857.880880] binder: undelivered TRANSACTION_ERROR: 29201 03:35:47 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8937, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x30000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xa8, r3, 0x210, 0x30, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x3, 0x1, 0xa0d, 0x2, 0x3}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1857.931028] input: syz1 as /devices/virtual/input/input774 03:35:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="d3ab27191a01002356ba602dff05000b", 0x10) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4600000000000000000000003800000000000000000000000000200000000000000000000700000009b8eee3d5c0f64135a2f878d57cb96458d70f1f71d314ded5108df33f43572552295706f65846818d33a018f25e7693bcb0473bc9a0fc67032ec3bfc1f5cfe101000000fa"], 0x70) clock_gettime(0x0, &(0x7f00000015c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000062c0)=[{{&(0x7f0000001540)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/174}, {&(0x7f0000000000)=""/51}, {&(0x7f0000001440)=""/54}, {&(0x7f0000000240)=""/125}, {&(0x7f0000001480)=""/165}, {&(0x7f0000000440)=""/4096}], 0x3, &(0x7f0000003f40)=""/190, 0xbe}}, {{&(0x7f0000004000)=@ipx, 0x80, &(0x7f0000006180), 0x228, &(0x7f00000061c0)=""/240, 0xfffffffffffffdbd}}], 0x400000000000399, 0x4000000000000, &(0x7f0000006400)={r2, r3+10000000}) 03:35:47 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8907, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1858.066178] binder: 13340:13341 got transaction with invalid handle, 0 03:35:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x88000000}, 'syz0\x00'}) [ 1858.121470] binder: 13340:13341 transaction failed 29201/-22, size 24-8 line 3062 03:35:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000240)="66b91c0600000f326766c7442400000000006766c74424029e0fc71e6766c744240600000000670f0114240f01c93e0fc76c0a670f0058ff0f01ca8fc9500193ecbf2ef26d0f12573566660f3a0e259d", 0x50}], 0xe6, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x8090ae81, 0x70e000) [ 1858.176623] binder: undelivered TRANSACTION_ERROR: 29201 03:35:47 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f00000012c0)}, 0x10) [ 1858.240352] input: syz1 as /devices/virtual/input/input775 [ 1858.324434] input: syz1 as /devices/virtual/input/input776 03:35:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x2, r3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x3000], 0x0, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:35:48 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a0, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x2aeab}, 'syz0\x00'}) 03:35:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x30000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xa8, r3, 0x210, 0x30, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x30000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xa8, r3, 0x210, 0x30, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x3, 0x1, 0xa0d, 0x2, 0x3}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="11074143", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840)) 03:35:48 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1858.559505] binder: release 13364:13368 transaction 5772 out, still active [ 1858.577884] input: syz1 as /devices/virtual/input/input777 [ 1858.581879] binder: undelivered TRANSACTION_COMPLETE 03:35:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x30000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xa8, r3, 0x210, 0x30, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1858.613306] binder: send failed reply for transaction 5772, target dead 03:35:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x30000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xa8, r3, 0x210, 0x30, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x3, 0x1, 0xa0d, 0x2, 0x3}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:48 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8995, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:48 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x8, 0x503201) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x8, 0x2, 0x1ff, 0x1f, 0x0, 0x8000, 0x80, 0x5, 0x80, 0x7, 0x8, 0x6, 0x254, 0xff, 0x0, 0x7ff, 0x0, 0x0, 0x1ff, 0x6, 0xe, 0x6, 0xc3, 0x48a, 0x276, 0x7, 0x0, 0x5, 0x2, 0x7, 0x4, 0x80, 0x8, 0x80000000, 0x7fffffff, 0x6, 0x0, 0x800000, 0x0, @perf_config_ext={0x39, 0x7}, 0x2010, 0x0, 0x6, 0x7, 0x4, 0x0, 0xffffffffffffff00}, r0, 0xa, r1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x4, 0x4000000004, 0x80006}, 0x2c) r3 = dup(r2) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000100)=0x1, 0x4) 03:35:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x2ae9c}, 'syz0\x00'}) [ 1858.716870] binder: release 13383:13384 transaction 5775 out, still active [ 1858.731092] binder: undelivered TRANSACTION_COMPLETE [ 1858.819417] input: syz1 as /devices/virtual/input/input779 [ 1858.855891] binder: send failed reply for transaction 5775, target dead 03:35:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x8b03, 0x0, 0x0, 0x1d}) r1 = syz_open_pts(r0, 0xffffffffffffffff) ioctl$TCSETAF(r1, 0x5412, &(0x7f0000000040)={0x400d}) 03:35:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x20000, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000400)=""/145) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[]}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0213000002000000000000000000000028b6fad43bc6d88d970cf9199fc8229ddfac5e8ab1fc0a58cf097bf0243da62ce3cf37e92966ddd6a7df9d6d449ef4a811d41c05858770a7e5244d9a72284cefc9e3408076fa1c48aa3177cce913df08530b37c5149b46eb74889e4261af8d00d57ade30449e8a3151989c33dd06d8008ea84c330213da6a0f41aa8de2b62c02"], 0x10}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007840)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/5, 0x5}, {&(0x7f00000002c0)=""/231, 0xe7}], 0x10000000000000ce}}], 0x1, 0x0, &(0x7f00000003c0)) sendmmsg(r2, &(0x7f0000000180), 0x0, 0x0) 03:35:48 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5450, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x30000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xa8, r3, 0x210, 0x30, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x3, 0x1, 0xa0d, 0x2, 0x3}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x30000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x9aae020000000000}, 'syz0\x00'}) [ 1859.160354] input: syz1 as /devices/virtual/input/input781 [ 1859.167092] binder: release 13405:13413 transaction 5778 out, still active [ 1859.179931] binder: undelivered TRANSACTION_COMPLETE 03:35:48 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000004540), 0x0, 0x0, &(0x7f0000004640)={0x0, 0x989680}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000900)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000940)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe8) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000740)=[{&(0x7f00000001c0)="ca608abf7f2ee4cbf9d14ac7a0c26873c9573c57d9e9bb1aa3e914c7af103cfb5cd5904580ae668e1b4ef76f60a569d9df5a8300b75da4d9646aa7ee1bd40e007250aa6190a1b0f311c13d1ea0284a00a9cf40707786d26d4d1cab75b4f183f8033b74328cbd6f2bcc73b619d6b826f6dbf36280ace9d83614df1b07a989d3be3d5e8f5ad7f872bc84190f373ed67b035bb58a40fa66550fb1702f425318dee01bb35a58290eb4829ac0beccd35235bff8a85bbcd49ac41049f46ba8f3c4d0af15c76bd4", 0xc4, 0x9}, {&(0x7f00000002c0)="5d3ba2a3886be7876d9848f41ca4448b533ada2e1d1e0983fb60384e4feee10e04bfd968a547324255636a11f0b4c8dfe80f1ca90481d19f26bc333ecd3a3c8c253ff6f8cd700f8ba8f9bf2505", 0x4d, 0x3}, {&(0x7f0000000340)="9d40810544fde1c43f6212dba9ae83c9684c9ca06b1ac107e3be4640ddc221031aa2e496d9a755288b6eb2185300071df9687c02910487f0da53833ae97a9b86a387104942019268bf2bcbdb39cbc35a5afa858b005c2d169e769c1a4f18afe1dcf0b02e29593a81e52f2e7fe4294768801dc7108c642fc87c37743d4cde6ab94b3a44def11ed10e35ac1fb5cd36fb29b3fd2039e2c8d1f3d9d03533e718c31c18ff791f55d91c45f68816dd7e87fb17dce7dbdb071a0641389088f0fdeb3c771d669b2b25f7c99a8cb8d722912b3a69d769510c96d6ca488ffa7cc3c531c2bda7d9", 0xe2}, {&(0x7f0000000440)="6deeafb35c4bf8d561fc07439a037ee18801c49a7b601155c73d06f3612a478b8b41fbde64f445c564b4d5ae4c6f605f544294f46fa78181477cdfd3bf54b0f480793cbcba301b3f64c3c131651542e15d13c6dd6580cce85af23b82bfe953eaac9e4bdaabe20f4ffac368222bbdac0ca840938b4908bfb7308aca0baec2bc32ed6d0b7bf48189c03674b0e686fd13e64fd61c9ab83847dbd0c728a02e1523da3d7593dd74286a631a7ab55678f03e5b5258946abebaf3", 0xb7, 0x4}, {&(0x7f0000000140)="fcc04c874f0a9f3fb9f80b62facc3fb15359d5a41d86075bba543a7735b3008dc3c6529fc02ed3673fd2d2f1dc268c4dd84cfde81a76aa", 0x37, 0x9}, {&(0x7f0000000500)="a48b4de250b84997186682b54f3412ae9e1cd62aabd897a3772cfb0e9dcdd022104bf5c470d55e003d1ee87c3c4faa9e3c5546ebd0", 0x35, 0x3ff}, {&(0x7f0000000540)="b035e79bbf4e40634754cdd74cc8b48ad2433dd14464bc5f614bd964359c1004e97e64a4e37c1de93806d35e4e3df7e59b3442e5ef326ec4f899858d804fd000086503f0fc0e1e84ea420f13700b53d0f6e5cdb6a67a792e4bce9cf89b2ca5cd4d583baf898298672a1ca2d631b057d3582d281eef765d785e0e79facbf17364bcb7e8e0b06a272e92602d1915eeb27972aff3b6d6725c66d667ba801baaa83a8b5307c1968388548846ce70dbd71b4b039ae2c809fa3a8fec9e998cb27a17b1e2fbf79a83856bb2b55172d4bc19a5c4a6720698641d1884a0625b347f822f6f89ebcbe4125f41", 0xe7}, {&(0x7f0000000640)="e979d4eb295283864c61d34a3cb43c4e186875a267d6e2ffc3f3a9c07122697ab5db7d8600302abacb042878178b7e251e8e8e2a091e88b1536c13bd97d139979917478481e3856b7de184b366e4b4167afdd9fc5f89717b746aa35d8ecb53e404a6af54d5634f5150b37859e99094b88833a4b6397daa26f3b5eb05ffb83700ef66feb36d7e90e7965e44909c6ebe8ba3935518167b099c15a8520af0884ac6b5db86e87494ed59abbbb9db68edd045797d852172b0e9c4e068e1cbe84341521f582011511aa7e55aa4ef417f164cab9f44eb31af06a24770ce6d61c703efcdf5cc", 0xe2, 0x6}], 0x2000000, &(0x7f0000000a80)={[{@barrier_flush='barrier=flush'}, {@commit={'commit', 0x3d, 0x8001}}, {@hash_r5='hash=r5'}, {@grpquota='grpquota'}, {@notail='notail'}, {@noattrs='noattrs'}, {@nolargeio='nolargeio'}], [{@euid_lt={'euid<', r1}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@hash='hash'}, {@smackfstransmute={'smackfstransmute'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/ptmx\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@subj_type={'subj_type'}}, {@appraise='appraise'}, {@euid_lt={'euid<', r2}}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2229}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000237) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=""/122, &(0x7f00000000c0)=0x7a) 03:35:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "54616222c0a1d990d2baee83d7e93f6177967cad"}, 0x15, 0x1) r2 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f00004fd000), 0x4) sendmmsg(r1, &(0x7f0000000200)=[{{&(0x7f00000004c0)=@in={0x2, 0x4e20, @multicast1}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000080)}}], 0x1, 0x0) [ 1859.203757] input: syz1 as /devices/virtual/input/input782 03:35:48 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0xc020660b, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0xfffffeb1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) r3 = dup3(r1, r2, 0x80000) getpeername$inet6(r3, &(0x7f0000003440)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000003480)=0x1c) 03:35:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "54616222c0a1d990d2baee83d7e93f6177967cad"}, 0x15, 0x1) r2 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f00004fd000), 0x4) sendmmsg(r1, &(0x7f0000000200)=[{{&(0x7f00000004c0)=@in={0x2, 0x4e20, @multicast1}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000080)}}], 0x1, 0x0) 03:35:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x30000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1859.300063] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "hash=r5" [ 1859.321856] binder: send failed reply for transaction 5778, target dead 03:35:49 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8983, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x3000000}, 'syz0\x00'}) [ 1859.382851] binder: release 13439:13441 transaction 5781 out, still active [ 1859.398890] binder: undelivered TRANSACTION_COMPLETE 03:35:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x103000, &(0x7f0000000200)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x115}}, {@rq={'rq', 0x3d, 0xffffffffffffff81}}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) getpeername$netlink(r1, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup3(r2, r0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000a40)={0x16, 0x398, 0xfa00, {&(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0xa0) socket$inet6(0xa, 0x80002, 0x0) 03:35:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1859.470519] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "hash=r5" [ 1859.499156] binder: send failed reply for transaction 5781, target dead 03:35:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "54616222c0a1d990d2baee83d7e93f6177967cad"}, 0x15, 0x1) r2 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f00004fd000), 0x4) sendmmsg(r1, &(0x7f0000000200)=[{{&(0x7f00000004c0)=@in={0x2, 0x4e20, @multicast1}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000080)}}], 0x1, 0x0) 03:35:49 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8990, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1859.529444] input: syz1 as /devices/virtual/input/input783 03:35:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000300)=0x1e) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 1859.583269] input: syz1 as /devices/virtual/input/input785 03:35:49 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0xc0045878, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1859.640527] binder: release 13459:13460 transaction 5784 out, still active [ 1859.647586] binder: undelivered TRANSACTION_COMPLETE [ 1859.676866] input: syz1 as /devices/virtual/input/input784 03:35:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x7ffff, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1f0004907800000000e000000171d81ac7bd4189d9001b0000071ccd"], &(0x7f0000000000)) fcntl$setsig(r0, 0xa, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20100, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0x7, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8000) 03:35:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "54616222c0a1d990d2baee83d7e93f6177967cad"}, 0x15, 0x1) r2 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f00004fd000), 0x4) sendmmsg(r1, &(0x7f0000000200)=[{{&(0x7f00000004c0)=@in={0x2, 0x4e20, @multicast1}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000080)}}], 0x1, 0x0) [ 1859.725860] binder: send failed reply for transaction 5784, target dead 03:35:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x97ae0200}, 'syz0\x00'}) 03:35:49 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1859.857716] binder: 13485:13490 Acquire 1 refcount change on invalid ref 0 ret -22 03:35:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "54616222c0a1d990d2baee83d7e93f6177967cad"}, 0x15, 0x1) r2 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f00004fd000), 0x4) 03:35:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000580)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)='RDSK', 0x4}]) write$binfmt_misc(r0, &(0x7f0000000740)={'syz0', "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"}, 0x1001) sendto(r0, &(0x7f0000000280)="cd", 0x1, 0x0, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @empty, 'bond0\x00'}}, 0x80) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x48) mknodat(r1, &(0x7f0000000240)='.\x00', 0xa000, 0x40) bind$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) io_setup(0x1, &(0x7f0000000140)=0x0) r3 = fcntl$dupfd(r0, 0x0, r0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000180)="df", 0x1}]) [ 1859.918568] input: syz1 as /devices/virtual/input/input786 [ 1859.925627] binder: 13485:13495 transaction failed 29189/-22, size 24-8 line 2855 [ 1859.941796] ýÿ: renamed from bridge0 03:35:49 executing program 2: add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000080), &(0x7f0000000200)="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", 0x385, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000210021000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1a00000200000000"], 0x50}}, 0x0) [ 1859.981366] input: syz1 as /devices/virtual/input/input788 [ 1860.010562] binder: undelivered TRANSACTION_ERROR: 29189 03:35:49 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x40049409, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:49 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000002c0)={r3, 0x5}, &(0x7f0000000300)=0x8) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000200)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$KDMKTONE(r2, 0x4b30, 0x6) 03:35:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "54616222c0a1d990d2baee83d7e93f6177967cad"}, 0x15, 0x1) socket$inet(0x2, 0x840000000003, 0x2) 03:35:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0xc3ae0200}, 'syz0\x00'}) [ 1860.130836] binder: 13515:13517 Acquire 1 refcount change on invalid ref 0 ret -22 03:35:49 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4c8400, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x10000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x5, 0x5, 0x10000, 0x0, 0x18000000}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r2, 0x4) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, r3, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000003c0)={0x1c, 0x2, 0x80000000}) syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x8882) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x2000, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x90, 0x80d, {"c04160f68bac2c0ad6e7220d9fcde72a25356d17d8f9772cefebda3d41b8821dba8a0ee699f5356c472bae5c28cb9d07b9df43f92ea72a8208993038374baad848415201c401ea28f68b9d8295b95b2a08b99dd79694c66a3061b34c38b903ab7cf50961dfea34402bb23e6cfbca03a8e6081431a7"}}}, &(0x7f0000000540)=""/14, 0x92, 0xe}, 0x20) prctl$setendian(0x14, 0x3) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e21, @loopback}, 0x10) mount(&(0x7f0000000600)=@loop={'/dev/loop', 0x0}, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='reiserfs\x00', 0x800, &(0x7f00000006c0)='$[security*posix_acl_access\x00') ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000700)) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000740)) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000800)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000780)=[{}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r3, 0x204, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x80) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000009c0)=0x1001, 0x4) io_setup(0xdf, &(0x7f0000000a00)=0x0) io_getevents(r4, 0x5, 0x4, &(0x7f0000000a40)=[{}, {}, {}, {}], &(0x7f0000000ac0)) symlink(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file0\x00') socketpair$inet(0x2, 0x0, 0xfff, &(0x7f0000000b80)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) faccessat(r0, &(0x7f0000000bc0)='./file0\x00', 0x80, 0x400) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x40d) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000d80)={0xb8, 0x0, 0x4, [{{0x1, 0x2, 0xac8e, 0x2, 0x3, 0x8, {0x3, 0x4, 0x20, 0x3, 0x7, 0x275, 0x2a, 0x7ff, 0x400, 0x2, 0xfffffffffffffffb, r5, r6, 0x7f}}, {0x6, 0x8, 0x9, 0x3, '/dev/dsp\x00'}}]}, 0xb8) [ 1860.176684] binder: 13515:13517 transaction failed 29189/-22, size 24-8 line 2855 [ 1860.215716] input: syz1 as /devices/virtual/input/input789 03:35:49 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000740)={&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000680)=""/168, 0xa8}, 0x0) accept4(r0, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000180)=0x80, 0x80000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=""/13, 0xd}}], 0x1, 0x0, 0x0) [ 1860.225237] binder: undelivered TRANSACTION_ERROR: 29189 03:35:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1860.266900] input: syz1 as /devices/virtual/input/input790 03:35:50 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5411, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x98ae020000000000}, 'syz0\x00'}) 03:35:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "54616222c0a1d990d2baee83d7e93f6177967cad"}, 0x15, 0x1) [ 1860.347111] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 1860.393673] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 1860.400537] binder: 13541:13545 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1860.412225] binder: 13541:13545 transaction failed 29189/-22, size 24-8 line 2855 03:35:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1860.452071] input: syz1 as /devices/virtual/input/input791 [ 1860.454056] binder: undelivered TRANSACTION_ERROR: 29189 [ 1860.479576] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 03:35:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x20000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080)={0x9}, 0x1) bind$inet6(r2, &(0x7f0000000000), 0x1c) close(r2) close(r1) 03:35:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) [ 1860.544510] input: syz1 as /devices/virtual/input/input792 [ 1860.553316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 1860.562271] binder_alloc: 13559: binder_alloc_buf, no vma [ 1860.573612] binder: 13559:13562 transaction failed 29189/-3, size 24-8 line 2970 03:35:50 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8970, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1860.601490] binder: undelivered TRANSACTION_ERROR: 29189 03:35:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x95ae020000000000}, 'syz0\x00'}) 03:35:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1860.641036] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 03:35:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) [ 1860.691740] input: syz1 as /devices/virtual/input/input793 [ 1860.724121] binder_alloc: 13585: binder_alloc_buf, no vma [ 1860.749696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 1860.784065] binder: 13585:13586 transaction failed 29189/-3, size 24-8 line 2970 03:35:50 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)="520972697374e363757367725669643a4465", 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000140)) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03ed34a538353bca117f591ae4ff493bdcc61a4e7d95de101fd1b05b77d6d28580000f3036bc78905582cafcd299139895a3ccee5f4b"]) 03:35:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:50 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) prctl$intptr(0x24, 0x5) ioctl$TCXONC(r1, 0x80045439, 0x705000) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x36401, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000040)={0x353, 0x1, 0x706}) 03:35:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0xbcae020000000000}, 'syz0\x00'}) 03:35:50 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8901, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1860.830573] binder: undelivered TRANSACTION_ERROR: 29189 03:35:50 executing program 2: r0 = memfd_create(&(0x7f0000000000)="a200", 0x3) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U+', 0x3}, 0x28, 0x1) write$P9_RLOCK(r0, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x2}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24}}, 0x17, 0xffffffffffff7fff, 0xfffffffffffffe3d, 0x256e, 0x10}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)=ANY=[@ANYBLOB="660000000a893acd0e0c496a92d424e8d0f9a09ddd601979eb7a81afddf201e9f814ed28aec7c87c2878b2fc71e47d6400fcb6957efd5933a7026d8483bf292aa2da0a3403e790714b1d2909ee1c247829d1562cdfcc783e859804a5b0ccf7d4e7799fe8c4ab78a4e32132de160cfba44af2df41d4ac7e5f395fb5c852c84179491880e9bbd1b115e90a1657f1540fdfa11f64fe1cf6"], &(0x7f0000000340)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000780)={0x80000000, 0xfff, 0x3, {0x0, 0x1c9c380}, 0x6, 0x9}) socket$kcm(0x2, 0xfffffffffffffffc, 0x2) r3 = gettid() perf_event_open(&(0x7f0000000380)={0x4, 0x70, 0x4, 0x2324442c, 0x4, 0x10001, 0x0, 0x2, 0x20800, 0xd, 0x3, 0x1, 0x7fff, 0x7fffffff, 0x3, 0x1, 0x2, 0xcc2b, 0x65, 0x7, 0xffff, 0x401, 0x2, 0x2d2b, 0x101, 0x3ab5, 0x3, 0x1ff, 0x8c, 0x9, 0xf7d9, 0x1, 0xfffffffffffffffe, 0x7699, 0x1f, 0x9, 0x1f, 0x6, 0x0, 0x1, 0x3, @perf_bp={&(0x7f0000000340), 0x1}, 0xb4, 0x2, 0xf09c, 0x4, 0x9, 0x0, 0x5}, r3, 0xb, r2, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0xf, 0xc0000000000000, 0xb03, 0x2, 0x10, r4, 0x7f}, 0x2c) socket$kcm(0xa, 0x3, 0x11) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) gettid() write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000004c0)={0xffffffffffffffff}, 0x113, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r5, 0x3, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x1, @empty, 0x5}, @in6={0xa, 0x4e23, 0x46e, @mcast2, 0x1}}}, 0x118) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000000500)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0, 0x1}, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000000)='ip6gre0\x00') bind$unix(r1, &(0x7f0000000100)=@abs={0x1}, 0x6e) [ 1860.919490] input: syz1 as /devices/virtual/input/input795 03:35:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1860.966383] binder_alloc: 13618: binder_alloc_buf, no vma [ 1860.975775] binder: 13618:13619 transaction failed 29189/-3, size 24-8 line 2970 [ 1860.985477] binder: undelivered TRANSACTION_ERROR: 29189 03:35:50 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)={0x46, 0x75, 0x1, {0x3b, "4a42d6a74bd560f471df53ea658a80c30735e695ca2f283b5198347e63c182cb61a105dc8eb3225db13831f318587746467966f6e3b3a0643ae9d3"}}, 0x46) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00'], 0x1) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000380)={0x25, 0x75, 0x1, {0x1a, "89d305ba705a8adbf615418d4f2eaafcd8173f951a14c788ec28"}}, 0x25) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000040), 0x10000000000443) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB]) write$binfmt_misc(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="164e9096ce016540627accafc3d41db9c916981893d5440ab73545e08303ad6c318837d35f2292a9798689962087eed30150286b08082d6b4c39248ed584992e1d80519d2cdbb81325cb69427160055ecabbdd738d10642a99a3ab75f00c13957af67f309b6af3cc00df5f98fcdfec2e266edde059804973710387b8e3c6b4fd0715d1c9aee90b13035813357bff93ce545186ae7817880c3433c69215"], 0x9d) write$FUSE_DIRENT(r4, &(0x7f0000000540)={0xe0, 0x0, 0x6, [{0x2, 0x6, 0x19, 0x9, 'vmnet1wlan0cpusetselinux#'}, {0x1, 0x87f5, 0x9, 0x6, 'skcipher\x00'}, {0x0, 0x401, 0x2b, 0x0, "2c2921925d706f7369785f61636c5f61636365737326da73656c696e757873797374656d276367726f7570"}, {0x0, 0x6, 0xd, 0x7, '/dev/usbmon#\x00'}]}, 0xe0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x84000, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000340)=0x1) accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:50 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8940, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0xfdffffff}, 'syz0\x00'}) 03:35:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) [ 1861.124207] binder: 13632:13634 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1861.170635] binder: 13632:13637 transaction failed 29189/-22, size 24-8 line 2855 [ 1861.222177] binder: undelivered TRANSACTION_ERROR: 29189 [ 1861.238665] input: syz1 as /devices/virtual/input/input797 03:35:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:51 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8947, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1861.390745] input: syz1 as /devices/virtual/input/input798 03:35:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x9eae0200}, 'syz0\x00'}) [ 1861.471338] binder: 13658:13660 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1861.517449] binder: 13658:13667 transaction failed 29189/-22, size 24-8 line 2855 [ 1861.541948] input: syz1 as /devices/virtual/input/input799 03:35:51 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) [ 1861.618534] binder: undelivered TRANSACTION_ERROR: 29189 [ 1861.651243] input: syz1 as /devices/virtual/input/input800 03:35:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1b}, 0xd}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000cd, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000001c0), 0x1b) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x801, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0xc68180c4342633de, &(0x7f0000000100)=""/45, 0x2d) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x9, 0x2, 0x80000000, 0x0, 0x7, 0x0, 0x0, 0x4, 0x800, 0x400, 0x0, 0x100000000, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, 0x4, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000008540)={'team0\x00', 0x0}) r3 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x4, 0x10200) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) write$FUSE_ENTRY(r3, &(0x7f0000000380)={0x90, 0x0, 0x4, {0x4, 0x2, 0x3ff, 0x80, 0x47, 0x1, {0x2, 0x893, 0x2f, 0x2ea40000, 0x3db8aaf0, 0xfff, 0x5, 0x1ff, 0x20, 0x1a2, 0x9, r4, r5, 0x1, 0x4}}}, 0x90) sendto$packet(r1, &(0x7f0000000200), 0x0, 0x40, &(0x7f0000008580)={0x11, 0x6, r2, 0x1, 0x947}, 0x14) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000180)={r6, 0x19}) 03:35:51 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x301000, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000200)={0xa0, 0xffffffffffffffda, 0x4, {{0x2, 0x3, 0x8, 0x2, 0x7fff, 0x5, {0x3, 0x5, 0x80000000, 0x8, 0x72, 0x9, 0x6, 0x6fb, 0x0, 0x7fff, 0x2, r1, r2, 0x2000000000000, 0x5}}, {0x0, 0x4}}}, 0xa0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x400000000000004, 0x0, 0x3, 0x2}, 0x86}}, 0x40) 03:35:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0xa4ae0200}, 'syz0\x00'}) 03:35:51 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8994, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:51 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) [ 1862.157484] input: syz1 as /devices/virtual/input/input801 03:35:51 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1b}, 0xd}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000cd, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000001c0), 0x1b) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x801, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0xc68180c4342633de, &(0x7f0000000100)=""/45, 0x2d) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x9, 0x2, 0x80000000, 0x0, 0x7, 0x0, 0x0, 0x4, 0x800, 0x400, 0x0, 0x100000000, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, 0x4, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000008540)={'team0\x00', 0x0}) r3 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x4, 0x10200) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) write$FUSE_ENTRY(r3, &(0x7f0000000380)={0x90, 0x0, 0x4, {0x4, 0x2, 0x3ff, 0x80, 0x47, 0x1, {0x2, 0x893, 0x2f, 0x2ea40000, 0x3db8aaf0, 0xfff, 0x5, 0x1ff, 0x20, 0x1a2, 0x9, r4, r5, 0x1, 0x4}}}, 0x90) sendto$packet(r1, &(0x7f0000000200), 0x0, 0x40, &(0x7f0000008580)={0x11, 0x6, r2, 0x1, 0x947}, 0x14) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000180)={r6, 0x19}) [ 1862.199380] binder: 13701:13706 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1862.218771] input: syz1 as /devices/virtual/input/input802 [ 1862.238582] binder: 13701:13706 transaction failed 29189/-22, size 24-8 line 2855 03:35:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x3, 0x3, 0xffffffff, 0x3, 0xf91}, 0xd0f, 0x5, 0x8}) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="b3fdaf660af03389edca0000000000007937eb162d3e662b4c24529305659a585e"], 0x21) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x536}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 03:35:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x2aeba}, 'syz0\x00'}) [ 1862.298275] binder: undelivered TRANSACTION_ERROR: 29189 03:35:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:52 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:52 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x890c, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1862.413128] input: syz1 as /devices/virtual/input/input803 03:35:52 executing program 1: socket$inet6(0xa, 0x3, 0x800000000000004) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="240000001b0001f0008000048b4dfc920af6f92c78390106005edecb0880190005d70000", 0x1) 03:35:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:52 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000003680)=0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000000c0)) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x3fffffffffffffc, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="00080000ec0500006d8a2b0012fcfdffff010000b90200000001000284811f4ce10077a1907aaae6313400000010ec0302e5fb00526549734572334673", 0x3b, 0x10000}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00']) r2 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x6, 0x400000) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000001740)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000001980)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000019c0)={0x0}, &(0x7f0000001a00)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001b00)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast1}}, &(0x7f0000001c00)=0xe8) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000002dc0)=0x0, &(0x7f0000002e00), &(0x7f0000002e40)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000002e80)=0x0) getresuid(&(0x7f0000002ec0), &(0x7f0000002f00), &(0x7f0000002f40)=0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003940)={0xa8, 0x0, &(0x7f00000037c0)=[@request_death={0x400c630e, 0x1, 0x1}, @transaction_sg={0x40486311, {{0x3, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x30, 0x10, &(0x7f00000036c0)=[@fd={0x66642a85, 0x0, r2, 0x0, 0x2}, @fd={0x66642a85, 0x0, r2}], &(0x7f0000003700)=[0x20, 0x38]}, 0x20}}, @transaction_sg={0x40486311, {{0x3, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x38, &(0x7f0000003740)=[@fd={0x66642a85, 0x0, r2, 0x0, 0x1}, @fda={0x66646185, 0x2, 0x2, 0x3}], &(0x7f0000003780)=[0x20, 0x38, 0x20, 0x30, 0x38, 0x78, 0x58]}, 0x10001}}], 0xbd, 0x0, &(0x7f0000003880)="f2263bd7cad0dc76f5b6f73b9eb1d7b982a6e7320ffe1fbab5204f4e494033459ed22fd04f6d1a3ea1801286c7d45ac8e8142872f3fbe7a95a9938a39ebeb191b0e23639946d4222dce6538f4fd71c88f2637c8027179fe12ca8a3da3165c7f3235bc7b1737d19ad82e1715956b0970a606ddd98400af4615b192f7a1b16af42a7f7f31c625f5a8979950ca3668d53822699278a54e7d144710063cad9358d57a0a969074bc2f351153465aa70b20e8a49a4719b8ce304c63ed39004ff"}) sendmsg$netlink(r2, &(0x7f0000003640)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f0000003580)=[{&(0x7f0000000240)={0x14f8, 0x11, 0x310, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0x85, @str='\x00'}, @typed={0x10, 0x54, @str='reiserfs\x00'}, @generic="0448ab8caea8ff6d0f8f3ed19ca0eae9723d48c12168804173692634d4e2d6873ba331847c3d93fcf6335849378154780b3bfce92f4cdf4142a9fb7164802bbde3d5bbbf80c8b58ee007933f8828fdbacf072286639defb8b9795fb24e13effaa15d96dc572eedbf2afd91c7418c60d614d4cd77b06f17bc38eac7167dce8eab0fd93bfbc42da18cac5039158f36ad10ee3c929dde00606f7a2a099ea62a477bb61b4372053f162925", @generic="95d5082995", @generic="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", @generic="65037d4151daf40bed154989e6f30a36c15055f61214c5c2a8ba748f66d45c3232a68588e6530c8a", @generic="efcad04eedce5583775c4aeb1496728e19eb6d385012f194b44a71331e1473eb0b717c", @generic="e8973463c54583517ffb509507be3dfde7c0a02d7bc3c2bd75393f0ee67967e82c469699a0d491cc9d2fcd7a8f091cd6f3dca60e3d1457ee9964776a8f41aca83d2503c60ad40e9f0b768024d0a521fdfcb09407ec371db1ab458d254e7cc3c54d1e070b89c949e6692c", @nested={0x36c, 0xc, [@generic="de0fccbfdb39b34c76c13f8ff6b444533b37d9819914b5c3e0f7663f598468c9f38598df99104fec8c8b1e5c6657994fb6b2d4a0f129dbef65f5e0062d9014935550168d7fabc61301e04c6a220a97fbd16f4e624504777b26e5ce10cca08a4ecd436a9dc1117ad22d013c539b716b8b99578937a2e49236ebbe7fe37da649f423e40cdc1908db2db7a9b4109fadbb997f586fce6a458b9ea2bde391ff2cfb4da9d4c32a2d873827199a7a7486851d61ee041bdf1b4b0d7f6342453feff0fbbfc030445afe95", @generic="3764f80f072dd994f69b2d2366c9c08a5f36b87e3941a7a8d64c5dd7152a0f41c98447654962da06cf227e8f3138c62f54fae23cfbdf1c5023d4cfed1cbe5dcbdd26b8d06523bc110f828922c6f0368275c3169fad09d45da3c1084181cc6ebc965d227ee577501f8ead55cdbc8aec79b54a55e88901f571c57adcb4dc8909c27c92b84c5ac026aecad1cfd77d0a013db1895171ef9e853861a7f0d38e0b4cee3ed0f28e5ee096144ac04b3429cfadccd0d96cf4a9ceaf944695989c1c98ccd4237262c98ebc234695b5219bb83a49551cac3251f087b0a46d6d", @typed={0x8, 0x39, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}, @typed={0x8, 0x7c, @ipv4=@multicast1}, @typed={0xd8, 0x8e, @binary="57a3d273ea02e0f2ed28f9ad597961f7a86a863895e3119af447ceece2ff862afa5647ad6c1de94d3fb144e893c5259dc3455cbd9d17b22d17814179d69cb4ad1dc1049c68abc779a2d0025fdfa23714ffa8e6018c5632e22ab2e81966b8dde2fcaf378965517290b9930db786d1af6ed03af2e3f20a06af3e02685df413ca3e582fa6ebb9fc51d116dcc78f37219e357b89ad088bc980c27d418005b542dabc11e341058851ec44557e2a77f628d31bac2a595c83165c39eb2c3fc38df9856168e787c2780bfec1b529a0f2dd2111735d2335"}, @generic="3b2aa187ce3ce9eb5920f2cfb2becfcc5f7ba474dada12600d037bef4f4934668996969fdb7068f7728175e45924601d071aeb16156fff405ecbe034bdda4e17ba89a7fdc7a769f3f8b96777d4cbc43385cf7e8547fbe72fa85bed2583cfe6933783c8b437c905f5b32ab9a260a7ca1c7bf47356713274955ce5f277c09a440a85ffde9ae00a8cb9362eaf2ccc4dca4de09119e231225a0d60b32f5a864db475933b1400f8571a61d87f914fc9231cb8395ba9213f643c1063ee13271cc2a916c72ef8cfad2db2f432adb7", @typed={0x14, 0x25, @ipv6=@ipv4={[], [], @broadcast}}]}]}, 0x14f8}, {&(0x7f0000001780)={0x184, 0x11, 0x333, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x130, 0x87, [@typed={0x4, 0x15}, @typed={0x8, 0x10, @u32=0x8}, @typed={0x14, 0x67, @ipv6=@dev={0xfe, 0x80, [], 0xa}}, @typed={0x8, 0x4d, @pid=r3}, @typed={0x14, 0x28, @ipv6=@loopback}, @typed={0x10, 0x94, @str='reiserfs\x00'}, @typed={0xa8, 0x89, @binary="a32ee160e0f97147c32688ae8c3b0dbd6d5b69b389c4eaaa9d25fd7227d8483983edb0df9836656130dbe8d4d9e7cf1321e0385b0a7607f36a9ec2d2ec58e88b1c3fff9cc4ed0c663bcee651ddeb9a1600f1be81af17c4846e719069fffb2f8dcfea0831559e0638ca2ba476a86eac46e5ec6c9c2db5a489144587c616af2f84e19eb5189cbbe6ea20ee1ecd13ec9e09dc8fc0c3798230545f9d53e4571cfdad1c50394b"}, @generic="867c5725862e34f9ae00b52b369e09e92b92b55f101c760ef9618ec521821d23a78f741b1d87b0c6217ec479f59f9dd0f980bbeea6"]}, @generic="bcc63d96e417b6ce314151c20f5e041638a3883a8a35dadf9df162d7ac5eb8921fb949acbbe9396e137db51284229f38199c15af56453a1dd164cb4074c5a2ab0c"]}, 0x184}, {&(0x7f0000001940)={0x2c, 0x29, 0x30, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x14, 0x89, @ipv6=@mcast1}, @typed={0x8, 0x4c, @u32=0xbb0}]}, 0x2c}, {&(0x7f0000001a40)={0xa0, 0x25, 0x401, 0x70bd2b, 0x25dfdbfb, "", [@nested={0xc, 0x6b, [@typed={0x8, 0x1a, @pid=r4}]}, @nested={0x20, 0x69, [@typed={0x8, 0x35, @pid=r5}, @typed={0x14, 0x15, @ipv6=@mcast1}]}, @nested={0x40, 0x7b, [@generic="a950c2ccbb22a03801891a86fd41a8f08e247a320a161e869f5e9d798ba3e90f553a3b011c7b4e364214ca28f3c09619db1112", @typed={0x8, 0x91, @ipv4=@loopback}]}, @typed={0x8, 0x9, @u32=0x5}, @nested={0x1c, 0x7d, [@typed={0x10, 0x5b, @str='reiserfs\x00'}, @typed={0x8, 0x7b, @ipv4=@broadcast}]}]}, 0xa0}, {&(0x7f0000001d00)={0x10a4, 0x17, 0x4, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x48, @fd=r1}, @typed={0x8, 0x8c, @uid=r6}, @nested={0x106c, 0x2d, [@typed={0x14, 0x70, @ipv6=@mcast2}, @typed={0x4, 0x22}, @typed={0x4, 0x5}, @typed={0x8, 0x53, @uid=r7}, @typed={0x14, 0x8d, @ipv6=@loopback}, @typed={0xc, 0x20, @u64=0x5e1d}, @generic="c75547f5a43d605ff54ce100a9674eb0b89e679bf7c08d4a0a", @generic="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", @typed={0x8, 0x8b, @fd=r1}]}, @typed={0x10, 0x2e, @str='reiserfs\x00'}, @typed={0x8, 0x89, @ipv4=@loopback}]}, 0x10a4}, {&(0x7f0000002f80)={0x5f0, 0x21, 0x0, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x86, @u32=0x7}, @typed={0x8, 0x40, @uid=r8}, @nested={0x8, 0x82, [@generic="43b2f5cf"]}, @nested={0xa0, 0x69, [@generic="9473652b4bf7096a9d23416da2dcfaff555f96cbdef46bf24ffd4933def263f982c99af067cc4556f08c976dc12ad5a5e718b6d7abe7cce2e8eb2cdca1a9d88abd49d03f334402fabdfd1ef631c26f5326fbe88120e78256172924fb483a78361603ade75dc4719da15957918b0a5799d6fcfbc586d1472f3d6189e8723b821b6bc8c5f53067ded8f339ed9f82c08b27dc", @typed={0x8, 0x93, @fd=r1}]}, @nested={0x184, 0x27, [@generic="87123916bdb813a7694b393bf512e75434429634408a587f24720501460a4c48b3af0796e94db8595cf9739dfca62b3aed06a1cf5bbef6a6986b6dc840125532ea54c67e334a00db487160dd1691fe7a40c17cae8a869f4dda15466ecda3fd4a768963f9caf8975c6b7bbc7e98f24a9f720394a10102f9abefada77c696f98d3b2ca75cd2614d255a17b490a4caf1e7e98", @generic="31888f184f73a4", @generic="786b1bf96bd5926f86", @typed={0x8, 0x4a, @pid=r9}, @typed={0x8, 0x49, @fd=r1}, @generic="dc3dabc43b69aeb9de205cb3bf4607d856555dbc4b905eaa045738d85c76941f4b2dd7257bf65afdae1db2b3971793c08c53ddf52e85784429ebb35b3def27557cfe544b54af786362166708a94a657fb6afdf5b58e3542936da676065b844a65b97dc22d330e0c7b734309e63d65848df2e0ad867036b7cabfa1ed8fcde8a465ed191f348be592b1b27b4b7e3d6d3bd163c62dc1302ccb4e7d25a36c56b7f15c310b89f572ec18612186ad1698f566a7ac836630f05ac5dd54b", @typed={0x10, 0x3f, @str='reiserfs\x00'}, @typed={0x4, 0x3f}]}, @nested={0x3a4, 0x2b, [@generic="734ae37e5f0c7b279fc828a76c0868fc546626e2eb7b745c652622e4a72bd9cec5b209b8005ba259a8c607c8f61de2026701df375b2321a98201b4c7001b7b08f6029ad8fdde833d223fa437bd3b4cae30c296a646", @generic="2fd2e37915502f718d06da930014e074d5330d58aa748d6463ea72419c0fb3406ff1edae060aef6d6d01dfa5452a0688f60e99ba6c3d9b715d82cb2e7e39d7c276b5160c1d804977c0587a71c1ab20416ca791209ac8133de9ffc3d865a0ac188ca896d9456c6531e56dca8b401ff6523175c467360e4b1b13e58f458ff11ac457c3eca0e2708ea902b889c2eb4fdd18", @generic="49f3b3fea5a60c0dec19a410b13f17fd62b5d2d35b7bbd3b85f1da3f5472eca927c142abc9e0f9e930587552e9f543c6731df66c61c64dfe834e6737f2f45871c256aabf7ad0c8abb4a7ad031ec3185edb7ac093af297cd334d9d66c2bf6321f3360cc8a82397f92b3277183a89d2bb71052b7a621409f49e6ceab300f16ef38a0b0071be225e66f6a566551b42c", @generic="5cba7894c0d1aba6fb794c5e05aa5a9b68e52a4c212d47e77d9c806344429ff7647195d44ab9f8604ec966afe8f1ac700acc9dfc2b57700e324efefd379b2d0a64c4b3c79926efeb2de19f0063e0570f3da882cc3a8eb7300bf6ced5ae895818906ce8b27c799dd3eceb89f7e72af3cd6799a5bf48658ee20acb7de8f02cdff9c59ead1d7da3eb98327776a1a587d5568dd1fa87125e940f420816a13185ee76dba9150500a56469461b850b894d7187fa300ed6332fdc54eec82f6d56045d1d202bf50d911648e55890ac07c5f3e3dde8580807e9d3253c135032c7d6a2b3a0627b21fecd1dfdf1bfa2992370c6d22418bab3fb88678234", @typed={0x8, 0x68, @uid=r10}, @generic="f97a3368d5163ebce0959f0906c91c22cf5fb9725bb6e3ee214ebc0644c501d9a2a3e9795d32b01fc596e0603f34a15a9681cb6ac1c1393d2a0205ea702213c3d33144f3d87ff22817b10c688cfae0220ef2508e5e192c15f0ce1a33fd5b117fc5e44744c5562cde453448a71b0dc4adffacfe37114db0116517c2d7508d2b0cea90824c79c2d9dc971d407c5039df8f024a3b601ac3f202dff5ddead42e385b4716f6ed248427c528ea8febf45a60e0ddce75ed54f888d9118ebcf2c8a4cc", @generic="e44e51d11fd19c1a9e02618a6841eb1ec35599b0bbb383c52458171752a5a4b380c975e30d4501f7b64e5667128c8e66363af01a841c794886ebd19b9835fceea7fb2b8a8b03a6a941", @typed={0x8, 0x24, @ipv4=@local}, @typed={0x14, 0x26, @ipv6}, @typed={0x8, 0x8d, @u32=0x80}]}]}, 0x5f0}], 0x6, &(0x7f0000003600)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18, 0x40000}, 0x40001) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x80000001) 03:35:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x2ae98}, 'syz0\x00'}) 03:35:52 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8932, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:52 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) [ 1862.639828] input: syz1 as /devices/virtual/input/input805 03:35:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000040)="b9800000c00f3235001000000f30f24c0f2c49e8426dc4027d3493b80800003626660f7e676d660f1678b06cc403f9dfbeb70000000bc7442400f5000000c744240284d178bcff1c24f2f347dbe1", 0x4e}], 0x77, 0x48, &(0x7f0000000140), 0x1000000000000390) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1862.691506] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 03:35:52 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x50212, 0x2000e803, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) [ 1862.780689] input: syz1 as /devices/virtual/input/input806 03:35:52 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89e1, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:52 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0xc7a}, 'syz0\x00'}) 03:35:52 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000280), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8000000008b0f, &(0x7f0000000000)={'ip6gre0\x00', @ifru_map}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0x398, 0xd8, 0xd8, 0x0, 0xd8, 0x208, 0x300, 0x300, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x98, 0xd8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x10, "62d37b760bcd17c67bcce321fdd593517af553caec8bc92db7bcfb3ae90c"}}}, {{@ip={@rand_addr=0x6, @loopback, 0xffffff00, 0xff000000, 'veth0_to_team\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x5f, 0x1, 0x21}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@owner={0x38, 'owner\x00', 0x0, {r2, r3, r4, r5, 0x5, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={[], 0x12}, 0x7fffffff, 0xe, [0x3f, 0x34, 0x3a, 0x21, 0x39, 0x2, 0x1b, 0x5, 0xb, 0x2e, 0x28, 0xc, 0x16, 0x1, 0xe, 0x1e], 0x0, 0x7ff, 0xa9d}}}, {{@uncond, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffbc1c, [0xfffffffffffffffb, 0x0, 0x7fffffff, 0x4, 0x800, 0x5], 0x100000001, 0x4, 0x2ecc}, {0x1, [0xff, 0x31ef, 0x6, 0x5f3, 0x81], 0x6, 0x2, 0x5}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 03:35:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x101d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000bd00020000000000870140000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) [ 1862.936293] input: syz1 as /devices/virtual/input/input807 [ 1862.984597] binder_alloc: 13805: binder_alloc_buf, no vma 03:35:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0xffffff97}, 'syz0\x00'}) 03:35:52 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x254, 0xfb, &(0x7f0000000340)=""/251, 0x410fd, 0x5}, 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x2, 0x4) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000640)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000580)=0xab) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000005c0)={r4, 0x8001}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'ip6gretap0\x00', @random="6e5b0750f801"}) ioctl$SIOCSIFHWADDR(r5, 0x8937, &(0x7f0000000000)={"6272696467655f736c6176655f3100f0", @random="01003a1e2410"}) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCCONS(r2, 0x541d) dup3(r3, r1, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r6 = socket$inet(0x2b, 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) chdir(&(0x7f0000000540)='./file0\x00') recvmmsg(r6, &(0x7f0000002800)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/57, 0x39, 0xffffffffffffff1a}, 0x2}, {{&(0x7f0000000c40)=@ipx, 0x80, &(0x7f0000000f40), 0x0, &(0x7f0000000f80)=""/86, 0x56, 0x2}, 0x200}, {{&(0x7f0000001000)=@can, 0x80, &(0x7f0000002700)=[{&(0x7f0000001080)=""/218, 0xda}, {&(0x7f0000001180)=""/71, 0x47}, {&(0x7f0000001200)=""/194, 0xc2}, {&(0x7f0000001300)=""/33, 0x21}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/138, 0x8a}, {&(0x7f0000002500)=""/89, 0x59}, {&(0x7f0000002580)=""/183, 0xb7}, {&(0x7f0000002640)=""/176, 0xb0}], 0xa, &(0x7f00000027c0), 0x0, 0x7}, 0x1}], 0x3, 0x100, &(0x7f0000002980)) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x3c, 0xf3fe, 0x0, 0x6}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xf, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000440)=0x7fffffff, 0x4) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000480), &(0x7f0000000500)=0x4) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/141, 0x8d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@empty, 0xc5, 0x0, 0x3, 0x8, 0x80000000, 0xa6, 0x8}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@ipv4, 0x1e570444, 0x2, 0x0, 0xe, 0x5, 0x1, 0x100}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) close(r7) getsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 1863.041661] binder: 13805:13806 transaction failed 29189/-3, size 24-8 line 2970 [ 1863.081616] binder: undelivered TRANSACTION_ERROR: 29189 03:35:52 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x891e, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe7fd, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000200)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fdatasync(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000980)=ANY=[@ANYBLOB="0153bc6cda81f808000000f900000c6b00006af271d0c84c9e4fb70f01bd533acbe73267e7cee662d8000000000fd051fd208b4e94c0af38684bbf4d24952b4bb589ed8325006023b37374c0450be55e04ec2566e8e04d88a73b3b215e245ff96a84c3bc337f"], &(0x7f0000000540)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x117}}, 0x20) semctl$IPC_RMID(0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f0000000640)='trusted.overlay.upper\x00', &(0x7f00000008c0)={0x0, 0xfb, 0x15, 0x2, 0x0, "075b316a9ccc34808b9e0350a1efb559"}, 0x15, 0x2) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000300)='msdos\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, 0xffffffffffffffff, 0xffff}}, 0x48) write$binfmt_elf64(r1, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x100, 0x6, 0x4ae3, 0x4, 0x3, 0x7, 0x4, 0x147, 0x40, 0x3cc, 0x7, 0xaf6, 0x38, 0x2, 0x7, 0xfffffffffffffff9, 0x8}, [{0x4, 0xa, 0x0, 0x5a, 0x3, 0x2, 0x7f}], "d77fc8253fe5d99d605d5c17c8158a9a97ab216b36c6f6c15cd8515c", [[], [], [], []]}, 0x494) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000006c0)='./bus\x00', 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0xfffffffffffffffc}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r2, 0x9}, 0x8) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000340)={0x0, 0x10001, 0x1}) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 03:35:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1863.146527] input: syz1 as /devices/virtual/input/input809 03:35:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) [ 1863.236989] input: syz1 as /devices/virtual/input/input810 [ 1863.288249] binder_alloc: 13842: binder_alloc_buf, no vma [ 1863.308065] binder: 13842:13843 transaction failed 29189/-3, size 24-8 line 2970 03:35:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) [ 1863.333580] binder: undelivered TRANSACTION_ERROR: 29189 03:35:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0xa5ae020000000000}, 'syz0\x00'}) 03:35:53 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8922, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1863.453386] FAT-fs (loop2): error, invalid access to FAT (entry 0x000001c7) [ 1863.490372] FAT-fs (loop2): Filesystem has been set read-only 03:35:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) [ 1863.498575] binder_alloc: 13859: binder_alloc_buf, no vma [ 1863.505051] input: syz1 as /devices/virtual/input/input811 [ 1863.512968] FAT-fs (loop2): error, invalid access to FAT (entry 0x000001c7) [ 1863.529350] FAT-fs (loop2): error, invalid access to FAT (entry 0x000001c7) [ 1863.546889] input: syz1 as /devices/virtual/input/input812 03:35:53 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x254, 0xfb, &(0x7f0000000340)=""/251, 0x410fd, 0x5}, 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x2, 0x4) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000640)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000580)=0xab) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000005c0)={r4, 0x8001}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'ip6gretap0\x00', @random="6e5b0750f801"}) ioctl$SIOCSIFHWADDR(r5, 0x8937, &(0x7f0000000000)={"6272696467655f736c6176655f3100f0", @random="01003a1e2410"}) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCCONS(r2, 0x541d) dup3(r3, r1, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r6 = socket$inet(0x2b, 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) chdir(&(0x7f0000000540)='./file0\x00') recvmmsg(r6, &(0x7f0000002800)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/57, 0x39, 0xffffffffffffff1a}, 0x2}, {{&(0x7f0000000c40)=@ipx, 0x80, &(0x7f0000000f40), 0x0, &(0x7f0000000f80)=""/86, 0x56, 0x2}, 0x200}, {{&(0x7f0000001000)=@can, 0x80, &(0x7f0000002700)=[{&(0x7f0000001080)=""/218, 0xda}, {&(0x7f0000001180)=""/71, 0x47}, {&(0x7f0000001200)=""/194, 0xc2}, {&(0x7f0000001300)=""/33, 0x21}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/138, 0x8a}, {&(0x7f0000002500)=""/89, 0x59}, {&(0x7f0000002580)=""/183, 0xb7}, {&(0x7f0000002640)=""/176, 0xb0}], 0xa, &(0x7f00000027c0), 0x0, 0x7}, 0x1}], 0x3, 0x100, &(0x7f0000002980)) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x3c, 0xf3fe, 0x0, 0x6}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xf, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000440)=0x7fffffff, 0x4) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000480), &(0x7f0000000500)=0x4) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/141, 0x8d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@empty, 0xc5, 0x0, 0x3, 0x8, 0x80000000, 0xa6, 0x8}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@ipv4, 0x1e570444, 0x2, 0x0, 0xe, 0x5, 0x1, 0x100}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) close(r7) getsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 1863.557621] FAT-fs (loop2): error, invalid access to FAT (entry 0x000001c7) [ 1863.582722] binder: 13859:13861 transaction failed 29189/-3, size 24-8 line 2970 03:35:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) [ 1863.633707] binder: undelivered TRANSACTION_ERROR: 29189 [ 1863.638786] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) 03:35:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0xb8ae020000000000}, 'syz0\x00'}) 03:35:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1863.678812] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000202) 03:35:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe7fd, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000200)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fdatasync(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000980)=ANY=[@ANYBLOB="0153bc6cda81f808000000f900000c6b00006af271d0c84c9e4fb70f01bd533acbe73267e7cee662d8000000000fd051fd208b4e94c0af38684bbf4d24952b4bb589ed8325006023b37374c0450be55e04ec2566e8e04d88a73b3b215e245ff96a84c3bc337f"], &(0x7f0000000540)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x117}}, 0x20) semctl$IPC_RMID(0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f0000000640)='trusted.overlay.upper\x00', &(0x7f00000008c0)={0x0, 0xfb, 0x15, 0x2, 0x0, "075b316a9ccc34808b9e0350a1efb559"}, 0x15, 0x2) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000300)='msdos\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, 0xffffffffffffffff, 0xffff}}, 0x48) write$binfmt_elf64(r1, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x100, 0x6, 0x4ae3, 0x4, 0x3, 0x7, 0x4, 0x147, 0x40, 0x3cc, 0x7, 0xaf6, 0x38, 0x2, 0x7, 0xfffffffffffffff9, 0x8}, [{0x4, 0xa, 0x0, 0x5a, 0x3, 0x2, 0x7f}], "d77fc8253fe5d99d605d5c17c8158a9a97ab216b36c6f6c15cd8515c", [[], [], [], []]}, 0x494) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000006c0)='./bus\x00', 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0xfffffffffffffffc}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r2, 0x9}, 0x8) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000340)={0x0, 0x10001, 0x1}) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 03:35:53 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5452, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1863.749636] input: syz1 as /devices/virtual/input/input813 03:35:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) [ 1863.816135] binder_alloc: 13895: binder_alloc_buf, no vma [ 1863.845681] binder: 13895:13896 transaction failed 29189/-3, size 24-8 line 2970 [ 1863.856368] input: syz1 as /devices/virtual/input/input814 [ 1863.879397] binder: undelivered TRANSACTION_ERROR: 29189 03:35:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000f6dfe4)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0xfffffffffffffefd) connect$can_bcm(r0, &(0x7f0000000340), 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x3, 0x101000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x20, 0x4) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000001c0)=0x3) write$P9_RFSYNC(r1, &(0x7f00000017c0)={0x7, 0x33, 0x2}, 0x7) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000400)=@ipx={0x4, 0x4, 0x9, "45ceccfa783a", 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="7630cb0569b50744a74a8200f6eb0dbdcdf723df104234d698f397ec1f10cd888e72029831775adfcdf6eca029f6b029c18a9eecafbfa0a231e3e0fe923093176c93c3601b021c8e9cba2f7681a91be6469209f734beabe6a7a7ee3caecb71f0793045d6595d21d453460293ef3f0cb48ea7f60a2e80e63519a28dbf3f2b9839292f89fbefdbd1c47c88643989b8a649c0052ca5703cd34f2015a90b747483f096f324d91dfd1e3d8ba626856114327bbdec5d8786985532", 0xb8}, {&(0x7f0000000540)="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", 0xfe}, {&(0x7f0000000640)="291b827b69d252e022064e2f9d2a96d2428c1bec9a40eff2dfe067f27544095bc45dbf10296b81ed9f52a25c8f3e0b471c2a0e8883f5a7dfc4aa0d69c07ff1726b41a9235a2fd239c192c12d1b935990bcc4", 0x52}], 0x3, &(0x7f00000006c0)=[{0x1010, 0x104, 0xfffffffffffffff8, "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"}, {0x80, 0x1ab, 0x2, "ec2c3591683e8c639ca5718de6394d1fe0872104f0da550ab3b90e8fed4301e44297fa7c34b08a676ccc416794f4a50c1ccfa9878a05fadb4272e0923bb02660c3ba66bde9ecd208d720f2ba0d4380602789311f4df560fbd287b546a85f5795dbe536ed7a5829cf1e"}], 0x1090}, 0x4) r2 = getpid() ptrace$peek(0x3, r2, &(0x7f0000000280)) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1004400, 0x4ba2ee19a1a013e8) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000001780)={0x2, 0x5}) r3 = perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x70, 0xf, 0x7, 0x8, 0x7, 0x0, 0x400, 0x100, 0xa, 0x8000, 0x8, 0x0, 0xf74, 0x7, 0x4, 0x1ff, 0x5, 0x7fffffff, 0x3, 0x1, 0x2000, 0xffffffff7fffffff, 0x7ff, 0x14bca2cf, 0x5, 0x3, 0x9, 0xfff, 0x93f1, 0xa313, 0xfc, 0x8001, 0x1000000000000000, 0x0, 0x9, 0x9, 0x100000000, 0x0, 0x6, 0x7, @perf_config_ext={0xc6e, 0x35d}, 0x200, 0x7f00, 0x3, 0x6, 0x5, 0x80, 0x4}, 0xffffffffffffffff, 0xa, r1, 0x8) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000040)=""/56) openat$cgroup_ro(r3, &(0x7f00000002c0)="6d656d6f72792e5453a13b3b", 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000200)={{0x2, 0x4e24, @remote}, {0x6, @remote}, 0x4, {0x2, 0x4e26, @remote}, 'team_slave_1\x00'}) getsockopt$inet6_int(r1, 0x29, 0x40000000000003, &(0x7f00000003c0), &(0x7f0000000380)=0x314) 03:35:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0xb5ae020000000000}, 'syz0\x00'}) 03:35:53 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8930, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1864.052008] binder_alloc: 13915: binder_alloc_buf, no vma [ 1864.073808] binder: 13915:13916 transaction failed 29189/-3, size 24-8 line 2970 [ 1864.096020] binder: undelivered TRANSACTION_ERROR: 29189 03:35:53 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000080)}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80040000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @broadcast}}, [0x0, 0x2, 0x2, 0x9, 0x0, 0xf, 0x4, 0xbc28, 0x0, 0x6, 0x3, 0x9, 0x0, 0x0, 0x100000000]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0xc1800000000000}, &(0x7f0000000380)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x3f8, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0xd470041877f0fcc9) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000823e, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000003c0)=@add_del={0x2, &(0x7f0000000180)='bond_slave_0\x00', 0x10000}) shutdown(r0, 0x0) 03:35:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1864.133256] input: syz1 as /devices/virtual/input/input815 03:35:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) [ 1864.189887] input: syz1 as /devices/virtual/input/input816 03:35:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x6c00}, 'syz0\x00'}) [ 1864.265670] binder_alloc: 13939: binder_alloc_buf, no vma [ 1864.300327] binder: 13939:13941 transaction failed 29189/-3, size 24-8 line 2970 [ 1864.424023] input: syz1 as /devices/virtual/input/input817 [ 1864.487350] input: syz1 as /devices/virtual/input/input818 03:35:54 executing program 2: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe7fd, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000200)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fdatasync(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000980)=ANY=[@ANYBLOB="0153bc6cda81f808000000f900000c6b00006af271d0c84c9e4fb70f01bd533acbe73267e7cee662d8000000000fd051fd208b4e94c0af38684bbf4d24952b4bb589ed8325006023b37374c0450be55e04ec2566e8e04d88a73b3b215e245ff96a84c3bc337f"], &(0x7f0000000540)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x117}}, 0x20) semctl$IPC_RMID(0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f0000000640)='trusted.overlay.upper\x00', &(0x7f00000008c0)={0x0, 0xfb, 0x15, 0x2, 0x0, "075b316a9ccc34808b9e0350a1efb559"}, 0x15, 0x2) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000300)='msdos\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, 0xffffffffffffffff, 0xffff}}, 0x48) write$binfmt_elf64(r1, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x100, 0x6, 0x4ae3, 0x4, 0x3, 0x7, 0x4, 0x147, 0x40, 0x3cc, 0x7, 0xaf6, 0x38, 0x2, 0x7, 0xfffffffffffffff9, 0x8}, [{0x4, 0xa, 0x0, 0x5a, 0x3, 0x2, 0x7f}], "d77fc8253fe5d99d605d5c17c8158a9a97ab216b36c6f6c15cd8515c", [[], [], [], []]}, 0x494) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000006c0)='./bus\x00', 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0xfffffffffffffffc}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r2, 0x9}, 0x8) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000340)={0x0, 0x10001, 0x1}) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 03:35:54 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8918, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x2ae9d}, 'syz0\x00'}) [ 1864.756130] binder: 13963:13969 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1864.763995] input: syz1 as /devices/virtual/input/input819 [ 1864.802145] input: syz1 as /devices/virtual/input/input820 03:35:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:54 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a1, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1864.969210] binder: 13993:13994 Acquire 1 refcount change on invalid ref 0 ret -22 03:35:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0xffffffffa0008000}, 'syz0\x00'}) 03:35:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r1 = gettid() wait4(0x0, &(0x7f0000000100), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x14) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ptrace(0x18, r1) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r5, 0x801, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000180)={{0xa68e, 0x2}, {0xffffffffffffffff, 0x3}, 0x1, 0x1, 0x4}) ioctl$TIOCLINUX7(r4, 0x541c, &(0x7f00000004c0)={0x7, 0x7}) wait4(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) tkill(r1, 0x17) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000140)="df", 0x1}], 0x1) clock_adjtime(0x0, &(0x7f0000476000)={0x7fffffff, 0x0, 0x20000000005, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x8}) [ 1865.129393] input: syz1 as /devices/virtual/input/input821 [ 1865.136002] binder: 14003:14005 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1865.199433] input: syz1 as /devices/virtual/input/input822 03:35:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe7fd, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000200)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fdatasync(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000980)=ANY=[@ANYBLOB="0153bc6cda81f808000000f900000c6b00006af271d0c84c9e4fb70f01bd533acbe73267e7cee662d8000000000fd051fd208b4e94c0af38684bbf4d24952b4bb589ed8325006023b37374c0450be55e04ec2566e8e04d88a73b3b215e245ff96a84c3bc337f"], &(0x7f0000000540)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x117}}, 0x20) semctl$IPC_RMID(0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f0000000640)='trusted.overlay.upper\x00', &(0x7f00000008c0)={0x0, 0xfb, 0x15, 0x2, 0x0, "075b316a9ccc34808b9e0350a1efb559"}, 0x15, 0x2) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000300)='msdos\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, 0xffffffffffffffff, 0xffff}}, 0x48) write$binfmt_elf64(r1, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x100, 0x6, 0x4ae3, 0x4, 0x3, 0x7, 0x4, 0x147, 0x40, 0x3cc, 0x7, 0xaf6, 0x38, 0x2, 0x7, 0xfffffffffffffff9, 0x8}, [{0x4, 0xa, 0x0, 0x5a, 0x3, 0x2, 0x7f}], "d77fc8253fe5d99d605d5c17c8158a9a97ab216b36c6f6c15cd8515c", [[], [], [], []]}, 0x494) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000006c0)='./bus\x00', 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0xfffffffffffffffc}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r2, 0x9}, 0x8) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000340)={0x0, 0x10001, 0x1}) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 03:35:55 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2aeb8}, 'syz0\x00'}) 03:35:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 1865.675935] input: syz1 as /devices/virtual/input/input823 [ 1865.678983] binder: 14023:14025 got transaction with invalid handle, 0 [ 1865.710902] input: syz1 as /devices/virtual/input/input824 03:35:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x7400000000000000}, 'syz0\x00'}) [ 1865.868319] binder: 14044:14048 got transaction with invalid handle, 0 [ 1865.896551] input: syz1 as /devices/virtual/input/input825 [ 1865.912810] binder_release_work: 5 callbacks suppressed 03:35:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 03:35:55 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x4020940d, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1865.912817] binder: undelivered TRANSACTION_ERROR: 29201 03:35:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1865.967645] input: syz1 as /devices/virtual/input/input826 [ 1866.078395] binder: 14066:14067 got transaction with invalid handle, 0 [ 1866.110461] binder_transaction: 5 callbacks suppressed [ 1866.110491] binder: 14066:14067 transaction failed 29201/-22, size 24-8 line 3062 [ 1866.127467] binder: undelivered TRANSACTION_ERROR: 29201 03:35:57 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffff6b1}, &(0x7f0000000240), &(0x7f0000000080), 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, &(0x7f0000000300)="03653ecdd304e59c88a957be089666e3bc46118de9cd55aaa094d1337ec6e1eccf705f4c1a30703b1efa12e48588d57b6dbf67035fe984535055f97da128011f27d1f0c34d7cab5865cf1d9e52184d51bb23ca88bb7044b55fe29c8c", &(0x7f0000000440)=""/140}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180)="01", &(0x7f0000000240)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 03:35:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 03:35:57 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8912, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x4c00}, 'syz0\x00'}) 03:35:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:57 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x7, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "1c56400ef08dc0d7f6ffea3199772f0577915623cdca191dcc06ee3e04cd4eb98b6e444bdb49a176ca0be49468681ed3a055edd05610db8ffb464f1417af72c5677bdc0183e8da9f6e9d0d8071771351"}, 0xd8) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2) mq_timedreceive(r2, &(0x7f0000000100)=""/70, 0x46, 0xffffffff, &(0x7f0000000180)={0x0, 0x989680}) r3 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl(r0, 0x2, &(0x7f0000000440)="1cf150582cd2051a0eda0b96b40122fcf19682679b2e59d000937f34623a7df51a11f52e1e6cb086e5841ebbf14cfd83dac76aaefedcff88313b32ce3b16a541d2ecfc04c0116dc3afca53e7") writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 1868.221638] input: syz1 as /devices/virtual/input/input827 [ 1868.230823] binder: 14075:14077 got transaction with invalid handle, 0 03:35:57 executing program 0 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) [ 1868.261968] binder: 14075:14077 transaction failed 29201/-22, size 24-8 line 3062 [ 1868.287866] input: syz1 as /devices/virtual/input/input828 03:35:58 executing program 1: r0 = inotify_init1(0x0) flock(r0, 0xffffffffffefffbd) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getrusage(0x0, &(0x7f0000000000)) sendfile(r2, r1, &(0x7f0000000140), 0x200) 03:35:58 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x894c, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1868.327610] binder: undelivered TRANSACTION_ERROR: 29201 03:35:58 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1000, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000000c0)=0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000140)={0x56aa, 0x11, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x2, 0x0, 0x6012, r2, 0x2000) 03:35:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xbcae020000000000}, 'syz0\x00'}) 03:35:58 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x40, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="efe0afe8d8"], 0xa8c04abfff35b11c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x8000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c) [ 1868.463354] x86/PAT: syz-executor2:14105 map pfn RAM range req write-combining for [mem 0x1721f0000-0x1721f0fff], got write-back [ 1868.491375] binder: 14111:14112 got transaction with invalid handle, 0 [ 1868.505349] binder: 14111:14112 transaction failed 29201/-22, size 24-8 line 3062 03:35:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0x7, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:58 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8941, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1868.531088] input: syz1 as /devices/virtual/input/input829 [ 1868.570466] binder: undelivered TRANSACTION_ERROR: 29201 03:35:58 executing program 2: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getpgid(0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) r1 = dup(r0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x7fff}, &(0x7f0000000280)=0x8) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nfs_export=off,default_permissioos,redirect_dir=./file1,\x00']) inotify_init() readv(0xffffffffffffffff, &(0x7f00000006c0), 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x8001) socket$inet6(0xa, 0x0, 0x0) 03:35:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:58 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/92, 0x5c}, {&(0x7f0000000380)=""/96, 0x2f}], 0x2fc, 0x200000000000000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r1, 0x83, "2f8d17", "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"}}, 0x110) 03:35:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xb7ae0200}, 'syz0\x00'}) [ 1868.685817] overlayfs: unrecognized mount option "default_permissioos" or missing value 03:35:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0x1000000a, 0x0, 0x0, @mcast1, 0x4}, 0x1c) [ 1868.757965] binder: 14139:14142 got transaction with invalid handle, 0 03:35:58 executing program 1: unshare(0x8000400) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x600800, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f00000000c0)={0x5, 0x9, 0x95, 0x101}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r1, r0}}, 0x18) mq_notify(0xffffffffffffffff, &(0x7f0000000040)) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f00000001c0)=0x2, 0x4) 03:35:58 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8942, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1868.803797] input: syz1 as /devices/virtual/input/input831 [ 1868.815414] binder: 14139:14142 transaction failed 29201/-22, size 24-8 line 3062 03:35:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0x6, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0xfffffffffffffff6) ioctl(r0, 0x8912, &(0x7f0000000000)="15000001008dd2de766070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x800000000000000, 0x7d, 0x0, 0xffffffffffffffff, 0x8}, 0x2c) [ 1868.866700] binder: undelivered TRANSACTION_ERROR: 29201 [ 1868.887094] input: syz1 as /devices/virtual/input/input832 03:35:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x48}, 'syz0\x00'}) 03:35:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8dc, 0x10}, 0xfffffffffffffcc2) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x4c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)={0x0, @broadcast, @loopback}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@mcast1, @local, @loopback, 0x23, 0x81, 0x6, 0x100, 0x5d, 0x102, r1}) 03:35:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0x8, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:58 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8920, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:58 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x20}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200)={r2, 0xc3, "fb0c636d77ade16b435d897d993e28e9d4af4b2b31e775d7f5b47757abe979049e464af700cbb3ee7fed1c4729b90ad2d07123b194dda921f96318dbcc555682dbf630cc23ac64b426d72a2bbafe72157487a5960582f5237d2db59ce340e63dd0230cb33e6dd263ae0597698d1a8506d911fcdcc9cd3cd2aaf1d452308242ba70d4c465cbfb981358d5a179781304a4f20a8bf8e39d6562442a39c63f4856ceedd1e694907bbc1bd0ba28ac02021795633d81f30d287b158f0532cded0441461a9a89"}, &(0x7f00000000c0)=0xcb) r3 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, r3) sendmsg$nl_generic(r1, &(0x7f0000023000)={&(0x7f0000024000)={0x10, 0x60001400}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x14, 0x27, 0xb03, 0x0, 0x0, {0x800003}}, 0x14}}, 0x0) [ 1869.113707] input: syz1 as /devices/virtual/input/input833 03:35:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000340)}) 03:35:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xb, 0x0, 0x0, @mcast1, 0x4}, 0x1c) [ 1869.191277] input: syz1 as /devices/virtual/input/input834 03:35:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(r0, 0x1ffd) read(r2, &(0x7f0000000280)=""/1, 0x1) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000000)) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@newspdinfo={0x114, 0x24, 0x504, 0x70bd2d, 0x25dfdbfc, 0x4, [@etimer_thresh={0x8, 0xc, 0x20}, @algo_comp={0x70, 0x3, {{'lzs\x00'}, 0x130, "45dc58a3e63148f85031334b4852fb001241ce5583c25909b9d55db5ecdcc2f002fdab83a840"}}, @algo_auth={0x48, 0x1, {{'sha1\x00'}}}, @offload={0xc, 0x1c, {r5, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={[], [], @multicast1}, @in6, 0x0, 0x2}}, @ipv6_hthresh={0x8, 0x4, {0x4f, 0x50}}]}, 0x114}, 0x1, 0x0, 0x0, 0x20008010}, 0x40) timer_settime(0x0, 0x100000000000, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000000080)) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x1, 0x4000) tkill(r3, 0x1000000000016) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) 03:35:59 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8980, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x7a}, 'syz0\x00'}) 03:35:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000340)}) 03:35:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0x2, 0x0, 0x0, @mcast1, 0x4}, 0x1c) [ 1869.371985] input: syz1 as /devices/virtual/input/input835 [ 1869.396283] input: syz1 as /devices/virtual/input/input836 03:35:59 executing program 1: r0 = socket(0x1e, 0x805, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)) sendmmsg$nfc_llcp(r1, &(0x7f0000004180)=[{&(0x7f0000000040)={0x27, 0x1, 0x2, 0x4, 0x8, 0x1000, "1a90f5494c5494d4430e65b5e99c2d6642e88693a379f7921bb80df3e18c8a3f855b4f6a8a1a2695fc4bfaec422ce2c7f37e936cd9fa088378a00959c0eff1", 0x3e}, 0x60, &(0x7f0000002540)=[{&(0x7f0000000200)="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", 0xff}, {&(0x7f0000000300)="2c6981e2fd394bb22e67814d90cbd2778f02ebd2a01b83b07a7cd1774649013bbac31af45a646fb2604a59dadd497ccf4874f84653418bf4c57c7ec409d871f9a269c2efcdbb009013eeb09a87bdccc01c03222d549ce1a5cc003fde9843677449119e410da31a75560607c3eef21a78177fc671140d78c32192eff5d9224493cd15722f65983d4be27b8f9042acc2585bb77eff71c8f0bef36e5f86c64a92c7625b8af8501f5ce6602d6b751d1014546ae1fafddc96f3ef9e180b65d0130b3cee8466af3085dcd430f2", 0xca}, {&(0x7f0000000400)="23cc36a4e459bc5f28fabe9b4f0816255835e3c8e7f0c3aa4fdc08e5c5bede03bef60b998c111c8507478e817169b9eac43fed10dc049d3d439753045b5ce1398b79c977bc0d9c72f3829807c33cc55bf681bc13bc682ebb27ae2729720eed30543ce3c84403a050aacffacc87e05525d836bffb2a3becc4e6ae64efcefff664133131e89387a1b387a9dd84e19d9b99064ecf77f6855c3954f0b694c95634e7fbc6dfcf8b4f428636a67ba7e6e39e43ace9d85d3c9766d31da99ca9dfade7b7e9ecaa4f4e8acef8e531323e6536c917f336a5eb1c84a7335e41902aaf30257a0bd6931c55e7238beaca2f340438a246be849fea125c15619947f99ffe2727f11c66198558e777b2b998cf080d0556c5830b5d78fd1d0a923178c91c92719774df314547bafdddce73c5752b91b16a684d3dd80b9c29db920901da1331ab690fe0ad9e118f885b24663fcecb4664ff01e91d36ff47163b71732d81443df59dd8aa3cb10be6cfb2acbf5b9b1d02b3247ca9a9922fcf2e96a9a9d201e1d2a4bc56173b583060bb2ea405791ebd046f4605b3de5e9a697685daff3ad844062e2e666b7dddd163c92678bc046b3266409d7de93680a3ea80aaa6f6e807c601c1c1e8c07b324c5682eba75f116f1928a3b7bf28e28e14123e578af9754420efffbd86e4b453a90d4ad94414040e91698dc868e28020a5bb97f5c7a66020363bc7279461369b1fb1837122da5c698c8ff4014936af342ff7884c0ff0047a4b989e470288db6615f6fd8fd383f06c377c1838e206a693a0d2b34efd2a5a26a29706cf7b7da2a7b90599067186f9a0f31f967b7d1b1c9b23783fb8e0003b70c15245df23ce20c21b580475636c31c8d04c531af50e8d0499fbaa7a0288c84160dce1b7e372b4431e41ebb49ef13853724b8c8e8096044b3535fdf8723c587e7a1ae6a8d27f7d551aa806e8785d97419c81cc8924e727919a3a92854d27e32edd415470f1bacdffc4a68bd05476f1b58ea657e6991e7f775d874247d255c4003e181e07caf159ca229bb3f1df34d6fa25be8a98c3d4b32c4a2e6a832d34cb99d7e79e75c32ec150abf4fd1d2b6d22080719da0ad37e3994d7b717578ecc7606483977abeb36e1ff83b9c68032412243df8161b53b392dc683999e30ee15131a1b68a19344b99ac3e888f63e39c75a8e2adb394d8dff1d8cb9161bfb9fb97f999e1a468897e434a1f30af0f27279d0437ec6a80b622e2b98c0386396a7db354e5b42e4c7fa2753d5be96d978edc7fef3d212464a05204bc0df481c7ebea0cb4b851eb59c6f2e3516dbbd91215fb20a23c5de1ae792efb57d9c30e3785ca5dedc7f911ea5346099327769ed3e44a8c201319166d1199b4cfccef33d347a2677d3883362adfdd476b0d718b6e64d4c748105ad5f23bba850f43498218ef01a0d1b0154ecf10341b2858f1355e24032a0fd0018841b5ffaaf643b2c9fa4141474e809c8dac2cb4eb186ea5aa2bfb7a03c8f2eecf037d3cec5f511c111507aa8854332de3ee89aef8dd6d4cd73e245f223a484a9310975c5d93f7e807dbde599e890caf102ceaec49b3c3d3d873dd5fc220b29931b90be471963997c57ffe277f41bdb1c0eab933e95408fbdc8361998476dca737ac7cea0baf4a771e4d7a348eda18bd9e1c1c7a7c705c6794f8e04b740be6b1b9932b78bc9588f1a7572229a22cb760bbe3db5b2b2d0d6a1a646e48d6eaf28d2ac14b3c164322e22e4efc60cea22dd12484944cede6b3ebaa7dc25b27aea1e14c1e3430220abe6d5112822a6caee9cec5532a239fe6a9c3a8199eb875ba99ccede10d92ad24cbf2199a20924607d3e548875d62cfa730bc6fdf31a06c9038f61af74e14ac50e0d2ca274147ba07aa84df3bb282d98e890c5b2f18550a2ab01bd7602bc4d1bd7053e50a117108cfb8b221ff438371585347c9da82a07a1f0aaa5fcd54de85872f35595150a4b036b45a03e07c7a0479c1d5ffc8a4104bad49c3dd24ae5c10518da2deeb64b2db363d66b07bf806864a37d9db01e9ffed7187cc4266fc1e534811be174ef488350dfd8b2a43117eb2dbd627f0ce8ebf2dea0921f16206be14a720939374e221adcc9f10d9aa63b079722c9089bd2b6c500bc35245c4d6a908fbdb45a38657cf1feff08d4b030117918fc6977f671db2dca90cdb6d4e72158b69b9b80b2dd3fca64da3bba731270725d4ab6ac5fdd4bcb25910fa526a2102329c86648fa771a92d95136f20eac4957fb9d27c313f0c088fca6270871af647922cd80b153a30b926ca400eeaf7a446ed3aaeb5a2091d3b70e8c13103e7eefe79b51b1d321b2bc9ff0aab98567c724fe6e42cd96144cb546db325736d711d58c95595d2eb07632c747edb3db256c397297d9e54e0f34a86fd2370c07757c845aa7e323fa5a96b7878ea1097e93d5335c2172bea21f49ec6b8f7972f4436379304fc639ba7fef5fdf0eb9bda1cbaa5f0021d92fd27051e76a88a63d6cd46847f5fc3e94addf3e1aa4668b9617e624f53295553703e93d1dbdaf6a1ba20768bcdbd1a816dfe9190bfdf8419b8bf38999d3298c3c42c6976bad798cade7cf27d4d4a58b6c9a9b26ea35ee03a457ef6a71ef8f67830e24202a957cf866f7d552af6903e17239ec36978b7798927d3a14e862e3bf08024b3e2b673b0972deff88a416bb92cc84fd2ab534354de09c8514abe95ba717aec63bb886a27f0b68fa4812ea0c7c6f700a29c756c183804bf1003f6e74261e101f35c7d57349aa2adee2b9544a9c1736ef2745346a5e592cfbaeb39adfdb5fc1a3859e587839460654e0bd8ccf15c753b82a95efd6d41ab1fb0a03c1cd6c253644c0f31ab4aaf78febb16c6419fc071e88bc7f9acd5e12452b55d0ab9979dc45cb7e3cf1bce350bd86a70929b3b137abf231c16d9c881cbfd41e54e998342723c7d50ce99e8b61b2ac5f6be44633c67490e8b147776b9a488e0a2f6bf76e93086c52eceaf2242700a559fa00ad43c2bc74a111289584cc1728e6cbc8656c5969aac763611b444f66645c6c9ffd7f3fbae08a088f4177c4e6f06ffb0161723f2c6249f6dac644f2063f9637d5b2c2f01226e1ce92d7d8711a1543a00e87343f8360cbb2c4fce98bf1fb5579613bf5d872b32bc73479733759a422518cff36f738c7c3de53c17e6e98aaeb964feb90ae807460248e0331bfaecd78de2ccf9cabdb9f6d7070222e0af1c2d197981a2a9bd6ad77873b0767861cfb2424033dfe4a1752312b51d1da6587c1b0af788fbc7436db8306cb93c662e392ba042b9b725457f5de9c50e70f7d5f224d4ea3b0d2eea71327b41aa35c2c2d5d0b5f8dbe750536c5775239eeb5d76fb1d6002ca98c1c734687f75276893b0d249a8c9056e447acf9915ec093b027d37fe4c19d707c4c4282b6c55ca3b7cf42f0fe30962b39c106524b38821cef5f930ec544a08dce0ddb534c7fe4de6a9ce171b085c63d35d1153250764a8a3ed0476dc4ada4eff96d2cb9f757295d8f66c505e4b75d2043f723b0de92033dec5137e248390c1fccbaf4627df814a0a11af4ac55d5f1f7023f75bc2ce6c60e0f9ab9f7e062eba83e0db60467c432f4a27afcf1023f0cbe393bbb0b754cfb84b19164ffb5796ea054353a3e976696b02b066135754a8f53ee7e17bb79db7e05daccb6c45046d34062c60c818ace732501c1796a250f1c10d6093367064169c59beb17dec96f7989c5948df24512209700fa03c5828299a685d1e8f18379b336c646c2b52ec43f418e8f3addbafefb49af70fbf2d3ce5ad198a013178ea064e704697ba15ce376c9f1ad52ef0393b0edb638ed9d3e303c0f21d67a2e3f367208056b413b6bb1320afff145b644790bcf5755f92e398d1211486218f31d59726dacf6cb227283b5dc5ffed7aeb96dd47a01d342a7de4a9a7f5ff81c3e5857bf5893a8598ae42b87b4e71565578abebe9f802ab0fd98eeea1fe8c16d82b62bc11b7f9476516b637a0196abefe6d3a9c66ebc0b3586504279a4978dfdfd1deb27141ec3b04ccbc5361f026ff277df08dfb0c5889a2fa37c1570ec3e657af2fbf1a22ff3844a02be2946abacb6abef4148d04bb8e73b02ccac78d4dde7bf1e96e3fafc87bcb374fa11561abcac6bf84f0c7a98aad87db9595fb295e584197a0ae60bc60f924941767e2dc03fb33acca944c01331c68601e9a1eccf2873ca423d8166c426e9c39d6adac82b941c012592acfb441390dcc7fb081652abebd615050cbcf62ad4ddf0d6fd8f5d8be5ceb979fc293ceee7ca5208afee9d655023e73b8ac4d994e207ec7fd8688c3a4b68bd3c3629f474190a10aa68bc85fc47b5cdd549fc70c79775aa3cdee38d147b65d9df885182459a5a09c883bef9ba5ccd78d6e7b3c0f3ee7ec05d62455f8cef7af5318cc92e12700621bdbc385f782c1f5ea616ee4a7f807b918e25547da342cd3e24ef941d2be586890e7c638266b72bf7eac6f961afb79db5716c01ad0e1b7f25b4470f015ebd32fe034effd4317826477655e6474f6e28c38d9ac278a2660fe8ee30e8cc3f7ab8585d875436f4a7ba7b356edfac2a108ff57a7367805d1ab8dc62d48161c7eb6c453710609a1386a07ad9c8734107c9bea0073d96a68c89a5d5104ebc2cf21da8ab4aa7962f71a2746e1d600193b89043adc8d2a09cf05454b6972840fcc7322038288ef93e06698a9f2f453b9536af85bc43b568aecab38c2fd9a4a05269f6d002bd4e2746a50898bf4c4d34474e670ddebea4e3bdd169153b4d51e886039bccc95adcc13d7cca47d2b4891f71889d5432a871a44dc4cfb7dd1c459718fa7c186a7bae0d16eb26f9f8ff406f28937d50e90410130e714d8ad5be598305973607e02e16048eab0c386a4cc865d3b2aa88f73423516fc6a9582e26271a6fe27e12a5d9fd8701de1c580ad9915fdb50897c7682a43200ec9f96fcc305ba979466125ca2f24744671c394fc05dd1091d7b6067568d2a1c467f7ef08753611d1984821700b9d37b2aa604b0bb1c14ccbf3b5e1f2a7767d5e3ab6f1eb2de7433593e922d4fb4a1c80fba969138feed67e68ad08b12f1ba8d5b078e1d4c2b8a4f25137781c45a071499a0c8913c959acb2646e6a7004cabb32c73c111bb768a232f18b9158dac42490df55050c5112a7d680a874ba1c368fc89e5888408de7e948b93aeff9a65f7a1957a9d8c2719b65eb0702655495f3b219150ffd98050c3b4c3ed86186dc20ace6a3fc661bc711977f416f764427375907e26026af616f77843b9cc46b46d82c99be507fe45147199ef5d0fa0ca2d7a2a44ab5a7cf96eae8bc0d6128bf3e52699b8189781c2bd67694e311b84c9a4a05660e641ed96d05e2fc6507964b556625c956dc6f5456d9ab08c424710b2c33275e13a8ef3e0a3e853467894bba67eae5b7c9d27a48c928a9f43e9340ca0b634ffe3c897f965b95fb55253d0079c728bce13fc8267e5bf6c9118e3b47ebf5b00949d3f75d9e0f8c28ce8cff2304e967c1c55a0e2df72bd0a42b373c582e82d49329d61ace879060ef1af8942afda9a016e651484b7ca4474b544114ff1b50214c15422aa7630c76b1f548172e3a370a6e12a290f4c26b598111cd0cc44bd507fdc377f7b13b2a4f71c12c0e0514004b1f25ac5f8b7f31688801698eb74b858bb479952c32444dc2d6c1608c78b4fd74466503da459bd6896410810c0179b07f497e643ed55da46c3ffa055114a9acd334b6299518eb6fca310da4f48ad8807c52806ed9cec1c60dd7c2e9ee7210d", 0x1000}, {&(0x7f00000000c0)="9139446884407e38ddc3ef165fd87f9afb", 0x11}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000000140)="654288c9bdb2a72a8df259c97663a17be05027717450279b6e9a0d2312d338a91d3c62f88c", 0x25}, {&(0x7f0000002400)="6e63feb464103b4b22165c6cc692f74967d17b40f849e37360b78ed4e8ef2bd0fc8bc77c07e2f33d0044d5fe47829c2e9b53631d219680512606ca", 0x3b}, {&(0x7f0000002440)="143f6426ed06636d87fd002d6a69817eaa26011a0897494317a5b4e48016cde04c390915c0c1e3eb8492b5abcb1c37c7298490f5f448e46dbef248a94cf907fca3f278e894e561d15b830f5193f5a4e9cb4ce5890ebb70151a7e7cc753e1ee60bb01b1a62d0499325099f9786a644358aeff8a56b9d210fa66a95e3c86c3e3d89d07c960f15b380cb9fd0cea56641c2e9a196605168271e96f2334d33fdbe312e8fe2e46dc89be2dbe4634e1c19af93efe489c8327169bffa36244b75892e2e0091b9018950f6d6928fb2853f33fe00b799565daa785bf9214e5bae319614089", 0xe0}], 0x8, &(0x7f00000025c0)={0x30, 0x11b, 0xfffffffffffff7ca, "76657493bf97d11d5cecf64b4c59a49e3e631ee42355490aad2c"}, 0x30, 0x4}, {&(0x7f0000002600)={0x27, 0x0, 0x2, 0x7, 0x40, 0x17d, "52474b0b94d3ab2cd3394b694830a717842c95e5eff27ec37f2de023fc458b62622170af80e3cc2729e39710c329d239556c785659dcbed9431fdfd671aa17", 0x12}, 0x60, &(0x7f0000002940)=[{&(0x7f0000002680)="ebe0111d7f85155848677449de0eb34c7a8dd1f5431d18d1b0deb8338dc87234958228fa4c2f71004e78fc13bf89ed7f38a11a3fcf54eef7b7158be350defe1c0fd0a9bbd1f473a9b1ae52f5561daa087396e5eab90a304da753c9504da566ceead821362b1340e1d2e66a0fef3b397f9ee724c47000a38c756c0fbcf245c5ba310b2244f85b90", 0x87}, {&(0x7f0000002740)="77d7e8805a471ce27441e99a045f08a43f02a2fcb77c0562f0b0a1477c85694f2c459ce1a5db77d39fc54d2d0593696f9eae4b33fb8a6677471a71ee9aaf28b5692c7efa3f16e4eb11bc57e85383ec526006c07f5b4b8c7ec33588643b7846c927e3cddec8172690091e73", 0x6b}, {&(0x7f00000027c0)="183dc7436cf9cbabf2a87241b3321f59b811d889a818e0aa81f3ddb40ff76da93daa38cfcced5f47421e779c4229a6278c20f4d2b10990c6", 0x38}, {&(0x7f0000002800)="e4fcfed69e05e8aa4dadb80257e47cfac83f59aba7c9c810f28cae1b84dff2a846c29b546505e9ba0cf36308006c90c480041f1046cf193c38748279a5a9ceeb0a34595a1c6b90132956231dfa199825230c0d83caa3106bb31f37fc1d4d14eb2c6088742668ddd5a0d210d34d87fdedeed64e75ace4c83653e75cdfd1dd45eb134a37308f32ec19023b94b6d04e941a127580dafb3f84e60322def3925c83d33411bc3bf453c7f3cc4a631e9560ee983d5db83c93b2b2a939a7e018f7a945d6a3e0928d935ba8f3a7d11a81b3c7c00d3b983f4ce8f3d34afafa2060fa7070ebc588ff", 0xe3}, {&(0x7f0000002900)="633eabc3f38229db290a61e1a5dd5d9cbc6db7fdad105c8dcd81d9bdb3d8270a58471db6491a53efe9bd3850", 0x2c}], 0x5, 0x0, 0x0, 0x80}, {&(0x7f00000029c0)={0x27, 0x1, 0x2, 0x1, 0x0, 0x8, "cbd7f49dcd7933991ba6b0838e3e85079d1cf1c025874cc901e6b70e28d2c83739a55aa99567a4d3b244a3559c34d7f577fa043bdf2ff4bb911d530cedf6cf", 0x34}, 0x60, &(0x7f0000002c40)=[{&(0x7f0000002a40)="1947e46ce7a7f8069b1dffad1884f94e2acaa9fe7b16278b1803769dfc083d741355b772588a12180d4f674f40d848e899259e7ec7cb8fa215ab60cb9edb4ca4aa3a77d43081d862174538f2b44c355e5c1d599af677ea5d17f6e388ed8f8977f6f98766865a699ed2b5589281962ef5abc772b88b5cb323af6769968f", 0x7d}, {&(0x7f0000002ac0)='\tg', 0x2}, {&(0x7f0000002b00)="624a3528c9affcc32e3758f89ddb5003093df92b1ff1313c15fb7e6040e3f9073097d1ad6d6c42082de73837811b753d60cf12fe81eaea1e26f90b95b7fa43a61f20398032470649ff867beef2a205dac73044437ee1195afed391adce920bb6c5350f435f913fb4518bb49c87d296fd174e22a2ce03f0218069ada233ff963c9159753a360f90c7c68fc67e86d7a8edebc7094d6a363ce68c0772f3d4989509af7081a8839489c6532c5a6e2deedd96649896e2b060d20260104405e6398aaa285304c87d88356b71ec1ff2313765c207d04e0ffc0d6e469ca81530396344ad40af1bec4a", 0xe5}, {&(0x7f0000002c00)}], 0x4, &(0x7f0000002c80)={0x28, 0x10b, 0x7ff, "393e95a4752288074a45ed9c19ee17022e5d"}, 0x28, 0x4000000}, {&(0x7f0000002cc0)={0x27, 0x0, 0x0, 0x3, 0x101, 0x8, "0e2f7d322701f034a070e3baa140b73d024e4833a8f2063ac6600dc62be52896e1197b3570e005a487c5fd961cefb5be46ac97d77bbf23de977a096c4ed629", 0x3}, 0x60, &(0x7f0000002f80)=[{&(0x7f0000002d40)="893fbe23522d22de1a279f837e33efbc17fab46281d14c6aa0b408240fbf08684e1207af4229e26d40490cc45cb08b08b8ca72f28306e873be81", 0x3a}, {&(0x7f0000002d80)="cc4254ca2a3dea385d7997cfb00b62c5d20d5f9cd1c2df548e947d6350f3dc0948cbfc85299d395c6129ee0567d69e1f0cbb0e6b6b0eaa26f340ead3dfda38de5bd4ccc71e62e8df04c89d3795ffb6e62b8a15e89301627a17de8c0e4826861211", 0x61}, {&(0x7f0000002e00)="9977cecd39af7ecbff0f3e862f03a532cc01ce31a56ac96a6da93cd92adf41b3c17010b57462862576b98d874a9d3e", 0x2f}, {&(0x7f0000002e40)="33c24d6cf7fa0fa5617d63eee90f7430c174", 0x12}, {&(0x7f0000002e80)="22e24a5dc667eebdedc74618b2e3f59ea534b3ccc32d1c91a6295d80133e328fa82ec896be80dbd9e7f7ac002b80145a169b4314c1de0202ba98e49f81a7ca570057af4ccb2fdf42e9805a0df842af5d5b32ec119e24e1d04c36ac8b4d81da7a208c14275e270152982abb7c9f89e82d335782a15fdd202f016bd5b301d5f8422097508a199aa14036bb392e0022f1f06d8c3e7f8c0bd3c55bd6a24b91b3fab2dea7786f418ecb55744ab2ecae3230230c6583dc4c4ac421f899f3d465da272392f581b1313a658007ad22ac3a3f25cf70fd3774018dff52b42fda7015cd4e7ff9a3d1ed", 0xe4}], 0x5, &(0x7f0000003000)=ANY=[@ANYBLOB="180000009d2f005a06832500264842"], 0x18, 0xc040}, {&(0x7f0000003040)={0x27, 0x0, 0x1, 0x6, 0x8001, 0x1, "f145ee471765c1a7c9e71d2ef14159226eb0c2cf2fb9ca5ff0bf948837633e2ecf5d8dbe8d4a4f873e10c9e57d0d3662c0468d7038b4f052f4dcd8067010cb", 0x1c}, 0x60, &(0x7f00000040c0)=[{&(0x7f00000030c0)="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", 0x1000}], 0x1, &(0x7f0000004100)={0x78, 0x110, 0x101, "95a1c0bd7ca53f45ccd6a0a491bb677bf0ff8f744e470c7df9cb25ba12585cf72ee17ac6b93f4c28409fe97912ed16d604605fad0400f139583e420e6c5ef0a4c02cb6fabce5b8581afec14c8022a817d3f0cae2c08c7d011b48ed52fa9e0f590190be"}, 0x78, 0x20000000}], 0x5, 0x0) 03:35:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0x9, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:59 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000200)={0x3, 0x2, 0x1, 0x1, 0x48, 0x1}) r1 = getpid() openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x200, 0x0) sched_setscheduler(r1, 0x20000000007e, &(0x7f0000000080)=0x8) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='\\vmnet1!}\x00', 0xfffffffffffffff8) shmctl$IPC_RMID(0x0, 0x198) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) 03:35:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xaaae020000000000}, 'syz0\x00'}) 03:35:59 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0xc0045878, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4cd, 0x204001) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x22, &(0x7f0000000200)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], [], @rand_addr}}, 0x118) 03:35:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000340)}) [ 1869.626907] input: syz1 as /devices/virtual/input/input837 03:35:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0x3, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:59 executing program 2: keyctl$update(0x2, 0x0, &(0x7f0000000340), 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=@routing={0x2}, 0x8) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, r2) r3 = memfd_create(&(0x7f0000000140)='eth0)cgroup\\\x00', 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000340)={0x6, {{0xa, 0x4e20, 0x4473, @mcast1, 0x101}}, {{0xa, 0x4e21, 0x7fff, @empty, 0x17}}}, 0x108) syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffe0ffffffff0700ffc597a04d28dc6a1e181c11ceb26cce1a487920af44a3f1ca74123c0af39d854be11058f57b4e9dfb"], 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U+', 0x8}, 0x28, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)) ioctl$RTC_AIE_OFF(r3, 0x7002) 03:35:59 executing program 1: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="48be87b5993a8c3134ced4cb839224cf590e937eea3dd9aa7008381a8771f46b096a7a8d514b362b04ec0c929b2639610b0a31cbadb242cea5c4ac10bcfffb81d40b85cefdc944bce97f8625f8b5516401533178d669d32f379ad5288dc270e7b9ce1cc1aa6709e62acd86cafe02cdf19cd95db260122a1de4dec548ee8bc798beabad3fa6b399eaf53b141e59ca038794e1e30891cc9a028b32940c93a63afadd87ead88726dea7335c1c856eeb6c9a8ee47dbbcbddf05dcc4955c4773b10bf1b293a83eb9a45337e105fd769a593c9234c91d869a0a3660861d0", @ANYRESHEX]) [ 1869.682129] input: syz1 as /devices/virtual/input/input838 03:35:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2aeb5}, 'syz0\x00'}) 03:35:59 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8971, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:35:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0x4, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = getpgid(0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') ptrace$peek(0xffffffffffffffff, r0, &(0x7f0000000140)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000080)={0xa7, ""/167}) fsetxattr(r2, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) r3 = socket$inet6(0xa, 0x0, 0x200004000) ioctl(r3, 0x8, &(0x7f0000000280)="0a5cc80700315f85714070") getresgid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x3, &(0x7f0000000280)="0a5cc80700315f85714070") socket$inet6_tcp(0xa, 0x1, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0x1040, 0x0) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x26e, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x95) close(r5) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xfffffcc8, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 1869.875685] binder: 14287:14288 got transaction with invalid offset (0, min 0 max 0) or object. [ 1869.888875] binder: 14287:14288 transaction failed 29201/-22, size 0-8 line 3033 [ 1869.910135] binder: undelivered TRANSACTION_ERROR: 29201 [ 1869.928245] input: syz1 as /devices/virtual/input/input839 03:35:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0x5, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 03:35:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:35:59 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0x5, 0x400) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001b00)={0xa, 0x0, [{0x1, 0x1000, &(0x7f0000000940)=""/4096}, {0x104004, 0x16, &(0x7f00000004c0)=""/22}, {0xd000, 0xea, &(0x7f0000000500)=""/234}, {0x5000, 0xa, &(0x7f0000000600)=""/10}, {0x0, 0x4f, &(0x7f0000000640)=""/79}, {0x6000, 0xa9, &(0x7f00000006c0)=""/169}, {0x4, 0xd2, &(0x7f0000001940)=""/210}, {0xf000, 0x6e, &(0x7f0000000780)=""/110}, {0x1, 0x75, &(0x7f0000000880)=""/117}, {0x0, 0x8d, &(0x7f0000001a40)=""/141}]}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d6d}}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mknod$loop(&(0x7f00000002c0)='./file0/file0\x00', 0x2000, 0xffffffffffffffff) getpeername(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) setsockopt$inet6_opts(r3, 0x29, 0x3f, &(0x7f0000000400)=@srh={0x3c, 0xa, 0x4, 0x5, 0x2, 0x8, 0x9, [@empty, @dev={0xfe, 0x80, [], 0x1f}, @mcast2, @mcast2, @loopback]}, 0x58) 03:35:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x6c00000000000000}, 'syz0\x00'}) 03:35:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x800000000000000, 0x0, @mcast1, 0x4}, 0x1c) [ 1870.115887] binder: 14314:14316 got transaction with invalid offset (0, min 0 max 0) or object. [ 1870.155954] binder: 14314:14316 transaction failed 29201/-22, size 0-8 line 3033 [ 1870.202332] binder: undelivered TRANSACTION_ERROR: 29201 [ 1870.217518] input: syz1 as /devices/virtual/input/input841 [ 1870.260061] input: syz1 as /devices/virtual/input/input842 03:36:00 executing program 2: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7f, 0x202) write$input_event(r0, &(0x7f00000000c0)={{0x0, 0x7530}, 0x2, 0x3210, 0xfffffffffffffffa}, 0x18) chdir(&(0x7f0000000000)='./file0\x00') clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) mknod(&(0x7f0000000180)='./file0\x00', 0xffc, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300), &(0x7f00000001c0)) 03:36:00 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8992, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:36:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x100000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x80000, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:36:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xffffffff00000000}, 'syz0\x00'}) [ 1870.774677] input: syz1 as /devices/virtual/input/input843 [ 1870.789204] binder: 14340:14341 got transaction with invalid offset (0, min 0 max 0) or object. [ 1870.818347] input: syz1 as /devices/virtual/input/input844 03:36:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) getpid() r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x141000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'team_slave_0\x00', 0x100}) setsockopt$inet_buf(r0, 0x0, 0x19, &(0x7f00000000c0)="18000000020001000000be8c4bff8c88580000110203000008000000000000400a0033d898056bf748bb6a8807567e59db01f81947b3550400000067a1e20059fc21e3e000000000000453ff1f00080000000000038ebbff06281c2a6be33e7a0fd9b0c30100000b01000000b121ad1474d722f542002700ec008b000800c500000100e9f57406aa010b000400264a64d2078a1864c84310abea04aa56da2d55aee65d7299865d1294333e162eda00b776b553502e0a7c731dc4e94a1ee130b2", 0xc0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000001c0)=0x10) 03:36:00 executing program 2: unshare(0x400) r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}}, &(0x7f00000000c0)) 03:36:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x10000000, 0x0, @mcast1, 0x4}, 0x1c) [ 1870.870985] binder: 14340:14341 transaction failed 29201/-22, size 0-8 line 3033 [ 1870.906908] binder: undelivered TRANSACTION_ERROR: 29201 03:36:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x9fae020000000000}, 'syz0\x00'}) 03:36:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:00 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8993, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:36:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x5, 0x0, @mcast1, 0x4}, 0x1c) 03:36:00 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000010, 0x803, 0x0) write(r0, &(0x7f0000000180)="240000001a0007230200b404feff1400810b5aff6410b50000f07f000200ac142c10a22b", 0x24) 03:36:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xd) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000400), &(0x7f00000003c0), 0x1000) [ 1871.072755] binder: 14388:14389 got transaction with invalid offset (0, min 0 max 24) or object. [ 1871.098295] input: syz1 as /devices/virtual/input/input845 [ 1871.142901] binder: 14388:14389 transaction failed 29201/-22, size 24-8 line 3033 [ 1871.179098] binder: undelivered TRANSACTION_ERROR: 29201 03:36:00 executing program 2: socket$l2tp(0x18, 0x1, 0x1) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000240)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 03:36:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4000000000000000, 0x0, @mcast1, 0x4}, 0x1c) [ 1871.205247] input: syz1 as /devices/virtual/input/input846 03:36:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:01 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8000000000000200, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000280)=@v1={0x1000000, [{0x7ff, 0x6}]}, 0xc, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0x4008550c, &(0x7f0000000000)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x7}, {0x4, 0x6}], r2}, 0x18, 0x2) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f00000003c0)=0xe8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @remote}, 0x10) 03:36:01 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a3, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:36:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x400000000000000}, 'syz0\x00'}) 03:36:01 executing program 2: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400) getsockopt$sock_int(r0, 0x1, 0x3b, &(0x7f0000000180), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000002c0)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='cpuset.effective_mems\x00', 0xfffffffffffffffc) 03:36:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x7, 0x0, @mcast1, 0x4}, 0x1c) [ 1871.368659] binder: 14419:14425 got transaction with invalid offset (0, min 0 max 24) or object. [ 1871.388723] input: syz1 as /devices/virtual/input/input847 03:36:01 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x84) pipe(&(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000740)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="ba0200000000000000e99f7b01adc2f2", 0x10}], 0x1, &(0x7f0000000100)}, 0x0) [ 1871.414253] binder: 14419:14425 transaction failed 29201/-22, size 24-8 line 3033 03:36:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x8000000000000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1871.458725] binder: undelivered TRANSACTION_ERROR: 29201 [ 1871.483541] input: syz1 as /devices/virtual/input/input848 03:36:01 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x400000000000000) mount(&(0x7f0000000200)=ANY=[], &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) getsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000100), &(0x7f0000000140)=0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472072a22eac975463466646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000180)='mqueue\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='self\x00', &(0x7f0000000280)='em1{\x00', &(0x7f00000002c0)='\x00'], &(0x7f0000000480)=[&(0x7f0000000340)='9p\x00', &(0x7f0000000380)=')*\x00', &(0x7f00000003c0)='mqueue\x00', &(0x7f0000000400)='mqueue\x00', &(0x7f0000000440)='+selinux\x00'], 0x1800) 03:36:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xa00000000000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xa5ae0200}, 'syz0\x00'}) [ 1871.593258] binder: 14455:14456 got transaction with invalid offset (0, min 0 max 24) or object. 03:36:01 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x890b, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1871.673126] binder: 14455:14456 transaction failed 29201/-22, size 24-8 line 3033 03:36:01 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x1}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x410100, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x375, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1, r0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0xcd8efc48b6e66bf3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x113, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x27a1, @remote, 0x1}, {0xa, 0x4e21, 0x1, @mcast1, 0x3}, r5, 0x7}}, 0x48) ioctl$KDMKTONE(r4, 0x4b30, 0xc) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000500)=0xaa, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r6, 0xae80, 0x0) mq_unlink(&(0x7f00000001c0)='/dev/kvm\x00') setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x0, 0xc91}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 1871.715693] input: syz1 as /devices/virtual/input/input849 [ 1871.733820] binder: undelivered TRANSACTION_ERROR: 29201 03:36:01 executing program 2: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000001c0)={0x0, 'ip6tnl0\x00'}, 0x18) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x203e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='.\x00', 0x3, 0x8, &(0x7f0000000a00)=[{&(0x7f0000000340)="d9be08c977e8dce40d0ef803d0759287c963e3f6d479b7e5a547fbd5ec4b0c149220acd0c560796500569663221b9a40e2afda6aabb9de494bbebff982180868b1757199286b7bcb459fa7ac243ca44ff80284a390971506415606c0b9991fa4225488d149609f53b7dcfaa1f4f6b1f174d61acb164a46e70f6b2cd888ba862ba98c14cbecd525e725a33118fdef23a942014a6b45f6266c37baf4d9af82537f669d2485992e18be19e86e8dcd55f424650ea03173351e95ce317c8e08987738bd363d9d423168d6abd636ff55d295869b643f0051a20cf4b7c80f0b09a6254fc59f269be7249694386d9f8fd9f13a4ac4a7abcf13dd", 0xf6, 0x9}, {&(0x7f0000000440)="7d11c3a569bf837b51d8bae30a8a595f015e8f218f8f04f0b29cc1ffe3942e79cd7f79693d99c399201da4b541a963a0ea511dfe946d90ac98f83aceb90c10581a15a77af97628911fc15c021215210c2cd65a72e493f359c3969a16e0261940603bcae33ea92690a3f9d1c4720b8e78e610d6b8915e4206a6505c6f2f43cbfb9bfad34f910e08210c76e8ad28875ac76c8111a2ad58ab4a8f72e86e29e609568b633287abe1635d3eea9cae02631306d76f11ef9b169376c50c26529058b47710359b42a99f2bc5", 0xc8, 0x4}, {&(0x7f0000000540)="2f33ed9d4c7e0f982d8c04bbc4c3b169baac364d7659af6047aaa33cf6dade5631ba9d8950bb45128014342dc72faa73fb1124bc8f6043b1cefd2ce1de05284a44527b02027ad34386137e353e0efd7f6b3b3f8a6cc18ff1bb8ffc829676a370d4f43b5b30bbea69e95a8ec1d743beccf594d919a97647cd22ef4844723c6942823e2da2af4fc325a02d103f98ce301ec2b222b0187aad0bdc35a8a4a80fe4f78fd2e7042ec7357ea048899e18bf47f7da85fba3f7656123a27f0c50b2059365e796dcdd832afbb9c10055c2a66d210a73d0d5328713478017c55ab88815d60b46", 0xe1, 0x9}, {&(0x7f0000000640)="fa73452cf2b4c21cad267c9166786c5ff31618c3034c324dab2802aa725d74b5760c3167126576939bb55e962a6049fb6d5374295ef5dcae59de55794fc1c4f4576e17daf7ebb38dd9853904277540de4198d34d1636bc78c8ef3589ca2f92b6e7ed93fa125a9430e3bc8b383840171674ee", 0x72, 0x3}, {&(0x7f00000006c0)="01c1dbefacc1e193c884b44aa582ac17f94401fb5756d28d7fefc62f76d298be30de9ec154465aab9ba7a7b855c332c09402d30b6ed23f7779e7f449232890202142433fa77e9dbd78f7a7873c3d5dc50e4c", 0x52, 0x2ab3}, {&(0x7f0000000740)="23e8e12ba2f93764f50ebb9bbadb0abf15eb80fd3d56d6f9528dd9825d58d4bc8e2e36492a47171a07a043ae607098ae2f166b81c6bf9adf32df15f344099ffe433a03bdfc3423c5ba7306447288f347182de9a6fc523b816596c1ecf4df8f9ac03dff1dc70144820c938ae03be25345ff323abc10dd2430242133420bc5dc5afeb9654897299f3e09b7a34dbf25dd6eea3388fe8b78336a5b57013f94cd981d3bc363d05ad7b648d844a278a9aeedbddec9ff884e38349e0d098b37057b8e29fcb3", 0xc2, 0x6e1}, {&(0x7f0000000840)="adb7f5daeacea9e3ed6dff04051458d77c85ade1a007853b97054ddfb25853f6ae250346a293cb60abaf04cf993a2db9fb8e1e2aad125200697d0d2c3074292d80c4829e8f197cbb454b707f3218fe04df2c187302982aad9feca69a1ff3baeac2f62605db51e158fa43c1c526e3d6ec5209807ca5bee95386f487cf5dd3289e915dc9e6f61ebffe60f49985e85df21394258d86ad00c3c583807c373a279617ae9b4cb1a4340dd4504e158b032459e598c4f82951452e151846e973a21f95786efe", 0xc2, 0xc6f1}, {&(0x7f0000000940)="fccdbc11c37210bc965c8aa9fdd5a71fd16333a7a7330eb0d779c26784380043469717a208a4c96c37a754029efaf8926477a311fc6641b7d539a0b9aa0bfd1eab70ba0fc3edb252b3bddf6cb89d91baec01ebd28fe0421183c41074cf4564f526473d1fbb9a1199f4948d3b9a5bc6b02d02b16d4633a0d7c40b970264d464febef419f4af3b55364e495b5a069fb6d9ddb3a5ab9882dba6c22d2d81ab5b", 0x9e, 0x9}], 0x1000000, &(0x7f0000000100)='bpf\x00') mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100020, &(0x7f0000000280)=ANY=[@ANYBLOB="f47641caa81e2d28edbd7034796ef02bdd0e93777046e942e0a71e43908a94d72288a3cfd864a02a542514c0d95a8f4ad352ee18da32ba5664b7f0be4a21475801300122164725b0f76401f5a5ece52c0f9732f63cd46c373282459c9b06feea4e6926a6b367be8afdf03ed46a830397315d832af3f511db3e2cdd9f0062b79f49e5d477c0dca57b6ddbb651add026c16da3328d7c2392f3efc88c77b2"]) 03:36:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x6000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1871.792370] input: syz1 as /devices/virtual/input/input850 03:36:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2aec6}, 'syz0\x00'}) 03:36:01 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8903, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1871.883644] binder: release 14485:14488 transaction 5864 out, still active [ 1871.902062] binder: undelivered TRANSACTION_COMPLETE 03:36:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1871.944668] binder: send failed reply for transaction 5864, target dead 03:36:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xff010000, 0x0, @mcast1, 0x4}, 0x1c) [ 1872.011848] input: syz1 as /devices/virtual/input/input851 [ 1872.079244] binder: release 14508:14509 transaction 5867 out, still active [ 1872.103604] binder: undelivered TRANSACTION_COMPLETE [ 1872.122608] input: syz1 as /devices/virtual/input/input852 03:36:01 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8936, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:36:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x0, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xfe800000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:01 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000040)={{0x32, @remote, 0x4e23, 0x2, 'rr\x00', 0x10, 0xb5, 0x4}, {@remote, 0x4e21, 0x10004, 0x8, 0x10001, 0x6e}}, 0x44) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f00000000c0)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, 0x1c) socket$inet6(0xa, 0x4, 0x0) [ 1872.171577] EXT4-fs (sda1): Unrecognized mount option "ôvAʨ-(í½p4ynð+Ý“wpFéBà§CŠ”×"ˆ£ÏØd *T%ÀÙZJÓRîÚ2ºVd·ð¾J!GX0"G%°÷dõ¥ìå" or missing value [ 1872.200897] binder: send failed reply for transaction 5867, target dead [ 1872.262435] binder: release 14520:14522 transaction 5870 out, still active [ 1872.281524] binder: undelivered TRANSACTION_COMPLETE 03:36:02 executing program 2: r0 = semget(0x3, 0x4, 0x340) semctl$SEM_INFO(r0, 0x6, 0x13, &(0x7f00000001c0)=""/215) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xffffffff88000000}, 'syz0\x00'}) 03:36:02 executing program 4 (fault-call:5 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4, 0x0, @mcast1, 0x4}, 0x1c) 03:36:02 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8906, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1872.348618] binder: send failed reply for transaction 5870, target dead [ 1872.407029] input: syz1 as /devices/virtual/input/input853 [ 1872.410454] FAULT_INJECTION: forcing a failure. [ 1872.410454] name failslab, interval 1, probability 0, space 0, times 0 03:36:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x1, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000180)=0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)=""/174, 0x1a, 0xae, 0x1}, 0x20) [ 1872.467466] input: syz1 as /devices/virtual/input/input854 [ 1872.511748] CPU: 1 PID: 14541 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #274 [ 1872.519164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1872.528529] Call Trace: [ 1872.531130] dump_stack+0x1c4/0x2b4 [ 1872.534775] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1872.540002] should_fail.cold.4+0xa/0x17 [ 1872.544088] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1872.549201] ? zap_class+0x640/0x640 [ 1872.552942] ? zap_class+0x640/0x640 [ 1872.556676] ? perf_trace_lock+0x7a0/0x7a0 03:36:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000200), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000040)={0x4, 0xd0, "2c029cf986aa8cb940bfd86fcb14057c525f6ea64acfd5445741881ae510173cd4bf2af2891624a9ecbd16cf55057543161b90997e3ca9037cdde9fd7caaffa4f38ca59d427e4a75bf42311040ca434ee213c9e60eb492c9417d61ec40be085cfb7adee66fe38316e8c03f4246fdfda5127df2e7fa62292a87ba51894621efc2ac3046d7a2e411a4bc02a7cd51142b376c4e067e262f64a98c39d3b355b5fc99dad1f423cf182493313f6f649e69382285dfd58e9f1a462bf98d0be2013a6b4a8f2ea41626e726db85b5478728bd8e93"}) close(r0) [ 1872.560923] ? binder_transaction+0x65f/0x7b80 [ 1872.565518] ? lock_downgrade+0x900/0x900 [ 1872.569672] ? mark_held_locks+0x130/0x130 [ 1872.573924] ? zap_class+0x640/0x640 [ 1872.577649] ? fs_reclaim_acquire+0x20/0x20 [ 1872.581998] ? lock_downgrade+0x900/0x900 [ 1872.586162] ? ___might_sleep+0x1ed/0x300 [ 1872.590333] ? arch_local_save_flags+0x40/0x40 [ 1872.594945] __should_failslab+0x124/0x180 [ 1872.599252] should_failslab+0x9/0x14 [ 1872.603081] kmem_cache_alloc_trace+0x2d7/0x750 [ 1872.607770] ? _raw_spin_unlock+0x2c/0x50 03:36:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xc0fe, 0x0, @mcast1, 0x4}, 0x1c) 03:36:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x51, &(0x7f0000000080), 0x358, &(0x7f00008b2000)}, 0x0) close(r0) close(r0) 03:36:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2aeac}, 'syz0\x00'}) [ 1872.611938] binder_transaction+0x13d2/0x7b80 [ 1872.616440] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 1872.621210] ? zap_class+0x640/0x640 [ 1872.624950] ? is_bpf_text_address+0xac/0x170 [ 1872.629469] ? lock_downgrade+0x900/0x900 [ 1872.633640] ? binder_transaction_buffer_release+0xaa0/0xaa0 [ 1872.639453] ? mark_held_locks+0x130/0x130 [ 1872.643703] ? is_bpf_text_address+0xd3/0x170 [ 1872.648214] ? kernel_text_address+0x79/0xf0 [ 1872.652649] ? __kernel_text_address+0xd/0x40 [ 1872.657154] ? unwind_get_return_address+0x61/0xa0 [ 1872.662099] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1872.667652] ? check_preemption_disabled+0x48/0x200 [ 1872.672693] ? mark_held_locks+0x130/0x130 [ 1872.676939] ? debug_smp_processor_id+0x1c/0x20 [ 1872.681613] ? perf_trace_lock+0x14d/0x7a0 [ 1872.681629] ? perf_trace_lock_acquire+0x15b/0x800 [ 1872.681650] ? mark_held_locks+0x130/0x130 [ 1872.681670] ? mark_held_locks+0x130/0x130 [ 1872.699267] ? debug_smp_processor_id+0x1c/0x20 [ 1872.703945] ? perf_trace_lock+0x14d/0x7a0 [ 1872.703964] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1872.703991] ? check_preemption_disabled+0x48/0x200 [ 1872.718929] ? debug_smp_processor_id+0x1c/0x20 [ 1872.718947] ? perf_trace_lock+0x14d/0x7a0 [ 1872.727831] ? perf_trace_lock_acquire+0x15b/0x800 [ 1872.732773] ? zap_class+0x640/0x640 [ 1872.736489] ? perf_trace_lock+0x7a0/0x7a0 [ 1872.740727] ? zap_class+0x640/0x640 [ 1872.744441] ? perf_trace_lock+0x7a0/0x7a0 [ 1872.748687] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1872.754494] ? check_preemption_disabled+0x48/0x200 [ 1872.759514] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1872.765058] ? debug_smp_processor_id+0x1c/0x20 [ 1872.769731] ? debug_smp_processor_id+0x1c/0x20 [ 1872.774409] ? zap_class+0x640/0x640 [ 1872.778127] ? __might_fault+0x12b/0x1e0 [ 1872.782191] ? lock_downgrade+0x900/0x900 [ 1872.786353] ? lock_release+0x970/0x970 [ 1872.790328] ? arch_local_save_flags+0x40/0x40 [ 1872.794912] ? lock_release+0x970/0x970 [ 1872.798885] ? arch_local_save_flags+0x40/0x40 [ 1872.803490] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1872.809035] binder_thread_write+0x7b4/0x31a0 [ 1872.813546] ? binder_transaction+0x7b80/0x7b80 [ 1872.818227] ? mark_held_locks+0x130/0x130 [ 1872.822464] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1872.828009] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1872.833549] ? check_preemption_disabled+0x48/0x200 [ 1872.838572] ? debug_smp_processor_id+0x1c/0x20 [ 1872.843250] ? perf_trace_lock+0x14d/0x7a0 [ 1872.847486] ? perf_trace_lock_acquire+0x15b/0x800 [ 1872.852417] ? mark_held_locks+0x130/0x130 [ 1872.856652] ? zap_class+0x640/0x640 [ 1872.860370] ? perf_trace_lock+0x7a0/0x7a0 [ 1872.864641] ? perf_trace_lock_acquire+0x15b/0x800 [ 1872.869574] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1872.875115] ? check_preemption_disabled+0x48/0x200 [ 1872.880138] ? debug_smp_processor_id+0x1c/0x20 [ 1872.884808] ? perf_trace_lock_acquire+0x15b/0x800 [ 1872.889743] ? zap_class+0x640/0x640 [ 1872.893469] ? zap_class+0x640/0x640 [ 1872.897188] ? __might_fault+0x12b/0x1e0 [ 1872.901261] ? lock_downgrade+0x900/0x900 [ 1872.905415] ? lock_release+0x970/0x970 [ 1872.909389] ? arch_local_save_flags+0x40/0x40 [ 1872.914001] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1872.919537] ? _copy_from_user+0xdf/0x150 [ 1872.923693] binder_ioctl_write_read.isra.40+0x306/0xba0 [ 1872.929192] ? kasan_check_read+0x11/0x20 [ 1872.933354] ? binder_thread_write+0x31a0/0x31a0 [ 1872.938119] ? _raw_spin_unlock+0x2c/0x50 [ 1872.942271] ? _binder_inner_proc_unlock+0x3f/0x80 [ 1872.947202] ? binder_get_thread+0x1b6/0x880 [ 1872.951622] ? binder_open+0x950/0x950 [ 1872.955510] ? perf_trace_lock+0x7a0/0x7a0 [ 1872.959751] ? ___might_sleep+0x1ed/0x300 [ 1872.963903] ? arch_local_save_flags+0x40/0x40 [ 1872.968487] ? perf_trace_lock+0x14d/0x7a0 [ 1872.972726] ? _parse_integer+0x180/0x180 [ 1872.976887] binder_ioctl+0xc7e/0x145e [ 1872.980788] ? binder_ioctl_write_read.isra.40+0xba0/0xba0 [ 1872.986409] ? zap_class+0x640/0x640 [ 1872.990129] ? __fget+0x4aa/0x740 [ 1872.993586] ? lock_downgrade+0x900/0x900 [ 1872.997747] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1873.003552] ? zap_class+0x640/0x640 [ 1873.007268] ? __f_unlock_pos+0x19/0x20 [ 1873.011260] ? __fget+0x4d1/0x740 [ 1873.014723] ? ksys_dup3+0x680/0x680 [ 1873.018447] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1873.023382] ? fsnotify+0xaae/0x12f0 [ 1873.027106] ? binder_ioctl_write_read.isra.40+0xba0/0xba0 [ 1873.032737] do_vfs_ioctl+0x1de/0x1720 [ 1873.036626] ? fsnotify_first_mark+0x350/0x350 [ 1873.041214] ? ioctl_preallocate+0x300/0x300 [ 1873.045637] ? __fget_light+0x2e9/0x430 [ 1873.049619] ? fget_raw+0x20/0x20 [ 1873.053077] ? __sb_end_write+0xd9/0x110 [ 1873.057149] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1873.062690] ? fput+0x130/0x1a0 [ 1873.065974] ? ksys_write+0x1ae/0x260 [ 1873.069787] ? security_file_ioctl+0x94/0xc0 [ 1873.074205] ksys_ioctl+0xa9/0xd0 [ 1873.077678] __x64_sys_ioctl+0x73/0xb0 [ 1873.081577] do_syscall_64+0x1b9/0x820 [ 1873.085469] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1873.090839] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1873.095766] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1873.100614] ? trace_hardirqs_on_caller+0x310/0x310 [ 1873.105635] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1873.110655] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1873.115677] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1873.120528] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1873.125715] RIP: 0033:0x457579 [ 1873.128909] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1873.147807] RSP: 002b:00007fa6de710c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1873.155522] RAX: ffffffffffffffda RBX: 00007fa6de710c90 RCX: 0000000000457579 03:36:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x10, 0x0, @mcast1, 0x4}, 0x1c) [ 1873.162790] RDX: 00000000200003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1873.170056] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1873.177326] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa6de7116d4 [ 1873.184592] R13: 00000000004be86c R14: 00000000004ce4d0 R15: 0000000000000005 03:36:02 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5421, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:36:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f00000000c0)={'bond_slave_1\x00', {0x2, 0x0, @local}}) fcntl$getown(0xffffffffffffffff, 0x9) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = dup3(r0, r1, 0x80000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x111081, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x1, 0x0, 0xffffffffffffffff}) pread64(r2, &(0x7f0000000180)=""/170, 0xaa, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000000)=""/39, &(0x7f0000000100)=0x27) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) [ 1873.213708] binder: 14539:14541 transaction failed 29201/-12, size 24-8 line 2911 [ 1873.229428] input: syz1 as /devices/virtual/input/input855 03:36:03 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8948, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1873.310374] input: syz1 as /devices/virtual/input/input856 [ 1873.368206] binder: undelivered TRANSACTION_ERROR: 29201 03:36:03 executing program 4 (fault-call:5 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xfe80000000000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x600}, 'syz0\x00'}) 03:36:03 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0x60020b) pread64(r0, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x0) write$eventfd(r0, &(0x7f0000000000), 0x8) [ 1873.503721] input: syz1 as /devices/virtual/input/input857 03:36:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xff01000000000000, 0x0, @mcast1, 0x4}, 0x1c) [ 1873.556422] FAULT_INJECTION: forcing a failure. [ 1873.556422] name failslab, interval 1, probability 0, space 0, times 0 03:36:03 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8902, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1873.647033] CPU: 0 PID: 14613 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #274 [ 1873.654452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1873.654459] Call Trace: [ 1873.654505] dump_stack+0x1c4/0x2b4 [ 1873.670043] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1873.675260] should_fail.cold.4+0xa/0x17 [ 1873.675282] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1873.675303] ? save_stack+0xa9/0xd0 [ 1873.675318] ? save_stack+0x43/0xd0 [ 1873.675330] ? kasan_kmalloc+0xc7/0xe0 [ 1873.675354] ? kmem_cache_alloc_trace+0x152/0x750 [ 1873.684502] ? binder_transaction+0x13d2/0x7b80 [ 1873.684517] ? binder_thread_write+0x7b4/0x31a0 [ 1873.684533] ? binder_ioctl_write_read.isra.40+0x306/0xba0 [ 1873.684550] ? do_vfs_ioctl+0x1de/0x1720 [ 1873.684564] ? ksys_ioctl+0xa9/0xd0 [ 1873.684579] ? __x64_sys_ioctl+0x73/0xb0 [ 1873.684595] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1873.684624] ? zap_class+0x640/0x640 [ 1873.691864] ? fs_reclaim_acquire+0x20/0x20 [ 1873.691882] ? lock_downgrade+0x900/0x900 03:36:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) close(r0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) [ 1873.691905] ? ___might_sleep+0x1ed/0x300 [ 1873.691923] ? arch_local_save_flags+0x40/0x40 [ 1873.691940] ? trace_hardirqs_on+0xbd/0x310 [ 1873.691965] __should_failslab+0x124/0x180 [ 1873.691982] should_failslab+0x9/0x14 [ 1873.692003] kmem_cache_alloc_trace+0x2d7/0x750 [ 1873.700709] ? __lockdep_init_map+0x105/0x590 [ 1873.700735] binder_transaction+0x1455/0x7b80 [ 1873.700753] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 1873.700772] ? zap_class+0x640/0x640 [ 1873.700792] ? is_bpf_text_address+0xac/0x170 [ 1873.700809] ? lock_downgrade+0x900/0x900 03:36:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x30f) recvmmsg(r1, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000940)=""/191, 0x34000}], 0x1, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840)) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x100000001, 0x10100) ioctl$TCXONC(r2, 0x540a, 0x72a5) [ 1873.700847] ? binder_transaction_buffer_release+0xaa0/0xaa0 [ 1873.710168] ? mark_held_locks+0x130/0x130 [ 1873.710187] ? is_bpf_text_address+0xd3/0x170 [ 1873.710205] ? kernel_text_address+0x79/0xf0 [ 1873.710233] ? __kernel_text_address+0xd/0x40 [ 1873.710251] ? unwind_get_return_address+0x61/0xa0 [ 1873.710270] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1873.710288] ? check_preemption_disabled+0x48/0x200 [ 1873.710307] ? mark_held_locks+0x130/0x130 [ 1873.741019] ? debug_smp_processor_id+0x1c/0x20 [ 1873.741035] ? perf_trace_lock+0x14d/0x7a0 [ 1873.741050] ? perf_trace_lock_acquire+0x15b/0x800 [ 1873.741071] ? mark_held_locks+0x130/0x130 [ 1873.741096] ? mark_held_locks+0x130/0x130 [ 1873.751971] input: syz1 as /devices/virtual/input/input858 [ 1873.753956] ? debug_smp_processor_id+0x1c/0x20 [ 1873.753972] ? perf_trace_lock+0x14d/0x7a0 [ 1873.753990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1873.754007] ? check_preemption_disabled+0x48/0x200 [ 1873.754028] ? debug_smp_processor_id+0x1c/0x20 [ 1873.766352] ? perf_trace_lock+0x14d/0x7a0 [ 1873.766368] ? perf_trace_lock_acquire+0x15b/0x800 [ 1873.766388] ? zap_class+0x640/0x640 [ 1873.766411] ? perf_trace_lock+0x7a0/0x7a0 [ 1873.820502] ? zap_class+0x640/0x640 [ 1873.820520] ? perf_trace_lock+0x7a0/0x7a0 [ 1873.820546] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1873.820570] ? check_preemption_disabled+0x48/0x200 [ 1873.820587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1873.820613] ? debug_smp_processor_id+0x1c/0x20 [ 1873.831074] ? debug_smp_processor_id+0x1c/0x20 [ 1873.831102] ? zap_class+0x640/0x640 [ 1873.831122] ? __might_fault+0x12b/0x1e0 [ 1873.831139] ? lock_downgrade+0x900/0x900 [ 1873.831158] ? lock_release+0x970/0x970 [ 1873.831180] ? arch_local_save_flags+0x40/0x40 [ 1873.963333] ? lock_release+0x970/0x970 [ 1873.967312] ? arch_local_save_flags+0x40/0x40 [ 1873.971915] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1873.977466] binder_thread_write+0x7b4/0x31a0 [ 1873.981988] ? binder_transaction+0x7b80/0x7b80 [ 1873.986662] ? mark_held_locks+0x130/0x130 [ 1873.990922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1873.996470] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1874.002020] ? check_preemption_disabled+0x48/0x200 [ 1874.007042] ? debug_smp_processor_id+0x1c/0x20 [ 1874.011710] ? perf_trace_lock+0x14d/0x7a0 [ 1874.015945] ? perf_trace_lock_acquire+0x15b/0x800 [ 1874.020879] ? mark_held_locks+0x130/0x130 [ 1874.025116] ? zap_class+0x640/0x640 [ 1874.028833] ? perf_trace_lock+0x7a0/0x7a0 [ 1874.033071] ? perf_trace_lock_acquire+0x15b/0x800 [ 1874.038006] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1874.043552] ? check_preemption_disabled+0x48/0x200 [ 1874.048579] ? debug_smp_processor_id+0x1c/0x20 [ 1874.053260] ? perf_trace_lock_acquire+0x15b/0x800 [ 1874.058196] ? zap_class+0x640/0x640 [ 1874.061924] ? zap_class+0x640/0x640 [ 1874.065642] ? __might_fault+0x12b/0x1e0 [ 1874.069705] ? lock_downgrade+0x900/0x900 [ 1874.073856] ? lock_release+0x970/0x970 [ 1874.077835] ? arch_local_save_flags+0x40/0x40 [ 1874.082439] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1874.087977] ? _copy_from_user+0xdf/0x150 [ 1874.092135] binder_ioctl_write_read.isra.40+0x306/0xba0 [ 1874.097593] ? kasan_check_read+0x11/0x20 [ 1874.101746] ? binder_thread_write+0x31a0/0x31a0 [ 1874.106521] ? _raw_spin_unlock+0x2c/0x50 [ 1874.110676] ? _binder_inner_proc_unlock+0x3f/0x80 [ 1874.115628] ? binder_get_thread+0x1b6/0x880 [ 1874.120129] ? binder_open+0x950/0x950 [ 1874.124018] ? perf_trace_lock+0x7a0/0x7a0 [ 1874.128263] ? ___might_sleep+0x1ed/0x300 [ 1874.132415] ? arch_local_save_flags+0x40/0x40 [ 1874.137003] ? perf_trace_lock+0x14d/0x7a0 [ 1874.141248] ? _parse_integer+0x180/0x180 [ 1874.145412] binder_ioctl+0xc7e/0x145e [ 1874.149846] ? binder_ioctl_write_read.isra.40+0xba0/0xba0 [ 1874.155484] ? zap_class+0x640/0x640 [ 1874.159226] ? __fget+0x4aa/0x740 [ 1874.162686] ? lock_downgrade+0x900/0x900 [ 1874.166847] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1874.172648] ? zap_class+0x640/0x640 [ 1874.176367] ? __f_unlock_pos+0x19/0x20 [ 1874.180353] ? __fget+0x4d1/0x740 [ 1874.183813] ? ksys_dup3+0x680/0x680 [ 1874.187545] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1874.192485] ? fsnotify+0xaae/0x12f0 [ 1874.196213] ? binder_ioctl_write_read.isra.40+0xba0/0xba0 [ 1874.201868] do_vfs_ioctl+0x1de/0x1720 [ 1874.205763] ? fsnotify_first_mark+0x350/0x350 [ 1874.210355] ? ioctl_preallocate+0x300/0x300 [ 1874.214770] ? __fget_light+0x2e9/0x430 [ 1874.218751] ? fget_raw+0x20/0x20 [ 1874.222211] ? __sb_end_write+0xd9/0x110 [ 1874.226290] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1874.231826] ? fput+0x130/0x1a0 [ 1874.235114] ? ksys_write+0x1ae/0x260 [ 1874.238926] ? security_file_ioctl+0x94/0xc0 [ 1874.243339] ksys_ioctl+0xa9/0xd0 [ 1874.246800] __x64_sys_ioctl+0x73/0xb0 [ 1874.250697] do_syscall_64+0x1b9/0x820 [ 1874.254591] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1874.259960] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1874.264888] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1874.269734] ? trace_hardirqs_on_caller+0x310/0x310 [ 1874.274755] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1874.279779] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1874.284806] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1874.289661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1874.294852] RIP: 0033:0x457579 [ 1874.298052] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1874.316953] RSP: 002b:00007fa6de710c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1874.324666] RAX: ffffffffffffffda RBX: 00007fa6de710c90 RCX: 0000000000457579 [ 1874.331936] RDX: 00000000200003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1874.339205] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 03:36:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xff00, 0x0, @mcast1, 0x4}, 0x1c) [ 1874.346488] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa6de7116d4 [ 1874.353754] R13: 00000000004be86c R14: 00000000004ce4d0 R15: 0000000000000005 03:36:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xf}, 'syz0\x00'}) 03:36:04 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:36:04 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1f, 0x101000) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000080)={@mcast1, 0x0}, &(0x7f0000000100)=0x14) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000280)=@can={0x1d, r1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)="e814b4c2f930dfed32d8e6dbb24858a022f8e9bb2c96b96aac1b0675541ee82a171ea9989ff1eb0d7978db987de3c66f3869cf3c64082cfc6f30543e798e2cbea43e3be580a2d0ea892523df3136c95a0aa5cb31b52f2b59", 0x58}], 0x1, &(0x7f0000000380)=[{0x40, 0x104, 0x8, "8d1bc7e153bbe1625b1dd2a109847b909d585cb203f3d02c6b37b2b3f4ec86c72a11da5f0faf054b938ead6817"}, {0x1010, 0x104, 0xfff, "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"}, {0x50, 0x0, 0x6ca3, "1b4865e69fd0be1b415907c5c3d9afce9e21409be3bff66d1148480785fd1ffe92ac0cba5be99a56d4a5482bab0579105167d79c7c70bf3aae498df070fd18"}, {0x1010, 0x13f, 0x0, "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"}, {0x1010, 0x19f, 0x7, "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"}, {0xc8, 0x117, 0x9, "f28020245aff6a40f3886f36f0ab39827464d6fc578e6af839682cd69c246e8531c87aa8ba1e27ae500d015e8d887b4be77bcc3d39111e7f7e7d8cb8a8ae887dc960db5075b70264820e214c62832a6fe627feb6708ae5c6dc46ed27cf7bda61021057930f9a679c5ff326d2f7e6a89ae92ae00a89c482da6cb361d72eff6be121e29bed608be38aa725795a3ad68fc2f553e5be25d835e603ee27aea06456d346bd389a9595a820c04b92a7b72014b582e85e50"}], 0x3188, 0x4040090}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000240), 0xfc17, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newrule={0x5c, 0x20, 0x80d, 0x0, 0x0, {0xa, 0x30, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_DST={0x14, 0x1, @dev}, @FRA_DST={0x14, 0x1, @mcast1}, @FRA_SRC={0x14, 0x2, @dev}]}, 0x5c}}, 0x0) [ 1874.477909] input: syz1 as /devices/virtual/input/input859 [ 1874.500182] binder: 14610:14613 transaction failed 29201/-12, size 24-8 line 2921 [ 1874.514023] binder: undelivered TRANSACTION_ERROR: 29201 [ 1874.521767] input: syz1 as /devices/virtual/input/input860 03:36:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x6, 0x0, @mcast1, 0x4}, 0x1c) 03:36:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xc5ae020000000000}, 'syz0\x00'}) [ 1874.647813] binder: release 14663:14665 transaction 5879 out, still active [ 1874.659126] binder: undelivered TRANSACTION_COMPLETE 03:36:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x600000000000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:04 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8949, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:36:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x20000, 0x0) setsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000280)=0x800, 0x4) mq_open(&(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x7, 0x38, 0x0, 0x8ff8}) munlockall() r2 = dup2(r1, r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000740)={0x24, 0x0, &(0x7f0000000640)=[@acquire_done={0x40106309, r3, 0x4}, @clear_death={0x400c630f, 0x2, 0x3}], 0x84, 0x0, &(0x7f0000000680)="6df903b6a3b8dc710c886a6bf7ae2c440b93b012122a98d17cab85ac4e0a6045c3b5b25b3c610a18f7853194c05c5f0cf5b4b96aa1ef2e0f793ed83088b8b34d3544346a012b34fc3104dc3d4ee190e87cd7e426205ab5c0b14645c952f1e884c978200d333be696336a58d47cf833464dabfec53a815a4b3d93c5ae09288b5be5a2e820"}) preadv(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f00000004c0)=""/86, 0x56}, {&(0x7f0000000540)=""/122, 0x7a}], 0x6, 0x0) clock_getres(0x6, &(0x7f0000000140)) 03:36:04 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000000380)="f8ce734d555cb9c4bf4e832260001f943d92cd3ce8d8e40c0fe1f4cf6daa94e06701d95a2549613a465020ecce0425cbe35da60b84e62b927539ec1f4aeee8f338e37e5a0d412c50660a6202c49de247beb48d094782366f0fc4859510248e696107c6418e6edd664523b45e981a9ba29b3d47da8f1c808f7a5826f703c0f176ea799c30e1f14285c98d12da64674b79347a", 0x92, 0x80, &(0x7f0000000280)=@in6={0xa, 0x4e21, 0x100000001, @remote, 0xfffffffffffffeff}, 0x80) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) bind(r3, &(0x7f0000000300)=@sco={0x1f, {0x101, 0x0, 0xf4, 0x40}}, 0x80) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000001, 0x0) syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x1, 0x101300) semget$private(0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000180)) semget$private(0x0, 0x2, 0x10) 03:36:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1874.730356] input: syz1 as /devices/virtual/input/input861 [ 1874.768299] binder: send failed reply for transaction 5879, target dead 03:36:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xc7ae020000000000}, 'syz0\x00'}) 03:36:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xfe80, 0x0, @mcast1, 0x4}, 0x1c) [ 1874.934742] input: syz1 as /devices/virtual/input/input863 03:36:04 executing program 2: r0 = msgget$private(0x0, 0x1) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x800, 0x8000) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32], @ANYRESOCT, @ANYPTR, @ANYPTR64, @ANYPTR64, @ANYRES64, @ANYRES16, @ANYRES64], 0x9, 0x10400000000000) 03:36:04 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8943, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1875.013619] input: syz1 as /devices/virtual/input/input864 03:36:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x1000000000000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x880, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) capset(&(0x7f0000000100), &(0x7f0000000140)={0x0, 0x41e49f14}) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000180)={[{}, {0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:36:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x97ffffff00000000}, 'syz0\x00'}) [ 1875.169171] binder_alloc: binder_alloc_mmap_handler: 14706 20001000-20004000 already mapped failed -16 [ 1875.229749] binder: BINDER_SET_CONTEXT_MGR already set [ 1875.288781] binder: 14706:14713 ioctl 40046207 0 returned -16 [ 1875.295934] input: syz1 as /devices/virtual/input/input865 03:36:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x80fe, 0x0, @mcast1, 0x4}, 0x1c) 03:36:05 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x2, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1875.457658] input: syz1 as /devices/virtual/input/input866 03:36:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000479000)="890528e4", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0)=0x273d0940, 0x4) 03:36:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xfc, 0x0, @mcast1, 0x4}, 0x1c) 03:36:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xc9ae0200}, 'syz0\x00'}) 03:36:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) semget$private(0x0, 0x0, 0x10) semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000300)=""/226) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000001c0)={r2, 0x2}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b00000005000000080500004002000040020000a0030000a003000040020000700400007004000070040000700400007027000005000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x568) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x6, [0x3ff, 0xff, 0xffff, 0xc54e, 0x6, 0x5]}, &(0x7f00000000c0)=0x10) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x400) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000b40)=[@textreal={0x8, &(0x7f0000000ac0)="360f4c44f3f20f2dd3660f2aa53757f20f0138816700a87bbaf80c66b8e4710f8f66efbafc0ced0f20e06635000020000f22e0ba2000b80000ef660f71e0070f0051dd", 0x43}], 0x1, 0x10, &(0x7f0000000b80)=[@vmwrite={0x8, 0x0, 0x4, 0x0, 0x708, 0x0, 0x86f6, 0x0, 0x4f}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"7465616d30001000", 0xffffffffffbfdffc}) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000004c0)) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000200)={0x3, 0x0, 0x10003, 0xfff}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000480)={0x7f, r4}) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000500)=0x7fff) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000280)) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) bind$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={"7465616d300000ffffffc000", 0x4bfd}) 03:36:05 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x541b, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1875.971316] binder_alloc: binder_alloc_mmap_handler: 14760 20001000-20004000 already mapped failed -16 [ 1875.983281] input: syz1 as /devices/virtual/input/input867 03:36:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x1000000, 0x0, @mcast1, 0x4}, 0x1c) [ 1876.018796] input: syz1 as /devices/virtual/input/input868 [ 1876.025974] device team0 entered promiscuous mode [ 1876.038775] binder: BINDER_SET_CONTEXT_MGR already set [ 1876.047942] device team_slave_0 entered promiscuous mode [ 1876.063744] binder: 14760:14762 ioctl 40046207 0 returned -16 [ 1876.075733] device team_slave_1 entered promiscuous mode 03:36:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x97ffffff}, 'syz0\x00'}) 03:36:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1876.194863] input: syz1 as /devices/virtual/input/input869 [ 1876.233585] binder_alloc: binder_alloc_mmap_handler: 14788 20001000-20004000 already mapped failed -16 03:36:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xbaae0200}, 'syz0\x00'}) [ 1876.255247] input: syz1 as /devices/virtual/input/input870 03:36:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1876.362642] input: syz1 as /devices/virtual/input/input871 [ 1876.375648] binder_alloc: binder_alloc_mmap_handler: 14797 20001000-20004000 already mapped failed -16 [ 1876.419710] binder: BINDER_SET_CONTEXT_MGR already set [ 1876.427081] input: syz1 as /devices/virtual/input/input872 [ 1876.443545] binder: 14797:14798 ioctl 40046207 0 returned -16 03:36:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1876.585798] binder: BINDER_SET_CONTEXT_MGR already set [ 1876.608113] binder: 14805:14806 ioctl 40046207 200003c0 returned -16 [ 1876.629097] binder_alloc: binder_alloc_mmap_handler: 14805 20001000-20004000 already mapped failed -16 03:36:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100000001}}, 0xe) 03:36:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2ae97}, 'syz0\x00'}) 03:36:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1876.820332] input: syz1 as /devices/virtual/input/input873 [ 1876.838176] binder_alloc: binder_alloc_mmap_handler: 14821 20001000-20004000 already mapped failed -16 [ 1876.870452] binder: BINDER_SET_CONTEXT_MGR already set [ 1876.877978] binder: 14821:14822 ioctl 40046207 0 returned -16 [ 1876.903804] input: syz1 as /devices/virtual/input/input874 03:36:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2aea5}, 'syz0\x00'}) [ 1877.018910] input: syz1 as /devices/virtual/input/input875 [ 1877.066604] input: syz1 as /devices/virtual/input/input876 [ 1877.156089] 8021q: adding VLAN 0 to HW filter on device team0 03:36:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x800, 0xffffffffffffff5c) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x40, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000240)={0x18}) r3 = fcntl$dupfd(r1, 0x0, r1) getsockopt$sock_buf(r3, 0x1, 0xe, &(0x7f0000000380)=""/237, &(0x7f0000000040)=0xed) ioctl$VT_DISALLOCATE(r3, 0x5608) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @rand_addr=0xfff}}, 0x1, 0x7, 0x105, 0x9, 0x3}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r4, 0xea9f}, &(0x7f00000001c0)=0x8) 03:36:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x9aae0200}, 'syz0\x00'}) 03:36:07 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8916, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:36:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @mcast1, 0x4}, 0x1c) [ 1877.315629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1877.370736] input: syz1 as /devices/virtual/input/input877 [ 1877.385035] binder_alloc: binder_alloc_mmap_handler: 14840 20001000-20004000 already mapped failed -16 [ 1877.426605] input: syz1 as /devices/virtual/input/input878 [ 1877.431589] binder: BINDER_SET_CONTEXT_MGR already set 03:36:07 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x101000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) socket$inet6(0xa, 0x80000, 0x3) rt_sigpending(&(0x7f0000000000), 0x8) ppoll(&(0x7f0000000180)=[{r2}], 0x1, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f0000000200), 0x8) 03:36:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x7f00}, 'syz0\x00'}) 03:36:07 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89e0, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1877.468441] binder: 14840:14845 ioctl 40046207 0 returned -16 [ 1877.568641] input: syz1 as /devices/virtual/input/input879 03:36:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) io_destroy(0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x28000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f75702e6e65742f73797a312775ca1e56b82a6b2c9610345bf0841f9c0102ea8317e1c2fd7ad819a4e039", 0x1ff) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a45321, &(0x7f0000000540)={{}, 'port1\x00', 0x10, 0x0, 0x7fffffff, 0x5, 0x7, 0x143c, 0x0, 0x0, 0x1, 0x2}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000006c0)=0x5) read(r0, &(0x7f00000001c0)=""/175, 0xfffffffffffffe69) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x8000) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000002c0)=""/91) ptrace$getsig(0x4202, 0x0, 0xffffffff7fffffff, &(0x7f0000000280)) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000140)) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000180), 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000480)=""/156, &(0x7f00000000c0)=0x9c) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000080)={0x1, {0x0, 0x989680}, 0x7ff, 0x8}) open(&(0x7f0000000040)='./file0\x00', 0x141000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000680)={0xa6, 0x0, 0x7093, 0x0, 0xf5800}) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 03:36:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xfec0, 0x0, @mcast1, 0x4}, 0x1c) 03:36:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:07 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000280)="08001a", 0x3) getitimer(0x2, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000), 0x10) [ 1877.641535] input: syz1 as /devices/virtual/input/input880 03:36:07 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8911, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1877.698157] binder_alloc: binder_alloc_mmap_handler: 14886 20001000-20004000 already mapped failed -16 03:36:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3f00, 0x0, @mcast1, 0x4}, 0x1c) 03:36:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x74}, 'syz0\x00'}) [ 1877.768288] binder: BINDER_SET_CONTEXT_MGR already set 03:36:07 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000840)=@rc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000280)=""/5, 0x5}, {&(0x7f00000008c0)=""/4096, 0x11e5}], 0x1}}], 0x31a, 0x0, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x80800) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x9f) r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x5f2, 0x1) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000400)=""/175) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x6, 0x400) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000140)={0xa, 0x0, 0x2, 0x7}, 0xa) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_emit_ethernet(0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000aaaaaa"], &(0x7f0000000200)) sendto$inet6(r3, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000180)) [ 1877.795600] binder: 14886:14889 ioctl 40046207 0 returned -16 03:36:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1877.859794] input: syz1 as /devices/virtual/input/input881 03:36:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3f00000000000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:07 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8910, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:36:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x9eae0200}, 'syz0\x00'}) 03:36:07 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80800) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000140)=""/157) chroot(&(0x7f0000000280)='./file0\x00') r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000100), 0x0) 03:36:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x400100) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x6fff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) [ 1878.010783] binder_alloc: binder_alloc_mmap_handler: 14924 20001000-20004000 already mapped failed -16 03:36:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xfec00000, 0x0, @mcast1, 0x4}, 0x1c) [ 1878.054149] binder: BINDER_SET_CONTEXT_MGR already set [ 1878.059504] binder: 14924:14925 ioctl 40046207 0 returned -16 [ 1878.086379] input: syz1 as /devices/virtual/input/input883 03:36:07 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:36:07 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt(r0, 0xcb3, 0x5, &(0x7f0000000180)="33a1eede54bc9058eb9018b8e250cc7b1f94868a44ab012715c5ab3088d696a9c64daede885d5b5b06d1e5d3d66f788596ead527cb086ef110adf0581726e5afb535e5e6332895fd869fc0b413060b3ba17240ded460aefeebc16e1d4d2372a1a3660383581aba6e88c8ebcc0839cc35a88934ff61a836a56a4e951f81ba7b2d7a98c4f21f5268f85ce2cbfddb9cac64f9", 0xf2731ebe) sendfile(r0, r0, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x1012, r1, 0x0) ioctl(r0, 0xc0884123, &(0x7f00000000c0)="fe4078a5639f5c54237830fd8c3b8b192f8b5bd9c47f83f2f3e45a19beb0ad0ddefad931357840bbf4d7c8d55f32130979b917e5b94a6254b30a11d243b9d30d8757fadbe179eeb66a83fb2ff432d8e174b1169668a04828bbec9a1af3998a966a6d929ad4312c4cf433a0d104545af364da604154ce8c8503e8c69b169898f28acdcc7c219d9a0bfb0666ae2b0f954614aa086737d9895f18d14170d16bc24ad814e09f833ffe26e3b6946f057a9a27bdf0ffb92ab8151da494ca86c66b") 03:36:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x9bae0200}, 'syz0\x00'}) 03:36:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:07 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000000000)) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x8001, 0x4) 03:36:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000001700)={0x401, 0x200000000000, 0x19, 0x0, 0x9, 0x9}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000016c0)={'bridge_slave_1\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x8040, 0x0) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000140)) io_setup(0x7, &(0x7f00000002c0)=0x0) io_cancel(r5, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x7, 0x140, r0, &(0x7f0000000300)="af6957c7354640fd5bb9475c0cd66bf9dc2d1e25cdb014dd1a18119f6a53607c753df0f985ced4177f5d01e87b3297557c2761bae97fab7e956bb38966314a3ff032b13d5a0790c9ddddd323dad0057b88e5311f2718a4854693cb4fa3aac63a822117d051f3c8c27e5ade8127e83da5c15b1f9e57ddeb646479b827895c2c2387a72c0ce8af30d9a753ab411978f4fc5c227b318a0c4eb516013fce8b60d36d92873d0ed0498fcff3d3cd32fc8dd827d61c4a9cb44e89fcb131189286fcc77d368d56637925af82b5243000bed2b9afd28d83e3b0ad256513587d46369a4e68e9adae83e289cde1da2d06529c68e128231ba4e51432d8d561084f260029011204f82b2a3ca3a5b6755e56a2ac725a4019677e746bca10c6c3c6f8fd273916f0cb0dd1b8197f5d78a72e67cddcecf039bbe1ce249a73ad28d310b6ed7993eb79a648a3804e7009f02a9693c94e1261d31586db778a08e618263939daf5c0a3dbea006ac809fd3f708db484dbfc9303dd6168d0cd0536d9fcea14576521e79c51abcc97c11198bbc0c41377a3e9f8797a46f948d073eb3388f362c2340a0444fc35295724babf0cb05d4ca6a91c218055270db5b7a6953baf215ccc2915c88ab3c38381432dfff55206cbdc79e6794df66988802fcc7d6dd11aeec4efdcd67591c9ae65862093806dd1d45c871fc84b5cb74113731781886fd62ab5e3142dd65e2a971306d3f6f070625e25df5be38b5d3c1b7d1d39ed54758d82b84ffb1af01937771442d435c8d0ab1673c57f1201260343f3541f4c2d7aeab3b624a69ed8315440dd2fbbff034ab6b038cb0deb15a4a6a9a1909195e0edaca5841524d500103d6d4e11becb0642d26e9545b161b98009082537781dda59899e54ef2f5d10781b5261559bd94d585aecfcd397b83d19790d868040bc17512b789dded534376aacf837a3d803b51066c7869d040f7fcde167487f3c5f445343289c4a54e35c02763edd06ab6f58ba0affddf312536d4c0fe321d92118635acbbff266d5139cd49d959568dffc571525c62fde67d1d2d2b445dfef936f48966e10a3e8e7f335dde4f54fe4bda7517c43a45db271ec55ad7a7434c8555df3a1a27af0abdb2260c1ea927ff642e9700a9abd827721b5cac2a6bb5bc4eff99adb29295ca95fce7bebd3b1c6d5deec2e07a7f006538d88c7fc4df925f16193d4655306d739f40ffe199dd1d4de33374b564c034730887f151a78bbe1badcce92c908ca6cbc7ec751858edac03fb6d6968288f06c31db1f96cb5ae976fcc84901216910d976668331e3611c8ed5f049ad41e7be42ecf036074df18770c1acbe1cdc499fa17b5da7eb6acd4c30527c7cd0d208c80498de57c0bd6b460ce33d846b42ce6264fedbaea41919a6a43371ddd8286d4363db5f4f8de3cee665085412854a78e7fb3ae3accd08fc0b699aafa01fa6e315b9c00967485deb99adf57af85673d80fcd727afca01931fcb862c74ab0fa6c7ff3d6242919c94a6bc24b74b0ba8bf85fad5e4d974793700c427c5870666baf85b07c71aa2b332ce725de57665b05325dd41a8064e6f1946000f9e8510437c378e5331c7f6c3a351bee0ecc87acd8d80453434b78984d928cfeb5efa49f3de07c8febcf80ed55c8822fdf8ce45080363f1513cfb450eb0b381831fccc94b8d2a1dce7627b28d88d03ac206ad1375ae66cd367c1f14744ba40992e8db200ee4adfe552dc1628f473f383a97057d55a705cb733f5eed0db0fcd9ca8bc8addc62ecb35fcb719c71d26a026e5ef882e04a10a21380f96b939dc058a3d0b0922eb12fe85ff496379af70448ba5f9f3f363cf7f5f0da3656abe9cc99f5864d2b26173b502dfc6e848affc52d5d97b2ba47bb95ee5c9e9c1fdb75fdfd4a148cbc6df52283d15301f6afbd850fbd5eba006d57b536d986fa7870f287bcbe285a8e29ea9900f4507d5116166c9295557dbf2a7b1b324c1567d4157cdb41131f73c9146965a7c74f8153a3f08ed51eeaf897fc8673d25efba4b6bc1078e570dccbbecf8713c92a29b96b19de431297ac5d031e7bea9dbd0f66095c6a962e2df57b627845d2e9d5ce6d70bc0009cfa75fd1f7c09b8b79b64192e9bb6cf3333397f06d95e4add8d93528cb92bc585c965f1beac46d708419c80e9fd2939b475172f9dca15c2e3f7126f17e4abc14cc736fc27e56c8bb379e2a734cd47fba0970721cac5fc2bd3173d656422d605a8acdcdcd01481c3d7b4de8e6a026256a18546b6535312be1c3a451877a5cc9dc5e729b3cd163ec74d6220c1fd28660742eaaa760a47e9ea34137700b80473a9d67046dbdc1bbbae77028a41a8ef425d1e2cf09f07d55e26a58a49ea6f468bc28fff86e1b1c889a644b9c90b40a9ab4b4b6aa95e16f42f4d17b99799e57e97a92c6daf7428c01f5545571206828846fee42a11cbc907f460a4dcf750639acae19770ae66038eff88b071e8d47f249d4dff52ea199c5d5c8548a26be407846438fe13bf1ed087109d60f05d48a377c563deb7c53185767ee8b3efa318a9c18b2de6d5e0e966f7b182964ab803b65c9feb5a7a54e8fc15304b700656f9d029403a7f49075ff7243658e3060d2c353f32a3a2506867ba96434cf9d46cf7568828037d8675cfe457f41de05449dbd2b081d22702f233d6b9283c4c4dab833bad98ab92e7e49e696e16694942b6dd6b76a03c492ed5188d3d8e71b157c8738957ec9532f7a71c44828ebd0c6e740ae826a66a97304751a8911bb1e359e9e9763b82fb4720554a65eb6f82bbb0293f21f5a712750ff25857c769af658a5fe818e3ee10273982edbd70b9a88465337491ba687ef3c867ebf84a255a05256afe0fbf2d8b9eee01739964c499ab375db64fc98bf3900ce07a0ac8f84d2f038bf4fa415bf78d587c96636d3528c383e603ad706aed0fc52c9610ea55df1ff3318f0f775d3ce5cf78746505cee7e7d520859586f8746eb9c90e39556f13e6775899e66005b76d07412614006d4b8d955555f480c2dd7895b51399fa1ad814f2c361c07d71cd995eff1a184344dcb62ff4e05182a939429a09ae64669aea8087a71aff417c48e8260ba52d0e0066258fe53375ecae8d1b79adfb6f5741abf75187ebafb4c46b51c0e41568e6586813041be711dc42c4e5f29660914ed6a49633b1e143949e7d83bbeace741275e1b1f0cc07d75b410c3c18d989c21c975e33cd50a2bb1c7df77e79aa19b382f06914ce31aba8ba0b78f5484c1868c8b2dc5243d14335e672b8604080083b291e3ea5420a0d7c403f40219e23469e58ced904bbd34a9e7851025ebd2c30251073065108c7b1b3adc45c8ed0e814d1c18b178a53b92809f9bff7882dd7999549f3cf0343bffc10acc4e36e3339c79d92e9213a30adff167fada8b2597e1c0a4b7db123cdf67abd6069cb48ee47fb30498fb5e30d28c50992bd288249f900d39abe7df08eb4dd5a32e41e99518ec53c705bf93b92873cbc9eef2b1491499253647521ff412d599b3186ec6e44f3bace9123a5b6bf885695aa87d5abca9100cea8b820e64c101c58e4d0e8ab58d3780b038326387a64565fc3f17403e4351e0c51daa3cda8d838c962861428c6cb52aacf33d4c3fdb8a7e62ab553994b93b104d84b6d8d7b82f238dcf9e7c75298d7cfa5d883c9042a23f16a51677aa38ce1b75701523f3730650506f744cac5a8247a4b6a782bbc07d671e139624a90438279955a364ee70908f195ed500368a8e2628e9622d38e37b93d6ca3513bebc99c34d2baaca421345b6f816dbc6edff08e075f2a9da4545c06f11a9c4e9ac062ac01ff31778a0392bd4b02062be14c58335642ada4f449279a3e5fe95125da78a2c6a9bce88f91e77cbc7e7c68c0c9a4e38d6e3c8914c3a2edd70dff204a6d5f0cfe126edad4ab9fdad93ee3c96fb578f566689238a88e670f5dd42db90eb7fd01870c6aa9b61eaed9420d510dedb1dfa4754dfcd2f4549388ed8dcdd8d50cdb3339033847d9dee5ca8329ee9b4630ab2500da7ce1a03e5dc587d7597ca3b1210dea45868a74950b027f32778d80542d4ffe4eb634208fdaec8182fd76be75df5ca76bb57e475d67b0917c592fab97a8ac4a2b72ad79202a3fef644d4d908470e30b80cd3b64de9cb3fa7dacc5f05f3168f402acbf68786bd2d3c083cb799a0f159e7b657ca66c0610b3b5762a1f83d5336d8c16bbca432b9cb70bf98e59b8e5ed7c4a12b0e8b4453746034358855fa11534afcbf6193c90fefc69272fc13ee6af2e0b1f5f560a3e604d40d8470e91698f558dc751e7fd70a96c9667661369b54b8f25e683c65c6cc24142f3c60a9c7d3971e206a63b3d5a6a783138659e36443209ea6ffc1321ae2fb9747a3c1dc8c7aac55da9ee0761347a740bfe9a65d7317acdb8fa632eb15ab5aa58bf05d476292c106d6bbe05d8eb6bc670a67b71b57239a0d9f283dcf9c7a34e0897263c89c88a2bda40787cff044eda47cff37a3e49ac849699ff29fb12631be84c14a0285c4089e40396408f018d1e4be427697c41e9bff555ebf798dd70d9ca054e9122bf896008f49138ad4377f1ed18c1bb63054ec9c8c265a3d44c1c31a45bfdf6029a487b136ce53f1f6d82a4e9547f434efbd6e7ef5c6f184d98007f6925950eb1cded0e59a8c4b4b310307aea8f7308703e6a8e870452547abbbcab72c248b26b9c0c8e3dcadacdeef7ab212b9419a0823e43e32dca953722b916e9f59af92f431ad2a0457483c0b60f853cb894c5a97cd4c5bc33377d99a73b0db958d46e4fdecc98e260f1a3f296c1b88ad711cebcd277b0397a1621dcb3b22e78177d942d515ae8869dabe6d87082b5311be16c3218bd028e6422195661ca8877c9e216232564498701783a3d86c1993b7465efc6c13646850f6f782c4c9180bf95d9657b96cb4037762a767bd1845ff3d740c4c3717f66f516873ceea05ed4f34b1cc458630f507a3b763b85ce133b817ef2eb8167e6a6c8484fd1c4dbd368ff51af44df75b7f0d994afc4e883206bc103359f301dc76b6974d54e31bac4c4e6f114aef7dea4abf6a543ce957f1672c7a5011b0198581956a0eeb28f12253eae65841978429873f2ae24e3d2c821b58010245c3815f248ddc0a5cb8efe165dc61500a256130b2a5284841f7b0a50a8a420bee8d8052a5cbdc8e4b8ff5f5803fb7d9d1c6b390ce9933f21515f371e2a5fb17c1ccb728363d3f699bf0886a03b29ac58fe35f9c2825f3752297b8bdb3e93766448ed549f32028264a6eb983c6bf1fb7a3966efee46b3f0ce745017b758f166114a1bedcf6c1929fa07704275d2688bfd7d4d8bfbab41358e033bf3ee381cc33e9602a11093e6133ba03798322e24ce939214dda76f8bccdf8f60c569f2b3e47818c1205e76e52f7fa65cc6f4f936c651c6c1f0a728745d050efc7431b5b1feb3cf11fc2d6d74b80ae6a3e19c481722a2f81e9ce0d42dc3862dd2fd95ca2802e4c868731980634f1e3d316ac9a11fa5a6330d050301a18685597e9e2e914755890913957d9ab257d6d99936c6fc1a666871537512b89987a3b1a7f70a7a2e8f963e9faa7df0175dd55974194e0720faabab60e54424a947795a75180cddf4bd71027a0abf7fb597b5ecd0b799949668e5b427baec8292f425573dac50c64203c9360cdea027c1ca12ab280245306f6ffa3e9c75d55609c410d277f2f8a7ee49f830960b8e890f644fe564067b6602fed962bc66eb97945e4d7827f9326da389bd59534a232c7efa440bdbf24629888c4a", 0x1000, 0x6, 0x0, 0x2, r4}, &(0x7f0000001340)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) unlinkat(r4, &(0x7f00000001c0)='./file0\x00', 0x200) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0x7, &(0x7f0000000000)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x0, "c136e34ca88b7ab9ee2847454c0b43a9ab984a67657104b793afedd1306146817eb51e09aaf74cb039360349f70e86ecdc3ddfec02944af6e48cf0908e448c5f4aeb4ab16511144daf508b0cf1a51f19"}, 0xd8) close(r6) r7 = dup3(r2, r3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xe8, 0x77, {"c20b33204da7a9ebf48fb5b61d1ec6090d235f0442a91d7c944a09a665951bd747c33d1f63f214121307c151d58aa45445d651d5706c7677d5b614426314835c0480e7b740733ff5256c58b0a98da11c826a09ac8f6859883a33c4cd35b8dfb2a80f80371e709f3c41a72296cfce174556e3c1532d22e44f1207588c76d2f2f560c815863511043ab630f6215f3db55551bdba5117aa4b76ad24b695af4b44e020357019c83367e21c72e2462da5e1ec8cc5b01fd9a84ca3831959182e215346472d29598dedc1618dcb714044"}}, {0x0, "6747c7b75c98ee19f9053911636423691dc324494191d71d4c6f9423934a388f99d765e17ef97ac0e717153deeb48e73cef4d9a033ec98d3cdfed5e79d9365e84064c5ad43b434bae48b2c28e7e542ec5a9b22010773ce75fd0cf5107398187a93ef08e49c96492193b970ceb54a0c51f61a07c6f9fee4c97c86d12b45f81513362c157d1425b52c49dbc94ef5f8c1af4314a006ea81bc2ce0b50c305a975dbbc47b118299b781bfbe797211eb37ee74bd7864e8c454cfa96aa991a6871dbe287bfe745d9220e768db135067bc1d7aa41ec6a532cc0ab131ef28541b"}}, &(0x7f0000001580)=""/222, 0x1c6, 0xde}, 0x20) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000200)=0x6f7c, 0x4) [ 1878.314985] input: syz1 as /devices/virtual/input/input885 [ 1878.321014] binder_alloc: binder_alloc_mmap_handler: 14969 20001000-20004000 already mapped failed -16 [ 1878.365796] binder: BINDER_SET_CONTEXT_MGR already set 03:36:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x7000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r0 = syz_open_dev$binder(&(0x7f0000000500)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000000009a2c35f60a198afa710e9bc950d7a40545c50551f4de7ca52764fedcfd5fa77814496e43aa61cae06b22ec21613e289025d20d7edd061ffe4c3b2f28612f693535e84395e121ccea40d76445d68350ccea9ccb816110473b75a7c522119e019f59e1d52824b267557922d825e805e26de3a032e249be6bd9f4326e8f9c06599bef4b778ad7a25eb436b80e24e74ce6255b7c7ace4cf3062c5e856f3c28557217f0934510492782a80ca58cb36d1ecb0a493798230e2a951b0b7dd7427a164283895ed7b37e339718f7cec5"], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00'], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x1f, 0x2, &(0x7f0000000380)=[{&(0x7f0000000180)="e1486010c11dcd2f225240f50e284fc1695b7c5c2df0ccf9349c5903a0d764f025926210a8472336b868ffec1bdef143724604f1ca353247a02117264db614ff9ba8e3d1ca12829149386abe298633301865407a972218d419fb8e0360a935245b450c5f22b226cd9b2460d3b6ed8b4ef27f22871c3c372621272e99f8d74928b31756188ee13b63558adca489e5cf6744ab16c1a617ff8ae750f8057f0cf13f86d985bf1e58c985879842c8537cd0d8bbe244318e324ceeb2bdd225a9957b0e3f3f74397d508739", 0xc8, 0x4}, {&(0x7f0000000280)="5d1a51ef6269eb95e05b910481df8b0133716cc4c9499f36f5b4231ac8aeb4d1359a778ca8ce8752debdca18c4e8e58d0bf3333a80129a6b2e9fa08b1a421a72f9f6f1c29ee8f2a585e26f878429782a7af6658d81386b3ead891c1831e7c6f8bea5e543a955729a151f3c32770d28122c2909796f4a9fb22b7be76fc22512f19559e6e57796791baa1da41e0ca649b02e7d14e0abfc56a308ab41252ded03b9ea4317bbb6b8c7a73e78282e8f5267ef84db7a57b6ee1a9d0679fe85566add6b771b7b701da5cfe630ca76", 0xcb, 0x800}], 0xfc96824231bbd63e, &(0x7f00000003c0)=ANY=[@ANYBLOB="64656772616465642c6e6f747265656c6f672c667061676d5c6e74dbd3ddba3d616c6c2c6673757569643d77373734653877002d006132352d636700372d396672772d7f373035357b77312c636f6e746578743d73797374656d"]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x0, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 03:36:08 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8921, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1878.399897] binder: 14969:14972 ioctl 40046207 0 returned -16 03:36:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1878.456427] input: syz1 as /devices/virtual/input/input886 03:36:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xf00}, 'syz0\x00'}) 03:36:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xa000000, 0x0, @mcast1, 0x4}, 0x1c) [ 1878.524472] binder: 14992:14993 ioctl c0306201 20008fd0 returned -14 [ 1878.577493] binder: BINDER_SET_CONTEXT_MGR already set 03:36:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x300, 0x0, @mcast1, 0x4}, 0x1c) 03:36:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400000, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000100)="62db63039664c2a2202c98db4993085db2255a5588cbaab3ef6c2533f1c8b908e8e8579c20a5c4869d954532835ac78e3252f49d1b82dc0b52481e973ce06270342c756afae2d6416036cabccea020d9917f6c14bfcabd6774a449939f39c12bbfb295efb2340387b830e68ccc94d3c53ac3e775dc42b994ca395830cb467e21bdd4099ca11a2cfbe62c9e055fdc8e486c011049be962788d052c23563396c22ec215079ee9184e99ef7fd5ea91cd2e35e27") r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000000)={0x7b, 0x0, [0x40000020]}) [ 1878.632980] input: syz1 as /devices/virtual/input/input887 [ 1878.642076] binder: 15003:15004 ioctl 40046207 0 returned -16 03:36:08 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8904, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:36:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r0 = syz_open_dev$binder(&(0x7f0000000500)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000000009a2c35f60a198afa710e9bc950d7a40545c50551f4de7ca52764fedcfd5fa77814496e43aa61cae06b22ec21613e289025d20d7edd061ffe4c3b2f28612f693535e84395e121ccea40d76445d68350ccea9ccb816110473b75a7c522119e019f59e1d52824b267557922d825e805e26de3a032e249be6bd9f4326e8f9c06599bef4b778ad7a25eb436b80e24e74ce6255b7c7ace4cf3062c5e856f3c28557217f0934510492782a80ca58cb36d1ecb0a493798230e2a951b0b7dd7427a164283895ed7b37e339718f7cec5"], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00'], 0xfffffffffffffd27, 0x0, &(0x7f0000002000)}) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x1f, 0x2, &(0x7f0000000380)=[{&(0x7f0000000180)="e1486010c11dcd2f225240f50e284fc1695b7c5c2df0ccf9349c5903a0d764f025926210a8472336b868ffec1bdef143724604f1ca353247a02117264db614ff9ba8e3d1ca12829149386abe298633301865407a972218d419fb8e0360a935245b450c5f22b226cd9b2460d3b6ed8b4ef27f22871c3c372621272e99f8d74928b31756188ee13b63558adca489e5cf6744ab16c1a617ff8ae750f8057f0cf13f86d985bf1e58c985879842c8537cd0d8bbe244318e324ceeb2bdd225a9957b0e3f3f74397d508739", 0xc8, 0x4}, {&(0x7f0000000280)="5d1a51ef6269eb95e05b910481df8b0133716cc4c9499f36f5b4231ac8aeb4d1359a778ca8ce8752debdca18c4e8e58d0bf3333a80129a6b2e9fa08b1a421a72f9f6f1c29ee8f2a585e26f878429782a7af6658d81386b3ead891c1831e7c6f8bea5e543a955729a151f3c32770d28122c2909796f4a9fb22b7be76fc22512f19559e6e57796791baa1da41e0ca649b02e7d14e0abfc56a308ab41252ded03b9ea4317bbb6b8c7a73e78282e8f5267ef84db7a57b6ee1a9d0679fe85566add6b771b7b701da5cfe630ca76", 0xcb, 0x800}], 0xfc96824231bbd63e, &(0x7f00000003c0)=ANY=[@ANYBLOB="64656772616465642c6e6f747265656c6f672c667061676d5c6e74dbd3ddba3d616c6c2c6673757569643d77373734653877002d006132352d636700372d396672772d7f373035357b77312c636f6e746578743d73797374656d"]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x0, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 1878.732586] binder: BINDER_SET_CONTEXT_MGR already set [ 1878.737915] binder: 15003:15011 ioctl 40046207 0 returned -16 [ 1878.755048] input: syz1 as /devices/virtual/input/input888 03:36:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1878.790887] binder: release 14992:14993 transaction 5911 out, still active [ 1878.798085] binder: send failed reply for transaction 5911, target dead 03:36:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xff00000000000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xaeae020000000000}, 'syz0\x00'}) 03:36:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x9, 0x0, @mcast1, 0x4}, 0x1c) 03:36:08 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0xc0189436, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) [ 1878.902343] binder: 15033:15034 ioctl c0306202 200003c0 returned -22 [ 1878.918869] binder: BINDER_SET_CONTEXT_MGR already set 03:36:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000000180)=@abs={0x1}, 0x6e) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) [ 1878.959591] binder: 15029:15035 ioctl 40046207 0 returned -16 [ 1878.960424] binder: BINDER_SET_CONTEXT_MGR already set [ 1879.000323] input: syz1 as /devices/virtual/input/input889 [ 1879.000537] binder: 15029:15035 ioctl c0306201 20008fd0 returned -14 03:36:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000040), 0xfd71) fstatfs(r0, &(0x7f0000000080)=""/31) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="909d000000000000f700000000000000010000000000016a09de385700000000"]) utimensat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={{0x77359400}, {0x0, 0x7530}}, 0x0) write$FUSE_IOCTL(r0, &(0x7f00000000c0)={0x20, 0x0, 0x4, {0x3, 0x4, 0xff, 0x9}}, 0x20) [ 1879.045887] binder: 15033:15034 ioctl 40046207 0 returned -16 [ 1879.052396] binder: 15029:15045 transaction failed 29189/-22, size 0-0 line 2855 [ 1879.062099] input: syz1 as /devices/virtual/input/input890 03:36:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x9fae0200}, 'syz0\x00'}) 03:36:08 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8913, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 03:36:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x200000000000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r2 = socket$l2tp(0x18, 0x1, 0x1) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) sendmsg$netlink(r5, &(0x7f0000000200)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000400)={0x2334, 0x33, 0x100, 0x70bd27, 0x25dfdbfc, "", [@nested={0x2298, 0x5b, [@generic="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", @typed={0x14, 0x1f, @ipv6=@dev={0xfe, 0x80, [], 0x15}}, @typed={0xc, 0x4d, @u64=0x7fffffff}, @generic="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", @generic="de252f4c6d169834cd0a09f4851a560bf809b88f43fc9fab1b81fea9114ab7a48ea31cc34388bdc04819c59c1a78967325b32ea30d0013efe14fa5166c8154d12d12f9ec7e2eab867b2a4d5ef720847ce04181ed7325e59ef2a72cdfdbd4ef4b5c012c89d1c060a65dc3801c9015f9cd80d0b8154b0f6939378064ad423ddebd9f450812dfe73aabc8bfb054f31975f7507792cc5bf8ab447d2183b805", @generic="4c5a522d6e5fdb666128289b6099d9cd1877d74ac946cdacf1d9a207d81ea09c9a984243d60be5c0d2f66ae1cd4f7a483ef182b004476c72506228448666581ddbd59288d4a6f3c42431ea63045c55933c94a08babca5cd2054281d7d4d18f3b3adb385ea4cb4f33d120cbeaaa78a413dc578baa9e1a84cb0a03ee1524ea71b042347f509cba7ab367a47c5373e9637b72a8b50981074c68183ef58655822151b13a3005d62ad1c3c654a4bb91bf3ef9c1702f97d2c53eacec01d36b6bcf663b0ad21fb1191fd05176108ca634d7c959facaf58bcfebec", @generic="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"]}, @nested={0x8c, 0x8f, [@generic="4c288516ea6054d0cda6cc46a369d6923e220a24acf607898ed04c392993d852701793a03b86ac339f106a0679db8ec2e28bb041d02c01624bac03175e0a029189", @generic="61a3a7a82190386adc2c382e533558375314a40b4cb04af07eb06ab9a70ab6e9a99b07851ace744b3e8fabf11c7ef614610f62e0c59396b1b103a3c5ad2222f7184a4944ed20f9"]}]}, 0x2334}], 0x1, &(0x7f00000001c0)=[@rights={0x28, 0x1, 0x1, [r3, r4, r1, r4, r0]}], 0x28, 0x1}, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080)=0x7fffffff, 0x4) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 1879.220746] binder: 15070:15072 ioctl c0306203 200003c0 returned -22 [ 1879.234005] input: syz1 as /devices/virtual/input/input891 [ 1879.239732] binder: BINDER_SET_CONTEXT_MGR already set [ 1879.248868] binder: 15070:15072 ioctl 40046207 0 returned -16 03:36:09 executing program 2: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) getpgrp(0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='fdinfo/3\x00') ioctl$FS_IOC_FSGETXATTR(r3, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x80000001}) [ 1879.271465] binder: 15070:15078 ioctl c0306203 200003c0 returned -22 03:36:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xfc00000000000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1879.346931] input: syz1 as /devices/virtual/input/input892 [ 1879.377430] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1879.432025] Dead loop on virtual device ip6_vti0, fix it urgently! 03:36:09 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'\tridge0\x00', 0xfffffffffffffffd}) 03:36:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xfec0000000000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2ae96}, 'syz0\x00'}) [ 1879.476299] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1879.492725] binder: BINDER_SET_CONTEXT_MGR already set 03:36:09 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = socket$packet(0x11, 0x6, 0x300) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x100, 0x2cd) sendto$inet6(r1, &(0x7f0000000140)="0401000000c000ddb8460900ffb25b4202938207d9fb3780398d5375c5f73f939029298d7535352cd5a1f5759008", 0x2e, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x20000000006}, 0x1c) [ 1879.522026] input: syz1 as /devices/virtual/input/input893 [ 1879.537705] binder: 15102:15105 ioctl 40046207 0 returned -16 [ 1879.545707] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1879.582456] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1879.601419] Dead loop on virtual device ip6_vti0, fix it urgently! 03:36:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x900000000000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2aebe}, 'syz0\x00'}) 03:36:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfc43, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='hugetlb.2MB.usage_ir_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x20}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffff}) write$cgroup_int(r2, &(0x7f0000000380), 0x12) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/3, 0x2}], 0x1) [ 1879.841367] binder: BINDER_SET_CONTEXT_MGR already set [ 1879.854728] input: syz1 as /devices/virtual/input/input895 [ 1879.906286] binder: 15128:15132 ioctl 40046207 0 returned -16 [ 1879.967395] input: syz1 as /devices/virtual/input/input896 03:36:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000100)) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0xae6bfed532c86f11) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0xf}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x14a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4, &(0x7f0000000440)=""/45, 0x2d}}], 0x1, 0x0, &(0x7f00000050c0)={0x77359400}) 03:36:09 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'cridge0\x00', 0xfffffffffffffffd}) 03:36:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xfc000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2ae9b}, 'syz0\x00'}) 03:36:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x0) 03:36:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x200080) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000240)={r4, 0xba}, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000300)={r7, 0x3}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000340)=0x4) r8 = dup3(r6, r5, 0x80000) write$FUSE_WRITE(r8, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, 0x4, {0x3f}}, 0x18) ioctl$KVM_RUN(r6, 0xc018ae85, 0x70e000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000100)={{0x80000001, 0x8191}, 'port0\x00', 0x64, 0x80000, 0x3, 0x5, 0x1, 0x100000001, 0x7, 0x0, 0x1, 0x401}) [ 1880.175323] input: syz1 as /devices/virtual/input/input897 [ 1880.185577] binder_alloc_mmap_handler: 5 callbacks suppressed [ 1880.185594] binder_alloc: binder_alloc_mmap_handler: 15155 20001000-20004000 already mapped failed -16 03:36:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x500, 0x0, @mcast1, 0x4}, 0x1c) [ 1880.222631] binder: BINDER_SET_CONTEXT_MGR already set [ 1880.248685] binder: 15155:15156 ioctl 40046207 0 returned -16 [ 1880.268106] input: syz1 as /devices/virtual/input/input898 03:36:10 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180), 0x10) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f00000000c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000140)=0x8, 0x2) 03:36:10 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'\nridge0\x00', 0xfffffffffffffffd}) 03:36:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x88000000}, 'syz0\x00'}) 03:36:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x8, 0x0, @mcast1, 0x4}, 0x1c) 03:36:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:10 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x40, 0x0) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000000c0)='md5sum+]mime_type\x00'], &(0x7f0000000240)=[&(0x7f0000000180)='E\x00', &(0x7f00000001c0)='keyring-.+bdev\x00', &(0x7f0000000200)='\'\x00'], 0x1000) lgetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00', &(0x7f0000000480)=""/47, 0x2f) 03:36:10 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'b%idge0\x00', 0xfffffffffffffffd}) [ 1880.469106] EXT4-fs warning (device sda1): ext4_resize_begin:46: There are errors in the filesystem, so online resizing is not allowed [ 1880.491654] input: syz1 as /devices/virtual/input/input899 03:36:10 executing program 1: socket$inet6(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0x200000) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) getpid() ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000340)={0x0, 0x0, 0x401, 0x0, 0x8000, 0x8, 0x1, 0x1, 0x4, 0x0, 0x2, 0x3}) getegid() setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000004c0)={0x4, {{0x2, 0x4e23, @remote}}}, 0x88) socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000040)) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000280)="1626237255a0c7409176ff4109b6a4c35fa524541809aed294053b3e625888d1c60efefe643b6d88f1020ae2bc68041771bec13c4721af86c4e12c34f2d7b4abb65bc70b0f91e8b4e33b0bab533faa4ad897e3512a0196b12e4666f21a6239904cf3cb3a2b224cacdc12ff3242f9a26cfb8a42be2d2ca16ed75f784df50a7c5c022fb084ebb49712cdb47d5f20f0365d89e0eef69cc467f04b94dcad2bcb4c9f279d") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000680)="bbc6f4e1ac65461d26d77963813c51377467eb6dce50bb97ed295df02aa2e9da66c5362cf7f5810eeeb82244733d983b9bfd4674be8c1fdc32ddc1900e10ee6f8a0b7e7bb070978be11bc5c36967a03f469740d6edf8d593527b8ee6946c9cce8bc3cf", 0x63) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80, 0x0) [ 1880.546585] binder_alloc: binder_alloc_mmap_handler: 15217 20001000-20004000 already mapped failed -16 [ 1880.558157] EXT4-fs warning (device sda1): ext4_resize_begin:46: There are errors in the filesystem, so online resizing is not allowed [ 1880.575447] input: syz1 as /devices/virtual/input/input900 03:36:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x10000000000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:10 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000080)={0xffffffffffffffff}) fchdir(r0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x200) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) [ 1880.597250] binder: BINDER_SET_CONTEXT_MGR already set [ 1880.641044] binder: 15217:15220 ioctl 40046207 0 returned -16 03:36:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x6c000000}, 'syz0\x00'}) 03:36:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x900, 0x0, @mcast1, 0x4}, 0x1c) 03:36:10 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x100, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f00000002c0)=@routing={0xf7, 0x8, 0x3, 0x2, 0x0, [@dev={0xfe, 0x80, [], 0xc}, @remote, @empty, @loopback]}, 0x48) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0x8, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl(r2, 0x2, &(0x7f00000000c0)="2501e502b6a95a7ce80199db4230b38dbc4113bbd5553f15dc68c8877f33917e11df715cceec7aabcd554c8eae09e0c2a52e9f93cf6c532fccc1a0b2884a8a75ee8095878d2976a3ddb008795b741d5cb7017bc26ec7018619a77843b720f4538249d70276b99cb7691f6dd94e73b7226fae2be7366ae3383ac5c653c57b13f12dd008dcbf3b8b2db7d594b14e60ee3fb43a6a7e7a44818e5ffde087f6c831f201fc8d1f4a5bf21430c7c074d72e83ec3bb606d041d6030d3245fe45129bc681efd07688") 03:36:10 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'b\nidge0\x00', 0xfffffffffffffffd}) [ 1880.806823] input: syz1 as /devices/virtual/input/input901 [ 1880.835349] binder_alloc: binder_alloc_mmap_handler: 15252 20001000-20004000 already mapped failed -16 [ 1880.880673] binder: BINDER_SET_CONTEXT_MGR already set [ 1880.886064] binder: 15252:15253 ioctl 40046207 0 returned -16 [ 1880.920660] input: syz1 as /devices/virtual/input/input902 03:36:10 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) read(r1, &(0x7f0000000900)=""/4096, 0x1000) ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000000100), 0x200800100000001) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bcsh0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x5, [0x3, 0x7, 0x100000001, 0x10001, 0x1]}}) 03:36:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x300000000000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x300}, 'syz0\x00'}) 03:36:10 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'br%dge0\x00', 0xfffffffffffffffd}) [ 1881.188382] input: syz1 as /devices/virtual/input/input903 [ 1881.322562] input: syz1 as /devices/virtual/input/input904 03:36:11 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0xe4b7, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f00000005c0)=0x10) io_setup(0x4, &(0x7f00000000c0)=0x0) io_destroy(r4) lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0)) fcntl$setstatus(r2, 0x4, 0x2000) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5) connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10) 03:36:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x700000000000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:11 executing program 2: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000300)='/\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x704a, &(0x7f0000000540)=ANY=[]) openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x4000, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x40000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x480040, 0x0) renameat(r0, &(0x7f00000003c0)='./file1\x00', r1, &(0x7f0000000440)='./file1\x00') getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000480)) r2 = memfd_create(&(0x7f00000000c0)='%vmnet0em0em1*\x00', 0x0) getsockname$unix(r2, &(0x7f0000000340), &(0x7f0000000040)=0x6e) syz_mount_image$ext4(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000100), 0x820, &(0x7f0000000000)=ANY=[@ANYBLOB="01e70000742c20"]) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="bb8f013d389e2a1bc9d0d8f932db2872ea4a985e87f1435d9ddcc08394f2397272658efdbf7e768910a29f7eadc431035cc6e419d5d17fb6affffbb7f57b579487e92bd9e32c14e8882c248193947054c269abef05ae63ab2423d291a5eecb9e5ede17619c2e08f760f4a1723b46b374f7ab501cdbbd5217d48b01995cf1d0fadd7bcbb14674914dc65be621a1c099b63927eb0d5d3018576c07a9333f8077a90906e651362d7f", 0xa7) 03:36:11 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'br\ndge0\x00', 0xfffffffffffffffd}) 03:36:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x6c}, 'syz0\x00'}) [ 1882.169522] binder_alloc: binder_alloc_mmap_handler: 15308 20001000-20004000 already mapped failed -16 [ 1882.193950] input: syz1 as /devices/virtual/input/input905 [ 1882.206146] EXT4-fs (sda1): Unrecognized mount option "ç" or missing value [ 1882.214675] binder: BINDER_SET_CONTEXT_MGR already set 03:36:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x700, 0x0, @mcast1, 0x4}, 0x1c) [ 1882.246686] binder: 15308:15312 ioctl 40046207 0 returned -16 [ 1882.264785] input: syz1 as /devices/virtual/input/input906 03:36:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x6}, 'syz0\x00'}) 03:36:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x12000000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1882.326457] EXT4-fs (sda1): Unrecognized mount option "ç" or missing value 03:36:12 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bri\nge0\x00', 0xfffffffffffffffd}) 03:36:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xa, 0x0, @mcast1, 0x4}, 0x1c) 03:36:12 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000340)={0x0, @aes256, 0x2, "93a03b08e373b4fe"}) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/20, 0x14) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x400001, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x0, 0x80000001, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x0, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff, 0x1f}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x0, 0x6, 'lc\x00', 0x0, 0x40000000004, 0x200000000000}, 0xfffffffffffffd7d) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000100)=ANY=[], 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[]}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000240)=0x14) 03:36:12 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x8) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) r0 = creat(&(0x7f0000000280)='./file0/file0\x00', 0x10) exit(0xeb8e) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x200) getsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000180), &(0x7f0000000240)=0x4) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)) [ 1882.463169] input: syz1 as /devices/virtual/input/input907 [ 1882.476189] binder_alloc: binder_alloc_mmap_handler: 15350 20001000-20004000 already mapped failed -16 [ 1882.507971] binder: BINDER_SET_CONTEXT_MGR already set [ 1882.524493] binder: 15350:15352 ioctl 40046207 0 returned -16 [ 1882.543723] input: syz1 as /devices/virtual/input/input908 [ 1882.548534] overlayfs: missing 'lowerdir' 03:36:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffffffff00000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x8000a0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:12 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bri%ge0\x00', 0xfffffffffffffffd}) 03:36:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xb9ae020000000000}, 'syz0\x00'}) [ 1882.728785] MINIX-fs: mounting unchecked file system, running fsck is recommended 03:36:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x100000000000000, 0x0, @mcast1, 0x4}, 0x1c) [ 1882.783115] binder_alloc: binder_alloc_mmap_handler: 15384 20001000-20004000 already mapped failed -16 [ 1882.813082] input: syz1 as /devices/virtual/input/input909 [ 1882.836747] binder: BINDER_SET_CONTEXT_MGR already set 03:36:12 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffe, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000300)) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x4b9b, 0x80000001, 0x0, 0x0, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='pids.current\x00', 0x2761, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x297ef) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000480)={&(0x7f0000000400), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000b80)=ANY=[@ANYBLOB="add81ab99e90b5e0fe1794ebe70a83f04bee873d49637250580457cfd8dd47607abced2d67fc1831f4ac71605de62851ba6ca209a5", @ANYRESHEX=r3, @ANYBLOB="a8439f39162d75bef6ef344ab828800e10b650d01f47d5fa16e9170653b72c3b3a9b479de61afec915c956d224edbf0bbc5dc27c860674d53c5e68097441d8adb6084f2376d948a2a10cfb47e3383ad63d45e09abfce8744338c0bf12e5a8687766db5eb76faa05e5d44cdd2afcbb2ebf5a25732d7c492ce83a0ce1b24393b26d98a0ae0930c14a0a9f35be1300dab8be82f79e8bc3c3191581cc4e4d088f1be4b7885fa9e36427fe3ff2707aede45cfc8c8c01721bc67c983d80b96cb09ba090754929789642b37", @ANYBLOB="44628705c76c1bfbf4435a50777f01e574d6ca51f48c5fe66fd392575baf013d873540a7c902ed08ed536141c43a9c5fe053cdd4e0c255a1963d", @ANYPTR, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES64=r0, @ANYRESOCT=r1, @ANYBLOB="425cd9f6ade06cde2facb26ec69a0e882bbbc1f4871123a773914fccce86e99b6ce668c7f88d5f821695c29eda55ce6d4c7cb1c859ce8694385bf77535819ec4da166ac1309abb06bbf530396cc85232f970e73c15a342ab081fcaa4e6e935477154a8fa2d5ef5b0cb09d8eb90", @ANYBLOB="dc529e8c8c287a0d0d7fb0c8c9ce5fb22ec972776d198dd102b7a5699b10b749383eda2ed33dd2dd0a1f516ec16b978b35b309b6ea19aa31bb2b0718321ecdbd31fc83b19c1a284df013b6e9007934e0448443eed0840be48e1b7482e2f14630afd3915387ceb3cab483e04bcbfba1951ea59adaa7c1c644a6d110f30cf69fa499a8c24b777b04d44c58bb1fe124", @ANYRESOCT=r3, @ANYPTR64, @ANYPTR64, @ANYRESDEC=r0], @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYBLOB="3aab0ffd80d884bf18c45fef6b08ed4e3cfa368202cc6192da28567488d4d10265a77f30a41a0641a091011226ce4f886c342b71d30e933eeacf41510bd7db3c063383b26a384c271377503e8948ee3ac96dfbb28c1996426706eabcb72c510f4dc1cd0fc4985194763a4331ca318458f86b6bdb5af91201ad4dab5e6e6cc1852dadce9cc33a669961b54aaa88c88019f1cc1eb0655ee57fbca2", @ANYRES64=r4, @ANYPTR], @ANYBLOB="be9bd95535bed775a5332e8320ca89a96d90c27592ee7ab8b385cd4a58a5143a0d0a147f5b8311d34638c453b922cbaffbc89ccc83e0a96f89865bc78e78bc8fcfaa3a64b27d547fd0976bd6bce6579d422ccd3af166d076bd6a112ad41f5175fa27da230bc6626ef4d15fa20cf2955b103a080ec467e2c64df7585b4f8f0135d3e2e3202e66bbeaab161e11629f65ad49bd5383526b5b3fb2de1c8e8be41ee598b330e789ebca3c1f80b88a4902a1410bdd25fa40", @ANYPTR64]], 0x1}, 0x1, 0x0, 0x0, 0x9}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r8 = dup(r7) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000048c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) fstat(0xffffffffffffffff, &(0x7f0000000980)) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000a00)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000003a80)={{{@in, @in6}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000003b80)=0xe8) getegid() syz_open_dev$usbmon(&(0x7f00000042c0)='/dev/usbmon#\x00', 0x0, 0xc00) getpgrp(r9) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000004580)={{{@in=@dev, @in6}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000004680)=0xe8) getresgid(&(0x7f00000046c0), &(0x7f0000004700), &(0x7f0000004740)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000000c0)) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005e00)={0xffffffffffffffff, r3, 0x0, 0x12, &(0x7f0000005dc0)='selfkeyringvmnet1\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000a80)={{{@in6=@local, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) getgroups(0x0, &(0x7f0000005f80)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000005fc0)) getuid() getgid() sendmmsg$unix(r6, &(0x7f00000060c0)=[{&(0x7f0000003cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003f40), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000003f80)=@abs={0x0, 0x0, 0x1}, 0x6e, &(0x7f0000004280)=[{&(0x7f00000041c0)}], 0x1, &(0x7f0000004300)}, {&(0x7f0000004340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004540)=[{&(0x7f0000004480)="bc78f9425adcec2943595e80dfbb15d45b5d71e8b5dc398a853f0fdb81a28e787d1ffe2d6b9b19e3a0dc23b76397f6840ffa0a55e45f73d31f68cd6f60cae54dede349c1d4ef831527f180128ef3091e8b24f488000e3542d4cd35c6f7ba72eb15a6561e34c8fffc2b3ef91ff7bcd0f3a010199fed5a7b400c06ba2d10f4a2646880573bfa492a62c6", 0x89}], 0x1, &(0x7f0000004780)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="0000efc1ec4547b0f4b400000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x800}], 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100), &(0x7f0000000140)=0x8) syz_mount_image$msdos(&(0x7f0000000240)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[]) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_aout(r6, &(0x7f0000000400)=ANY=[], 0x33c) pwritev(r4, &(0x7f0000000200), 0x0, 0x0) [ 1882.871493] input: syz1 as /devices/virtual/input/input910 [ 1882.877793] minix_free_inode: bit 1 already cleared [ 1882.883563] binder: 15384:15387 ioctl 40046207 0 returned -16 03:36:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x8000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x14, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:12 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'brid\ne0\x00', 0xfffffffffffffffd}) 03:36:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x7a0c}, 'syz0\x00'}) [ 1883.027427] binder: 15413:15415 unknown command 0 [ 1883.035174] input: syz1 as /devices/virtual/input/input911 [ 1883.058197] FAT-fs (loop2): Unrecognized mount option "@" or missing value [ 1883.085137] binder: 15413:15415 ioctl c0306201 200003c0 returned -22 [ 1883.108820] input: syz1 as /devices/virtual/input/input912 03:36:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x9000000, 0x0, @mcast1, 0x4}, 0x1c) [ 1883.172534] binder_alloc: binder_alloc_mmap_handler: 15413 20001000-20004000 already mapped failed -16 [ 1883.207006] binder: BINDER_SET_CONTEXT_MGR already set [ 1883.230681] binder: 15413:15415 ioctl 40046207 0 returned -16 [ 1883.269595] binder: 15413:15439 unknown command 0 [ 1883.281831] binder: 15413:15439 ioctl c0306201 200003c0 returned -22 [ 1883.336069] overlayfs: missing 'lowerdir' 03:36:13 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffe, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000300)) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x4b9b, 0x80000001, 0x0, 0x0, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='pids.current\x00', 0x2761, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x297ef) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000480)={&(0x7f0000000400), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000b80)=ANY=[@ANYBLOB="add81ab99e90b5e0fe1794ebe70a83f04bee873d49637250580457cfd8dd47607abced2d67fc1831f4ac71605de62851ba6ca209a5", @ANYRESHEX=r3, @ANYBLOB="a8439f39162d75bef6ef344ab828800e10b650d01f47d5fa16e9170653b72c3b3a9b479de61afec915c956d224edbf0bbc5dc27c860674d53c5e68097441d8adb6084f2376d948a2a10cfb47e3383ad63d45e09abfce8744338c0bf12e5a8687766db5eb76faa05e5d44cdd2afcbb2ebf5a25732d7c492ce83a0ce1b24393b26d98a0ae0930c14a0a9f35be1300dab8be82f79e8bc3c3191581cc4e4d088f1be4b7885fa9e36427fe3ff2707aede45cfc8c8c01721bc67c983d80b96cb09ba090754929789642b37", @ANYBLOB="44628705c76c1bfbf4435a50777f01e574d6ca51f48c5fe66fd392575baf013d873540a7c902ed08ed536141c43a9c5fe053cdd4e0c255a1963d", @ANYPTR, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES64=r0, @ANYRESOCT=r1, @ANYBLOB="425cd9f6ade06cde2facb26ec69a0e882bbbc1f4871123a773914fccce86e99b6ce668c7f88d5f821695c29eda55ce6d4c7cb1c859ce8694385bf77535819ec4da166ac1309abb06bbf530396cc85232f970e73c15a342ab081fcaa4e6e935477154a8fa2d5ef5b0cb09d8eb90", @ANYBLOB="dc529e8c8c287a0d0d7fb0c8c9ce5fb22ec972776d198dd102b7a5699b10b749383eda2ed33dd2dd0a1f516ec16b978b35b309b6ea19aa31bb2b0718321ecdbd31fc83b19c1a284df013b6e9007934e0448443eed0840be48e1b7482e2f14630afd3915387ceb3cab483e04bcbfba1951ea59adaa7c1c644a6d110f30cf69fa499a8c24b777b04d44c58bb1fe124", @ANYRESOCT=r3, @ANYPTR64, @ANYPTR64, @ANYRESDEC=r0], @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYBLOB="3aab0ffd80d884bf18c45fef6b08ed4e3cfa368202cc6192da28567488d4d10265a77f30a41a0641a091011226ce4f886c342b71d30e933eeacf41510bd7db3c063383b26a384c271377503e8948ee3ac96dfbb28c1996426706eabcb72c510f4dc1cd0fc4985194763a4331ca318458f86b6bdb5af91201ad4dab5e6e6cc1852dadce9cc33a669961b54aaa88c88019f1cc1eb0655ee57fbca2", @ANYRES64=r4, @ANYPTR], @ANYBLOB="be9bd95535bed775a5332e8320ca89a96d90c27592ee7ab8b385cd4a58a5143a0d0a147f5b8311d34638c453b922cbaffbc89ccc83e0a96f89865bc78e78bc8fcfaa3a64b27d547fd0976bd6bce6579d422ccd3af166d076bd6a112ad41f5175fa27da230bc6626ef4d15fa20cf2955b103a080ec467e2c64df7585b4f8f0135d3e2e3202e66bbeaab161e11629f65ad49bd5383526b5b3fb2de1c8e8be41ee598b330e789ebca3c1f80b88a4902a1410bdd25fa40", @ANYPTR64]], 0x1}, 0x1, 0x0, 0x0, 0x9}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r8 = dup(r7) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000048c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) fstat(0xffffffffffffffff, &(0x7f0000000980)) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000a00)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000003a80)={{{@in, @in6}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000003b80)=0xe8) getegid() syz_open_dev$usbmon(&(0x7f00000042c0)='/dev/usbmon#\x00', 0x0, 0xc00) getpgrp(r9) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000004580)={{{@in=@dev, @in6}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000004680)=0xe8) getresgid(&(0x7f00000046c0), &(0x7f0000004700), &(0x7f0000004740)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000000c0)) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005e00)={0xffffffffffffffff, r3, 0x0, 0x12, &(0x7f0000005dc0)='selfkeyringvmnet1\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000a80)={{{@in6=@local, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) getgroups(0x0, &(0x7f0000005f80)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000005fc0)) getuid() getgid() sendmmsg$unix(r6, &(0x7f00000060c0)=[{&(0x7f0000003cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003f40), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000003f80)=@abs={0x0, 0x0, 0x1}, 0x6e, &(0x7f0000004280)=[{&(0x7f00000041c0)}], 0x1, &(0x7f0000004300)}, {&(0x7f0000004340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004540)=[{&(0x7f0000004480)="bc78f9425adcec2943595e80dfbb15d45b5d71e8b5dc398a853f0fdb81a28e787d1ffe2d6b9b19e3a0dc23b76397f6840ffa0a55e45f73d31f68cd6f60cae54dede349c1d4ef831527f180128ef3091e8b24f488000e3542d4cd35c6f7ba72eb15a6561e34c8fffc2b3ef91ff7bcd0f3a010199fed5a7b400c06ba2d10f4a2646880573bfa492a62c6", 0x89}], 0x1, &(0x7f0000004780)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="0000efc1ec4547b0f4b400000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x800}], 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100), &(0x7f0000000140)=0x8) syz_mount_image$msdos(&(0x7f0000000240)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[]) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_aout(r6, &(0x7f0000000400)=ANY=[], 0x33c) pwritev(r4, &(0x7f0000000200), 0x0, 0x0) 03:36:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffff, 0x101003) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 03:36:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xff000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xc3ae020000000000}, 'syz0\x00'}) 03:36:13 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridg%0\x00', 0xfffffffffffffffd}) 03:36:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x8000000000000000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1883.429405] binder_alloc: binder_alloc_mmap_handler: 15458 20001000-20004000 already mapped failed -16 [ 1883.442744] input: syz1 as /devices/virtual/input/input913 03:36:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x2000000, 0x0, @mcast1, 0x4}, 0x1c) [ 1883.501733] binder: BINDER_SET_CONTEXT_MGR already set [ 1883.536785] binder: 15458:15463 ioctl 40046207 0 returned -16 03:36:13 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x1c1081) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c, 0x0, 0x2, &(0x7f0000000080)='/\x00'}, 0x30) write$P9_RGETLOCK(r2, &(0x7f0000000100)={0x20, 0x37, 0x2, {0x3, 0xfcc4, 0x4, r3, 0x2, 'lo'}}, 0x20) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x2) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000012000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r1, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @rand_addr}, 0x6) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, 0x34) close(r1) socket$inet6(0xa, 0x1000000000002, 0x0) dup3(r1, r4, 0x0) 03:36:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x900000000000000}, 'syz0\x00'}) [ 1883.552813] FAT-fs (loop2): Unrecognized mount option "@" or missing value 03:36:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @mcast1, 0x4}, 0x1c) 03:36:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0xa0008000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:13 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridg\n0\x00', 0xfffffffffffffffd}) 03:36:13 executing program 2: getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x1, "dd"}, &(0x7f0000000080)=0x9) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) fcntl$addseals(r1, 0x409, 0x8) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0xffa8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x303000, 0x0) write$P9_RLERRORu(r2, &(0x7f00000000c0)={0x13, 0x7, 0x1, {{0x8, '/dev/ptmx\x00'}, 0x9}}, 0x17) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x7e}) getuid() 03:36:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3f000000, 0x0, @mcast1, 0x4}, 0x1c) [ 1883.734923] binder_alloc: binder_alloc_mmap_handler: 15492 20001000-20004000 already mapped failed -16 [ 1883.744460] input: syz1 as /devices/virtual/input/input915 03:36:13 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010069706970000000000c278e1b00020008000f0002"], 0x189}}, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 1883.797184] binder: BINDER_SET_CONTEXT_MGR already set [ 1883.821113] binder: 15492:15499 ioctl 40046207 0 returned -16 03:36:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x600, 0x0, @mcast1, 0x4}, 0x1c) 03:36:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xc7a}, 'syz0\x00'}) 03:36:13 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridgeG\x00', 0xfffffffffffffffd}) 03:36:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x10000, 0x400000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x98, 0x2, [0x0, 0xae79]}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r1, 0xfffffffffffffff9}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x100000000000016c, 0x3) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000189, 0x0) 03:36:13 executing program 2: r0 = socket$inet(0x2, 0x1, 0x400000) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x40000000000800, 0x4) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000400)="195054986ad3345562a76a3ae25b351aff43803ea2e25d92fb8d8e7fb8fc6ee698d74fbdd91b8a404e5a07dcec83ee1b05181cb3370bd6b75474070000006676f777c19f61c1528fbeade25063796b6c79d271078d983ec89916fb63264fb55505d7a2fdc67654252756dd7deacd3cb0fb44caed4866cd1d3ffd43fea47a9d6127", 0x81) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) r1 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x8001) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x1, 0x30, 0x8, 0x4}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e22, 0x7, @ipv4={[], [], @local}, 0xb6}}, 0x7, 0x200}, 0x90) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl(r3, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000003c0), 0x4) r4 = semget$private(0x0, 0x4, 0x3c8) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000080)=""/88) recvfrom$inet(r0, &(0x7f00000001c0)=""/248, 0xf8, 0x40012000, 0x0, 0xfd12) 03:36:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x12, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4000, 0x0, @mcast1, 0x4}, 0x1c) [ 1884.016365] input: syz1 as /devices/virtual/input/input917 [ 1884.042259] binder: 15545:15546 unknown command 0 03:36:13 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="8b9006465a5023d9caf3264cf4cc5c0c5f5ceff9d6eb13b53d83af6b17713d800d5307efba46b39188d8b5ed45eba23603354393b313539e0c25d29c18e09318cd133ea3447081848f34230a5bb5f8f69bd65eecacea91ac01011637644c05ab9cacca052dcf88b64826067134dcdd8242dc319951c0842ab5ba828e2972b29461c3e8c3e0030000006f1e140df771e290fe47829ff6a87ebee03d614256234909baef149e379f644046ef62d990b48731c2697774ea4306ac04539d9a4ad1e08f7665ebaad886b16c162da613be88ef1dc21a7b347ed27be67df6e0ca9b1777953856f2d3e68bba3df372024d8de621155e8e361486d905372d1700") sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000040807031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1884.072048] binder: 15545:15546 ioctl c0306201 200003c0 returned -22 [ 1884.078777] input: syz1 as /devices/virtual/input/input918 03:36:13 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridgeF\x00', 0xfffffffffffffffd}) [ 1884.115690] binder_alloc: binder_alloc_mmap_handler: 15545 20001000-20004000 already mapped failed -16 03:36:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) timer_create(0x2, &(0x7f0000000200)={0x0, 0x3e, 0x2, @thr={&(0x7f0000000040)="3ff4e510e82f3bb7d20bdbbb57cac5168e959dd6f28ad9c82cf01d48ff71fee3db1d3169ce92d7a688c0baafef71977b409eed87156e1f1468fe1a749976f21672bc375e9425234a752d021e6276f6fe70b26ffc7ccac4dd36b9fdd951526da171019d6835de7cf8c4fb627a5daafc1c8a4315f4bde000a2f95778b3a50bddf00daf2ecf04dd1031d3a3e834932784d3c52743f1b29638e8c537ebbdfc4bce9d6425c043d7447c3db9242e03514ee4f6e4503326d33a0402890ac592564c9cff204f83bc33635b66d397c503c85244942e8d", &(0x7f0000000140)="3d54f0e96f4c27295007d28383371d23a8bdeabb8de2c90201c2e89d074d2f4b94b97c89aefbb520c2d4e05b1f30192390edc0b4bbec71f331c6c0ae0b276644f1f37a728c6c9be49e96324485e8aef525e0b5087fd0323f28f52ca0128903a824389a179d995f7f74f5dcaf3cd7efdf3ba4439a08583a7d6276c76e3f85f49f177622d8"}}, &(0x7f0000000240)=0x0) timer_delete(r2) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2000000001}, 0x8) shutdown(r1, 0x1) 03:36:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x1fffff}, 'syz0\x00'}) [ 1884.179061] netlink: 'syz-executor2': attribute type 2 has an invalid length. [ 1884.180959] binder: BINDER_SET_CONTEXT_MGR already set [ 1884.205014] netlink: 'syz-executor2': attribute type 2 has an invalid length. 03:36:13 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000500)={'nat\x00'}, &(0x7f0000000100)=0x54) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x0, @remote, 0x2}, 0x0, [0x9, 0x0, 0x0, 0x8, 0x2, 0x0, 0x2, 0x80]}, 0x5c) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x173, 0x152, 0xffffffff, 0x79, 0x8}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae7854cdaad59c34e4076482195afe14688f7c8d9e58461082c96e271dd2e6c52018d1cff96d4e23d9853f8ac0eda42f324a1e1590447ec9a7b58757a01b264117ef55a1d60bea94457b6fbb2aa86a05f0cf0fca44b56ba45670df23536bc1c1e4b3741651030559d1e52bc4e36ff59dd8"}, 0xb9) sendto$inet6(r2, &(0x7f0000000380)="33b51871bcf89605ab142c7f44f42d065e9dc9ce3a4650ec0162700104de19cb10b1608cc384", 0x26, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000580)=ANY=[@ANYRES32=r0], 0x4) r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000005c0)=ANY=[@ANYBLOB="9130020071a31197db978d53a47d92a838d1722a0b4a429bfe6843e5821fd7b017b30ef13db657e490fd39d90f47cfe723cbf3a7ff3a97e38fdcb0ca9af983fc29143429ff5836c45c9824d7f6a3840c18be99ff20170900000000000000dbf6f1bad4fbd5689664e7647b00000000000000000000000000"], 0x1) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f2ffffff02ffff000000000000000000"], 0xfffc}}, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x815, 0x8, 0x0, 0x81, 0x6, 0x7fffffff, 0xdb4c}, 0x1c) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x7, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]}) io_setup(0x0, &(0x7f00000000c0)) 03:36:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xa00, 0x0, @mcast1, 0x4}, 0x1c) [ 1884.242841] binder: 15545:15546 ioctl 40046207 0 returned -16 [ 1884.295677] input: syz1 as /devices/virtual/input/input919 03:36:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0xffffffff00000000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1884.343968] input: syz1 as /devices/virtual/input/input920 03:36:14 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge%\x00', 0xfffffffffffffffd}) [ 1884.444096] binder: BINDER_SET_CONTEXT_MGR already set 03:36:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x5000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x40000000, 0x0, @mcast1, 0x4}, 0x1c) [ 1884.500914] binder: 15599:15602 ioctl 40046207 0 returned -16 03:36:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x1000000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x400000000000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f00006f7000), &(0x7f0000000000), 0x800000000002) futex(&(0x7f000000cffc), 0x5, 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x1000000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80000, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000100)=""/4096) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x3) [ 1884.666058] binder: BINDER_SET_CONTEXT_MGR already set [ 1884.684566] binder: 15619:15620 ioctl 40046207 0 returned -16 03:36:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x20000000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1884.872571] binder: BINDER_SET_CONTEXT_MGR already set [ 1884.904449] binder: 15633:15635 ioctl 40046207 0 returned -16 03:36:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xbbae020000000000}, 'syz0\x00'}) [ 1885.089917] input: syz1 as /devices/virtual/input/input921 [ 1885.134615] input: syz1 as /devices/virtual/input/input922 03:36:15 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x7}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0x2, 0x0, 0x0, @empty={[0x500, 0xffffff8d, 0x54, 0x0, 0x6b, 0x5400000000000000, 0x500000000000000, 0x0, 0x4, 0x500000000000000]}}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 03:36:15 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge+\x00', 0xfffffffffffffffd}) 03:36:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xff01, 0x0, @mcast1, 0x4}, 0x1c) 03:36:15 executing program 1: getpgid(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0xfffffffffffffdef) ioctl(r1, 0x800000000008982, &(0x7f0000000080)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="2900000006000000000000000000ac8b5f363c7546ffc8ad1defd300000400000000000000030000120000000004000000000000000069127f0f1f4cb25800000000000021b0c9e06ea050325f77726e71bff4c99eef500ade32c424020f322903f5bad93ae7ef35b4c5f4e09e154fb199422ba5fbe2f6b026e54b8ee2a5a9d00401eff2d718a063a44b37a701cdd350e024dad97ecfcc7ac9b06cfb20478fd4dcdc7c5268"], 0xa5) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee9d8df70f2c6849d443d5bc274a1f1576385a885b764dc4babfdf01646fa6053ebc9"], &(0x7f0000000580)='./file0//ile0\x00', &(0x7f00000007c0)="feffffffffff19ff393200", 0x8000000000000002, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f5, 0x0, 0xffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x9}]}, 0x20}}, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x100000001}, 0x8) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x2) r5 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x200, 0x40087f) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000084f7b712dd7c432e471c802a647a0a00ffffffff087b012c"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000500)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x3c4, &(0x7f0000000300)=""/187}, 0x48) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) ioctl(r4, 0xfffffffffffffbff, &(0x7f0000000e00)="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") io_submit(r8, 0x1, &(0x7f0000000200)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x80000000000, r6, &(0x7f0000001000), 0x0, 0x9, 0x0, 0x0, 0xffffffffffffff9c}]) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0xffff, 0x5, 0xc65b, 0x9, 0x80, 0x5, 0x1ff, 0x4, 0x20, 0x5, 0x7}, 0xb) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x81806) sendmsg(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @local, 'yam0\x00'}}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r7], 0x8, 0x840}, 0x7ff) 03:36:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x1a0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x7a0c0000}, 'syz0\x00'}) [ 1885.361184] input: syz1 as /devices/virtual/input/input923 [ 1885.388979] binder_alloc_mmap_handler: 3 callbacks suppressed [ 1885.389000] binder_alloc: binder_alloc_mmap_handler: 15655 20001000-20004000 already mapped failed -16 03:36:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xfc00, 0x0, @mcast1, 0x4}, 0x1c) [ 1885.436917] binder: BINDER_SET_CONTEXT_MGR already set 03:36:15 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x80001, 0x0) syz_mount_image$minix(&(0x7f0000000540)='minix\x00', &(0x7f0000000580)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000640)=[{&(0x7f00000005c0)="43578845d9ab332e3dbbd53b84fa25bb1561937993ec78b26d5e23de89ce99fa0025670f583a1e5d73cfd0337071c1c81093800714aaac6c44a342ed48b7f8f33e06871363f000b5447e47a60817793af8d1cc8169212a1af7c6f52e783cb5a2d3c4ac2d7864c80c6cc64d", 0x6b, 0x3}], 0x0, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000140)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2b85, 0x4000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000080)={0x10}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000680)={0x10000001}) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000000)={0x0, 0x0, 0xa6fde552ad2dcda3, &(0x7f0000000180)}) [ 1885.494714] binder: 15655:15657 ioctl 40046207 0 returned -16 03:36:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x500000000000000, 0x0, @mcast1, 0x4}, 0x1c) 03:36:15 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge-\x00', 0xfffffffffffffffd}) [ 1885.543368] input: syz1 as /devices/virtual/input/input924 03:36:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x14000000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x94ae0200}, 'syz0\x00'}) 03:36:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) lsetxattr$security_capability(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x4, 0x80000001}]}, 0xc, 0x3) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14, 0x100080000) r2 = geteuid() sendmsg$nl_xfrm(r0, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)=@report={0x254, 0x20, 0xc10, 0x70bd28, 0x25dfdbfd, {0xff, {@in=@multicast1, @in=@remote, 0x4e24, 0x0, 0x4e24, 0x7, 0xa, 0xa0, 0x0, 0x0, r1, r2}}, [@sec_ctx={0x20, 0x8, {0x1c, 0x8, 0x1, 0x5e, 0x14, "95e650c74781c1071059aa1276bd19d758f636f0"}}, @tmpl={0x1c4, 0x5, [{{@in=@multicast1, 0x4d4, 0x7e}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x10}, 0x3505, 0x2, 0x0, 0x7, 0x10001, 0x8, 0x7}, {{@in, 0x4d4, 0x33}, 0x2, @in6=@local, 0x0, 0x2, 0x2, 0x80, 0x5, 0x9, 0x6}, {{@in6=@mcast1, 0x4d4, 0x32}, 0x2, @in, 0x3506, 0x0, 0x3, 0x400, 0x3, 0x800, 0x2}, {{@in6=@remote, 0x4d6, 0xff}, 0xa, @in6=@loopback, 0x3504, 0x0, 0x2, 0x4e, 0x9, 0x9259, 0x2}, {{@in6=@remote, 0x4d5, 0x6f}, 0x0, @in=@broadcast, 0x0, 0x3, 0xebdcd337ffda2081, 0x81, 0x7, 0x5, 0x6}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4d4, 0x6f}, 0x2, @in6=@local, 0x3500, 0x3, 0x2, 0x7, 0x80000001, 0x2, 0xffffffff}, {{@in=@multicast1, 0x4d4, 0xff}, 0x2, @in=@loopback, 0x34ff, 0x1, 0x3, 0x7fff, 0x3, 0x400, 0x7ff}]}, @coaddr={0x14, 0xe, @in=@loopback}, @tfcpad={0x8, 0x16, 0x41}, @output_mark={0x8, 0x1d, 0x1}]}, 0x254}, 0x1, 0x0, 0x0, 0x48804}, 0x40000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xa00, 0x0) mq_getsetattr(r3, &(0x7f00000001c0)={0x4, 0x7, 0xfffffffffffffb27, 0x0, 0x6947, 0x0, 0x6, 0x9}, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x40) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000000740)=ANY=[@ANYBLOB="38010000100013070000000000001758bfe500000000000000000000000000000000000000000000000000000000000000003900000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000006c0000000000e92c149545f0e2cc350000000000000000000000000001000000000000000000000000000000000001000000000000000000b4900000000000000000000000000000000000000000000000000000000000000000000000397c434f91141604000000000000000000000000000000000000000000000000d7ac00000027a97408eb168df88e41dd24306b10000000000000000000000a0002000000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x138}}, 0x0) 03:36:15 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002740)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffff9c}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000002c0)={r2, 0x80000, r3}) r4 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:etc_t:s0\x00', 0x1b, 0x2) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300090468fe000081000000c9ffff3f03000000450001070000003719001a000400020007e91ee400538a274d69a26cdf12f24006", 0x39}], 0x1) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KDGKBMODE(r3, 0x4b44, 0xffffffffffffffff) 03:36:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x9000000, @mcast1, 0x4}, 0x1c) [ 1885.745416] binder_alloc: binder_alloc_mmap_handler: 15693 20001000-20004000 already mapped failed -16 [ 1885.756531] input: syz1 as /devices/virtual/input/input925 [ 1885.782793] binder: BINDER_SET_CONTEXT_MGR already set [ 1885.793644] Unknown ioctl -1072929746 [ 1885.806769] binder: 15693:15696 ioctl 40046207 0 returned -16 [ 1885.814370] netlink: 72 bytes leftover after parsing attributes in process `syz-executor2'. [ 1885.821065] Unknown ioctl -1072929746 [ 1885.832100] input: syz1 as /devices/virtual/input/input926 03:36:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfec00000, @mcast1, 0x4}, 0x1c) 03:36:15 executing program 1: mlock2(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f000000a000/0x1000)=nil, 0x1002, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r5 = getuid() r6 = getegid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) getgroups(0x1, &(0x7f0000000300)=[0xffffffffffffffff]) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000340)={0x208, 0xffffffffffffffff, 0x8, [{{0x6, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffb71d, 0x8, {0x6, 0x7, 0x1573543f, 0x7, 0x4, 0x1, 0x945e, 0x3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x80, r3, r4, 0x7, 0x5}}, {0x0, 0x1000, 0x5, 0x7ff, 'nodev'}}, {{0x6, 0x1, 0x400, 0x400, 0x401, 0x0, {0x6, 0x3, 0x9, 0x10001, 0x4c6, 0x81, 0x5, 0x100, 0x3, 0xfff, 0x8000, r5, r6, 0x7fff, 0xc7}}, {0x5, 0xffffffffffffff80, 0x3, 0xffffffff, 'em0'}}, {{0x1, 0x1, 0x863c, 0x4, 0x140000000000000, 0x9, {0x6, 0x7fffffff, 0x0, 0x0, 0x9, 0x3, 0x5, 0x2, 0x3, 0x5, 0x1, r7, r8, 0x8001, 0x2}}, {0x4, 0x5, 0x1c, 0x6, 'ppp1mime_typevboxnet0)bdev@-'}}]}, 0x208) 03:36:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x2, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1885.884708] netlink: 72 bytes leftover after parsing attributes in process `syz-executor2'. 03:36:15 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge7\x00', 0xfffffffffffffffd}) 03:36:15 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$3(0x3) getresuid(&(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)) fstat(0xffffffffffffffff, &(0x7f0000001500)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000001b00)={{}, {0x1, 0x4}, [], {}, [{}]}, 0x2c, 0x2) 03:36:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfc00, @mcast1, 0x4}, 0x1c) 03:36:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xc3ae0200}, 'syz0\x00'}) [ 1886.018617] binder: 15725:15727 unknown command 16448 [ 1886.038005] binder: 15725:15727 ioctl c0306201 200003c0 returned -22 03:36:15 executing program 1: socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000240)='/dev/amidi#\x00'}, 0x30) ptrace$poke(0x5, r3, &(0x7f00000002c0), 0x87) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000140)=[0x2, 0x9, 0x2, 0x1, 0x4], 0x5, 0x6, 0xfff, 0xb, 0x10000, 0x7, {0x100000000, 0x4, 0x0, 0x80, 0xdb07, 0x7ff, 0x8e57, 0x0, 0x9, 0x800, 0x6, 0x80, 0x0, 0x5, "014dda8a1cc6a8d09f1c4baa892814d1aee8c34f245e1c9c7a3590eff3c9516c"}}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4001}]}, 0x24}}, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfb8a, 0x0) ioctl$BLKFRASET(r4, 0x1264, &(0x7f0000000300)=0x5) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000040)={0x0, 0x7ff, 0x7}) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0xc9, 0x2, 0xb2, &(0x7f0000c00000/0x400000)=nil, 0x81}) 03:36:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x6, @mcast1, 0x4}, 0x1c) 03:36:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, {0x9, 0x8001, 0x3, 0x2, 0x40, 0x1}, 0x4483}, 0xa) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x0, [0x1000000000000140]}) [ 1886.064980] binder_alloc: binder_alloc_mmap_handler: 15725 20001000-20004000 already mapped failed -16 [ 1886.092961] binder: BINDER_SET_CONTEXT_MGR already set [ 1886.099032] binder: 15725:15727 ioctl 40046207 0 returned -16 [ 1886.108126] input: syz1 as /devices/virtual/input/input927 03:36:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a00000004000000dceec6622a27e97d2aeda8909575f0f4f79f36515be12c6876c2ad073a6a227d76c05e46026f0e362d417fd5614c51f24cb48bb79fb87f4aeffa4d73d0539f2dd5af0907403c84163969cc0663bb5d356e4b24c5c38ba92d2321b464f5ff9ef368386c7b3995f806675ac0681625f0c77a888bfe587b"], 0x28000) r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0xb, 0x0) read(r1, &(0x7f0000000100)=""/158, 0x9e) ioctl$int_in(r1, 0x800000c0045005, &(0x7f00000000c0)=0x40000) close(r1) r2 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)='selinux\x00', 0xffffffffffffffff) r3 = add_key(&(0x7f0000000380)='.request_key_auth\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)="f4ccd351c3ff620a1e51f29e", 0xc, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r2, &(0x7f0000000340)=[{&(0x7f0000000240)="bef2f74d26b29a0f7c66ba4e7c8ccb87e19011d13c147d2e4b742aecfe79d3b64381", 0x22}, {&(0x7f0000000280)="d92c300f34e1a77c76293eb195e4b7c858149b2366d8cf3615b97e5959183cfa8697755006920c5b9daf6797ae63c4f0302242294c5fd213ed377330e410fdc908d2577494adc2eb4a300544d9fea44a1c469c58d5b5ab993fb27a", 0x5b}, {&(0x7f0000000300)="1e26220b23922b21326a341d30befa0e2c1c6e103664b40cee9e542e20b18949238858acf9c531329fa6837951c4972c8a507f", 0x33}], 0x3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 1886.158585] binder: 15725:15742 unknown command 16448 [ 1886.166784] input: syz1 as /devices/virtual/input/input928 [ 1886.188971] binder: 15725:15742 ioctl c0306201 200003c0 returned -22 03:36:16 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge\n\x00', 0xfffffffffffffffd}) 03:36:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2ae9c}, 'syz0\x00'}) 03:36:16 executing program 2: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x5, 0x1f}, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000180)={0x6}, 0x4) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x81, 0x1, 0x10, &(0x7f0000ffc000/0x4000)=nil, 0x3}) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r0, r3}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 03:36:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x8000a0ffffffff, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x2000000, @mcast1, 0x4}, 0x1c) [ 1886.341856] input: syz1 as /devices/virtual/input/input929 [ 1886.420298] input: syz1 as /devices/virtual/input/input930 [ 1886.435194] binder_alloc: binder_alloc_mmap_handler: 15780 20001000-20004000 already mapped failed -16 03:36:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xff010000, @mcast1, 0x4}, 0x1c) [ 1886.471910] binder: BINDER_SET_CONTEXT_MGR already set [ 1886.492686] binder: 15780:15782 ioctl 40046207 0 returned -16 03:36:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x900, @mcast1, 0x4}, 0x1c) 03:36:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0xfdfdffff00000000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:16 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge#\x00', 0xfffffffffffffffd}) 03:36:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2ae9f}, 'syz0\x00'}) 03:36:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x700, @mcast1, 0x4}, 0x1c) [ 1886.663002] binder_alloc: binder_alloc_mmap_handler: 15805 20001000-20004000 already mapped failed -16 [ 1886.681754] binder: BINDER_SET_CONTEXT_MGR already set [ 1886.687771] binder: 15805:15806 ioctl 40046207 0 returned -16 [ 1886.702509] input: syz1 as /devices/virtual/input/input931 03:36:16 executing program 1: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000200)) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x10) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000180)=0x2001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) eventfd(0x7) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000080)={0x0, 0x6, 0x800}) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000100)=0x20) listen(r2, 0x20000000) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x27000000}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 03:36:16 executing program 2: getpgid(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0xfffffffffffffdef) ioctl(r1, 0x800000000008982, &(0x7f0000000080)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="2900000006000000000000000000ac8b5f363c7546ffc8ad1defd300000400000000000000030000120000000004000000000000000069127f0f1f4cb25800000000000021b0c9e06ea050325f77726e71bff4c99eef500ade32c424020f322903f5bad93ae7ef35b4c5f4e09e154fb199422ba5fbe2f6b026e54b8ee2a5a9d00401eff2d718a063a44b37a701cdd350e024dad97ecfcc7ac9b06cfb20478fd4dcdc7c5268"], 0xa5) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="08009b5255175d43fca389e340fe96132329bdfbc811c5521288697c83a9f28c7ef1576385a885b764dc4babfdf016c6fa600900c9"], &(0x7f0000000580)='./file0//ile0\x00', &(0x7f00000007c0)="feffffffffff19ff393200", 0x8000000000000002, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f5, 0x0, 0xffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x9}]}, 0x20}}, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x100000001}, 0x8) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x2) r6 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x200, 0x40087f) r7 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) ioctl(r5, 0xfffffffffffffbff, &(0x7f0000000e00)="c85efb3497d605eaadd1e8d02e56a29dc946d52b8407a35a5af4d6d5884544a17078bd1d1764198504529a6de0246370af5d6e8ab97c31a35d32bcb548254bc79c0f4342e53c36f1ea51e4d101a009f805a82bd4e15eca17f2debcc61403b0f2247ffd5a106e0548e9f5969500a7cbed7f80735cc333b8e5d82a715099a4dfa0ae071ce3b74a6b142e9e4d2cebef4d2b41848a96a09679bbc667e4055016bbcad950d387fa63c0ae035014f6c192d534b098b32fcc3ca7d8252054c41fcd5936a7411529fbc8b11130a8fdf73606292263699ea8fd14544230967aed076488210ff93054442b3674c45a4b92216fb568669f15ea67e4a5514cf218d911332ca67d6b0bc0600b5ba58d1b6b06f6a2996d4624307ebd234f08d0df4207a87744a864a3b1e629f6f09b9a2819e4528428de75e6ae5667976ce88b4871c4dd136e77965c15f5ca545f63148f24fb317e0970e0be45f928efa523f9af5a0f5cf2dbaaa628f4deeef39257f78736bfc72d327e6ee57515bcea16c219971327731d5aa2453f28200a6c52a12e1aa4fa8c462b9e66531f2ce983815be6ce9be5bf5371d889a74c5953fd83b1ba55ee88fb43607c72e784faf073ec5cdb8d2f0cd06566d740f197e9a7ba506fcad649db6ce9ed1d26841562cf5665d0286475fce0878aae153d4605fdc3ef677d943a98e9b4a3e587223ee07c7612cbf3ac9b963b50b10745e6bc18d140d9b741c190e1a0f77c40211635879c6ddc940a68becaf4bbc34cc01f1b560ccafc302cfc146e951c7ad0875d24d832e6e81b7c24b4b0d852c3632d076d065cc00b736fce1d094105e6285aeb12a2aaa0395373b4a38f06f143d1cfdcf2dcd02dda53f4e27f8865ff90a5f17b5478e5924eec4bce5cbe050ccea2f72b038d7ad66f1a15b305f34bd68d09ffb3c9e19d3b0fb0d3eacfec1fd70ec7aea99605691f746badcba09d85c84b7680b57b2db71d15768f771b038cac3585fc6f419469f5bbd552722230b49c53e557b44e5a1d5f9f299a3b27e37f4b8a9c254367ccad3a6b946e769160ec2db2cb329fd4e69b767eb6ce62998bafa47f7c365ba939433c24161b07a35c281184629ff91588557919ffd89686afaef92d23813640304f4e7f0d3d0860f5d11dde27b55fc8196b600d2dc7a6e91cd21d3d8acab8b16904685bac75c7b6d5208eba2a0242f2d5eb0211576687a72e3c6dac649465ac72ad0545c66edebb9931a05e8af6ff5ab0001f36aa3336e928ffa9a8f448a2627d6fd52ee91564b3ae422eea4489a5826b24e6befb638678e306ba4d246615a99336fc9f2340f8e6016b2947ee85f3a3bef40e436e1b07dafd8f6173f29f759369214a740cfdc636e331be2aa36b7285fe7e7fb8d46d659a954d0f3f992480d458c66f01cd433f36b42aaaeaf0f0456f514f2f9652630a5b50b35d053c727ff827e41f28390bbdeb95ce1021f163ba559aac309900a34b1474c28fe8c45337e3bc43a5e9e3d62271f2999c1753a896991087b51ea872b304407c5bcbf365fb64c5dc5bc88bc2013fd2d17603c5ad08982edf17344e59115ef225d1950010be5bc315c5ba5218f6684725b9adcd7bc9ec48e08a9a502f2da9af54f5ec1ea91256677bfd5062a748a57f447a7a2f516d7b946457f1aa0dca158b000691174bf7acdf2b305a2dc98090b9e9ede2a70f79b753346f4f12d8e387edf2affb17cb78d074ebcf6238519a9040fc2006646df3ee78fc6f37c0db59843cef006121cf6e00ffd4ed9acd887358e66cda183f4cee627194d51fd5b8122c568b3871999a864ad871c49b431d03a7e019ffd485f1edacb045f996b7b027c1774203961d61a44ebf906805eb73c57bc81016744078a191001ce2ce831efd05f03d23383c961063464af3498c1e0313f06e2f27fe9239e2003c5a1296ed5c8def7750f339205741dc6a042d5055fc6e8703aa3335f92547b03c2ec492e89ea6164152dd2e04bcfa3c976097d8588f227acc331ca27e722bc2c8882b17089065789d810544e703d680fdbf046672c39f3519bb30935a3ecc98e13c87c0b471aecd269552770cbbec65597936bef1937cb98d5139f2172629d094227a966f3ac390eaa4144e07d0715d4e2a584d258e07c76ada44ebc751da24e693e8fd5400565fa0b9fe7f55f582986e33f95fcd9e14977fd327f78c3e453fe7b433b64af80037418cf173fb8457cefbba05937ee70bf2366ca7018fe6a2cc3e483d73500d5bc9d750af99c04dfa586f1db012c354b12f9b281429810662b375e045ac977953c74e736b997d8b61c61f64941d54d8f15bff984156f376f1ee0c0305d09b6a703016eb6e876cdce28b5626119ab4599140b258a686c59dcc82f1b508098b5dd09fd69826829ee237081e9014ed19486336eea047b24c8031b697310d5d78d0b5c507aebb4152b602e25d9c8ea0b71db9d387d462ce41f904cdeff4c965eb9a42d1ae7970e3046d8da4cee48421de14ba070a64d466bc8365d5b43fd565173a1a08cdfcf290e37331055540c1b27de5ba3f4c83610ef90c49b608bd46d143558c06467beaf26f5db2310e49ed8451db38fc5748f15f67e9fd543d337ae0ec0223fbf2988e77708fe577bad815c6e6a8f3c8a3f08ffc8722be8e2e8ff26924efaa3d670dc1afafccded378112463b03e5a6dc722f95c872a3ca6c0b61c44451550345f95b6a2fb4135815612ef7896173281478b2be729fdddfe6e25a93098ba4acf64eb953c9629e417753b42270c9f4e3ecefd96b9bb80e2746330270149a637db86e1d9670a8e5d9cbbc5816359e658b86f3be3b4679a673f11222f773f5e33fa266402668a3b369b2d86cc22f50e150f04ca1cee553030552df9fc8db2438d588910a8bc6a92036295b8a64729b77033c3fe904dceaf0b1342dc0176232cb2e0d59ffa6ecae571a22f3f7b3765bf0e1958806d0118982e465389df5cbf146b22a16c97f92fd9464b7e96809f6ff4c98ed5368355c94ab4cb0aa3d56ac63d089381a270e4f109bb2cc227efc00839862a108e044eedf50bc688abc76f5bb0769cfab996f4e1dff83760c6499a2b500786a0079745889e0d73ca94853f85f2e00ad1f624ec3524554c1c1e376d8549e9e5f779141742f8dc5af7bbe8d9a060679cb2399613441c4702d9f74d7bda3b013673c838ccddfc7d69a0c0961dcdc9176ea4dec350914926bd6523bde4d0d09fe553ccebc80456be28513690577fc6adeba72a4cbad08d384ee541e615d516797cf8d0c3f53c9c499b94a2161f18df7c78e27e3fe303d19269afd17db993dc0039b4376d3b67cfb26197f9a567d2a790bd93c863716fa63dfc2bd8aabe70791b768775d3537c94aefa8b53fc98da89fc978ac8c766c9fa50090ccb55534f817c5416e2b169f13bbfc4ea09f93216943fcda5fb8174ab9f261a10752f184a94adcde4eb19feddde33356bdaa7359d4e4bfa1e2f7e07d56e15c84cdf5a6ce879ba84fb61f2ac0ef4b383dc0f885c5c2f8751f2b928c4e321cc556b1c1f9818fbcd2ebfab961e3d81c208b8f63b93912a6f61cc2a6a340e127dd47c8f382d35004b5ff9d0c6ec4d6e4894e20f53559e1b9f03d1e80981f1e86d3363945d9cf7cd057be83de3083ab3019c7e0c4230bc0df1005ed237cd849938046116066f067098ecb3c633a67d6b10a38bde48bc17c6d7269eb79ef7779e6be0e8631b9b75e7b69587afb6b9a1a0fc6af527655d01fed2a48630313de67ff743b3329b254f4abdbf951b159516d50d92e60d42797f016151f311507c4f63deef0366405ef225ae984e12fd9a0cd9e679a3efd2ef2cb5b74e3a7ce549d7232ab2cceb7a162967dd2131a28547528a39206b224921a9f00d3c276b46e4b5ca2075abcbd09095e35a98dff70715b9eee85500328b7a488e97c7e8569f77fe35b823ce019067e398b010686470f3d21c86486802cfbe20150b1c551ebcfb10a3bb65b3197cd89f8700977ce5ff4c7ace4265ef4b6efefc5e6ab7b57f50282582b5da94cc881d6bbe4465c9969f15ca0103d9c5f733d3391ddf3cca7616c5f0a32875c648c3198db6ac2af38980a34e35c6bd1678bb9a6123d35ebfd4698746daeee2abdc3c3b737b7acb754a266ed92f1b8be6c951b405ccc39f3ed5fe1967a83ebc6364c6d5567f3b1689604cb84b02c575e8a9cd130683e24160b1846d4049d611514eae4369482b3ec40dcf61de861eb606c884559f26ff68e9f8094f42a29446ecc17599a22645231fd9d5381f758f0b7ea5fee725d5b1ff93616bb3b5df09f8cb304bd50ff65c7cb301547d56316b23fd75372eb52f93cf40e76b4562e8e4d327c36eb738db9a067e47cacbefc42797753b76d80826d9f350a5a9e36d4723ae810ee386faca8c29624b9e8ea9e88a6ed0cf5f1947db1f108f34cbae2848d68068fe2569d4857cd80d9163643439380b85199d61342dba7d13fc0b718cbc6929517414b268679ebc9ba3dda43a48766deeee0df849657cd89dac18aa0812347ca2ec3957259db87766727b7c84774bc99bab21de9c2da6d9ce2858c456b7e2add8034443fbbd186af1176b260d3cb4cb38b7abb0413bedb26ef64ab6e1d5cad2e8a1eed49f5ce59483fe8e1f244f347b532e3af49a047839357055249bfd659371bf04f10cd36dff1291fb788d9b59ace89d1f788ac74596f9984a2ca081e4370f788b61969350c471c52ebdd09b094ff571e418a74517c172c42c7f951039d36345cc0bbc62beb8eb58ba63d2569d24e00d892c159191748002c39cc3620b586f613743b2f8eb8775ff279dcaaf903e8237bd457fdfa1d2f7c98c7408ef9feb2501f23de934c4376313488540cf215875bf721110d31e533ceccc0227f0230b39770b79b68dca456f3dc2e2ac0cebf974d6c0737504da83ee7d376c1faded12125fc4ae94485899624ecca6f91d74f925949ea666cf1bd83e5a9eb100fc1e5fa875f31f2cbb0662fc956524e5fd61b19c3955f3a063fc24698117f5c8620c97df1a049074d61a029a8228a02761734d3c3fd30a74ee15cdb196ff3cc263acabfa96e088c0b60509a3c9fa28b2bf37eaff94cd2b8795fb39bd7b14705f65e2f6116b0b873eed69369b47fc4bf5251bb878622cf2e06d61521a570b6f42db4e68542ce29922710e4576d47f1ace2f8609cea790ec7245c72c6ee0458986ae82b801f1eff52019e6201ac1947c382f8714279bdafa64c22815dc0df6b6cd637da36759466ddb9dfd819fda7a76eab25ef4db99905254d69e5a793aebea2a838c54f7993f94f8f2dde71451e26ba658b8722bb0c1f9dc4ec66c956ebf58626246c56d3a46070e058bb77c1cffd9f977690d4db56d3d84a994a40e14406e361a79039dd6917b9159da6396e5fd9b6c142ca84300f8a0be1aafe82af2467f58090e4c518182cec88d5906e51cbd0c79762fe563a64622c3ad687400ee7fdcfe7d91208bed686d886d2a7e374b9a39c094e035254b60a58bb6269ea6f06c98495ab88d787c5338c64d6c74e415d0990b9c88360673a46d60680708dec000209bb266968159082780c20a39f19d9e162590fe7829e609973a38db58e446412a8c7203eb59f3a6965c227b136e9670c80c6a885db0f0855bff6d117d8462763ed9f60acd5612dc434b405e135aa1d8b699bac10f8cb4dfbe749ac4d4b1a1c6ea5b4543de741eedaa2ea1852a7fddf3002784bbbb85e04c57db2c59c7a3491e26c91d82a285592e24ca4fee03e2d0f6ed7a2213eed95e49067f6cddc8e1cd511d") io_submit(r8, 0x1, &(0x7f0000000200)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x80000000000, r7, &(0x7f0000001000), 0x0, 0x9, 0x0, 0x0, 0xffffffffffffff9c}]) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0xffff, 0x5, 0xc65b, 0x9, 0x80, 0x5, 0x1ff, 0x4, 0x20, 0x5, 0x7}, 0xb) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x81806) sendmsg(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @local, 'yam0\x00'}}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000e00)=ANY=[], 0x0, 0x840}, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6) memfd_create(&(0x7f0000000640)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281e4ee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) 03:36:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xa4ae0200}, 'syz0\x00'}) 03:36:16 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\a\x00', 0xfffffffffffffffd}) 03:36:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0xffffffffa0010000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xff00, @mcast1, 0x4}, 0x1c) [ 1886.904262] input: syz1 as /devices/virtual/input/input933 [ 1886.922479] binder_alloc: binder_alloc_mmap_handler: 15836 20001000-20004000 already mapped failed -16 [ 1886.981499] binder: BINDER_SET_CONTEXT_MGR already set [ 1886.989323] input: syz1 as /devices/virtual/input/input934 [ 1887.011388] binder: 15836:15837 ioctl 40046207 0 returned -16 03:36:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x3}, 'syz0\x00'}) 03:36:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x100000000000000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1887.171459] input: syz1 as /devices/virtual/input/input935 03:36:16 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530000000000000000500", 0xfffffffffffffffd}) 03:36:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xffffffff00000000, @mcast1, 0x4}, 0x1c) [ 1887.213620] input: syz1 as /devices/virtual/input/input936 [ 1887.253727] binder_alloc: binder_alloc_mmap_handler: 15858 20001000-20004000 already mapped failed -16 03:36:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x2000000006) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40, 0x12000) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000140)={0x4, 0x800, {0x57, 0x7, 0x3, {0x8, 0x5}, {0x6, 0x1}, @ramp={0xb91, 0xc4, {0x80000001, 0x0, 0x1, 0x11}}}, {0x57, 0xff, 0x101, {0x2, 0xfffffffffffffffb}, {0xffffffffffffffb1, 0x7}, @const={0x41e, {0x0, 0x9, 0x1ff, 0x7ff}}}}) r2 = dup(r0) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000003b40)={&(0x7f0000000000), 0xc, &(0x7f0000003b00)={&(0x7f00000039c0)={0x14}, 0x14}}, 0x20000000) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="07020c1f00000001006e9f302da701b3dfa0e609f7bbaff316e234a949257b37b842c203ffe77fe89af9949f7f55c9da1bb3133aaa335b1b63b5b01e8d6effd051f493b13a7121742ca553e820ecd490952110a9db692efe29d1387979c195d12154beecf5a9bd6c8e425469a9d0500ee7b6f4b2b03096d3"], 0x78, 0x1) pwrite64(r0, &(0x7f0000000300)="373602d50a2406cbe1c27d0f308ea55e88fac3ef50737863bea7352ee69ab4d11689cf20264b834293770e4d46531d0cdc1cbd05f27d8fd2e92135ccab0f51b1bfe5abccc62a7859d7e4863819b8d78e8f8361a495345149fc618d257f3fa0408b38988590533564036458fbd1b6e821a152f435b13d2b7b174ec6f69fbd677d4a85fb4879f70466e25e06f5531f33f799a2942ddc37b6b3d91f66a382976e73a99f833c71a181b673f405ca163cf009cc9cfbf45d8eb98451dc937c0fb4d5e623214ffc645e8cc2c3dfecadb6b16316b5acfefc2445dec0f4310100c3aff2dc634b42bec04ac01b6e82", 0xea, 0x0) 03:36:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2aea2}, 'syz0\x00'}) [ 1887.298648] binder: BINDER_SET_CONTEXT_MGR already set [ 1887.306916] binder: 15858:15862 ioctl 40046207 0 returned -16 03:36:17 executing program 2: getpgid(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0xfffffffffffffdef) ioctl(r1, 0x800000000008982, &(0x7f0000000080)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="2900000006000000000000000000ac8b5f363c7546ffc8ad1defd300000400000000000000030000120000000004000000000000000069127f0f1f4cb25800000000000021b0c9e06ea050325f77726e71bff4c99eef500ade32c424020f322903f5bad93ae7ef35b4c5f4e09e154fb199422ba5fbe2f6b026e54b8ee2a5a9d00401eff2d718a063a44b37a701cdd350e024dad97ecfcc7ac9b06cfb20478fd4dcdc7c5268"], 0xa5) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="08009b5255175d43fca389e340fe96132329bdfbc811c5521288697c83a9f28c7ef1576385a885b764dc4babfdf016c6fa600900c9"], &(0x7f0000000580)='./file0//ile0\x00', &(0x7f00000007c0)="feffffffffff19ff393200", 0x8000000000000002, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f5, 0x0, 0xffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x9}]}, 0x20}}, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x100000001}, 0x8) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x2) r6 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x200, 0x40087f) r7 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) ioctl(r5, 0xfffffffffffffbff, &(0x7f0000000e00)="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") io_submit(r8, 0x1, &(0x7f0000000200)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x80000000000, r7, &(0x7f0000001000), 0x0, 0x9, 0x0, 0x0, 0xffffffffffffff9c}]) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0xffff, 0x5, 0xc65b, 0x9, 0x80, 0x5, 0x1ff, 0x4, 0x20, 0x5, 0x7}, 0xb) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x81806) sendmsg(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @local, 'yam0\x00'}}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000e00)=ANY=[], 0x0, 0x840}, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6) memfd_create(&(0x7f0000000640)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281e4ee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) 03:36:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x1200, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x6000000, @mcast1, 0x4}, 0x1c) [ 1887.430054] input: syz1 as /devices/virtual/input/input937 03:36:17 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00@\x00', 0xfffffffffffffffd}) [ 1887.480193] binder_alloc: binder_alloc_mmap_handler: 15892 20001000-20004000 already mapped failed -16 [ 1887.516099] binder: BINDER_SET_CONTEXT_MGR already set [ 1887.523125] input: syz1 as /devices/virtual/input/input938 03:36:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x8000000000000000, @mcast1, 0x4}, 0x1c) 03:36:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0xfffffdfd, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1887.550943] binder: 15892:15893 ioctl 40046207 0 returned -16 03:36:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xc8ae0200}, 'syz0\x00'}) 03:36:17 executing program 2: getpgid(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0xfffffffffffffdef) ioctl(r1, 0x800000000008982, &(0x7f0000000080)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="2900000006000000000000000000ac8b5f363c7546ffc8ad1defd300000400000000000000030000120000000004000000000000000069127f0f1f4cb25800000000000021b0c9e06ea050325f77726e71bff4c99eef500ade32c424020f322903f5bad93ae7ef35b4c5f4e09e154fb199422ba5fbe2f6b026e54b8ee2a5a9d00401eff2d718a063a44b37a701cdd350e024dad97ecfcc7ac9b06cfb20478fd4dcdc7c5268"], 0xa5) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="08009b5255175d43fca389e340fe96132329bdfbc811c5521288697c83a9f28c7ef1576385a885b764dc4babfdf016c6fa600900c9"], &(0x7f0000000580)='./file0//ile0\x00', &(0x7f00000007c0)="feffffffffff19ff393200", 0x8000000000000002, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f5, 0x0, 0xffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x9}]}, 0x20}}, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x100000001}, 0x8) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x2) r6 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x200, 0x40087f) r7 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) ioctl(r5, 0xfffffffffffffbff, &(0x7f0000000e00)="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") io_submit(r8, 0x1, &(0x7f0000000200)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x80000000000, r7, &(0x7f0000001000), 0x0, 0x9, 0x0, 0x0, 0xffffffffffffff9c}]) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0xffff, 0x5, 0xc65b, 0x9, 0x80, 0x5, 0x1ff, 0x4, 0x20, 0x5, 0x7}, 0xb) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x81806) sendmsg(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @local, 'yam0\x00'}}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000e00)=ANY=[], 0x0, 0x840}, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6) memfd_create(&(0x7f0000000640)="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", 0x0) [ 1887.650569] binder_alloc: binder_alloc_mmap_handler: 15909 20001000-20004000 already mapped failed -16 03:36:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfc, @mcast1, 0x4}, 0x1c) [ 1887.691791] binder: BINDER_SET_CONTEXT_MGR already set [ 1887.711164] input: syz1 as /devices/virtual/input/input939 [ 1887.719528] binder: 15909:15910 ioctl 40046207 0 returned -16 03:36:17 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00L\x00', 0xfffffffffffffffd}) [ 1887.785075] binder: 15909:15911 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1887.798392] input: syz1 as /devices/virtual/input/input940 03:36:17 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000700), 0x10) r1 = socket$inet6(0xa, 0x3, 0x80) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x80, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/180, 0xb4, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@loopback, 0x0}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', r3}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x4}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b0100000000000000f9030008990039966a7d5c037dc12502000000a0000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) 03:36:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x600000000000000, @mcast1, 0x4}, 0x1c) 03:36:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x1200000000000000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x7000000}, 'syz0\x00'}) 03:36:17 executing program 2: getpgid(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0xfffffffffffffdef) ioctl(r1, 0x800000000008982, &(0x7f0000000080)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="2900000006000000000000000000ac8b5f363c7546ffc8ad1defd300000400000000000000030000120000000004000000000000000069127f0f1f4cb25800000000000021b0c9e06ea050325f77726e71bff4c99eef500ade32c424020f322903f5bad93ae7ef35b4c5f4e09e154fb199422ba5fbe2f6b026e54b8ee2a5a9d00401eff2d718a063a44b37a701cdd350e024dad97ecfcc7ac9b06cfb20478fd4dcdc7c5268"], 0xa5) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="08009b5255175d43fca389e340fe96132329bdfbc811c5521288697c83a9f28c7ef1576385a885b764dc4babfdf016c6fa600900c9"], &(0x7f0000000580)='./file0//ile0\x00', &(0x7f00000007c0)="feffffffffff19ff393200", 0x8000000000000002, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f5, 0x0, 0xffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x9}]}, 0x20}}, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x100000001}, 0x8) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x2) r6 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x200, 0x40087f) r7 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) ioctl(r5, 0xfffffffffffffbff, &(0x7f0000000e00)="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") io_submit(r8, 0x1, &(0x7f0000000200)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x80000000000, r7, &(0x7f0000001000), 0x0, 0x9, 0x0, 0x0, 0xffffffffffffff9c}]) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0xffff, 0x5, 0xc65b, 0x9, 0x80, 0x5, 0x1ff, 0x4, 0x20, 0x5, 0x7}, 0xb) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x81806) sendmsg(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @local, 'yam0\x00'}}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000e00)=ANY=[], 0x0, 0x840}, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6) memfd_create(&(0x7f0000000640)="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", 0x0) 03:36:17 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00`\x00', 0xfffffffffffffffd}) [ 1888.242386] input: syz1 as /devices/virtual/input/input941 [ 1888.269094] binder_alloc: binder_alloc_mmap_handler: 15956 20001000-20004000 already mapped failed -16 03:36:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xa00000000000000, @mcast1, 0x4}, 0x1c) 03:36:18 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7e3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xffffffffffffffb2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000006c0)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000480)='veth1_to_team\x00', 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000800)={@host}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffe01, @dev={0xfe, 0x80, [], 0x1f}}}, 0xfff, 0x6}, 0x90) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) ioprio_set$pid(0x1, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) fstatfs(0xffffffffffffffff, &(0x7f0000000300)=""/158) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000007c0)={0xfffffffffffeffff}, 0x8) [ 1888.309322] binder: BINDER_SET_CONTEXT_MGR already set [ 1888.318035] input: syz1 as /devices/virtual/input/input942 [ 1888.331096] binder: 15956:15958 ioctl 40046207 0 returned -16 03:36:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000340)={r3, 0x9, 0xd8, 0x101, 0x3f, 0x7, 0x3, 0x0, {r4, @in6={{0xa, 0x4e22, 0x8a2, @dev={0xfe, 0x80, [], 0x10}, 0xe0c}}, 0x2, 0x1, 0xffffffff, 0x0, 0xffffffffffffff01}}, &(0x7f0000000400)=0xb0) r5 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x0) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f00000001c0)={[0xf000, 0x5, 0x7000], 0xfffffffffffffffb, 0x18, 0xcae7}) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000052f00290800000000000300000018000000140001afe7d441e5c55bf400040000000700000000000000000000019b5c9d6ca2ae20204094a4148578c3d9903d44ab185e25b81b4b22d28ea05ec9d3933c42b256e805f3cfc1d0c32a09f161d276afb490a6e865774e35176e5e3003c2a88c5e9cf5e451edfca6cb9abdada85e9f17a5e514ad1799244794848f608aeea7b9ad8db8017ce04e430fd9af3ef51695b1ce0a0919dac9d5cd0989ee84e484a56db99c7853c5fcb64ae31419ebff78428005a3cf2ccba9016baabdb080a1851479299c703eccbfe7f983b28453e2f47490"], 0x2c}}, 0x0) 03:36:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x4800}, 'syz0\x00'}) 03:36:18 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00z\x00', 0xfffffffffffffffd}) 03:36:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x1400, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x100000000000000, @mcast1, 0x4}, 0x1c) [ 1888.508263] input: syz1 as /devices/virtual/input/input943 [ 1888.567194] binder: BINDER_SET_CONTEXT_MGR already set 03:36:18 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x410002, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0xfb]) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0x400, 0x4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x9, &(0x7f0000000140)=[{0xee2cfe9, 0x8, 0x2, 0x7}, {0x2, 0x1, 0x3, 0xc734}, {0x1e, 0x1, 0x557, 0x20}, {0x100, 0x800, 0x6, 0x6}, {0x3, 0x5, 0xffffffffffffffea, 0x7}, {0x0, 0x3, 0x1, 0x5}, {0x8, 0x8, 0x1}, {0x101, 0x6, 0x2, 0x5}, {0x2, 0x9, 0x10000}]}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x8000, 0x2, 0x8008, 0x73b, 0x8, 0x80, 0x7fff, 0xff6, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={r3, 0xffffffffffffa4bf}, 0x8) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f00000002c0)={0x10000, 0x5, 0xabe4, 0x1, 0xffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0xb446, @mcast1}], 0x1c) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=r3, &(0x7f0000000440)=0x4) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x7, 0x4) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000004c0)={'security\x00'}, &(0x7f0000000540)=0x54) accept$nfc_llcp(r4, 0x0, &(0x7f0000000580)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000005c0)='tls\x00', 0x4) ioctl$TIOCLINUX6(r4, 0x541c, &(0x7f0000000600)={0x6, 0x9}) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000640)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) sysfs$2(0x2, 0x3, &(0x7f0000000680)=""/105) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000700)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) ioprio_set$uid(0x3, r5, 0x5) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000840), &(0x7f0000000880)=0x4) mknodat(r4, &(0x7f00000008c0)='./file0\x00', 0x8000, 0x6) syz_open_dev$vcsa(&(0x7f0000000900)='/dev/vcsa#\x00', 0x5, 0x40000) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000940)={r0, 0x1, 0x5, r0}) [ 1888.595697] input: syz1 as /devices/virtual/input/input944 [ 1888.595984] binder: 15988:15996 ioctl 40046207 0 returned -16 03:36:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x2000000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2aec7}, 'syz0\x00'}) 03:36:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x100000, @mcast1, 0x4}, 0x1c) 03:36:18 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"627269646765300200", 0xfffffffffffffffd}) 03:36:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x64, 0x0, &(0x7f00000003c0)=[@exit_looper, @acquire_done, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000200)}, 0x6}}], 0x1000, 0x0, &(0x7f0000000540)="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"}) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:etc_rentime_t:s0\x00', 0x23, 0x3) 03:36:18 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7e3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xffffffffffffffb2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000006c0)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000480)='veth1_to_team\x00', 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000800)={@host}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffe01, @dev={0xfe, 0x80, [], 0x1f}}}, 0xfff, 0x6}, 0x90) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) ioprio_set$pid(0x1, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) fstatfs(0xffffffffffffffff, &(0x7f0000000300)=""/158) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000007c0)={0xfffffffffffeffff}, 0x8) [ 1888.792161] binder: BINDER_SET_CONTEXT_MGR already set [ 1888.797592] binder: 16027:16028 ioctl 40046207 0 returned -16 [ 1888.841678] input: syz1 as /devices/virtual/input/input945 [ 1888.892833] input: syz1 as /devices/virtual/input/input946 [ 1888.899936] binder: 16036:16043 BC_ACQUIRE_DONE u0000000000000000 no match 03:36:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x80fe, @mcast1, 0x4}, 0x1c) 03:36:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xffffff97}, 'syz0\x00'}) 03:36:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0xfdfdffff, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1888.952553] binder: 16036:16043 transaction failed 29189/-22, size 0-0 line 2855 [ 1889.016243] binder: 16036:16050 BC_ACQUIRE_DONE u0000000000000000 no match [ 1889.040238] binder: 16036:16050 transaction failed 29189/-22, size 0-0 line 2855 03:36:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x9, @mcast1, 0x4}, 0x1c) [ 1889.069097] input: syz1 as /devices/virtual/input/input947 [ 1889.109082] binder: BINDER_SET_CONTEXT_MGR already set 03:36:18 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"627269646765300500", 0xfffffffffffffffd}) 03:36:18 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000008c581a84ca77e44300950000002cd7cdd8"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) r2 = creat(&(0x7f0000000240)='./file1\x00', 0x40) execveat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000002c0)='GPL\x00', &(0x7f0000000300)='GPL\x00', &(0x7f0000000340)='/\x00', &(0x7f0000000380)='@securityproc*/:{\x00'], &(0x7f00000005c0)=[&(0x7f0000000400)='GPL\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='GPL\x00', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='cgroup(vboxnet1^wlan1vboxnet0GPLproc@*\x00', &(0x7f0000000540)='GPL\x00', &(0x7f0000000580)='GPL\x00'], 0x1c00) mkdir(&(0x7f0000000200)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) [ 1889.144070] binder: 16064:16065 ioctl 40046207 0 returned -16 [ 1889.154935] input: syz1 as /devices/virtual/input/input948 03:36:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x3f000000, @mcast1, 0x4}, 0x1c) 03:36:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000200), 0x4) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000110, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000140)=0x4) ioctl$TIOCGPTPEER(r3, 0x5441, 0x401) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x4000000011) 03:36:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0xffffffffa0008000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x10}, 'syz0\x00'}) 03:36:19 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) r1 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4) inotify_rm_watch(r0, r1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x7, 0x17639c09, 0x7fff, 0x100000000, 0x0, 0x8, 0x2020, 0x0, 0x4, 0x2404000000, 0x8, 0x0, 0x10001, 0xfffffffffffffff8, 0x7fffffff, 0x3, 0x7, 0x8001, 0x1f, 0x4, 0x4, 0xfffffffffffffff9, 0x2, 0x6, 0x3, 0x3f, 0xcb, 0x7, 0x40000000000000, 0x4, 0xab, 0x1, 0x7, 0xffffffff80000001, 0x100000001, 0x40, 0x0, 0x18000000000000, 0x4, @perf_config_ext={0x401, 0x80000001}, 0x8000, 0x4, 0x400, 0x1, 0x6, 0x4cac3072, 0x8}, r2, 0x8, r0, 0x1) r4 = openat$cgroup_type(r0, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x2800, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0x80045510, 0x70e000) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x6, 0x2, 0x9, 0xfe7, 0x0}, &(0x7f0000000240)=0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'yam0\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x3, "6cae99487867debff1e537a03940597b54352670e610a4a9869aabc5a4780de4", "fecd70638bef9b0c16c0e71ed670f2fc573e2ec85ff1a73645a7c73cb9b4f2b6", "2453ec774b75bae0df088c778afb542d6a8d2b4137c814e44d837ed1446ad267", "ff96d44d89cdc99c792e61f71c5d2075791f891782a58eff016301ca342ec327", "b656c187fb348a84dc8e035316260cd9e77803f64351500b38b48acbfe05712a", "d669c265dbda8c052c52ac46", 0x5, 0x1000, 0xb5, 0x3, 0x1}}) fcntl$getflags(r3, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000380)={0x3, 'vlan0\x00', 0x1}, 0x18) ioctl$int_out(r5, 0x5462, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={r6}, &(0x7f00000002c0)=0x8) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000300)) 03:36:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x4000, @mcast1, 0x4}, 0x1c) [ 1889.349118] binder: BINDER_SET_CONTEXT_MGR already set [ 1889.378084] input: syz1 as /devices/virtual/input/input949 [ 1889.389364] binder: 16092:16094 ioctl 40046207 0 returned -16 03:36:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000540)=@nat={'nat\x00', 0x19, 0x2, 0x4, [0x20000100, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000500), &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRES16=r1]}, 0x7c) socket$inet6(0xa, 0x0, 0x0) 03:36:19 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00\x00\x00\x00\x00H\x00', 0xfffffffffffffffd}) 03:36:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x200000000000000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1889.464433] input: syz1 as /devices/virtual/input/input950 03:36:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x5, @mcast1, 0x4}, 0x1c) 03:36:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x9bae020000000000}, 'syz0\x00'}) [ 1889.595277] kernel msg: ebtables bug: please report to author: entries_size too small [ 1889.621173] binder: BINDER_SET_CONTEXT_MGR already set [ 1889.626530] binder: 16119:16121 ioctl 40046207 0 returned -16 03:36:19 executing program 2: r0 = socket$inet6(0xa, 0x7, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xf, 0x100000001, 0x81000000004, 0x36, 0x4, r1}, 0x2c) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x1f, @local}, @in={0x2, 0x4e20, @rand_addr=0x3f}, @in6={0xa, 0x4e21, 0x1, @remote, 0x10000}], 0x48) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x3eb}, 0x28, 0x3) [ 1889.661905] input: syz1 as /devices/virtual/input/input951 03:36:19 executing program 1: ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'rose0\x00', {0x2, 0x4e21, @dev}}) r0 = syz_open_procfs(0x0, &(0x7f0000865ff5)='clear_refs\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000680)={@mcast1}, &(0x7f00000006c0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000700)={@dev}) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10808, 0x3, 0x0, 0x7, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x2, 0x0, 0x1, 0x13, 0x9, 0x7, 0x400, 0x3, 0x1, 0x401, 0x7, 0x1, 0x8, 0x401, 0x28b, 0x9, 0x3ff, 0x0, 0xff, 0x4, @perf_config_ext={0x1, 0xede2}, 0x400, 0x4, 0x8, 0x2}, 0x0, 0x5, r0, 0xa) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x115, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) write$FUSE_IOCTL(r0, &(0x7f0000000240)={0x20, 0x1000000, 0x100000000000001, {0x7, 0x8000000000, 0x5, 0x13f}}, 0x20) syz_extract_tcp_res(&(0x7f0000000380), 0x3, 0xfff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000280)={0x2, 0x9, 0x7fff, 0x1831a3ea, 0x0, 0x5}) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 03:36:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x300000000000000, @mcast1, 0x4}, 0x1c) [ 1889.771468] input: syz1 as /devices/virtual/input/input952 03:36:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0xa0010000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:19 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00\x00\x00\x00\x00t\x00', 0xfffffffffffffffd}) 03:36:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x100000000000000}, 'syz0\x00'}) 03:36:19 executing program 2: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x402002, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000040)) keyctl$invalidate(0x17, r0) io_setup(0x80000000, &(0x7f0000000080)=0x0) io_cancel(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x3ff, r1, &(0x7f00000000c0)="64ad7854114a81f02cdbfffac45db35481237cd2ae575115122624b032413a6178529c79f1c891a9aeb305a8a3f91f60d9119c5ba8ec1432910ce0453dffc36be30b64b2d54e00eb5f0539617e4a275bf7eaebd87740cccd550c263780400a091ff127c644b821dd7efbe868bb4d921eb0f0c6b8385710c22c4fdb7cafd4dfa599071784bc404dcad21cfe5536df23d244e4fab3fdae940831465de6748915c2abe2f97a6169a54a4b457c9ae58c7e09b3e6da6162960117a7ea614471cebca5ac8eb56a2f8aaae38631a960b84b260c5d1a8c", 0xd3, 0x1, 0x0, 0x1, r1}, &(0x7f0000000280)) 03:36:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x3000000, @mcast1, 0x4}, 0x1c) 03:36:19 executing program 1: sched_setaffinity(0x0, 0x24e, &(0x7f0000000100)=0x5) openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x100, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=@hopopts={0x33, 0x2, [], [@hao={0xc9, 0x10, @mcast1}]}, 0x20) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x181, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000027, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x800}, 0x8) [ 1889.993842] binder: BINDER_SET_CONTEXT_MGR already set [ 1890.027018] binder: 16173:16174 ioctl 40046207 0 returned -16 [ 1890.092172] input: syz1 as /devices/virtual/input/input953 03:36:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x2000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x3, @mcast1, 0x4}, 0x1c) [ 1890.179740] input: syz1 as /devices/virtual/input/input954 03:36:19 executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7fffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x40000, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000500)={"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"}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x840, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x100000000, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="7fa16118b50893e0a3d96007d7a4a2a4ebfeab121ce14ef5e5a77764107f9209971e9d322526", 0x26, 0x5}], 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESDEC]) 03:36:19 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00L\x00', 0xfffffffffffffffd}) 03:36:20 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10800, 0x0) mkdir(&(0x7f0000000180)='\x00', 0x4) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sync_file_range(r0, 0x0, 0x0, 0x3) 03:36:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x98ae020000000000}, 'syz0\x00'}) [ 1890.322636] binder: BINDER_SET_CONTEXT_MGR already set [ 1890.328049] binder: 16205:16209 ioctl 40046207 0 returned -16 03:36:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfc00000000000000, @mcast1, 0x4}, 0x1c) 03:36:20 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x3, 0x4, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='system.advise\x00', &(0x7f0000000340)='bdevsecuritysecurityeth0\x00', 0x19, 0x1) getrusage(0x0, &(0x7f0000000280)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f00000001c0)=""/113}, 0x18) [ 1890.407789] ntfs: (device loop2): parse_options(): Unrecognized mount option 18446744073709551615. 03:36:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x1400000000000000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1890.491267] input: syz1 as /devices/virtual/input/input955 03:36:20 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00\x00\x00\x00\x00z\x00', 0xfffffffffffffffd}) 03:36:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r0, 0x1, 0x3c, &(0x7f0000000140)=""/44, &(0x7f0000000180)=0x2c) [ 1890.581110] binder_alloc_mmap_handler: 7 callbacks suppressed [ 1890.581127] binder_alloc: binder_alloc_mmap_handler: 16240 20001000-20004000 already mapped failed -16 03:36:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x700000000000000, @mcast1, 0x4}, 0x1c) [ 1890.630209] binder: BINDER_SET_CONTEXT_MGR already set [ 1890.635796] binder: 16240:16242 ioctl 40046207 0 returned -16 03:36:20 executing program 1: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@mcast1, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0x807}, 0x1c) sendmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)=[{0x18, 0x29, 0xf, '\x00'}], 0x18}}], 0x1, 0x0) 03:36:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x74000000}, 'syz0\x00'}) 03:36:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x1a0ffffffff, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:20 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6(0xa, 0x3, 0x80000100000001) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x810000000040) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x40, 0x400000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)) fadvise64(r1, 0x0, 0x6, 0x3) [ 1890.821109] input: syz1 as /devices/virtual/input/input957 03:36:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x10000000, @mcast1, 0x4}, 0x1c) 03:36:20 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"627269646765300000000400", 0xfffffffffffffffd}) [ 1890.906178] binder_alloc: binder_alloc_mmap_handler: 16273 20001000-20004000 already mapped failed -16 [ 1890.951711] binder: BINDER_SET_CONTEXT_MGR already set [ 1890.977006] input: syz1 as /devices/virtual/input/input958 [ 1890.982029] binder: 16273:16274 ioctl 40046207 0 returned -16 03:36:20 executing program 1: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) socket$rds(0x15, 0x5, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ab4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:36:20 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000240)) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="5dae4fced5185a54ecb7c699af988623cd4f24208120bf8537a0aaa702e501bbc8a9582d95627cda83f22948d87b775b16ba35a78a7b0e86083ed4cc3a6ebe260d67c067b9db44ebd2f9d2798e97fc2be0505c8558b2e8653e761d57fc3be074565b0d5d92f33f4a67875dc34de4fa78a596b1060342d35d3d2e25968fba74b0e035f11b619e7e1f388497bce9fd701fec5f2f066d01ff953775673f48e5ab8d372c44d543c96b633eae30e27117754f62fbd91f73eaa92eb77e6a69fc16f60921bf551faf68d9f39da9d571c048eb16"], 0x1}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)) recvfrom$inet6(r1, &(0x7f0000000480)=""/219, 0xdb, 0x140, &(0x7f0000000040)={0xa, 0x4e22, 0x80000001, @local}, 0x1c) ioctl$BLKRRPART(r2, 0x125f, 0x0) write$binfmt_misc(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="52796971e413b5fba6fab75a2a7b07bf496d8f906b2ee1a691040047744af19e00009987e644a6405d60102a025cf0d0b3a2802e61fab764d68b992a9fb8034d0b5da5aba43d46e869e19cf3badd2595d1c323b8baa613cbb32d07bac8b7d0997a0008d071ce3fd4e225491a86ed26f27a898480f32c6f2cc23fb956969395ef474ce880559fb81e741eb983ed1dc3c5b9b0427e29ee1af9d7783ec703e2a8d96813488a0ec0a0559db8dbe165e9d89df7baa2dbdda0ae04b0023fb80cf8bf86307380fe89c570032900e3f162d48b2d2586ce0a7556ec26e5d9b34d3836d9dd83b01f7c2e55c228470bd840fe3b94534f51aeb27f61"], 0xf6) io_setup(0xfd, &(0x7f0000000100)=0x0) io_submit(r3, 0x20000000000003a8, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xffffffffffffff95}]) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffdd9) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x103000, 0x0) 03:36:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfec0, @mcast1, 0x4}, 0x1c) 03:36:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x1a0}, 'syz0\x00'}) 03:36:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x2000000000000000, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfe80, @mcast1, 0x4}, 0x1c) 03:36:21 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00l\x00', 0xfffffffffffffffd}) [ 1891.213724] binder_alloc: binder_alloc_mmap_handler: 16311 20001000-20004000 already mapped failed -16 [ 1891.241394] input: syz1 as /devices/virtual/input/input959 [ 1891.307471] input: syz1 as /devices/virtual/input/input960 [ 1891.314597] binder: BINDER_SET_CONTEXT_MGR already set [ 1891.334776] binder: 16311:16315 ioctl 40046207 0 returned -16 03:36:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2aec2}, 'syz0\x00'}) 03:36:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x630d, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x500000000000000, @mcast1, 0x4}, 0x1c) 03:36:21 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xd731e7bf044390a2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x1d, 0x6, 0x8, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f0000000000), &(0x7f0000000040)}, 0x59) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000001740), &(0x7f0000000180)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001400)={r1, &(0x7f00000003c0), &(0x7f0000000400)=""/4096}, 0x18) [ 1891.511259] input: syz1 as /devices/virtual/input/input961 [ 1891.573708] binder: 16339:16347 unknown command 0 03:36:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x900000000000000, @mcast1, 0x4}, 0x1c) [ 1891.619281] input: syz1 as /devices/virtual/input/input962 [ 1891.638371] binder: 16339:16347 ioctl c0306201 200003c0 returned -22 [ 1891.672847] binder_alloc: binder_alloc_mmap_handler: 16339 20001000-20004000 already mapped failed -16 [ 1891.699859] binder: BINDER_SET_CONTEXT_MGR already set [ 1891.737390] binder: 16339:16347 ioctl 40046207 0 returned -16 [ 1891.758275] binder: 16339:16357 unknown command 0 [ 1891.764627] binder: 16339:16357 ioctl c0306201 200003c0 returned -22 03:36:21 executing program 1: r0 = socket$inet(0x10, 0x3, 0x40000000000010) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0x40000) ioctl$TIOCEXCL(r1, 0x540c) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000017000)=[{&(0x7f0000004000)="240000001d0003ffff3cc0023da2830101faffffff86c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 03:36:21 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"627269646765300400", 0xfffffffffffffffd}) 03:36:21 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000240)) mount(&(0x7f00000007c0)=ANY=[@ANYBLOB="274c01006e231fb4cc123aac2bf1fe6cd0830f1fd51e4aad74364fbb6dda98166c8c988f6746b54cfeb1a7bc6d7fad85a8b4adbc8277333fec7533f0889ccff512234962d80500c7c13f7e77f8573a2eb10acb8ffdc94b9fe39d88a8d4775e6353bfe0d5d52fe570972e30a29cf4340abba6562a51b91c8586f855d85c900625cb19acc2e0e1b5c43a6354b671dab5cf120973fb4e4f34b07677e5ed4e00"], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xffffffffffff8001, 0x80400) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000280)={{0xa, 0x4e20, 0xffffffffffffffff, @local}, {0xa, 0x4e21, 0x3, @mcast2, 0x5}, 0x748, [0x0, 0x1, 0x6, 0x6de, 0x3f, 0xc43e, 0x8001, 0x3ff]}, 0x5c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480)=0x0) r4 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000780)={r2, r1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0x8) getpgid(0xffffffffffffffff) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@loopback}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0xe8) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x3) accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c) connect(r0, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000), 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b100"}}, 0x48}}, 0x0) mq_timedreceive(r5, &(0x7f0000000880)=""/185, 0xb9, 0x0, &(0x7f0000000700)={0x0, 0x1c9c380}) sendmsg$can_bcm(r0, &(0x7f0000000440)={&(0x7f00002ccff0), 0x10, &(0x7f00000017c0)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {0x0, 0x7530}, {0x20000}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000200), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000000ae1e2400000000000000"], 0x48}}, 0x0) r6 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000380)=[0x1, 0xff, 0x7, 0xfc6, 0xfc, 0xffffffffffffffe0]) 03:36:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x500, @mcast1, 0x4}, 0x1c) 03:36:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xffff1f00}, 'syz0\x00'}) 03:36:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1892.021972] binder: 16370:16371 unknown command 0 [ 1892.036358] input: syz1 as /devices/virtual/input/input963 [ 1892.044997] netlink: 16 bytes leftover after parsing attributes in process `syz-executor1'. [ 1892.054014] binder: 16370:16371 ioctl c0306201 200003c0 returned -22 [ 1892.096092] binder_alloc: binder_alloc_mmap_handler: 16370 20001000-20004000 already mapped failed -16 [ 1892.106719] netlink: 16 bytes leftover after parsing attributes in process `syz-executor1'. 03:36:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfe80000000000000, @mcast1, 0x4}, 0x1c) 03:36:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xa1ae0200}, 'syz0\x00'}) 03:36:21 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) socketpair(0x19, 0x0, 0x0, &(0x7f0000000140)) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000000)=""/17, 0x10000, 0x1000, 0x2}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0x0, r1}, 0x10) sendto$inet6(r2, &(0x7f0000000440), 0x0, 0x20000440, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) 03:36:21 executing program 1: clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000040)={0xa, 0x0, 0x9}, 0xa) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000200), 0x1000) sendmmsg$alg(r0, &(0x7f0000000b00)=[{0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="16d3b904d6e13e437e2358ded0ba0d5e8543055909f2ef80b340707005301f7ce5f84131c883ea9a1bbeeb670a39a23450ac8a061fc1fe8f3d7c50d8cc823cf0f407c77103bf8c5fcbcc71faae8b288a6b4605ac4ccda8ccf03ae5ced78b4fa28329a5c6d6cf00ef831ae60cb9b57f1388243fc0fc844f96d69d9f1b6f8fa7095a878c590027ce295b39a49d3bb9b9f4cb15202959b9b9df746f30428e192d0259dc97ad45d24580fc500170456bf585bf6d48a4b1", 0xb5}, {&(0x7f0000000180)="722f783d19440c9b6bfee0a3c3d949bd3550c6e592872a1d39984dade36be845761d9f61291ae7f8e9c1a8a3942263221690981ada6c128b7dabe3965bfced0ce0b7552e72018e46538ef8d9032b28c1c56381c8e1d9f404fa69a58426386365b85bfc597a4d47194e938b108db06edd9b6d922e38f345f06c4d70437415c8aa785849a9b2", 0x85}, {&(0x7f0000000300)="24cb7843f08934a9f25ee1c1a76b4a49b4591f4132fcb7b36f30a527a12ab2669b712fc4a433dd540f85085f3a7a50e141315aba3dc74b3b9e79839ef87a1226d377080fb5be25cff251db67d30da81a54bcd575003cd14b9df189a4030245134dc1b08bbb71fef5c81e02ddd13c6b56a75d0274d1d10a1da847bff6d4ea7130616bb1fa49e64c9e63a90b73908a7c5d6e3b24796d51a42a1b0b51485930a9f0c069bb05b3b22ce9bba0df9189791318788d424dc460cdde45e57154edc812bb3b3ec602cc9f58c26309169d7d5ab8a0ec04b895e4c7b0cc3584f3e187c3fa6df40a6887a1f95ac938f9ffffd36fa1b8ac76bb8cf251e86d", 0xf8}, {&(0x7f0000000400)="183e49debb50813527e5f8ed4703dc25279d62e82ba70f18fbe4fd96fa488b31835df320601d6e5ef522703f35d6c70e75e1ae8837a9a0ca38b794b390947ff50d8f59f736d98362223d276167fa8ae18dd89aae63d25e7d27d0b44d634c4329a7ea0ffe9c211b2dd9358c9c9c180fec382f2c8db15a526dfc58633dee30adedd96820dfee804d23d943d2c08e378f5379ab54fdf955a02bad7e987d233b02c47b033793d6e4fa9525a03c7bff64c0a88d0113257406e19315be6d91a159", 0xbe}, {&(0x7f0000000240)="aab77b6df40f3a882009e1c92f4756b7c0e24ed12884e378d94525cbf2dc462fe189f6249ecda77c6e2e84e51dfb698569b2e0340541b74bf2893fd1e7d85a281abb678a7a541a50ae5673fffdc676998550d55b6734179124d304cdff590a97292ba93cb99fe91b260dbf5b5e", 0x6d}, {&(0x7f00000004c0)="5d51f81bcac2f2842e86d6f790d22188c228c8", 0x13}, {&(0x7f0000000500)="b158e926724ffe26ae2d00d44a63844ac6d73706d2dabf433393845892d32e4ba16eb1055e40c12d04d1123459b2f6405c5fd5ec40", 0x35}], 0x7, &(0x7f00000005c0)=[@assoc={0x18, 0x117, 0x4, 0x80000001}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20000800}, {0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000680)="8f0d5f07bb2e4bf3bd7ad1715eb0e16ba4687074176a9788ab51e892ba709561718719f1ee64ac8f47277336b66c4e86bc6359bf5bc8b4aa150d22caf7830c592a278a10ef3d2ba23113af3cda7e2d5e25e38874fe50d6b95de6655fc34614ce1359a0f16e44c3b612a3a09dc0476bfd1e73fa71c669e4a12dd3e018bda2dfb17c35b8e46f1a6362970c119a2d36e3307d9668d615f687f2e1cb96407234cee2", 0xa0}, {&(0x7f0000000740)="e051abdad657beec253249947d89500ff090d2f4f764e0744d87c2a4a9d193a0abbd3fed77de909ae4ba71acd0254ed6b6e46bd0f66c833ae24746866c4700a6cbf2b161c43394772054367fd0142217d2da33173dea1a3cc9ecc3cfa7e3c74bcd69469c824befdba383fd458802f708e9e84806e5a2204d2fef858096b907b5b39ebf54a787487303c093a622fd0ea028dd2694d91df881c5a3b2c4b2c4ab9406ad3530d589048d70eed0c7de1ab85f196468e980a02a694f6887fdc6dc491f8a3979530d4d34cb5ff5e8e7514913bd609afb46d7dc87a98231d506d98fbfcce55534149b1c9bc8ef5245c2e8924564ff3b27db", 0xf4}, {&(0x7f0000000840)="35967ea50f28564888451d44d811e9066963e8eea3fc66bcf6f04ad7148db78bc42edc7e3c1ebc5a37e74bb8ecaf5fee5bc967d771fa1cd091662156c53e4d3af7cffc4b967fd5f24d2fc07c94fc9fa93dd9cb626d932ca35e701e060eb3bd4e5e3913d96405a70cb2", 0x69}, {&(0x7f00000008c0)="f64005c1e5727a44adf51a32c6727c964671cdaf73256a5a354c5bdcb64b1d7ccd5f78754f98d15e3686f4f9c8e3b870d18801393fb4602069926209da5e5e6b88766c451a0cddb6e2fa69111fcc13d68aead7a92568784f7057eb79c01a47af5ca6", 0x62}, {&(0x7f0000000940)="c7004af3a12f4cbe36f4d002ff5f36c685d08a4a59d96304abc4478b8dfe4fbd5fee805cc23ce87f28ad09de2aa83f65bf735e9fed101d56533d67ca0c595fa60f14ac04350cdebc8695f3fe35f84e652caafdbdb75506ad65340d8e263058298575487b5a91b6ccfe512f5a1a823f06186b4689ed2fd5b5018185b95d4a5ed42505df7c13153ec96326486f76c735e9b00d9944446d2083b01bf9dd", 0x9c}], 0x5, &(0x7f0000000a80)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x8000}], 0x3, 0x15) [ 1892.142156] binder: BINDER_SET_CONTEXT_MGR already set [ 1892.179828] binder: 16370:16371 ioctl 40046207 0 returned -16 [ 1892.225703] input: syz1 as /devices/virtual/input/input965 03:36:22 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530f5ffffff00", 0xfffffffffffffffd}) 03:36:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800008718772f595e462f1bac486700c69a607ae56aadd923"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7ff, 0x101000) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000000)={0xfff, 0x6}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000000c0)={r0, r1}) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000180), 0x4) rt_sigaction(0x1c, &(0x7f0000000280)={&(0x7f00000001c0)="440f12af000000812e66400ff88cf400000000c421fa2c780d0517940000c4c2d9ba8c9ae30f73ef363ef3a4c4815973f100c462f93568028fc868859f83102b9f006766420f15fa", {0x7}, 0x8000000, &(0x7f0000000240)="8f48108626026667460f0fd81cc4c1c5da537e450c01461d000000206443f8660fea1f3e0f0dab90300000f340ad67660fe5d0"}, 0x0, 0x8, &(0x7f00000002c0)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) r5 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x10000) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000000540)=""/4096) sendto(r4, &(0x7f0000000500)="036fb904bae280d95d40135c9b0a4329cdd312c218f117e2bea31ccb12d2769a6e15f7255d670926e71d15d86cf95dc591671716", 0x34, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000080)=0x7, 0x4) 03:36:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x40000000, @mcast1, 0x4}, 0x1c) [ 1892.346784] input: syz1 as /devices/virtual/input/input966 [ 1892.400795] binder: BC_ACQUIRE_RESULT not supported [ 1892.427860] binder: 16422:16424 ioctl c0306201 200003c0 returned -22 03:36:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x89, 0x6, 0x9, "9ef88aed02f921f77180c4a5f26f6890", "82ae0cdde66951ad4adf1d7ed23999822f02811021afcce99580dcc3db75e0bd7f356853db6b353511c83730b2127b688dee43216f6ea5b74a1d35885c37b894a7d40eabe121bd97500c44a8670e59c7bd8034a68a95023decd10bfe71a50058456df0a8d3b3143e35cf7cbfa8e2136f38a9d732"}, 0x89, 0x3) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x801, 0x4) sendto$inet(r2, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e) recvmsg(r2, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x51}, 0x40002102) 03:36:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x4c000000}, 'syz0\x00'}) 03:36:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) accept4$nfc_llcp(r1, 0x0, &(0x7f0000000240), 0x80800) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) signalfd(r1, &(0x7f0000000040)={0x2}, 0x8) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="0fc71a0fc7f38fc978cb6c77002e0fc72c9a0f35c4e1b5ec5d050f01cbf26fb9800000c00f3235008000000f30b805000000b961a200000f01c1", 0x3a}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000300)={0x0, 0x0, 0x2080}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @dev}, @in=@multicast1}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) [ 1892.469196] binder_alloc: binder_alloc_mmap_handler: 16422 20001000-20004000 already mapped failed -16 03:36:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x8000000, @mcast1, 0x4}, 0x1c) [ 1892.521881] binder: BINDER_SET_CONTEXT_MGR already set [ 1892.545552] binder: 16422:16424 ioctl 40046207 0 returned -16 [ 1892.563310] binder: BC_ACQUIRE_RESULT not supported [ 1892.572447] input: syz1 as /devices/virtual/input/input967 [ 1892.576062] binder: 16422:16436 ioctl c0306201 200003c0 returned -22 03:36:22 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e7230010000000000000000008e00", 0x502}) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$setptracer(0x59616d61, 0x0) 03:36:22 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530000000000000000400", 0xfffffffffffffffd}) 03:36:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1892.698803] input: syz1 as /devices/virtual/input/input968 03:36:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x400000000000000, @mcast1, 0x4}, 0x1c) [ 1892.750907] binder: 16466:16468 BC_ACQUIRE_DONE u0000000000000000 no match [ 1892.775778] binder: 16466:16468 unknown command 0 [ 1892.775797] binder: 16466:16468 ioctl c0306201 200003c0 returned -22 03:36:22 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x40) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0x5, @local, 0x8}}, 0x7, 0x4, 0x1a, 0xffffffffffffffff, 0x20}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={r1, 0x5, 0x4, 0x5189, 0x2, 0x70}, 0x14) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000700)=ANY=[]) mlockall(0x4) mkdir(&(0x7f00000006c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e22, 0x6d59c084, @dev={0xfe, 0x80, [], 0x1d}, 0x7fff}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r3, 0x100000000}, 0x8) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000940)='./file0/file0\x00', &(0x7f0000001a00)='bpf\x00', 0x5004, &(0x7f0000000900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000100)='bpf\x00', 0x81001, &(0x7f0000000080)=ANY=[]) umount2(&(0x7f0000000200)='./file0\x00', 0x0) [ 1892.813090] binder_alloc: binder_alloc_mmap_handler: 16466 20001000-20004000 already mapped failed -16 [ 1892.825070] binder: BINDER_SET_CONTEXT_MGR already set [ 1892.830867] binder: 16466:16468 ioctl 40046207 0 returned -16 [ 1892.839784] binder: 16466:16476 BC_ACQUIRE_DONE u0000000000000000 no match 03:36:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x5}, 'syz0\x00'}) 03:36:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x400c630f, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1892.861249] binder: 16466:16476 unknown command 0 [ 1892.868626] binder: 16466:16476 ioctl c0306201 200003c0 returned -22 [ 1892.897425] device nr0 entered promiscuous mode 03:36:22 executing program 1: mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x101100, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000200)={{0x2, 0x4e23, @loopback}, {0x306, @local}, 0x20, {0x2, 0x4e22, @multicast1}, 'bridge0\x00'}) ioctl$TCGETS(r2, 0x5401, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000140)={'mangle\x00', 0x43, "cc786629aaf2ddede9c6dcb5f746fe51fd9b73ae87ea5178c69b4ac2fdf385f6df3de2e19f704b54e991bc28721c556333f974731a1cf5dad785c8eecfa6c9502c2c53"}, &(0x7f0000000040)=0x67) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) close(r0) 03:36:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x600, @mcast1, 0x4}, 0x1c) [ 1892.961879] input: syz1 as /devices/virtual/input/input969 03:36:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x98ae0200}, 'syz0\x00'}) [ 1893.028321] QAT: Invalid ioctl [ 1893.032338] binder: 16494:16499 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1893.050933] QAT: Invalid ioctl [ 1893.058255] binder: 16494:16499 unknown command 0 [ 1893.077503] binder: 16494:16499 ioctl c0306201 200003c0 returned -22 [ 1893.093206] input: syz1 as /devices/virtual/input/input971 [ 1893.108558] binder_alloc: binder_alloc_mmap_handler: 16494 20001000-20004000 already mapped failed -16 [ 1893.129290] input: syz1 as /devices/virtual/input/input972 [ 1893.159795] binder: BINDER_SET_CONTEXT_MGR already set [ 1893.178016] binder: 16494:16499 ioctl 40046207 0 returned -16 03:36:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xb2ae0200}, 'syz0\x00'}) 03:36:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1893.298160] input: syz1 as /devices/virtual/input/input973 [ 1893.341344] binder_alloc: binder_alloc_mmap_handler: 16518 20001000-20004000 already mapped failed -16 [ 1893.354285] input: syz1 as /devices/virtual/input/input974 [ 1893.385512] binder: BINDER_SET_CONTEXT_MGR already set [ 1893.394615] binder: 16518:16520 ioctl 40046207 0 returned -16 [ 1893.410471] binder: send failed reply for transaction 6043 to 16518:16520 [ 1893.418489] binder: undelivered TRANSACTION_COMPLETE [ 1893.424323] binder: undelivered TRANSACTION_ERROR: 29189 [ 1893.441374] QAT: Invalid ioctl [ 1893.453355] QAT: Invalid ioctl 03:36:23 executing program 2: r0 = socket$inet6(0xa, 0x4, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x2) 03:36:23 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00\x00\x00\x00\x00`\x00', 0xfffffffffffffffd}) 03:36:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x300, @mcast1, 0x4}, 0x1c) 03:36:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xffffffffa0008000}, 'syz0\x00'}) [ 1893.549830] input: syz1 as /devices/virtual/input/input975 [ 1893.556870] binder: 16527:16534 ERROR: BC_REGISTER_LOOPER called without request 03:36:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x3f00000000000000, @mcast1, 0x4}, 0x1c) [ 1893.596905] binder: 16527:16534 unknown command 0 [ 1893.610762] binder: 16527:16534 ioctl c0306201 200003c0 returned -22 03:36:23 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x800) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0xe9, 0xe13, 0x1, 0x20, 0x48441aed, 0x8}) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10dd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x2, 0xe8030000}, [@ldst={0x7, 0x18d1fb, 0x0, 0x1d1}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) 03:36:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2ae93}, 'syz0\x00'}) [ 1893.637565] binder_alloc: binder_alloc_mmap_handler: 16527 20001000-20004000 already mapped failed -16 [ 1893.689904] binder: BINDER_SET_CONTEXT_MGR already set 03:36:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x4000000, @mcast1, 0x4}, 0x1c) [ 1893.719026] binder: 16527:16534 ioctl 40046207 0 returned -16 [ 1893.750433] input: syz1 as /devices/virtual/input/input977 [ 1893.761798] binder: 16527:16549 ERROR: BC_REGISTER_LOOPER called without request 03:36:23 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530000000007fffffff00", 0xfffffffffffffffd}) 03:36:23 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) socket(0x1e, 0x1, 0x0) syz_emit_ethernet(0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1b0009689b2c7880db6d58faa6506463f726e6bf183c91126d8507bc329219d35b8fd50d13e2eade8d2d5e64691c2021787e50f59643611c125c264b45c96099143016841ac08d2a6b5964cc7edfc6c4690f6f1aff87b110c42d9edf6f0000000000000000000000"], &(0x7f0000000080)={0x1, 0x2, [0x461, 0x0, 0x525, 0x8de]}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x20002000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000380)='projid_map\x00') ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x6, 0x0, 0x4, 0xffff, 0xfff}) ftruncate(r4, 0x7) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000300)=0xc) read(r4, &(0x7f0000000100)=""/252, 0xfc) dup2(r3, 0xffffffffffffffff) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) get_thread_area(&(0x7f0000000000)={0x4, 0x20001000, 0x2400, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x1, 0x80000000}) [ 1893.798107] binder: 16527:16549 unknown command 0 [ 1893.819893] binder: 16527:16549 ioctl c0306201 200003c0 returned -22 03:36:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1893.887207] input: syz1 as /devices/virtual/input/input978 03:36:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfc000000, @mcast1, 0x4}, 0x1c) 03:36:23 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote, 0xe}, 0x20) socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ipddp0\x00'}}) [ 1893.966860] binder: 16583:16584 BC_FREE_BUFFER u0000000000000000 no match 03:36:23 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\a\x00', 0xfffffffffffffffd}) 03:36:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x40000}, 'syz0\x00'}) [ 1894.055810] binder: 16583:16584 unknown command 0 [ 1894.072896] binder: 16583:16584 ioctl c0306201 200003c0 returned -22 03:36:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xff01, @mcast1, 0x4}, 0x1c) [ 1894.099110] binder: BINDER_SET_CONTEXT_MGR already set [ 1894.113159] binder: 16583:16584 ioctl 40046207 0 returned -16 03:36:23 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x22080) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000080)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0bc5310, &(0x7f00000001c0)={{}, 'port1\x00'}) [ 1894.152108] binder: 16583:16597 BC_FREE_BUFFER u0000000000000000 no match [ 1894.179526] input: syz1 as /devices/virtual/input/input979 [ 1894.182958] binder: 16583:16597 unknown command 0 03:36:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x80000001, 0x501000) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x7, 0x6}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 03:36:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xa, @mcast1, 0x4}, 0x1c) [ 1894.216484] input: syz1 as /devices/virtual/input/input980 [ 1894.242541] binder: 16583:16597 ioctl c0306201 200003c0 returned -22 03:36:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xa00}, 'syz0\x00'}) 03:36:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406314, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:24 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030313430303052964a302c757365725f69643d00", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2cf0a92d6f9030177fad9c3de39941c41576863a0a2c43f07b26eb23e4afeaebacb3e9e442bb13810dae0c6dcdb717193bbff10622d7a24e45c33e269393e63dd64a9513fbfae9c206a9047d26dcda9be885633a456ad011b5e7797e6b58c4d8320cac96c6010000808a48b6bd5c73c9b0cd468e5dcb162803c4bb4031625df9feec9609"]) truncate(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) 03:36:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x10401, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x10, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)={0x0, 0x2, 0x402, 0x1, "4f019b55a1fe221c8ef0fee629aa80b48fd4d30000000600"}) 03:36:24 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530000001a000", 0xfffffffffffffffd}) 03:36:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xff000000, @mcast1, 0x4}, 0x1c) 03:36:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={r2, 0x4b, "bc32809a9773cf53df3bdcfe48c9668407418ae2141181a8c1941f45a1a983c36c6d1e571a7502318fbe8197c2d4d214d72a76ed9219cec7ae4110d01088af16bc129e9759f2f41452a16f"}, &(0x7f0000000280)=0x53) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff00000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) read(r0, &(0x7f0000000080)=""/40, 0x28) 03:36:24 executing program 1: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) [ 1894.461444] input: syz1 as /devices/virtual/input/input981 [ 1894.489045] binder: 16645:16648 unknown command 1077961492 [ 1894.522671] binder: 16645:16648 ioctl c0306201 200003c0 returned -22 [ 1894.533589] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1894.550538] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1894.557325] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 03:36:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x200000000000000, @mcast1, 0x4}, 0x1c) [ 1894.578442] input: syz1 as /devices/virtual/input/input982 [ 1894.599882] binder: BINDER_SET_CONTEXT_MGR already set [ 1894.617407] binder: 16645:16648 ioctl 40046207 0 returned -16 [ 1894.617496] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 03:36:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x1000000000000000, @mcast1, 0x4}, 0x1c) 03:36:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x22002, 0x100) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000240)=""/112) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x7c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000001500)=@get={0x1, &(0x7f00000004c0)=""/4096, 0x100}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="2d959612a4865486cb860cd05659cbb9fb5ac6814bfeabba6bec67ac6ad32ed0f7e2be2a278ae33ef2bab4727ed44d625bf89afb1a517d97258c9428e8104b738c0e503c813725baaed39b4db6d2475a10ea2e9b0da2fb1f14af1d723186bfc9b47a13e6c2b04ec936a956090b3c150c5da4b3486b9521d86a48a75fe9010aa958a7bbdc929368029097075d3f832bd4f96c66ce90c292deb48d565dda5cb2fc8d30e73fb438af2e10b3afabe78844886e3d45e607d012368ac804d15027dbf765e052e5d948a9f4ad77c2d2f099255391af7a5b2f57cfd1c71e42ecd3baf43403ce2ecb", 0xe4) 03:36:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1894.682255] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1894.699215] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1894.717326] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1894.734650] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1894.746785] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1894.752179] binder: BINDER_SET_CONTEXT_MGR already set [ 1894.754572] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1894.764195] binder: 16682:16685 ioctl 40046207 0 returned -16 [ 1894.770687] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1894.783089] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1894.806716] binder: 16682:16685 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1894.816305] binder: 16682:16685 got reply transaction with no transaction stack 03:36:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2aec4}, 'syz0\x00'}) 03:36:24 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"627269646765300000000500", 0xfffffffffffffffd}) 03:36:24 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x34, 0x8082) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 03:36:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x4000000000000000, @mcast1, 0x4}, 0x1c) [ 1894.830886] binder: 16682:16685 transaction failed 29201/-71, size 24-8 line 2762 [ 1894.851602] binder: 16682:16685 got reply transaction with no transaction stack [ 1894.879304] binder: undelivered TRANSACTION_ERROR: 29201 [ 1894.886335] binder: 16682:16685 transaction failed 29201/-71, size 24-8 line 2762 [ 1894.913388] binder: undelivered TRANSACTION_ERROR: 29201 03:36:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1894.928830] input: syz1 as /devices/virtual/input/input983 03:36:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'team0\x00'}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r3, @ANYBLOB="280e2dbd7000fcdbdf250b0000000800050009000000540001000800010002000000080004004e220000080002002c000000080001000a0000001400030000000000000000000000000000000000080004004e21000014000300ffffffff0000000000200000000000004400010014000300ffffffff00005b60b1a9dfbe0fc66315000000004e240000080001000a00000014000300e00000020000000000000000000000000800010002007da7ca847f110000080005000300"], 0xc4}, 0x1, 0x0, 0x0, 0x5}, 0x2000c000) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@local, 0x7c, r1}) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x20, 0x0, @thr={&(0x7f0000000000)="703a6248cc4a9c2226756abc9976d04da2d29faa48a5a14a237be567cc0bd5f6ff1aad3b968144f2c2359abc606d228bc9fb700e45d0588afd2d2a97b365139f1f5ef04d265a22b0d2fe61d2577092e2dcc06b1ae3543e6066d77e771d83aa155051695ee04b2852a827edbee113bf0d4d4b200260c4bc06a81103f56e491a70066b561477b738b60309ecbc6031a967ab2437012e6d0ee84c250691990e71fd613553680370d7", &(0x7f0000000180)="029974e1bb3355d4d115c03f1ac714e09a4378852128de5cbfa453729b44bd2bb0976450fad2444d77cc07b23edd873e633a75086a747cf9020b4d886b71549b1165ad5544fb363c049045d528c9caaf87a46c1d4070c2ff3a198e11c67e885e957787bf36f0297ee96fb69a01b43b659bfe4f7fb4a79737e59aa53267a7f428f80b44a7a6bd7c6355f2a56793f9d93bb4061524465498769136959ddad21546e3e7f3262fc46c65ed4e193c8225758e3f9235b56991ce72cadbecb2b81163bb3452a33c506def388d284fe76dfff4f76cb066df9b8db4eb51f20120cd54"}}, &(0x7f0000000280)=0x0) timer_delete(r4) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0xc201}) 03:36:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x5000000, @mcast1, 0x4}, 0x1c) 03:36:24 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0xe1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x502}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80080, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) recvmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) write$tun(r2, &(0x7f0000000280)=ANY=[], 0x0) write$cgroup_int(r2, &(0x7f0000000240), 0x12) [ 1895.004952] input: syz1 as /devices/virtual/input/input984 [ 1895.022731] binder: 16709:16711 unknown command 0 [ 1895.050267] binder: 16709:16711 ioctl c0306201 200003c0 returned -22 [ 1895.078703] device team0 left promiscuous mode [ 1895.082056] binder: BINDER_SET_CONTEXT_MGR already set [ 1895.089590] binder: 16709:16711 ioctl 40046207 0 returned -16 03:36:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1895.102858] device team_slave_0 left promiscuous mode [ 1895.120618] device team_slave_1 left promiscuous mode 03:36:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2aeb2}, 'syz0\x00'}) [ 1895.161981] binder: 16729 invalid dec weak, ref 6062 desc 0 s 1 w 0 [ 1895.170375] binder: 16729:16730 unknown command 0 [ 1895.177783] binder: 16729:16730 ioctl c0306201 200003c0 returned -22 [ 1895.200326] binder: BINDER_SET_CONTEXT_MGR already set [ 1895.210360] binder: 16729:16730 ioctl 40046207 0 returned -16 [ 1895.222179] binder: 16729 invalid dec weak, ref 6063 desc 0 s 1 w 0 [ 1895.228609] input: syz1 as /devices/virtual/input/input985 [ 1895.234791] binder: 16729:16731 unknown command 0 [ 1895.246817] binder: 16729:16731 ioctl c0306201 200003c0 returned -22 03:36:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1895.263050] input: syz1 as /devices/virtual/input/input986 03:36:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x8000a0}, 'syz0\x00'}) [ 1895.390369] input: syz1 as /devices/virtual/input/input987 [ 1895.402720] binder: BC_ATTEMPT_ACQUIRE not supported [ 1895.413922] binder: 16745:16747 ioctl c0306201 200003c0 returned -22 [ 1895.441798] input: syz1 as /devices/virtual/input/input988 [ 1895.463801] binder: BINDER_SET_CONTEXT_MGR already set [ 1895.478476] binder: 16745:16747 ioctl 40046207 0 returned -16 03:36:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xafae0200}, 'syz0\x00'}) [ 1895.564893] input: syz1 as /devices/virtual/input/input989 03:36:25 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00H\x00', 0xfffffffffffffffd}) 03:36:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40086310, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x3f00, @mcast1, 0x4}, 0x1c) [ 1895.612581] input: syz1 as /devices/virtual/input/input990 03:36:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2aec1}, 'syz0\x00'}) [ 1895.657773] binder: 16758:16759 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1895.685520] device nr0 entered promiscuous mode [ 1895.694437] binder: 16758:16759 unknown command 0 [ 1895.701327] 8021q: adding VLAN 0 to HW filter on device team0 [ 1895.735970] binder: 16758:16759 ioctl c0306201 200003c0 returned -22 [ 1895.759340] input: syz1 as /devices/virtual/input/input991 [ 1895.772259] binder_alloc_mmap_handler: 6 callbacks suppressed [ 1895.772276] binder_alloc: binder_alloc_mmap_handler: 16758 20001000-20004000 already mapped failed -16 [ 1895.801812] input: syz1 as /devices/virtual/input/input992 [ 1895.815263] binder: BINDER_SET_CONTEXT_MGR already set [ 1895.821316] binder: 16758:16759 ioctl 40046207 0 returned -16 [ 1895.828356] binder: 16758:16773 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1895.844518] binder: 16758:16773 unknown command 0 [ 1895.855608] binder: 16758:16773 ioctl c0306201 200003c0 returned -22 03:36:25 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0xfa, 0x40000000004, 0x201}, 0x2c) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000180)=0x1) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x78171cdc, 0x8000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f00000002c0)}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f00000000c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x100, 0x0) 03:36:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xa00, @mcast1, 0x4}, 0x1c) 03:36:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000003, 0x20000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x20000010) write$P9_RLINK(r1, &(0x7f0000000640)={0x7, 0x47, 0x2}, 0x7) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f00000002c0)) unshare(0x4a000000) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x41) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000240)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x188) r3 = gettid() ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000005c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000680)={0x3ff, 0x401, 0x80000001, 'queue1\x00', 0x6}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={0x0, r1, 0x11, 0x2}, 0xfe8c) mq_notify(r2, &(0x7f0000000200)={0x0, 0x2f, 0x2, @thr={0x0, &(0x7f0000000100)="064d0ad5fa47d0e0a5ecc4882ad4ddd274069039ec1ec822bcebf38029c1138fb623dc82b5a44ce99a452d5bdf3d8e304e13a3cd106a88322912075941cb82e7a0a1c04116813b11e29dad9b63d9f1f627b134b8bb3cdcd18be7369e321a3f68ad0f13803c4779a4266c9508aec9d8bac288f7de6440fd2d40e561ea2b5b0756d9d91c96ceabbc24309275c69fdf8e23de6674692c200f0985bdf2a9bcfd5822d3925b3d1cd9838e8f9d5c06dc100289a3eb4f5ec453437acf7c4cd055fbea436b2fa3e73d24"}}) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000540), 0x4) getxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'trusted.', '/dev/ppp\x00'}, &(0x7f0000000380)=""/30, 0x1e) move_pages(r3, 0x1, &(0x7f0000000580)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000740)=[0x4], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x2) rt_sigaction(0xa, &(0x7f0000000480)={&(0x7f0000000400)="0fe1eac4c259046a3cf20f1be1c4c1fa16dcc4c1f5d23ac4c2e9de26c4c1457c780082e6008fc990980500000080df4000", {0xf88}, 0x0, &(0x7f0000000440)="e86556666664e006c114ca0ac4c3995e30000f01c40f9842f2f0804de25d2e64660f5a39c4c1b1c4001c0fab4008"}, 0x0, 0x8, &(0x7f00000004c0)) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000600)) 03:36:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xfffffdfd}, 'syz0\x00'}) 03:36:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:26 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530a0008000", 0xfffffffffffffffd}) 03:36:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x10, @mcast1, 0x4}, 0x1c) 03:36:26 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x3, 0x800) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000340)=[0x0]) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r0, &(0x7f0000000400)={0xce, 0x7d, 0x1, {{0x0, 0x91, 0xffff, 0x5, {0x81, 0x3, 0x2}, 0x1000000, 0x0, 0x5, 0x7f, 0x28, '/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, '{+', 0xc, '/dev/audio#\x00', 0x28, '/proc/sys/net/ipv4/vs/sync_persist_mode\x00'}, 0x28, '/proc/sys/net/ipv4/vs/sync_persist_mode\x00', r1, r2, r3}}, 0xce) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0x177, 0x4) sendto$inet6(r4, &(0x7f00000001c0), 0x0, 0x0, &(0x7f000020d000)={0xa, 0x404e20, 0x0, @loopback}, 0x1c) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r7 = getegid() fchownat(r5, &(0x7f0000000040)='./file0\x00', r6, r7, 0x900) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1ff, 0x800) recvmmsg(r4, &(0x7f0000f61000)=[{{&(0x7f0000f62ff0)=@ipx, 0x10, &(0x7f0000f5d000), 0x0, &(0x7f0000f62000)=""/89, 0x59}}], 0x61, 0x2041, 0x0) connect$rds(r8, &(0x7f0000000500)={0x2, 0x4e23, @multicast1}, 0x10) 03:36:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xc0fe, @mcast1, 0x4}, 0x1c) [ 1896.348660] binder: 16793:16799 got reply transaction with no transaction stack [ 1896.361977] input: syz1 as /devices/virtual/input/input993 [ 1896.370649] binder: 16793:16799 transaction failed 29201/-71, size 24-8 line 2762 [ 1896.405570] binder_alloc: binder_alloc_mmap_handler: 16793 20001000-20004000 already mapped failed -16 [ 1896.441640] binder: BINDER_SET_CONTEXT_MGR already set [ 1896.460155] binder: 16793:16799 ioctl 40046207 0 returned -16 [ 1896.474831] input: syz1 as /devices/virtual/input/input994 [ 1896.484855] binder: 16793:16809 got reply transaction with no transaction stack [ 1896.484869] IPVS: ftp: loaded support on port[0] = 21 03:36:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000200)={0x0, @aes128, 0x2, "9f821cb522602d76"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) pkey_alloc(0x0, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000000000000000600"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f00000000c0)) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000000)) write$P9_RRENAME(r2, &(0x7f0000000380)={0x7, 0x15, 0x2}, 0x7) r4 = open(&(0x7f0000000280)='./file0\x00', 0x40000, 0x0) mlock(&(0x7f0000ff1000/0x2000)=nil, 0x2000) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[]}}, 0x4000000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r5) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000480)) fremovexattr(r6, &(0x7f0000000340)=@known='security.evm\x00') openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$sock_FIOSETOWN(r5, 0xb704, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f00000003c0)=0xf1) clone(0x0, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000200)) 03:36:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfec0000000000000, @mcast1, 0x4}, 0x1c) [ 1896.506602] binder: undelivered TRANSACTION_ERROR: 29201 [ 1896.512963] binder: 16793:16809 transaction failed 29201/-71, size 24-8 line 2762 03:36:26 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"627269646765307fffffff00", 0xfffffffffffffffd}) 03:36:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2aeae}, 'syz0\x00'}) [ 1896.603909] binder: undelivered TRANSACTION_ERROR: 29201 03:36:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1896.715473] input: syz1 as /devices/virtual/input/input995 [ 1896.789323] binder: 16840:16844 unknown command 0 [ 1896.827670] binder: 16840:16844 ioctl c0306201 200003c0 returned -22 [ 1896.879799] binder_alloc: binder_alloc_mmap_handler: 16840 20001000-20004000 already mapped failed -16 [ 1896.916551] binder: BINDER_SET_CONTEXT_MGR already set [ 1896.947961] binder: 16840:16844 ioctl 40046207 0 returned -16 [ 1896.978626] binder: 16840:16850 unknown command 0 [ 1897.006347] binder: 16840:16850 ioctl c0306201 200003c0 returned -22 [ 1897.243756] IPVS: ftp: loaded support on port[0] = 21 03:36:28 executing program 1: unshare(0x7fffffe) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) mq_timedsend(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180)="88809c3143e09ff5d1e6aa5848317c4ed002c93f92e8847b5e52bbcbf1eba0b469b4121b3a3bf0f8a401864d16c36ac8d2a959106e27ab67e86534ab7a7633ffd1b9bf984cc2f56e4ebefa5a8b8436b641d032aa44909c2ac4a035994dc6e272ac6e953512a4297a63807d4e017c194c57edb7f15ce8e4f6e16d7ebfdef5b6f2cf831fa700", &(0x7f0000000080)="5157cb9dc74c287926"}}, &(0x7f0000000000)) waitid(0x0, r1, &(0x7f0000000100), 0x20000004, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) prctl$setptracer(0x59616d61, r1) mq_timedreceive(r0, &(0x7f0000000380)=""/210, 0xfffffffffffffed4, 0x0, 0x0) 03:36:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xff01000000000000, @mcast1, 0x4}, 0x1c) 03:36:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x4}, 'syz0\x00'}) 03:36:28 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00H\x00', 0xfffffffffffffffd}) 03:36:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:28 executing program 2: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x208480, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}}}, 0x20) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x80800) r3 = msgget(0x0, 0x4) msgrcv(r3, &(0x7f0000000380)={0x0, ""/194}, 0xca, 0x3, 0x2000) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @remote, 0x6f}, r2}}, 0x30) listen(r0, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev={0xac, 0x14, 0x2a4}, [0xf401000000000000, 0x300000000000000, 0x0, 0x0, 0x4000000]}}, 0x68000000, 0x0, 0x0, 0x0, 0xd}, 0x98) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000140)={0x5, 0x1f, 0x3, 0x0, 0xd7}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x7ff}, &(0x7f00000001c0)=0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 1898.620753] binder: 16862:16863 BC_INCREFS_DONE u0000000000000000 no match [ 1898.638668] input: syz1 as /devices/virtual/input/input997 [ 1898.645551] binder: 16862:16863 unknown command 0 03:36:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x10000000000000, @mcast1, 0x4}, 0x1c) [ 1898.671797] binder: 16862:16863 ioctl c0306201 200003c0 returned -22 [ 1898.688776] input: syz1 as /devices/virtual/input/input998 [ 1898.733505] binder_alloc: binder_alloc_mmap_handler: 16862 20001000-20004000 already mapped failed -16 [ 1898.751433] binder: BINDER_SET_CONTEXT_MGR already set [ 1898.780178] binder: 16862:16863 ioctl 40046207 0 returned -16 [ 1898.804637] binder: 16862:16882 BC_INCREFS_DONE u0000000000000000 no match 03:36:28 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x0, 0x0, 0x0, 0x5}, 0x1c) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x1, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000000c0)={0xfffffffffffffffc, 0x6, 0x9dbb, 0xffffffffffffffff, 0x7, 0x4}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='cmdline\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x2000000000000021, 0x0) 03:36:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x300000000000000}, 'syz0\x00'}) [ 1898.826074] binder: 16862:16882 unknown command 0 [ 1898.861318] binder: 16862:16882 ioctl c0306201 200003c0 returned -22 03:36:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xff00000000000000, @mcast1, 0x4}, 0x1c) 03:36:28 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530000000000000000200", 0xfffffffffffffffd}) [ 1898.953166] input: syz1 as /devices/virtual/input/input999 03:36:28 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x6, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x1000000ff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@rand_addr, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8) r3 = getegid() chown(&(0x7f0000000240)='./file0\x00', r2, r3) sendto$inet6(r1, &(0x7f00000000c0)="6a725a5f62d02a6be55afd02d999", 0xe, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x4, @remote}, 0x1c) recvmmsg(r1, &(0x7f0000009600)=[{{0x0, 0x0, &(0x7f0000006300), 0x0, &(0x7f0000000100)=""/150, 0x96}}], 0x1, 0x2000, &(0x7f00000097c0)={0x0, 0x1c9c380}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000400)={"6e617400000101ffffffffff000000800200"}, &(0x7f0000000480)=0x54) 03:36:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406302, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x1000000, @mcast1, 0x4}, 0x1c) [ 1899.054952] input: syz1 as /devices/virtual/input/input1000 [ 1899.163871] binder: 16909:16913 unknown command 1077961474 [ 1899.225974] binder: 16909:16913 ioctl c0306201 200003c0 returned -22 03:36:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) r3 = gettid() sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000006c0)={'bond_slave_1\x00', 0x600}) r4 = gettid() sendmsg(r1, &(0x7f00000007c0)={&(0x7f0000000200)=@ethernet={0x306, @link_local}, 0x2b, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x8000000000000008}, 0x8080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000002c0)=r4) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000680)={&(0x7f00000004c0)=@xdp, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/206, 0xce}], 0x1, &(0x7f0000000840)=""/201, 0xc9, 0x6}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r3, r0, 0x0, 0x12, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)=r6, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x4) 03:36:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x48000000}, 'syz0\x00'}) 03:36:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7000000, @mcast1, 0x4}, 0x1c) [ 1899.268682] binder_alloc: binder_alloc_mmap_handler: 16909 20001000-20004000 already mapped failed -16 [ 1899.279638] binder: BINDER_SET_CONTEXT_MGR already set [ 1899.285329] binder: 16909:16913 ioctl 40046207 0 returned -16 [ 1899.292203] binder: 16909:16923 unknown command 1077961474 [ 1899.298625] binder: 16909:16923 ioctl c0306201 200003c0 returned -22 [ 1899.391470] device lo entered promiscuous mode [ 1899.397601] input: syz1 as /devices/virtual/input/input1001 03:36:29 executing program 2: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x2, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000340)=""/208) process_vm_writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/17, 0x11}, {&(0x7f00000000c0)=""/80, 0x50}, {&(0x7f0000000140)=""/187, 0xbb}], 0x3, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/86, 0x56}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) unshare(0x6000000) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) listen(0xffffffffffffffff, 0x1000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 03:36:29 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530000000000000000600", 0xfffffffffffffffd}) 03:36:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406312, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x1000000000}, 'syz0\x00'}) [ 1899.564462] input: syz1 as /devices/virtual/input/input1003 [ 1899.586532] binder: 16944:16946 unknown command 1077961490 [ 1899.613996] binder: 16944:16946 ioctl c0306201 200003c0 returned -22 [ 1899.624898] input: syz1 as /devices/virtual/input/input1004 03:36:29 executing program 2: ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)=0x1ff) fstat(0xffffffffffffffff, &(0x7f0000002c00)) [ 1899.675626] binder_alloc: binder_alloc_mmap_handler: 16944 20001000-20004000 already mapped failed -16 03:36:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xf00000000000000}, 'syz0\x00'}) 03:36:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="dec2f105"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 1899.816801] input: syz1 as /devices/virtual/input/input1005 [ 1899.850219] binder_alloc: binder_alloc_mmap_handler: 16967 20001000-20004000 already mapped failed -16 03:36:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x6000}, 'syz0\x00'}) [ 1899.892211] binder: BINDER_SET_CONTEXT_MGR already set [ 1899.908356] binder: 16967:16968 ioctl 40046207 0 returned -16 [ 1899.929259] binder_alloc: 16967: binder_alloc_buf, no vma [ 1899.929540] binder: release 16967:16968 transaction 6090 out, still active [ 1899.956661] binder: 16967:16970 transaction failed 29189/-3, size 24-8 line 2970 [ 1899.982579] binder: undelivered TRANSACTION_COMPLETE [ 1899.997184] input: syz1 as /devices/virtual/input/input1007 [ 1900.006248] binder: undelivered TRANSACTION_ERROR: 29189 [ 1900.021915] binder: send failed reply for transaction 6090, target dead [ 1900.065396] input: syz1 as /devices/virtual/input/input1008 03:36:30 executing program 1: write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="460000007501003b0000004a42d6a74bd560f471df53ea658a802f7feb741b118bc30735e695ca2f283b5198347e00c182cb61a105dc8e04492f6802000000000000007966f6e3b3a0643ae9d3"], 0x4d) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000540)=ANY=[@ANYBLOB="0700a300012cd20a2c026f12c2eff4bdf704ea3478ec263da24ff91fc111dc92dbf1f14b5db895fe5085c1063183f1cfa6cae6f87ca8c8948aaf9aa03090de581663aacec356dc6392a83eb153d3654fd56626e2fae6f5d192055a0e856be8a76220f73b7ac7c6ac58c1a165659dc5f1f6564105b5fa71c91f46e1133a7f50c5ed72eb625b476087f6d44c36d6a069a3b34efaca0f7daf235c305839d0"], 0x1) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000380)={0x25, 0x75, 0x1, {0x1a, "89d305ba705a8adbf615418d4f2eaafcd8173f951a14c788ec28"}}, 0x25) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000040), 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f00000000c0)={0x80000000, 0x2, 0xff}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[]) write$binfmt_misc(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="164e9096ce016540627accafc3d41db9c916981893d5440ab73545e08303ad6c318837d35f2292a9798689962087eed30150286b08082d6b4c39248ed584992e1d80519d2cdbb81325cb69427160055ecabbdd738d10642a99a3ab75f00c13957af67f309b6af3cc00df5f98fcdfec2e266edde059804973710387b8e3c6b4fd0715d1c9aee90b13035813357bff93ce545186ae7817880c34"], 0x99) 03:36:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x600000000000000}, 'syz0\x00'}) 03:36:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x1400000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7, @mcast1, 0x4}, 0x1c) 03:36:30 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x404000) clone(0x210007fd, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() ptrace$peek(0x1, r1, &(0x7f0000000000)) sched_setscheduler(r1, 0x5, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc058534f, &(0x7f0000000200)={0xc}) 03:36:30 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"627269646765300000000100", 0xfffffffffffffffd}) [ 1900.508402] input: syz1 as /devices/virtual/input/input1009 [ 1900.521663] binder_alloc: binder_alloc_mmap_handler: 17000 20001000-20004000 already mapped failed -16 [ 1900.543289] binder: BINDER_SET_CONTEXT_MGR already set 03:36:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x2, @mcast1, 0x4}, 0x1c) [ 1900.556795] input: syz1 as /devices/virtual/input/input1010 [ 1900.564501] binder: 17000:17002 ioctl 40046207 0 returned -16 [ 1900.580385] binder: release 17000:17002 transaction 6095 out, still active [ 1900.587573] binder_alloc: 17000: binder_alloc_buf, no vma [ 1900.596130] binder: undelivered TRANSACTION_COMPLETE 03:36:30 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ff6000/0x3000)=nil, 0x3000}, 0x2}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) setsockopt$inet_buf(r1, 0x0, 0x11, &(0x7f00000002c0)="8c65d31d6a8d3d6a4170406340972dc206423a09ba049915826d086420d042ba3d31472c47b19508bea2faeaaa2aa8bb5f31162c946be83069cae5b5028fb73759c43371b669cec98a1acccb33b0f7721db1c14a68db47f5c683883015e132f8cc201b80c16e648fc258bdf03aaa6432c2d7529016aecc9b1f5a17a0261eb9aebd408f3ac34b1ae3bc03639fdcef495e784c153d5037f160c5b43578fd27c1bf", 0xa0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) r3 = dup3(r0, r0, 0x80000) pwrite64(r0, &(0x7f0000000100)="243ad9cf760cdc7f88822aedb28ae8bfbdc415739ef190d3d55387c7a6ba3e6daf962ca4732ae454e1", 0x29, 0x0) setsockopt$packet_int(r3, 0x107, 0x0, &(0x7f00000000c0)=0x40000000000000, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0x9, &(0x7f00000001c0)='/dev/vcs\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs(r4, &(0x7f0000000380)='net/sockstat\x00') ptrace$setregs(0xf, r4, 0x3, &(0x7f00000003c0)="c2b74b14962a378f976e1709ec1b4dd9814757d76d007e901331bda0a484c6e547e67772746a36015db36074db3941661a77d2a76819b23a053271fd89de1459128a62e3ced2b5984abee1c1ea13df6a2494e6dcb0d6b114aa0b97a689383191e0aead0b79919bda2a8bc442a2a64341498ecb501b5d1f5299504f6b29c626a51df5ca91021341e3dd90b6b4546faf7b52b75c11a3a75526282b6265cbf331707a4dbf092279c9e262d2") ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x201, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) mprotect(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x4) [ 1900.614220] binder: send failed reply for transaction 6095, target dead [ 1900.623022] binder: 17000:17010 transaction failed 29189/-3, size 24-8 line 2970 [ 1900.636716] binder: undelivered TRANSACTION_ERROR: 29189 03:36:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:30 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530fffffff500", 0xfffffffffffffffd}) 03:36:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xb3ae0200}, 'syz0\x00'}) 03:36:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x4, @mcast1, 0x4}, 0x1c) [ 1900.758277] binder: 17030:17031 got transaction to invalid handle [ 1900.814372] binder: 17030:17031 transaction failed 29201/-22, size 24-8 line 2855 [ 1900.836739] input: syz1 as /devices/virtual/input/input1011 [ 1900.872920] binder_alloc: binder_alloc_mmap_handler: 17030 20001000-20004000 already mapped failed -16 [ 1900.908569] input: syz1 as /devices/virtual/input/input1012 [ 1900.919075] binder: BINDER_SET_CONTEXT_MGR already set [ 1900.952143] binder: 17030:17031 ioctl 40046207 0 returned -16 [ 1900.954920] binder: 17030:17048 got transaction to invalid handle [ 1900.973335] binder: undelivered TRANSACTION_ERROR: 29201 [ 1900.979561] binder: 17030:17048 transaction failed 29201/-22, size 24-8 line 2855 03:36:30 executing program 1: timer_create(0x3, &(0x7f0000044000)={0x0, 0x0, 0x1, @thr={&(0x7f0000000180), &(0x7f0000000280)}}, &(0x7f0000044000)) exit(0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x4000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x301, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5b10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}}, 0x0) futex(&(0x7f0000000200)=0x2, 0x7, 0x1, &(0x7f0000000240), &(0x7f00000002c0)=0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x10000, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000440), &(0x7f0000000100)=0x13b) 03:36:30 executing program 2: socket$inet6(0xa, 0xf, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80040000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x3f8, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0xd470041877f0fcc9) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) ioctl$VT_DISALLOCATE(r1, 0x5608) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0x7000000]}, 0x10) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000240)={'nr0\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x2, 0x40) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000280), &(0x7f0000000300)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3f, &(0x7f00000002c0)=0xc4, 0x4) shutdown(r0, 0x1) 03:36:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfe800000, @mcast1, 0x4}, 0x1c) 03:36:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x6c00}, 'syz0\x00'}) 03:36:30 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530a00100", 0xfffffffffffffffd}) 03:36:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0xffffffffa0010000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1901.052150] binder: undelivered TRANSACTION_ERROR: 29201 03:36:30 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x9, 0x80) mq_getsetattr(r0, &(0x7f0000000000)={0xec, 0x4, 0x9, 0x1, 0x7, 0x3, 0xffffffff, 0xaac}, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0x80002}) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x9, 0x8000) 03:36:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xa000000, @mcast1, 0x4}, 0x1c) [ 1901.146651] input: syz1 as /devices/virtual/input/input1013 [ 1901.152118] binder: 17074:17076 got transaction to invalid handle [ 1901.190275] binder: 17074:17076 transaction failed 29201/-22, size 24-8 line 2855 [ 1901.209374] input: syz1 as /devices/virtual/input/input1014 [ 1901.239250] binder_alloc: binder_alloc_mmap_handler: 17074 20001000-20004000 already mapped failed -16 [ 1901.274818] binder: BINDER_SET_CONTEXT_MGR already set 03:36:31 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b20000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7}]}, 0x10) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) fallocate(r0, 0x2, 0x8, 0x80000000) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x7, 0x4) sendmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00007ed000)=[{&(0x7f0000000140)='u', 0x1}], 0x1, &(0x7f00000002c0)}}], 0x1, 0x0) shutdown(r1, 0x1) 03:36:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x8, @mcast1, 0x4}, 0x1c) [ 1901.289439] binder: 17074:17076 ioctl 40046207 0 returned -16 [ 1901.307926] binder: 17074:17091 got transaction to invalid handle [ 1901.322706] binder: undelivered TRANSACTION_ERROR: 29201 [ 1901.328860] binder: 17074:17091 transaction failed 29201/-22, size 24-8 line 2855 03:36:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x700}, 'syz0\x00'}) 03:36:31 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00?\x00', 0xfffffffffffffffd}) [ 1901.365994] binder: undelivered TRANSACTION_ERROR: 29201 [ 1901.441514] input: syz1 as /devices/virtual/input/input1015 [ 1901.500687] input: syz1 as /devices/virtual/input/input1016 03:36:31 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="d3ae3061009302ff0000000000000000000000000000"], 0x2) 03:36:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x800000000000000, @mcast1, 0x4}, 0x1c) 03:36:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2aea6}, 'syz0\x00'}) 03:36:31 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x80) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) getpid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[]) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc0109207, 0x20000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={@mcast2, @local, @remote, 0x8000, 0x101, 0x7, 0x100, 0x0, 0x2, r2}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x1, 0x4) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x0) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x9) 03:36:31 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530000500", 0xfffffffffffffffd}) [ 1902.013294] input: syz1 as /devices/virtual/input/input1017 [ 1902.020534] binder: 17136:17138 got transaction to invalid handle [ 1902.026896] binder: 17136:17138 transaction failed 29201/-22, size 24-8 line 2855 03:36:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x4}, 0x1c) 03:36:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xb7ae020000000000}, 'syz0\x00'}) [ 1902.071379] binder_alloc: binder_alloc_mmap_handler: 17136 20001000-20004000 already mapped failed -16 [ 1902.110476] binder: BINDER_SET_CONTEXT_MGR already set [ 1902.115801] binder: 17136:17138 ioctl 40046207 0 returned -16 03:36:31 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92, 0x4}, {0xffffffe0}}) 03:36:31 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x80) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) getpid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[]) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc0109207, 0x20000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={@mcast2, @local, @remote, 0x8000, 0x101, 0x7, 0x100, 0x0, 0x2, r2}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x1, 0x4) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x0) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x9) 03:36:31 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"627269646765300300", 0xfffffffffffffffd}) [ 1902.171525] input: syz1 as /devices/virtual/input/input1019 [ 1902.175972] binder: 17136:17138 got transaction to invalid handle [ 1902.203596] binder: undelivered TRANSACTION_ERROR: 29201 [ 1902.213417] binder: 17136:17138 transaction failed 29201/-22, size 24-8 line 2855 [ 1902.247271] binder: undelivered TRANSACTION_ERROR: 29201 03:36:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x3}, 0x4}, 0x1c) 03:36:32 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8001, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000400)='cifs.spnego\x00', &(0x7f0000000480), 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f00000002c0), &(0x7f0000000300)="9911", 0x2, r1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000003c0)={0x0, 0x0, 0x100000001, 0x6}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000240)={0x5, 0x8, 0x4, @remote, 'lo\x00'}) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000340)=0xb1) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000040)={0x0, 0x1, 0x8, @empty, 'ipddp0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000015c0)={0x0, 0x1, 0xb0e1, {0x77359400}, 0x0, 0x2}) write$binfmt_misc(r2, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x112) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) readahead(r0, 0x800, 0x531e) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000280)) sysinfo(&(0x7f0000005000)=""/4096) fstat(r2, &(0x7f0000001540)) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x12e) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000001780)={{0x6, 0x1, 0x2, 0x7, 'syz1\x00', 0x5c8}, 0x2, 0x4, 0x0, 0x0, 0x4, 0x7ff, 'syz1\x00', &(0x7f0000000100)=['/dev/ashmem\x00', 'rxrpc\x00', ')(\\securityem0\x00', 'cifs.spnego\x00'], 0x2d, [], [0x8, 0x100000000, 0xcc, 0xffff]}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f00000004c0)=""/238, &(0x7f0000000380)=0xee) [ 1902.294309] input: syz1 as /devices/virtual/input/input1020 03:36:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x9dae020000000000}, 'syz0\x00'}) 03:36:32 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, &(0x7f0000004640)={0x0, 0x989680}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xfffffffffffe, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x3f, &(0x7f0000000900)=""/4096, &(0x7f0000001900)=0x1000) 03:36:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0xa}, 0x4}, 0x1c) [ 1902.393298] binder_alloc: binder_alloc_mmap_handler: 17180 20001000-20004000 already mapped failed -16 [ 1902.428155] binder: BINDER_SET_CONTEXT_MGR already set [ 1902.451970] binder: 17180:17183 ioctl 40046207 0 returned -16 [ 1902.482073] binder: send failed reply for transaction 6115 to 17180:17183 [ 1902.489191] binder: undelivered TRANSACTION_COMPLETE 03:36:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0xb}, 0x4}, 0x1c) 03:36:32 executing program 2: openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) write(r0, &(0x7f0000000180)="88ce39f064233e019dec65ee714334ddaadbf62e87a6", 0x16) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x4, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1902.525141] binder: undelivered TRANSACTION_ERROR: 29189 [ 1902.550705] input: syz1 as /devices/virtual/input/input1021 03:36:32 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530ffffffffa0008000", 0xfffffffffffffffd}) 03:36:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x20000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendmmsg(r0, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000000000)=[{0x20000010}], 0x10}}], 0x1, 0x0) [ 1902.683179] input: syz1 as /devices/virtual/input/input1022 [ 1902.712525] binder: 17219:17226 got transaction to invalid handle [ 1902.718878] binder: 17219:17226 transaction failed 29201/-22, size 24-8 line 2855 03:36:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}, 0x4}, 0x1c) 03:36:32 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x408000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/197) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000140)={"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"}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000540)='trusted.overlay.redirect\x00', &(0x7f0000000580)='./file0\x00', 0x8, 0x1) write$FUSE_IOCTL(r0, &(0x7f00000005c0)={0x20, 0x0, 0x3, {0x1, 0x4, 0x7, 0x9}}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000600)={0x0, 0xaa}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000680)={r2, 0x7fe000000000}, 0x8) ioctl$KDDELIO(r0, 0x4b35, 0xfffffffffffffffe) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000006c0)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000700)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000740)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000780)=0x0) rt_tgsigqueueinfo(r3, r4, 0x3, &(0x7f00000007c0)={0x27, 0x87, 0x6, 0x4}) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000800)={0x6, 0x81, [{0x101, 0x0, 0x67}, {0x23, 0x0, 0x2}, {0x4, 0x0, 0x4}, {0x8000, 0x0, 0x7}, {0x1, 0x0, 0x3}, {0x18a4b155, 0x0, 0x40}]}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000880)={0x64e, 0x0, 0x10001, 0x9}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000008c0)={0x3, r5, 0x0, 0x1}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000900)={'filter\x00', 0x1000, "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"}, &(0x7f0000001940)=0x1024) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001980)={'vlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000019c0)={'vcan0\x00', r6}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000001a00)={'bridge0\x00', 0x998}) sendmsg(r1, &(0x7f0000003200)={&(0x7f0000001a40)=@xdp={0x2c, 0x3, r7, 0x22}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000001ac0)="b16b05af9480517c7fdcfc3d0cced0525a2a50392deb75e56c439789d23d28cd2d06aa23e67ea2a6c2df25b79e669c641d1887462623d0ee4af7e8c526840e156a3a7593acb3232d1c0641e31fd07a2c16d8a221856c637a6111ece65e48c9e63e3d0f3023111964fde6ed071cdec6b334e34a", 0x73}, {&(0x7f0000001b40)="763accb97f7c70b5e0", 0x9}, {&(0x7f0000001b80)="b524308d7e8c3022e43d73c793a76eb7bf5ca45e9002ddded365c99402ea167aefd8c13fa798232d3261bb573fb85efe9b2c6b01be0b01f927fbc8dd97f4e8b84853625fb184d8ae0e0b6a79c81342b84c53b0a2a7b07cf13d73c90577ae1e80a1ed7a8292217f6f4c79bea9843e57a0c482af7463b25010987ee3176312b575a792e4a2686ff04a6e9ab530091b1e30c83702385e2bfc95c5b089ed158770ab4fb460912bd24021c802ff3083a8c6ddec8e58fc78a10b01861689dfa58709af9784d18bb0f8555ed19322012ffc7597f90005e9ef55f8ac0753bb31b09bfc13720e99", 0xe3}, {&(0x7f0000001c80)="e1d5ddc148b577dd3b1ce09b4f6d6b3d01ca2bc54b473a22cc32365a5737f48ebb8b1098891db11cda6e57b32b9472121d404da28881dddb54e814b37a9831640e4bf0cc5fa432ab2ea035e95e1f7965ce46f514b041092a5908f3a3b689c7d5e00423f91ee6def000b38acf2d619cce34c7e98db41558663dd3e013727f83c7638f513b7021c6a94ae3076c095b8922c9df268be428975c877faf81afa191e3c749c62e9b5730052a5278", 0xab}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="fa773ed4941f8744d9e62fe9f7ff882131a06b1a76c62c5c3747028500667d1a68d4833f0d038557b56e6ee230c2a8ecb3481b2603c26ff5f261679273061be9f840907eae68c068aa211d1ef260f29610f925fb8fbfc6ad3d439099c09749228a", 0x61}, {&(0x7f0000002dc0)="be7d6d4916a5d5b6010b95f5", 0xc}, {&(0x7f0000002e00)="bd4ba8fbbef657b4594853e14fc9e0e4a0c2ead604982c03421238ea353f7da4f6a9511816f463f312518e2492d1a205d10614c6694cb6b91ffccdd41adf806e8fe421eae3f4108dceb00a3600300eea7ec1bc3ff530645b4d83fde88463abb2ad71a53fcc8b8f04630aabccd966a0af7efb4cd2e80bd0a753d9ded927fe6f5482d375f64e64b87c23d30dbe240a6a6fe98adb6d8f534c16924cbdb40d17bb0f6f252ba992a4137bedb4885662de4ffc9c4c5865d8a9867db8fb8d64502b809fe4c92b90eb6fa4671e90779e", 0xcc}, {&(0x7f0000002f00)="97f79bcdeebaab1d5d0580ffa746fc7c9c880a806466e1064c042d7eaaf5e36fe8869b93d1df85e11ab0a3668fd297f9dead4db5f228cdca348fe52715ef1de5bca224c80f8ac9429e0d8f1fda871a97c369d869ab30ea3cd2239c937c1d14c3427f55f82fb4f1e477364eacdd4429da1385d783a7bef5dc019b3b", 0x7b}], 0x9, &(0x7f0000003040)=[{0x80, 0x12d, 0x1, "e764c68e3137b66cb354c9b7a9a9e813c8e50d893b211d1f854c4d0bda437c2808b7f4637461e7b4cbb540927bb77ba0485e73ebd2f490f03d78f0ddff222e40f729028c721a595bddcd7cc824a4dc9aaff0cde9fa81b449226f407375de2b306e3b3a0dbe45049026"}, {0x58, 0x0, 0x5, "eccf2572a97023ce841676d7ff83a3e797f31196159bbe3b2158063479689961a2bd3a5031a892c43d4d11ef4303b69fdb954e895e4dc8f0092787671a162180f8a71a"}, {0xc0, 0x1, 0x1, "65518e13c938380bc06594be01ec31d41114aa09d3c8ab1672d198d15652075bc4848e2a8d163abfd23f1ca56df8817d37cd98ce67c916e6d20344cdbd63ca9202a7d16561e1574e194151a1348ed09726704a362da673d2faa143b8edf6bbecbc20fefd248b2e31cb6f379b40b1ffec950b4c9b8896684667fc7a3401f74c9ab34874633ef45a61d8b2db216d016aced33977f8591177f0db159ad3fde1247228d9823453799ba8f25988ef"}], 0x198, 0x40}, 0x20000000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000003240), &(0x7f0000003280)=0x4) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000032c0)=0x4, &(0x7f0000003300)=0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000003340)={r1, 0xfffffffffffffffd, 0x9, "6851c8fea4cb59197e2b92ebd5b7b2a19990a44062a77b72ac7847fe021741be7c4dfe593cddef137f44d030a68d544e6a1f49365411bcf0064f653420f235ffb35c9e0c89422e830efcffc05b6610fb2b4e1332219d5c6a6661a8c43488f66c9a88985a7729bdc182469dfa72e250dc6a762ddd27454bd251c56adcab644c73a32ac8de884f9d1b12e8cead87c39fec8d2428353b42e891c463aaee1deba3382addf8e8d6220233eecec2f2b7bbf0123dabdf8738ba9d3d868b492e5d8f6a648aa78b0c86f1be90bd8f9ab9c778a6d6fbd613f402f18df1aa163ca4f10c05a3a208451b4dcfe86d20144fb5988498574f3160c1daa3354453641dbb57febe8517b3124b323027ea9073de80f498cd9298de2ff32f120694263c70967bfb397099f33d4f6170ea6742d1ebf06f25e5c5d5f225fddde0c5870690dae6cb65c875a67054c39fee735ead40a097dcb3b7734cc54ce1103fe20a195c855e0d24561a22b3b62d49421e5412809a947507959e04d635feab053c86f9bb525e5f06a151c89c4a3ef2d14f1e9afcdbdcad4335a3c5ab858d62167a2a324ca8a1eca4690ce50fa26002d310505adb497df161b9619cf46ffa8fa7886414451ddb33095c24a10d4305f783f1cbe4fa5d43cfa048575a4593472d84efe31cebc16629ff14e787fac3a8004e8c1688135ca4a06c40079aeea3f863c23226617a76286773a50558b90033fa519b8f56cb55f9d1f1d1bb673b253a24b5647b632b1cd1da7d88c96111b818ca2c5aa86ee379b1e7de0ac7fe389fc4d85ba52cc366793210d6971702688bd00a1ea7b78a688cfbd7d4b457e31609d5fbbc96ecbc7aeb16f42ed820c415c3f0ac6a596035ab475b15c0c5f0aac6f319d5c4b4cbcd597f9dabb6c611ec033071db9b18bbcbcaebf9ebb3550b7112d39f50aec2556eff31fccfe343e9ff64b70ecf919a8827310d0407fda0955bf841c3fe5f3d77b1039f7e05e7ce53e9354fe7244d680aaab23f8fbd84e5c79aceea6a4b435542914ed608a71c14eb8123241b97caa001ccea99482ac8eba10bb02ffeeae8e0517932027a9043a46be592d7791b66f620f5246d2ee35885e2b1374138ed988f221a9ff9b3883b565c62f248ab2ce346220afee5e44a8153849f7405ba0a581e05beab876abded81accf4353ed93c1c9c541131b11b6a82de649632965734063fb1ba723e3f9955acb0af5613c0622a626609bfadfafc1c171fff309f203b3fe7f9da542c3564e305ee3e8155589c02cf69db94aeec2917c9b0311010d52a0231e4ca6b0b75fb429fc7bc5d6728ec30d6f960e960daf86568fae4b45c84eb29bb3e5ac8f1b295d17c34811258a061cb450f74c9714859a86d22a1e34faed60d462c6fd109e955ed6ae63e50ddc3c9a61ef3f6d2b844cddbfda9607b0873211f4d24e758b85ed93d4d0b1ae1032d1fb383b2cc3aff3db49a44160558d6620a3ca0b6612ffa137407c27eff53d38bbde64731c78e2c853d092b1a2f63975301bc7620ecb640ee35e68db7e631d0509966ea6181b4f27d6fef41b9b733cb7afc6e72b40b73b83855bae85a0499624b70fcfb9c671a0f4d5cb51c107303085f26b9e09527c6dd55c378a2282b70bd31f5d5b6d63165729a161152e9782aceeb12eecef5d17eb5ac45aa87f038ee10b2cf958ad87d9a2888c130b0c12849ad12e24b0c9ea81248b3c88a71ba5723cf232a713d05f2d08a5dbee4dc2893c2afb4fbae882a977e943cb4bab72d65a900f96051c9f2cb2f6fc52eb6a47c136855e8bfef0d0ef7069fa688fc7be3e4e168018cc9a1b045b7993838d2930c9f2710e920f72ea3ecb41b5daaa9d8e77af3cb1b489ae75bda5a1bd261d0717f6da60887c1021f5c2f3808ae468bc14d4c612d140d01c934da7148ed6cfff748cae6108eeeae8e8d91a95df6b7b69daae72ec571ea5e7dc4faee51fdb0a3e60bde18283bc4631ea58c024292f2c27b4b34fdc5c69388da8073760b756b0bb2a978872152c3d621a18ea801417220ee571eb7040af7af42d027828a203f241f2e22df4554c8ff57455aabd9c1ee6de150173c0a0f4d54a1065e460d34dfdf9a60eae653fa63127b076a2f05ff30b4d30aa9f91b4bb7bb1853cf366acd447e6af83d767e2b0ba246946dd6955b07ce7e50c97a91322986e86de867e1981be1f760a84166433b47f7fc89477a3f09a507142ef7d772b475f6a36d5e0c74f617dc7adaba92a1288eb7572ce44371cfccb6bfd04b69c23de006062ee77cd67a342521b844e44e334a36b09d92d0122aba0b0229de13204272514ac890e712810bcc92f3cd90dfbe8b14def4f501d5f58322d56fa1a3e6221ba4e623b8878fac2ddc9aaedc50c77309b9c746b464415be8b3a8db58e7cac9ae47b35671257120c3ea958aea3200697a635e53dfbadfdb278e23c7852ac641c48bce5f59f926770a8e64632f9b20b92de9d8cd2b9bd0bd8207b5e1a82849c019e8ac7cdcc92c0093ae5b3568e42e2a76a0f9c284e2b077dc6ea3d65e394dc0867ab42e866f669bb88f96aa768d838d26158080311bba128dac4e84677490c4684dfacd13952913d5cdaae6deacc3213c909e22018ac12fbd353223ebb402f2e28172769ca972286438ca18262419b14aeefd0cce8df5c2e6281a1310567117d50a7c7836cb08f4bdc69a394ac7342771163e0ee3ee91cc69e34786cee8d96aa5d6ef2910c763a676f2807b682964e83167c41e3c56de0b6d7b290bdbe05dd94c4e94388f91d13153218e8efbd7c669583be95cb467dd37be6ed1c4505c1c5ed74f6e3ca5dd7b83b1335c3befc0ff29606a17c091ecfbf8f245c36228e63eb993ae6d4ed89106dc703b804d030aec2fe1bb67548e1e3b4cfefacd023973ebdd7d56d87c5ca521d486fa81832ba2f23d27cbd56ff8484dc47d18a6c2b485cad83e2c73d68d75fb89acfe8734d851d7a33f7fb819d302d5edf6e077a3f21a548e49905fd48ccedf3f9aa562a8a206bfa54986ef591be7b13096c50244b9684da0a9a8c764fe56a9e7ca46d06b896381b91fc193b3e265d4be0bd1e58210cd7baa2e14738c1b58e4a998d4cdf22960015821fd03d37c9297305d26d2cbe53a6744fe4796ab9b02c112309f337df01a13a80ffcdc2718a1cc8b3c554b5ca22c2a38ba92f47a43d6f8d8f451629f55301a9763a634534e7bc2feb69692fdefc5f30ade468dc058118929c59cf49fb2f06938635af521a319fcef802906d924ddd49a779511d879ff4eff378485a73439dd5640cbaab8373c704952bac216ade1f4b6b8e62b2f592ecf4842d17bc66de54ef8b206f99f726e237d9162d03f6d2221f18bebfc84d2ff13799c4215d0882044db2f3362d4c74d36bb9e4e8bb0d1efd746200da575b8727379c03d7f78c23ce573c63a290880a879378408db47d01a27fa070a9eb7491b89aa8ba6b8b43ee3feb84abc467516dc8891dedaf8a9a62c62f3d99473908ceecafb69274ef8f00efba223fb54553980d5b74a5aa243c46131f8b27c7512f221a67a51d69e9613d6439b5ee8a1e868d5a352cc4bd821782eaac07e52df552ab21249f14711fb2754be34629264ba17262cf694fea8c08010c9a586f79374c3745b40110eb802b0fb372cd650f1d64057270d5e0948d6035098b495af085085a2b0317caef6a1d79d1b6510c0b6bd1c5517b19e1643a4bc9c9ed2a72f45c230793aa3a911afe34a494203bcf3407aa30e3c026459545f4473fdb231f7bfbf79e911cdb62fc1a763d41d0f11f56dadcdf646f0827700240e9d0513903a00b67e7c3216261b4db399b7cd6769bf2461ba2f09709af35aaace836238589a90c343f61c23474173aab065d1ac7ac8fd8f883e1f51c07b6bf8613daf955afb5042bbe378900e1ab62bb7461a41ca56305778c6dfa24c3768af539f8061bfc274cd315d8f3c378a3df1918986ccbd72364be7b1e27f60c41307359e99ac7c094dffccd8386d85c86c98eaa3c8d9a2632ebc26800f97955c6b5a2edb23f1cfdadb35bd49302b5eb098ae061de80c5ada0246cc58a176d81facd677ca97e9bbae910edea57eed5e82b5f69515d5023d9c40f8ec2d68caccbffac4b11ee3b9a8decbca79f1fd7396e9f0889921ca3e7ddcafe6ebfa22748878366f99689ad5f53d24c6dc8d4e99d20e3d6e094d85c72a99c9731491f9c379065aaad5cbb959535643f750dd9895b2b0d3d2cb035e816bbb7f58008aa1ba61c2f2558a87bbf1ba204ea6020bb7ef9f3ff43e2546a175cf83f3e0eb251b0ca8d9529645ef30115c590d8972f2716b4904eb97835247cb2df6479b99c9ef5e073033e42df47d60612112c32aa2bd5ba6afcd03062130cda7c06e8780929f72c8381c20fa1c9c7b46277610ddccfa516e33f27f20726672da61b3341b509c0c7726e210dcb0de666f2a2f2d08ee9292bdfa0ad42b25ff0a8c2068a8350b9c13dbf74336175ecb5c09d111047d376d79d974c2abbff83bba1a9aa51c11a0ff5b7cefcff3d921d65fed762d2599ac3baf237f1a1e0cb4cdaba6abfa311bf44edca015b2fa0aa8202ce6706bf9fc5f45a2e528e994f427cf664c93d0f7059ce00cef07002846c8c580892b6af931225857da237a66399796cdf717de0cac490c4a569f53f2cb2a6a41afc04a625d1d4b4117e68cfc5e1346a9d070cac7a87c630c5e93afaa2ae58a9065ceb99b81b5ed269f8adae449ffa0f8395eb09b014a047dc712982e40b5c69bb8f8031a7b09329d9d7e63d377146e56c1867eeed7bd6f4688d6e3560ea0e416455f3ef4819a9cd396a528739a637d9bd8957606deeb6df356c0f14062c4d27b03da1025806d7911dc48802de9d0287dbf288d37948cdf02d634cee176e3ea0b84e5d0625551dc4e1c159dd611c13e3139efccf98e4b1313bed05581d8949e895a37bad8e69ad19d6f561c480fdfba6dc937694827551a0252dfedaaa3d7e17835085e5ae9031086e6df9f994a1107336d290256f36396d0c0109313cec46d8c0b1beeaa99ead2ee58940d6d3050f184db79436f0456d0c447629162b8076c9a0024782b95410225bd22767abd7976f64be516ca1633605ef991e0557bf5f15b287804b2a6b93993adbb40cd74f22b861fbce8fe4f9605db66e014a9b2b735babfdf0ff1d14918b84b746e66a8567c120c9cead8be70f8a403ca89567817c3deccfb5890b99c4714a313c40771a3827a3b6251a0b81fe03159f8698a4a864b7e9525495b048eee3d36c8a3ff63ed66c47d3819fbb2f15e4364fe266a86f0279d5b590cc5e810ddd10dc9a470b7d79f2aa9b2dfefe472aebd94a29c23a6db3bb43eda4be68f84cee387157bad92ef91fc02ea247ffbd85e8d66a6d378cb1070e4b99a5eabf33f02ca5fea2eafc89c701428055d0a9ed8c772f40b8e1815608dd7f537634fbe59f9c5ed30f7858a876da92de11b7dc8754de12ccd5acd438309f011b6de47ec7e8b3a8263f819ed02c3e872f674a10ba2f3803301ae1bf7ef33db565a2f460b8ad72dc1f3ec62ccf961063b7a96a86e4455775bfb2e895c22e6d1d0c6287c8e9ba7983edeaed356191ffd2d7d8659eabe0a0e274b4204cd383f4b724e7ccca9faad7dbfbdcbe09ea8ed1cf51414210873d567141a1eb2a047f3ac23ac3cab965fc4f4f89d61c0cdf48c0032d16febb146143491ff0a07458a4292f4b9d8605d5d948af614d075f3df58eaecbc11d0635e87a5185606f2818ceb26d1e34c79c1d8166a93048cf539f941aac47693dcf71652b19aa57"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000004380)={'vcan0\x00', r6}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000043c0)={r2, 0x9, 0x0, 0x8001, 0x7}, &(0x7f0000004400)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000004440)={r8, 0x3f}, &(0x7f0000004480)=0x8) r9 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000044c0)={0x0, r9, 0x100000001, 0x4b81, 0x4, 0x3ff}) [ 1902.746761] binder_alloc: binder_alloc_mmap_handler: 17219 20001000-20004000 already mapped failed -16 [ 1902.756905] binder: BINDER_SET_CONTEXT_MGR already set [ 1902.762574] binder: 17219:17226 ioctl 40046207 0 returned -16 [ 1902.768790] binder: undelivered TRANSACTION_ERROR: 29201 [ 1902.775045] binder: 17219:17233 got transaction to invalid handle [ 1902.782075] binder: 17219:17233 transaction failed 29201/-22, size 24-8 line 2855 03:36:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x4000000}, 'syz0\x00'}) 03:36:32 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530000000000000000300", 0xfffffffffffffffd}) 03:36:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x8}, 0x4}, 0x1c) [ 1902.933448] binder_alloc: binder_alloc_mmap_handler: 17250 20001000-20004000 already mapped failed -16 [ 1902.969130] input: syz1 as /devices/virtual/input/input1023 [ 1902.983038] binder: BINDER_SET_CONTEXT_MGR already set [ 1902.999669] binder: 17250:17251 ioctl 40046207 0 returned -16 03:36:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}, 0x4}, 0x1c) 03:36:32 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$KVM_NMI(r0, 0xae9a) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0xffff7ffffdfff008}, {0x6, 0x2000000000000}]}, 0x10) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.current\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r2, r4}) sendmmsg(r1, &(0x7f0000006e00)=[{{&(0x7f0000000540)=@hci, 0x80, &(0x7f00000006c0)}}, {{&(0x7f00000058c0)=@can, 0x80, &(0x7f0000005a40), 0x0, &(0x7f0000005a80)}}], 0x3d5, 0x0) [ 1903.034282] binder_alloc: 17250: binder_alloc_buf, no vma [ 1903.042698] binder: release 17250:17251 transaction 6124 out, still active [ 1903.053816] binder: undelivered TRANSACTION_COMPLETE [ 1903.058934] input: syz1 as /devices/virtual/input/input1024 [ 1903.076094] binder: send failed reply for transaction 6124, target dead [ 1903.147939] QAT: Invalid ioctl [ 1903.175904] QAT: Invalid ioctl 03:36:33 executing program 2: getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@can={0x1d, 0x0}, &(0x7f0000000140)=0x80) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x80000) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x400, 0x70bd2c, 0x25dfdbfb, {0x1c, 0x0, 0x0, r0, 0x20, 0x1, 0x3}, [@NDA_DST_MAC={0xc, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008884}, 0x54) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000001c40), 0xc, &(0x7f0000001c80)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000000000000000000060000000000000040a6c2746a0a4ad1d0cc8f76e7746443b64b4c45dfda8fa90f4c3845b7da949fec649e77067c13", @ANYRES32=0x0, @ANYBLOB="00000000000000000f001200080001007369740004000200"], 0x30}}, 0x0) 03:36:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x2000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x3f00000000000000}, 'syz0\x00'}) 03:36:33 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00t\x00', 0xfffffffffffffffd}) 03:36:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}, 0x4}, 0x1c) 03:36:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x544, 0x5, 0xa, 0x100, 0x70bd29, 0x25dfdbfe, {0xa}, [@generic="1b55f2f701177d00110be5daf3579b540535e6ea6c4617c3fe763518547a258944efac17956b7e9677d86b22c5f87d8e11be7d2c15246116eb1375196cff4afb96f1cc33ae9953f7ccd3b296d053239211d8", @generic="ee9d33bd006a494c9778400963ac414a92791484739cd98184a37248808da9f1782ad6439cf98881c0a0bdce9efee3ac6618af386c42732a76e5539f2f88ef0c681f55cd781f682129a7ab3a3ea2376dc7213048b1dbb4eac5f502dc3f96c430224571f9a34b8afd88c7ee5b2c39475049ba77", @generic='Q', @typed={0x8, 0x27, @u32=0x80}, @nested={0xf0, 0x73, [@typed={0x8, 0x5d, @uid=r1}, @generic="9b21e70b9333bb86d9708b4397903f9fb761649f5d95fbe0fe349f97758997f2b0709f3f6a554c717637fe844b170f9a76928ba89a2a511a06d8a3a959b3040641d41d0d7e6428e3fd9d347f73b33366d1b8a844d8e3a9237bd6c126326898df42593ec5ef766eb001c9674828cf9277bac5c4458dff86f1a5142c8d", @generic="0ea0a5a08be625b2e3496685dfb7eeeb14e1b79f532cdbea6d4a3d2426a81e61ea00312951256b03ae271656151db791e816730f42306bf08712949cffa2b5171ac62292bc2194e75b46132291303ddf7f2279658480819c140d655a422594", @typed={0x8, 0x47, @uid=r2}]}, @nested={0x370, 0x5, [@typed={0x8, 0x41, @pid=r3}, @generic="576707ee3d3e25cde7545d4d8caee1b7ea2a2d65c7ee0b1b40dc53311528c0eb3eb276ad55fcd2918a5d64c655b65de7863afd985a963f80a633c3ce551e1dbcd45596fa9ce35d51e176a49b617619e2037c698484edd2395a5642ef887a96dbbdbfe47dd4c75ea4320a5c50fefd27bd69a6b3deca4fbab73a0b0a7d9d8b4e6c2b7e5d46ffa9920ecdc3b542c6fde263aa2370a4b5", @generic="e0c3a51d37d760bee6a938afc96abb16e7fde06428f1f15be13377e2be7ac7086d243536185bf81f94a635a285600ccc6addaf57", @generic="95e71ae2e363d57d047aa4f0e7cf", @generic="59032eb36a75b5dcc80ef7a4d54c6ec9eebfc6a19a4db57198bfdefe8811a08ede5b1e3fc88e0e35aa242fddff3dfc2a92df2ff5496a776c1d300fd4a37faf32f977d3d1354e0529b32618220d364959803707dd6838143af821b526c75b634f2981d8b114f6b8268b39667f552f8fa9ff6ce6d59a5344c2f03e0b9f7b60aab87979050177345e7178c4ac8f61feb1946008d6f4174a5ae94dcd34ae6b04d5ca67c25ab7e40b23d8c5b87032609b2983eb9f3191acd1613a53", @generic="6641d3a489dc8c0884f7abf5facf3a14ce38a0c8060f78cb278330805c74fc6756cd061de835b9d7f05f1f6793544ae81a62c17eff4b9420b76718ac1f97b999c50f7632bc903943cd6307a7569f0ff495f7eed9ce76bac09b81e9c41ff9", @typed={0x4c, 0x95, @binary="2eba53c659ce24c21f0f99fdbeeb0773ba2ba6cbf20ca3566cb87466756b38b54454c77b14e9ae3c7b594219fd220aab00022eeb706f04de77769716f0a2630bf6c66014eba050fa"}, @generic="282a8571ba10f73f002ff4c4e711065a2413bf202b164d8c984d5d1795e3a7dfcdef834f9e4dccf6c1b722e9f047d6b52cf1eadce547b2938a64c8ec5c05655ab54e238cc90c8887c5517e57fed98199cd74092243b1f74208d57f23d620f36110f65631064b3cbfc28e64145d", @typed={0xbc, 0x3c, @binary="c5fb647d8b6fc49b138326ab175a739ed1e77369ceedfc5c9194ca4976e56fd5d98097a77320562c35ef968498e86bfbbc47cbf6b5d5820726842a5797d0c2ff5da2d91e43c13d407333578369dd6d64f16c2251eeb86954b11f5ecab772516a836b0400a28b714f9bd73bf36fb259353c975498a2083faa0cac8fb2fed2baf7a70337df39f39e3e173263a614fbcbd4c4e9268c2f2f5596a536b638bb1cdf3fd53f3e2c1f57c640fca48f8b2c3d5c25222f17fd90100cb6"}]}]}, 0x544}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r5 = getpid() fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000080)) sched_setscheduler(r5, 0x5, &(0x7f0000000200)) ioctl$BLKTRACESTART(r4, 0x40081271, 0x0) 03:36:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000380)=0x384, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x6) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000100)={0x81, 0x8253, 0xfff, @remote, 'veth1_to_bridge\x00'}) [ 1903.549716] input: syz1 as /devices/virtual/input/input1025 [ 1903.563332] binder: 17287:17288 got transaction to invalid handle 03:36:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0xe}, 0x4}, 0x1c) [ 1903.608010] binder_alloc: binder_alloc_mmap_handler: 17287 20001000-20004000 already mapped failed -16 [ 1903.634131] input: syz1 as /devices/virtual/input/input1026 03:36:33 executing program 2: r0 = gettid() r1 = getpgrp(r0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) tkill(r1, 0x2d) r3 = syz_open_procfs(r2, &(0x7f00000000c0)="85d5d3a4918566642ffc26") writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) tkill(r2, 0x37) ioctl$RTC_AIE_ON(r3, 0x7001) [ 1903.659792] binder: BINDER_SET_CONTEXT_MGR already set [ 1903.672171] binder: 17287:17288 ioctl 40046207 0 returned -16 03:36:33 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00h\x00', 0xfffffffffffffffd}) 03:36:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f00000000c0)) sendmmsg$unix(r1, &(0x7f0000000700)=[{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000380)="8f4a84dc13e4d032829decb98c2eed3d652b84c98b17343fc26a4cfdfde235b9e6427992b8a5108b806bbebce5fbd24d085bd7f345bf66b370e03b2cf7f717639277ebfd31b74c0bcee3d0ed04fe7569867676d7090a04487a7b335e1bab93693b439bc651692ad18e4371707efa6aa72d78771dcb34dfd3eb18e90284121bd393d3ee42b61e9b1eb84a4f4e3eef946322bdac7547850bc84be1828b0f3ba77210c740719224a13719c53a0c694ed0753726a0ad05f4515f73fddff3e0bf65a4c0c7101a9b6711c4fb36c2907c4a0641f41dc15a10437337d1b9c83a5dc5e46bf341e4e2600d55e51b80151c442ff3e55b95f31576c0b883", 0xf8}, {&(0x7f0000000000)="404b1b8ad08e74d2b629c349cbf9ec964e598dd4a21c1c1390659ba922b0da9bc53b26fc6147886f35c1cd2009bfe641", 0x30}, {&(0x7f0000000280)="f32c0f1748c5cf77679eef94c945a7714864d330be62ac0bbacb31fc4f00c80b7b3e0fa9d25f9b039fc0749cd1cc4a95933fb3fd5ce6ade28b9bf0ed9c898b509a29eed32c06c10eb1f5c84318f377a57e95ffc449391d29d6b9f12eda2742", 0x5f}, {&(0x7f0000000180)}, {&(0x7f0000000500)="5ba7a78abd70a703b8a3f00ef32eda30fde0caf10fc8ee6cf4dbab12e2657f799aa6cebcf5cfbbcd79b676fb5f2835f95ba5acf7893eacf07e31f8f1c84bd5c3dbef605137502a6518272181bc7aaf39a09ae682b164f0108f7b5a6a73f61f7f4108833d6ce2ac9121d2bc440fda0898b87b64c4b184bd15578fff39efd6b249d8b3021d2f941202732c70fc80a8673517036d789e03d9300685925a1e1a129bf0f2588b8989f7839193e6383981d7c112", 0xb1}, {&(0x7f00000005c0)="28dee8092fa48715e05243a7ee21133cba057aef821f1b030b889386e5436c35225d61565efb37d3f96b37c6e8fee1224d053cea996bc109806b6865e4acd29931618600fdef49f287f0d6b78ff883dd47992d5ad11e5a5bd8ea41fae212f3b259a1409508b719599569a4b13908e4126b8bfb4d889f6e154d260046ca04d1a04a38402c4c73211d28d7a053c5908580e3a228ae74904ccb", 0x98}, {&(0x7f0000000300)="1879fa8a7e0982a079a308bc84a37a26258126a5aece92e67c1fca22cc7a3a37901165a9ba56321cb9fb70a2327b357bb59daccdc338ae64b1", 0x39}], 0x7, &(0x7f0000000480)=[@rights={0x20, 0x1, 0x1, [r0, r1, r0]}], 0x20, 0x800}], 0x1, 0x4000000) 03:36:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xadae020000000000}, 'syz0\x00'}) 03:36:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x2a42, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000, 0xffffffffffffff9c}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x541040, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000003c0)={r2, 0x80000, r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000240)={@nfc_llcp={0x27, 0x1, 0x0, 0x5, 0x7f, 0xb01c, "3fdeac05f8b05f289eee21eb577143538f1af58492e994a826f68ff933c74e2580e69ab539cdcda82b68d2972fb1e4b4e40a833b7dbf032355164fa15c7eba", 0x5}, {&(0x7f0000000140)=""/174, 0xae}, &(0x7f0000000200), 0x4}, 0xa0) 03:36:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x6}, 0x4}, 0x1c) [ 1903.845628] input: syz1 as /devices/virtual/input/input1027 [ 1903.896618] binder: 17340:17347 got transaction to invalid handle [ 1903.908122] 9pnet: Insufficient options for proto=fd [ 1903.926555] binder_alloc: binder_alloc_mmap_handler: 17340 20001000-20004000 already mapped failed -16 03:36:33 executing program 1: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, &(0x7f0000000100)=0x1c) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000180)={0x0, 0xffffffffffffff9c}) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:36:33 executing program 2: getresgid(&(0x7f0000001100), &(0x7f00000022c0)=0x0, &(0x7f0000002300)) getgroups(0x1, &(0x7f0000002340)=[0xee01]) getgroups(0x3, &(0x7f0000002380)=[0xee01, 0xee01, 0xee00]) setresgid(r0, r1, r2) kexec_load(0x0, 0x3, &(0x7f0000002140)=[{&(0x7f0000000040)="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", 0x1000, 0x505, 0x5}, {&(0x7f00000021c0)="58086994925033247f45f1bda3e99e273a650309e1df13f54e3bc911b2c24d9877ddb6ef6f3aaa35af4677870a2074a834928d506499a982dc751422b32399601e363216d4d9d6b2b6206573cf97d1aa51e05ab9211d73ed06c2f0d306dc3f04b7ba2ced228044b238f4d30dbf9c8670f2abdc004c2571747b6be793ca25ffb296c805dbcb6c08de526d125fe1e04fe96d010525637be285179a74c49577f95c9525faffdbaa0123a080c8ca2f6b673c24f45b1c0325055dfaa2f72cd885062bb394", 0xc2, 0xff7fffffffff7ffc, 0x19e}, {&(0x7f0000001140)="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", 0x1000, 0x1, 0xfff}], 0x160000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001080)='/proc/self/net/pfkey\x00', 0x80802, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000010c0)={0x4000000, 0x9, 0x39}) clock_gettime(0x0, &(0x7f0000001040)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000000)={r5, r6/1000+10000}, 0xfffffffffffffc98) [ 1903.955874] libceph: bad option at './file0' [ 1903.972904] binder: BINDER_SET_CONTEXT_MGR already set [ 1903.978286] binder: 17340:17347 ioctl 40046207 0 returned -16 03:36:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x9}, 0x4}, 0x1c) [ 1904.020809] input: syz1 as /devices/virtual/input/input1028 03:36:33 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00\x00\x00\x00\x00l\x00', 0xfffffffffffffffd}) 03:36:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x500}, 0x4}, 0x1c) 03:36:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0xffffffffa0008000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:33 executing program 2: socketpair$unix(0x1, 0x4008000000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xff, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x7ffff, &(0x7f0000000100)={@local, @link_local={0xffffff1f}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70223, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c8d1f6", 0x0, "071ccd"}}}}}}, &(0x7f0000000000)) 03:36:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x88ffffffff}, 'syz0\x00'}) 03:36:33 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc008240a, &(0x7f0000000280)='bdev(,y[%systemprocGPLppp1(#,lowlan0)&mime_type\x00') r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x3ffd, 0x0) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000080)={0x9, 0x6, 0x2116, 0x300}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000100)=""/83) 03:36:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xff00]}, 0x4}, 0x1c) 03:36:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0, 0x0}, &(0x7f0000001580)=0xc) setfsgid(r2) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000840)=0x400, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote}, 0x25c) r3 = syz_open_procfs(0x0, &(0x7f00000015c0)='net/fib_triestat\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)='./file1\x00') sendto$inet6(r0, &(0x7f0000000040)="312b2a3467b6466bf13efa14aae47d0d8567678be538f709d99b37fd35fa99e62010d4b7a8b4b354ae585a3445aa6760820c18bdc8ae1ec9926a2639aa2f4575d5400b65fb33708facb671567f98dc46e0e4d7a2f5699d1d9ea50779198ec2fad9ae3db7f111d41ea22d31d51bc31735987de34d986c03990a6a85bcb6a9", 0xffffffffffffffd7, 0x4048044, &(0x7f0000000800)={0xa, 0x0, 0x9, @mcast2}, 0x1c) getrandom(&(0x7f0000001240)=""/184, 0xfffffffffffffe1d, 0x2) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x404000, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000140)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000040)=@generic={0x3, 0x80000000, 0xde}) r6 = socket$inet(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000eed000)={0x2, 0x1}, 0x10) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r7, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={0x5, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @local}, {0x2, 0x4e22, @remote}, 0x84, 0xdd53, 0x9, 0x8, 0x0, 0x0, 0x5, 0x0, 0x8}) socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x423, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x0) poll(&(0x7f0000000240)=[{r6}, {r7}, {r7}], 0x3, 0x0) syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x5d, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000300)="b5ef6715b710bd434727176a92a2bb36b9015e76481e5cf4a6286a87c431410f3665c5abda8ad5c6f598329f9b2944bda247fa6fd6c7c1661869d2cda67ff996ffd93b44057d7410f28053c71caeb26efdf31fd3f82edcec6407c21e387e4e7413", 0x61, 0x1}, {&(0x7f0000000380)="31d887574820c09eff22156b8c2e25270fa2b556682ada71700f944c35560d09c986814ccf5f4406dd9db7b07d6691bf617935654c32a85346d95490c1b97eff12d449964c38887ecb42a6e23eca", 0x4e, 0xffffffffffff8001}, {&(0x7f0000000400)="a50ac85519cae86cac300a050ef06fa3286cbf103ab811d16832152c541b63b24973d03ee7ffa19f4aa948a0e45049ad105ea8d956c45f394ea8dc23dbb6d656188ecaaf5abfa4ce08ae208a12f4077fca6e11546e7c03e7497cba41f76e8bcaee25360689d59742c85b52", 0x6b}, {&(0x7f0000000480)="7f35150ea4a4e2b0752cc3c64073e7a7293a74e16da3beb383dba80e13078b64a34f2b02c76da0e6a7752069b5802b8da9190ca57918165898659f923bf0d35fe063d34564909ec8a9a99c70b3b889e4d20e8861a2055b130ebdf49ccf9dd402c1ad97e1cb96acc51782bd7d5693cee98863ab706e0cc8c5176c261eaae5e6c0202717c106e13edc50cd0fc297e85f5bd66087d24c74e6f226f573941fd336672afffe2f7c8a1343eab26c101ba07514ec6635aab79105ce2f738621e8f4610c7ebc9bb3407e72", 0xc7, 0x5}, {&(0x7f0000000580)="68d0b0ff7547e1ab1a2541b97a3952f028976d5a7139eaba2805d2acb16e6ac65ff02841ebf98275894cdb419024fc4167c3ef0108b436a9569bd3926740b332e5d01d995879fef6e2458e14e5f06e7d45700abcac8f6551eb45d278e81270c8f6f27a5a60e9450f95b8503a17dba06e818903f137699a1f4181e05c96e0a27256980bbbeea80b5928d16845d2e12e56ff8454a9d64ac8bb6f2ee1b53ded33ce771047c72a0cf1be17008c333170ec5487eebc8191875cd2148ae450eb7493bed3", 0xc1, 0x3}, {&(0x7f0000000680)="b9c63499edd060970b75c6638eadfa5b179c488e204e0590e3cbb460560b3845109490ba11b017f83e2dc56accc769190a3a337ca62e74", 0x37, 0xff}], 0x100000, &(0x7f0000000780)={[{@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}, {@gid={'gid', 0x3d, r2}}], [{@smackfsdef={'smackfsdef', 0x3d, "212e26776c616e313a217070703102"}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*/%{)/GPL]cpuset'}}]}) r8 = syz_open_dev$audion(&(0x7f0000001380)='/dev/audio#\x00', 0x7f, 0x8000) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f00000000c0)={0x0, 0x7ff}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000001300)=[0x1, 0x1]) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000001340)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r8, 0xc08c5336, &(0x7f0000000900)={0x3, 0x5, 0x800000000000d3, 'queue0\x00', 0x100000001}) preadv(r3, &(0x7f0000001500)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1, 0x2) [ 1904.223096] binder_alloc: binder_alloc_mmap_handler: 17383 20001000-20004000 already mapped failed -16 [ 1904.247670] input: syz1 as /devices/virtual/input/input1029 [ 1904.262219] binder: BINDER_SET_CONTEXT_MGR already set 03:36:34 executing program 1: r0 = socket$kcm(0x29, 0x299566ed41f8004e, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'ifb0\x00', {0x2, 0x4e21, @loopback}}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = dup2(r0, r0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) sendfile(r2, r2, &(0x7f0000000040)=0x4800, 0x10a000000) [ 1904.288041] binder: 17383:17387 ioctl 40046207 0 returned -16 03:36:34 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530000000000000000100", 0xfffffffffffffffd}) 03:36:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x1200, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x7a00}, 'syz0\x00'}) 03:36:34 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80040184152, &(0x7f0000007fff)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@loopback, @in=@dev}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) 03:36:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xfc]}, 0x4}, 0x1c) 03:36:34 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x3f, 0x501000) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000180)) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a00000029010000000000000000000000e1ff00000040000000b900000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000680)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000600)={0x43, 0x9, 0x1}, 0x43) write$P9_RWALK(r1, &(0x7f0000000040)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}]}}) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) [ 1904.465624] binder_alloc: binder_alloc_mmap_handler: 17417 20001000-20004000 already mapped failed -16 [ 1904.493910] input: syz1 as /devices/virtual/input/input1031 [ 1904.510688] binder: BINDER_SET_CONTEXT_MGR already set 03:36:34 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000880)) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x10c00) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x1, 0x4) 03:36:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xff01000000000000]}, 0x4}, 0x1c) 03:36:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x9cae0200}, 'syz0\x00'}) [ 1904.544744] binder: 17417:17418 ioctl 40046207 0 returned -16 [ 1904.602550] erofs: read_super, device -> /dev/loop2 03:36:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x14, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1904.642657] erofs: options -> [ 1904.670683] erofs: cannot find valid erofs superblock 03:36:34 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00\x00\x00\x00\x00 \x00', 0xfffffffffffffffd}) [ 1904.700640] input: syz1 as /devices/virtual/input/input1033 [ 1904.737463] input: syz1 as /devices/virtual/input/input1034 [ 1904.745922] binder: BINDER_SET_CONTEXT_MGR already set 03:36:34 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast1}, 0x200}, {0xa, 0x4e22, 0x5, @mcast1, 0x1000}, r2, 0x8}}, 0x48) prctl$intptr(0x1a, 0xfffffffffffffffb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xd99) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000002c0)={0x0, 0x3}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x0, 0xfffffffffffffffc}, 0x8) exit(0x0) 03:36:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x3f00000000000000]}, 0x4}, 0x1c) [ 1904.754952] erofs: read_super, device -> /dev/loop2 [ 1904.772058] binder: 17456:17458 ioctl 40046207 0 returned -16 [ 1904.784662] erofs: options -> [ 1904.807720] erofs: cannot find valid erofs superblock [ 1904.815053] binder: 17456:17460 Acquire 1 refcount change on invalid ref 0 ret -22 03:36:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2aebd}, 'syz0\x00'}) 03:36:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x7000000]}, 0x4}, 0x1c) 03:36:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) finit_module(r0, &(0x7f0000000080)='syz_tun\x00', 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x0, @remote}, 0x4, {0x2, 0x0, @loopback}, 'syz_tun\x00'}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x10000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000100)={0x55, "b934942c9a790078e573bfb5182834481771aaf285bb2f032f9b10e20cf53f2c562d40cfaf1f60c56a9ad5f11c65b7c95f6eee93c645de658bd1a7a9bbb247ee09402163a5cba474e7b32fc2200a169fd0b5c1ad51"}) [ 1905.000674] binder: BINDER_SET_CONTEXT_MGR already set [ 1905.020268] binder: 17486:17487 ioctl 40046207 0 returned -16 [ 1905.036747] input: syz1 as /devices/virtual/input/input1035 03:36:34 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530ffffffffa00100", 0xfffffffffffffffd}) [ 1905.061066] binder: release 17486:17487 transaction 6151 out, still active [ 1905.068256] binder: undelivered TRANSACTION_COMPLETE 03:36:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000100), 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x2d, 0x119, 0x0, 0x0, {0x3}, [@generic='f']}, 0x18}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x500, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x800, 0x1, 0x1, 0x5, 0x9, 0x1, 0x4, 0x1, 0x12, 0x100000001}) 03:36:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x10000000]}, 0x4}, 0x1c) 03:36:34 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tee(r0, r0, 0x6, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000700)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000001c0)=0x400, 0x2) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x1000000, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES16=r1, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0], @ANYRES64=r0, @ANYBLOB="9dfdadd2ce9a7348a80ff4ba0c7466875db42658f98b92bf2dffad24df16b42d1ccb60df41a873dab7d83dc131986ff15ac6ead0f43c4f71cf5a702f851700095f9d5977d76d5489336c4e3ee0a522fd08a3e4021bd4", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYRESOCT=r0], @ANYRES16=r1]) mount$bpf(0x20000000, &(0x7f0000000940)='./file0\x00', &(0x7f0000000300)='bpf\x00', 0x5004, &(0x7f00000001c0)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='bpf\x00', 0x5890, &(0x7f0000000300)=ANY=[]) mount(&(0x7f00000000c0)=@loop={'/dev/loop'}, &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x81, 0x21fd) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) [ 1905.130069] input: syz1 as /devices/virtual/input/input1036 [ 1905.154262] binder: send failed reply for transaction 6151, target dead 03:36:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x12000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2aec9}, 'syz0\x00'}) 03:36:35 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"627269646765300000000300", 0xfffffffffffffffd}) 03:36:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x3000000]}, 0x4}, 0x1c) 03:36:35 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x900, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)={0x8f, 0x29, 0x1, {0x6, [{{0x2, 0x1, 0x3}, 0x8, 0x0, 0x7, './file1'}, {{0x1, 0x0, 0x2}, 0x9, 0x4, 0x4d, "131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f"}]}}, 0x8f) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mkdir(&(0x7f0000000240)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000080)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="b08593", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYRES32=r0, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0]], @ANYBLOB="c100dd4aed324d0ef60826ac8174c79f0d4a684f825dfca4699a9cf1ad18f4cdd23217f586b0b51bff13f754a761c9457fc2595fa2405001c7343e2cd7e2"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$bt_hci(r3, 0x0, 0x0, &(0x7f0000000440)=""/93, &(0x7f00000004c0)=0x5d) setresuid(0x0, r4, 0x0) read$FUSE(r2, &(0x7f0000002000), 0x1000) recvfrom$inet6(r0, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000540)={0xa, 0x4e22, 0xffffffff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x21}}, 0x5}, 0x1c) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x8}}, 0x50) [ 1905.346907] binder_transaction: 9 callbacks suppressed [ 1905.346923] binder: 17524:17528 transaction failed 29201/-22, size 24-8 line 2855 [ 1905.374685] input: syz1 as /devices/virtual/input/input1037 03:36:35 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) signalfd4(r0, &(0x7f0000000000)={0x7}, 0x8, 0x800) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1}, 0x10) syz_emit_ethernet(0x423, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) sendto$inet(r0, &(0x7f000029b000), 0x287, 0x0, &(0x7f0000778000)={0x2, 0x1, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=""/11, 0xb}, 0x10042) [ 1905.416648] binder: BINDER_SET_CONTEXT_MGR already set [ 1905.438108] input: syz1 as /devices/virtual/input/input1038 [ 1905.454636] binder: 17524:17528 ioctl 40046207 0 returned -16 [ 1905.469827] binder_release_work: 10 callbacks suppressed [ 1905.469833] binder: undelivered TRANSACTION_ERROR: 29201 [ 1905.481652] binder: 17524:17532 transaction failed 29201/-22, size 24-8 line 2855 03:36:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x6000000]}, 0x4}, 0x1c) 03:36:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_out(r0, 0x90004520, &(0x7f0000000040)) 03:36:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x7f00000000000000}, 'syz0\x00'}) [ 1905.521129] binder: undelivered TRANSACTION_ERROR: 29201 03:36:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:35 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530000300", 0xfffffffffffffffd}) 03:36:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xfc00000000000000]}, 0x4}, 0x1c) [ 1905.673648] input: syz1 as /devices/virtual/input/input1039 [ 1905.685858] binder: BINDER_SET_CONTEXT_MGR already set [ 1905.712193] binder: 17564:17566 ioctl 40046207 0 returned -16 03:36:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") epoll_create1(0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) accept(r0, &(0x7f0000000040)=@hci={0x1f, 0x0}, &(0x7f00000000c0)=0x80) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@remote, @in6=@local, 0x4e23, 0x1f00000000000, 0x4e20, 0x4, 0xa, 0x20, 0xa0, 0x33, r2, r3}, {0x8, 0x8, 0xffff, 0x2, 0x1, 0x1ff, 0x9, 0xbc8c}, {0x36, 0x4, 0x5, 0xffffffffffff11ef}, 0x2, 0x6e6bbd, 0x0, 0x1, 0x0, 0x1}, {{@in6=@ipv4={[], [], @multicast1}, 0x7ff, 0xff}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x1b}, 0x3507, 0x2, 0x1, 0x7, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffe}}, 0xe8) io_setup(0x8001, &(0x7f0000000000)=0x0) io_cancel(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000580)="44739cb591f3868024f39764242d1cce0aad072e390be915322e7a84212c443d9e9e533f978e6cce41a0f0a22028e97c426d6150d3b6ec22cb73f8d98a7922cf2376ef9f27ada869ae7bf6dd06c3e8d046f9993f8bd7665ae82179e19294210ef13a522f91fa", 0x66, 0x80000000, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x202200, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000500)=0x3) [ 1905.744551] binder: release 17564:17566 transaction 6160 out, still active [ 1905.752364] binder_alloc: 17564: binder_alloc_buf, no vma [ 1905.770720] binder: 17564:17568 transaction failed 29189/-3, size 24-8 line 2970 [ 1905.779468] binder: undelivered TRANSACTION_COMPLETE 03:36:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x1000000]}, 0x4}, 0x1c) 03:36:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0xa0008000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1905.796317] binder: undelivered TRANSACTION_ERROR: 29189 [ 1905.805031] input: syz1 as /devices/virtual/input/input1040 [ 1905.816825] binder: send failed reply for transaction 6160, target dead 03:36:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xbaae020000000000}, 'syz0\x00'}) [ 1905.902672] binder_transaction: 8 callbacks suppressed [ 1905.902682] binder: 17594:17597 got transaction to invalid handle [ 1905.956317] binder: 17594:17597 transaction failed 29201/-22, size 24-8 line 2855 [ 1905.967236] input: syz1 as /devices/virtual/input/input1041 [ 1905.984450] binder_alloc_mmap_handler: 4 callbacks suppressed [ 1905.984469] binder_alloc: binder_alloc_mmap_handler: 17594 20001000-20004000 already mapped failed -16 [ 1905.997590] binder: BINDER_SET_CONTEXT_MGR already set [ 1906.013779] input: syz1 as /devices/virtual/input/input1042 [ 1906.028221] binder: 17594:17604 got transaction to invalid handle [ 1906.048935] binder: 17594:17604 transaction failed 29201/-22, size 24-8 line 2855 [ 1906.055178] binder: 17594:17597 ioctl 40046207 0 returned -16 [ 1906.058492] binder: undelivered TRANSACTION_ERROR: 29201 [ 1906.071102] binder: undelivered TRANSACTION_ERROR: 29201 03:36:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xfe800000]}, 0x4}, 0x1c) 03:36:36 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0`\x00', 0xfffffffffffffffd}) 03:36:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xa7ae0200}, 'syz0\x00'}) 03:36:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0xa0010000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:36 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0xffdffffffffffffd) r0 = dup(0xffffffffffffff9c) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000002c0)={'nat\x00', 0x0, 0x4, 0xb4, [], 0x3, &(0x7f0000000180)=[{}, {}, {}], &(0x7f0000000200)=""/180}, &(0x7f0000000340)=0x78) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x403f00, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x14, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) mount$bpf(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c80)='bpf\x00', 0x80, &(0x7f0000000cc0)) 03:36:36 executing program 1: getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000000)=0x54) openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x802, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) timer_create(0x2, &(0x7f0000000300)={0x0, 0x2d, 0x1, @thr={&(0x7f0000000280), &(0x7f0000000300)}}, &(0x7f0000000500)=0x0) timer_getoverrun(r0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc844") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x3, @loopback, 0x10000000000000}}, 0xfffffffffffeffff, 0x7, 0x100000000, "ef8877ee9a637958dee0e7ac8119dad9b2b338e249cbb713ca105700d260245e7bd0f231bbeabe80a82c87e5ef8a0e5f72441dadda1e4b15bca01a047f9e6f4454529b43341584cda070a33fb2859891"}, 0xd8) setxattr$trusted_overlay_origin(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000003c0)='trusted.overlay.origin\x00', &(0x7f0000000400)='y\x00', 0x2, 0x2) r3 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)='security.evm\x00', &(0x7f0000000900)=@md5={0x1, "8195b9d57426638e1adcf933bbde8f03"}, 0x11, 0x0) syz_open_dev$sndseq(&(0x7f0000000780)='/dev/snd/seq\x00', 0x0, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000140)=""/186) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5eb, 0x0, 0x100}, &(0x7f0000000580)=0x14) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x120e, 0x0) symlinkat(&(0x7f0000000280)='./file0\x00', r3, &(0x7f00000002c0)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0xffffffffffff8000, 0x0, 0x50d, 0x224, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@local, @in6=@remote}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f00000006c0)=0xe8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000007c0)={0x0, 0xffffffff}, 0x8) umount2(&(0x7f0000000380)='./file0\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) [ 1906.352829] binder: 17617:17618 got transaction to invalid handle [ 1906.364015] input: syz1 as /devices/virtual/input/input1043 [ 1906.394077] ntfs: (device loop2): parse_options(): Unrecognized mount option ./file0. [ 1906.403327] binder: 17617:17618 transaction failed 29201/-22, size 24-8 line 2855 03:36:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x8000000]}, 0x4}, 0x1c) [ 1906.441476] input: syz1 as /devices/virtual/input/input1044 [ 1906.456374] binder_alloc: binder_alloc_mmap_handler: 17617 20001000-20004000 already mapped failed -16 03:36:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = open(&(0x7f0000000100)='./file0\x00', 0x600482, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000140)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000600, 0x20000630, 0x20000660], 0x0, &(0x7f0000000000), &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0xd, 0x3, 0x0, "766c616e30860701ace235008a00", 'team_slave_1\x00', 'veth0_to_team\x00', 'veth1_to_bond\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8) r3 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r3, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) [ 1906.523505] binder: BINDER_SET_CONTEXT_MGR already set 03:36:36 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530000001a0ffffffff00", 0xfffffffffffffffd}) 03:36:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x900]}, 0x4}, 0x1c) [ 1906.572649] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1906.589495] binder: 17617:17618 ioctl 40046207 0 returned -16 [ 1906.591121] binder: undelivered TRANSACTION_ERROR: 29201 03:36:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xf000000}, 'syz0\x00'}) 03:36:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x8000a0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1906.619656] overlayfs: filesystem on './file0' not supported as upperdir [ 1906.636293] ntfs: (device loop2): parse_options(): Unrecognized mount option ./file0. 03:36:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80) io_setup(0x101, &(0x7f0000000080)=0x0) io_getevents(r3, 0x7, 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x0) write$vnet(r2, &(0x7f00000002c0)={0x1, {&(0x7f0000000100)=""/242, 0xf2, &(0x7f0000000200)=""/98, 0x0, 0x3}}, 0x68) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0700000000000000ff3f03000000450001070000001419001a000400020007000a000200000800005d14a4e91ee438", 0x39}], 0x1) 03:36:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1884}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$admmidi(&(0x7f0000001380)='/dev/admmidi#\x00', 0xfffffffffffffffa, 0x501040) r0 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)="5ffc7131ed67113a309ccfc2d00bc035d1b28e5f525208e8884c1171631ff9c99fa56ecc2bd412a15fc21e151422bc8424d2d4f250968a904abd0125c82d8dc229407318a0e5d78e237610ae696f78bc67ac9b79a6dcbdd0fe9f829a29747354207ada134e9ffeee2f5bb44be6519e61b276bc1be23330e39d3a09f7c1daff3ff2abe3285f5c192f22615a2e3624d932d9abf0ab5975f38be8bbcde44afb517f548444381761c34f1f63a6ac93a50241df4e20e9b18914559f8256759878a4007ea194ed6bce4a3f0198a86247063d55b531aceceaea16ec405e5c5139469acc7b0c1ad62685", 0xe6, r0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x1, 0x0) fchmod(r1, 0xc) 03:36:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x5]}, 0x4}, 0x1c) [ 1906.743469] input: syz1 as /devices/virtual/input/input1045 [ 1906.762832] binder: 17669:17671 got transaction to invalid handle [ 1906.797958] binder: 17669:17671 transaction failed 29201/-22, size 24-8 line 2855 [ 1906.821323] input: syz1 as /devices/virtual/input/input1046 [ 1906.828580] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 1906.837413] binder_alloc: binder_alloc_mmap_handler: 17669 20001000-20004000 already mapped failed -16 03:36:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x190, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x20, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000140)=0x800, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) 03:36:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x80fe]}, 0x4}, 0x1c) [ 1906.873000] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 1906.875923] binder: BINDER_SET_CONTEXT_MGR already set [ 1906.898643] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1906.907282] binder: 17669:17671 ioctl 40046207 0 returned -16 03:36:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x40000000}, 'syz0\x00'}) [ 1906.936418] binder: 17669:17683 got transaction to invalid handle 03:36:36 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530008000a000", 0xfffffffffffffffd}) 03:36:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x600000000000000]}, 0x4}, 0x1c) [ 1906.995167] binder: undelivered TRANSACTION_ERROR: 29201 [ 1907.001922] binder: 17669:17683 transaction failed 29201/-22, size 24-8 line 2855 03:36:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x500000000000000]}, 0x4}, 0x1c) [ 1907.037391] binder: undelivered TRANSACTION_ERROR: 29201 [ 1907.063647] input: syz1 as /devices/virtual/input/input1047 03:36:36 executing program 1: r0 = getpgrp(0xffffffffffffffff) waitid(0x0, r0, &(0x7f0000000000), 0x6000000c, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x1, 0x190, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, &(0x7f0000000300), &(0x7f0000000a80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x8100, 'bcsf0\x00\x00\x00\x00\b\x00', "73697430000002000000ffff00", 'bond0\x00', 'veth0\x00', @broadcast, [], @empty, [], 0xd0, 0xd0, 0x100, [@vlan={'vlan\x00', 0x8, {{0x1, 0x0, 0x0, 0x1}}}, @vlan={'vlan\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x208) 03:36:36 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xa6200, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @mcast1, 0x3}, 0xc6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") unshare(0x8020000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0xffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') setns(r2, 0x0) 03:36:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x1a0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1907.146730] input: syz1 as /devices/virtual/input/input1048 03:36:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x40000000]}, 0x4}, 0x1c) 03:36:36 executing program 1: r0 = getpgrp(0xffffffffffffffff) waitid(0x0, r0, &(0x7f0000000000), 0x6000000c, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x1, 0x190, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, &(0x7f0000000300), &(0x7f0000000a80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x8100, 'bcsf0\x00\x00\x00\x00\b\x00', "73697430000002000000ffff00", 'bond0\x00', 'veth0\x00', @broadcast, [], @empty, [], 0xd0, 0xd0, 0x100, [@vlan={'vlan\x00', 0x8, {{0x1, 0x0, 0x0, 0x1}}}, @vlan={'vlan\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x208) 03:36:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x95ae0200}, 'syz0\x00'}) [ 1907.263778] binder: 17726:17730 got transaction to invalid handle [ 1907.288205] binder: 17726:17730 transaction failed 29201/-22, size 24-8 line 2855 03:36:37 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00\a\x00', 0xfffffffffffffffd}) 03:36:37 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0x7fffffff, 0xff0c}}) [ 1907.328066] binder_alloc: binder_alloc_mmap_handler: 17726 20001000-20004000 already mapped failed -16 03:36:37 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x40000) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x21, 0x110, r1, 0x59) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xffff, 0x8000, 0x58ad, 0xffffffffffffff00, @random="022c48165e19"}, 0x10) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000140)) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x3ff) ftruncate(r0, 0x8) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000004c0)=ANY=[@ANYBLOB="006c0dbf0bbd5a1b7d88a688fed631162d909203b85d54e494a43a977aede9e46ac30000009765975e8262b321cd23fc2c6c966f1bd1b707359dfac0277cf107843a3851b11e2144ed91e6c864f99ebda6630c2db321ee3c68170161f55f1bf12a10c07fef3c041107c788a7cfe56694694c173f576dd50614b9c2af93965046e1db0e891581a8a237a7c0ee9e4ea2e3a2ad42363742f8332046869acd3179"]) 03:36:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xff01]}, 0x4}, 0x1c) [ 1907.371591] binder: BINDER_SET_CONTEXT_MGR already set [ 1907.377122] binder: 17726:17730 ioctl 40046207 0 returned -16 [ 1907.386600] input: syz1 as /devices/virtual/input/input1049 [ 1907.409329] binder: 17726:17739 got transaction to invalid handle 03:36:37 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, 0x18010, r0, 0x8) write$P9_RWALK(r0, &(0x7f0000000540)=ANY=[], 0x1d9) write$nbd(r0, &(0x7f0000000200), 0x10) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1907.442830] binder: undelivered TRANSACTION_ERROR: 29201 [ 1907.452300] binder: 17726:17739 transaction failed 29201/-22, size 24-8 line 2855 [ 1907.462819] input: syz1 as /devices/virtual/input/input1050 [ 1907.479395] binder: undelivered TRANSACTION_ERROR: 29201 03:36:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x6]}, 0x4}, 0x1c) 03:36:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x1a0ffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x9dae0200}, 'syz0\x00'}) 03:36:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000200), 0xffffff57, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000220001040000000000000000004cc9a971e200598f251b729276438e5f000000"], 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="f805000016002301000000000000000000000000000000000000ffffac1414aa0000000000000000000200000000004000000000000000000000000000000000c03f90bf1727694748cda19f8f7d74d7f7acad549628caff3d3e4e8c17e9d1c93dfb7a9c895128cca5328f272f051984f6913ce75955eec29d1784a7e48a7ee31c89b294e89fbace93076be1d42426ad54db61f3c434f653a97afb2dfe65f98bad0b07b7c20a155be33eafdf54c6cce5e64b30f6fa26ee083dfe47176b1df2fb07078b6b0652c7b482c120ff4f73860baa7ec1791ba5c574ade2d1032ec586b0b635e5d49899118f84cd618f848efe96410980116b214a70", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xf8}, 0x8}, 0x0) 03:36:37 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00h\x00', 0xfffffffffffffffd}) 03:36:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xff010000]}, 0x4}, 0x1c) [ 1907.652595] input: syz1 as /devices/virtual/input/input1051 [ 1907.666686] binder: 17774:17777 got transaction to invalid handle 03:36:37 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x2, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="8c1ec926d1c753f82f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195, 0x0, 0x0, [], 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7, 0xd}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 1907.721314] input: syz1 as /devices/virtual/input/input1052 [ 1907.733668] binder_alloc: binder_alloc_mmap_handler: 17774 20001000-20004000 already mapped failed -16 03:36:37 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @loopback}, &(0x7f0000000080)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) [ 1907.762123] binder: BINDER_SET_CONTEXT_MGR already set [ 1907.777555] binder: 17774:17777 ioctl 40046207 0 returned -16 03:36:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x2000000]}, 0x4}, 0x1c) 03:36:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x500000000000000}, 'syz0\x00'}) 03:36:37 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00\x00\x00\x00\x00L\x00', 0xfffffffffffffffd}) 03:36:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="9a003000008100c4e17c53aa155b0000b8b1dc00000f23c80f21f835080090000f23f8c4c255920436b8010000000f01d9b9550300000f32c4c1dc5471380f01ca660f28aa2100000066b89d000f00d8", 0x50}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000000)) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003200)={0x3, 0x0, 0x7d3, {0x0, 0x6000}, [], "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", "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"}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0xfffffffffffffffa) 03:36:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f00000002c0)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) getdents64(r0, &(0x7f0000000200)=""/82, 0x52) [ 1907.928919] input: syz1 as /devices/virtual/input/input1053 [ 1907.939701] binder_alloc: binder_alloc_mmap_handler: 17810 20001000-20004000 already mapped failed -16 [ 1907.982671] binder: BINDER_SET_CONTEXT_MGR already set 03:36:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xfc000000]}, 0x4}, 0x1c) [ 1908.023375] input: syz1 as /devices/virtual/input/input1054 [ 1908.044520] binder: 17810:17812 ioctl 40046207 0 returned -16 [ 1908.063676] binder: release 17810:17812 transaction 6188 out, still active 03:36:37 executing program 2: sched_setattr(0x0, &(0x7f0000000000)={0x2, 0x6, 0x1, 0x2, 0x0, 0x9917, 0xffff}, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100006cff01b07c19000001040000009fd845d565ea23e8c849f82926a9e569666b4bcde96ed19dfee44e17752589faa8f0b086da5c304ad1138bac5ba8abdcfda0501f731fdc71d7d469c5ad89ed5ad053735d78d671cf1e277ec2a723703227636d69a69a9df8452ff51f8af2e76aa55ebf34e0a23b581dcad50c3ffa68e01925f8adbd255b259242b3e9ec42ca124906da6a4ea44016"]) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x2000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f00000001c0)={0x7, 0x4}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000440)={0x4, 0x8001, {0x57, 0x401, 0x284d9013, {0xffffffffffff1c11, 0x81}, {0x3, 0x8e3c}, @rumble={0x8001, 0xf}}, {0x55, 0x2, 0x7, {0x6fe8, 0x1}, {0x3f, 0x7}, @const={0x2, {0x9, 0x1, 0xffffffffffffffe8, 0x101}}}}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f00000000c0)=""/32, 0x19) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x4335567) [ 1908.081605] binder_alloc: 17810: binder_alloc_buf, no vma [ 1908.088039] binder: undelivered TRANSACTION_COMPLETE [ 1908.102780] binder: send failed reply for transaction 6188, target dead 03:36:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x1f00000000000000}, 'syz0\x00'}) 03:36:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x3f00]}, 0x4}, 0x1c) 03:36:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = dup3(r1, r0, 0x0) writev(r2, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x110) 03:36:38 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"627269646765300000000200", 0xfffffffffffffffd}) [ 1908.253100] input: syz1 as /devices/virtual/input/input1055 [ 1908.291831] input: syz1 as /devices/virtual/input/input1056 [ 1908.304059] binder: 17855:17857 got transaction to invalid handle 03:36:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xc0fe]}, 0x4}, 0x1c) 03:36:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xb5ae020000000000}, 'syz0\x00'}) [ 1908.346938] binder_alloc: binder_alloc_mmap_handler: 17855 20001000-20004000 already mapped failed -16 [ 1908.401985] binder: BINDER_SET_CONTEXT_MGR already set 03:36:38 executing program 1: r0 = socket(0x40000000015, 0x80000, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x100, 0xfcf6, 0xfffffffffffffe01, 0x20, 0x80000000, 0x8, 0x81}, &(0x7f0000000100)={0x6, 0x8c6, 0x3, 0x5, 0xa9f6, 0xfffffffffffffeff, 0x3, 0x6}, &(0x7f0000000180)={0x81, 0x5, 0x0, 0x2, 0x5, 0x100, 0x23b2, 0x7c}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={0x3f}, 0x8}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x7, 0x600000) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000300)=[0x2, 0xffffffffffff71bd, 0x5f2, 0x8, 0x8], 0x5, 0x2, 0x2e, 0x6, 0x80000000, 0x34, {0x6, 0x6, 0x23, 0x0, 0xed, 0xc5ff, 0xac1, 0x8000, 0xd6, 0x4, 0x4, 0x7, 0x9, 0x40, "01307a0ad239556ed7a2ba354459f1a82f02d0e1db7163c7460ad1e6b7b678a8"}}) ioctl$int_in(r0, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r2, 0x28, &(0x7f00000003c0)}, 0x10) sendto$inet(r0, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000007340)=[{{&(0x7f0000001380)=@sco, 0x80, &(0x7f0000002440)}}], 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) recvmmsg(r0, &(0x7f0000003480), 0x3ac, 0x0, &(0x7f0000000140)={r3}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x4, 0x4) [ 1908.427589] binder: 17855:17857 ioctl 40046207 0 returned -16 [ 1908.434893] input: syz1 as /devices/virtual/input/input1057 03:36:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x4]}, 0x4}, 0x1c) 03:36:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x8000a0ffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1908.517686] input: syz1 as /devices/virtual/input/input1058 03:36:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xa4ae020000000000}, 'syz0\x00'}) [ 1908.619757] binder: 17892:17893 got transaction to invalid handle [ 1908.665654] binder_alloc: binder_alloc_mmap_handler: 17892 20001000-20004000 already mapped failed -16 [ 1908.677321] input: syz1 as /devices/virtual/input/input1059 [ 1908.689274] binder: BINDER_SET_CONTEXT_MGR already set [ 1908.705210] binder: 17892:17893 ioctl 40046207 0 returned -16 03:36:38 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@loopback, @in6=@remote}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) keyctl$set_reqkey_keyring(0xe, 0x6) r1 = open(&(0x7f0000000100)='./file0\x00', 0x80000, 0x41) r2 = open(&(0x7f0000000180)='./file0\x00', 0x200000, 0x2) renameat(r1, &(0x7f0000000140)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400040, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000000c0)={0x80000000, 0x1, 0x0, 0xae2, 0x0, 0x7fffffff}) 03:36:38 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00 \x00', 0xfffffffffffffffd}) 03:36:38 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x40, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000140)={0xfff, 0x6, 0x7f, 0x16f4e0000000000}) getsockopt$bt_hci(r0, 0x65, 0x2, &(0x7f0000cbc000)=""/244, &(0x7f0000000000)=0xfee1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8100, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000180)) connect$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x1, 0x1, 0x3, 0x0, 0x1, "63f9328a74cd4d00546dc6f70d709297b3f6ff53c076ff4d16f8096e3be8f9a7808f3ee00cfb2b745613b704a020588590300710c6548e8af5ad2b53904f69", 0x3c}, 0x60) 03:36:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xffffffff00000000]}, 0x4}, 0x1c) 03:36:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1908.719122] input: syz1 as /devices/virtual/input/input1060 03:36:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x9000000}, 'syz0\x00'}) 03:36:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x4000000]}, 0x4}, 0x1c) [ 1908.829937] binder_alloc: binder_alloc_mmap_handler: 17914 20001000-20004000 already mapped failed -16 03:36:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xa, 0x40000) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x4, 0x3, {0xa, 0x4e23, 0x1, @ipv4={[], [], @rand_addr=0x6}, 0x3f}}}, 0x3a) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) setresuid(r2, r3, r4) r5 = accept$alg(r0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x1e4}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x141, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0) [ 1908.871019] binder: BINDER_SET_CONTEXT_MGR already set 03:36:38 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="21000000c957b06eec5c01e056f1fff21e2083591d99920f0ebcd9e0ed00001645c84c76033a3deee5233365de4b896c41c0d9296af6b78b2e9353394a91c7c33f8d54a0079e04d2793bb418f8e87daa4f0dba67440457c8f01382ffa1cedf9ae9fe45f6665aff0bc5f2c3445967000000000000000000"], 0x1}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100", 0x4}, 0xfffffffffffffe50) r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000002780)) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) read$FUSE(r2, &(0x7f00000008c0), 0x1000) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000002a00)=0x2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000028c0)={0x10}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000300)={0x1, 0x14, &(0x7f00000000c0)="8043b7dbe030bc54f3f5597431801becf7f80892"}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000400)={0x62, @dev={0xac, 0x14, 0x14, 0x1c}, 0x4e23, 0x1, 'fo\x00', 0x1, 0x8, 0x4b}, 0x12) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x2000000000000000, 0x4, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101}) r3 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getuid() r4 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r4, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020000000040005031d856808000200083c14cc16ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000140)=0x100000008001) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r5 = getpid() tkill(r5, 0x1000000000015) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) [ 1908.903581] input: syz1 as /devices/virtual/input/input1061 [ 1908.905618] binder: 17914:17917 ioctl 40046207 0 returned -16 03:36:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x14000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1908.977771] input: syz1 as /devices/virtual/input/input1062 03:36:38 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"62726964676530000600", 0xfffffffffffffffd}) 03:36:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x5000000]}, 0x4}, 0x1c) 03:36:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xbcae0200}, 'syz0\x00'}) 03:36:38 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0xd00, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080)=0x5, 0x4) connect$bt_rfcomm(r0, &(0x7f0000000000), 0xa) [ 1909.109080] binder_alloc: binder_alloc_mmap_handler: 17946 20001000-20004000 already mapped failed -16 [ 1909.144669] input: syz1 as /devices/virtual/input/input1063 03:36:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x800000000000000]}, 0x4}, 0x1c) [ 1909.155830] binder: BINDER_SET_CONTEXT_MGR already set [ 1909.177470] binder: 17946:17948 ioctl 40046207 0 returned -16 03:36:38 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000600)=r0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/223, 0xdf) 03:36:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xc5ae0200}, 'syz0\x00'}) 03:36:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x1400, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:39 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00z\x00', 0xfffffffffffffffd}) 03:36:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x900000000000000]}, 0x4}, 0x1c) [ 1909.346039] input: syz1 as /devices/virtual/input/input1065 [ 1909.362888] binder: BINDER_SET_CONTEXT_MGR already set [ 1909.385163] binder: 17983:17984 ioctl 40046207 0 returned -16 [ 1909.393757] input: syz1 as /devices/virtual/input/input1066 03:36:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) r3 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80800) membarrier(0x22, 0x0) getpeername$unix(r3, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) getgroups(0x2, &(0x7f0000000000)=[0xee00, 0xee01]) r5 = getgid() setregid(r4, r5) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0xfffffffffffffe01, 0x0, &(0x7f0000000340), &(0x7f0000000680)}) 03:36:39 executing program 1: ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000000)='{ppp0^lo.keyring\x00', 0x1) fcntl$setstatus(r1, 0x4, 0x6100) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000300), 0x100000001) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000340)={0xc83, 0xa6, "a3e007dc97848be5d8483dd0a5b9a3be6e8094ac8b4489fa9560734b189433f12b9f345454974cae68f52b7630e76fc7e3fe1cb041bfdc9dce87496d7895e87ebf889224bb4e6a0534efd87112df7046cf220999970beb712c63809b04462e17583ca5a2dd6d060d5433d2fa7bd453650b2fee4887d0fd9ff24feacb6209917d253db9d17752672a297825ac71e91c769888dfc360c50f3312fd3274ac5fc4540c9b49deb001"}) 03:36:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xfec00000]}, 0x4}, 0x1c) 03:36:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xffffffffa0010000}, 'syz0\x00'}) 03:36:39 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0t\x00', 0xfffffffffffffffd}) 03:36:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xff000000]}, 0x4}, 0x1c) [ 1909.899902] binder: BINDER_SET_CONTEXT_MGR already set [ 1909.913240] input: syz1 as /devices/virtual/input/input1067 [ 1909.932323] binder: 18008:18009 ioctl 40046207 0 returned -16 [ 1909.984785] input: syz1 as /devices/virtual/input/input1068 03:36:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xa2ae020000000000}, 'syz0\x00'}) 03:36:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x4000000) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000300), &(0x7f0000000340)=0x1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="00800000000000000081"], &(0x7f0000000280)=0xe) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, 0x8) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f00000003c0)={'syzkaller0\x00', 0x9}) signalfd(r0, &(0x7f0000000600)={0xa3}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e24, @rand_addr=0xfffffffffffffffe}}, 0x3, 0x6, 0x4, 0x4, 0xff}, &(0x7f0000000880)=0x98) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000008c0)={r2, 0x200000000001000}, &(0x7f0000000140)=0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) r3 = syz_open_dev$vcsn(&(0x7f0000000700)='/dev/vcs#\x00', 0x401, 0xffff) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000006c0)={0x5, &(0x7f0000000640)=[{}, {}, {}, {}, {}]}) accept4(r1, 0x0, &(0x7f0000000040), 0x0) fcntl$getflags(0xffffffffffffffff, 0x408) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000680)=0x0) getpgid(r4) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='trusted.overlay.nlink\x00', &(0x7f0000000540)={'L-', 0x5}, 0x28, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000400)=""/184, 0xb8) umount2(&(0x7f0000000180)='./file0\x00', 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=unix,'}) 03:36:39 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0H\x00', 0xfffffffffffffffd}) 03:36:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x700]}, 0x4}, 0x1c) 03:36:39 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delroute={0x24, 0x19, 0x903, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000001c0)={'syzkaller0\x00', 0x81}) getsockname(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000080)=0x80) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1910.158883] binder: BINDER_SET_CONTEXT_MGR already set [ 1910.186619] binder: 18043:18044 ioctl 40046207 0 returned -16 [ 1910.215223] input: syz1 as /devices/virtual/input/input1069 [ 1910.226884] binder: release 18043:18044 transaction 6219 out, still active [ 1910.235791] binder_alloc: 18043: binder_alloc_buf, no vma [ 1910.243963] binder: undelivered TRANSACTION_COMPLETE 03:36:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x10]}, 0x4}, 0x1c) [ 1910.259253] binder: send failed reply for transaction 6219, target dead [ 1910.282354] MINIX-fs: mounting unchecked file system, running fsck is recommended 03:36:40 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x20000000040) mount(&(0x7f00000003c0), &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mount(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='jfs\x00', 0x400a8, 0x0) 03:36:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x12, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1910.329821] input: syz1 as /devices/virtual/input/input1070 [ 1910.365089] 9pnet: p9_fd_create_unix (18055): problem connecting socket: ./file0: -111 03:36:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x1000000000000000]}, 0x4}, 0x1c) 03:36:40 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00\x00\x00\x00\x00?\x00', 0xfffffffffffffffd}) [ 1910.462671] 9pnet: p9_fd_create_unix (18065): problem connecting socket: ./file0: -111 [ 1910.472011] binder: BINDER_SET_CONTEXT_MGR already set [ 1910.477334] binder: 18082:18083 ioctl 40046207 0 returned -16 [ 1910.500584] minix_free_inode: bit 1 already cleared [ 1910.505903] binder: release 18082:18083 transaction 6224 out, still active 03:36:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xadae0200}, 'syz0\x00'}) 03:36:40 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c01dd5ec98a2bed86eebd15fe34ec5b1c651c6c3b4232cf23d3a4f9fa837fb905baf080291f0a0d938ec4b0bf5441fa444aec21398f98b5f9963ae95dde964c15b46e3d304a3a6cb53c3cf783b72cdaac845c29559a369f09681139ec1f777388fe4444cce0ee656bec25dccf5dd724bf366a5bb358", @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d802ee53fce4c881a05a0ca3225cb8adee914baa2aea4489c4353f371ee509df494ff070000000000003d1acc66000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(0xffffffffffffffff, &(0x7f0000000340)=@hci={0x1f, 0x0}, &(0x7f0000000400)=0x80) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={@empty, @remote, @mcast1, 0x9337, 0xfff, 0x5, 0x500, 0x8d, 0x20, r2}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x44) read$FUSE(r0, &(0x7f00000006c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x1, 0x80000000, 0x1, {0xa, 0x4e21, 0xfff, @empty, 0x1}}}, 0x3a) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f00000016c0)=0x0) r5 = getegid() mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='fuse\x00', 0x2, &(0x7f0000001700)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xb000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5e5}}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x0, 0x39, 0x35, 0x34, 0x66, 0x72269f7edaf5647f, 0x76], 0x2d, [0x34, 0x37, 0x7f, 0x31], 0x2d, [0x73, 0x31, 0x30, 0x7a], 0x2d, [0x3c, 0x67, 0x0, 0x36], 0x2d, [0x61, 0x35, 0x34, 0x32, 0x79, 0x37, 0x37, 0x66]}}}]}}) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f0000000540)=""/162, 0x44) [ 1910.521258] binder: undelivered TRANSACTION_COMPLETE 03:36:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1910.548549] binder: send failed reply for transaction 6224, target dead [ 1910.576348] input: syz1 as /devices/virtual/input/input1071 [ 1910.627263] input: syz1 as /devices/virtual/input/input1072 03:36:40 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xfe7a) read(r1, &(0x7f00000001c0)=""/196, 0xc4) 03:36:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x8]}, 0x4}, 0x1c) 03:36:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="4c000000000000000000000000000002000000000000000000000000000000000000000000000000000000cba7bf4b396b375f93bb25de05953fd31099e4129eb76c88b0078a12b0a1b909a9abcf20dd9b4fdb0dcfbb68c6a4f65db97ef50bf159bd8c7048f92ca4e94bd3d59e58a83cfb87953da65ad22d73f7fab82bdf7cfbbd965dd4ea0414a914cf88664520a24dd4e53591cec2e084775c0d0103128392c2ec1b9397f3f9a658ab0c100669e8d4f795e963"]}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x5) 03:36:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x9]}, 0x4}, 0x1c) 03:36:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x3000000}, 'syz0\x00'}) [ 1910.722813] binder: BINDER_SET_CONTEXT_MGR already set [ 1910.754738] binder: 18114:18115 ioctl 40046207 0 returned -16 [ 1910.787570] binder_alloc: 18114: binder_alloc_buf, no vma [ 1910.787753] binder: release 18114:18115 transaction 6228 out, still active [ 1910.823562] binder: undelivered TRANSACTION_COMPLETE 03:36:40 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x202, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x7fe, 0x0) write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) 03:36:40 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00\x00\x00?\x00', 0xfffffffffffffffd}) [ 1910.842729] binder: send failed reply for transaction 6228, target dead 03:36:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x3f000000]}, 0x4}, 0x1c) 03:36:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000080)={0x80}) syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, "9ec77a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100), 0x4) sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000480)={[{0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x7ff, 0x0, 0x2}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2}]}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) r3 = geteuid() mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d11c2f48c8d4083524d4f8a72b34a13cf9bd5388031843a79ce92ee75190a3e4f18a4b5fce4b69af95abbea676bdd79ccbffe4769459bc0cb802e255cdf8b479915a62e36ea5532deaf6626e4e789ba24c614166164975079013002eefb5ee80e274bf484dca6a848427a3603dc027e97c5451fb14ddf", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000009c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000005c0)={0x6, 0x118, 0xfa00, {{0x7, 0x0, "60b782c9f09f6aaf11274d2facf6f674f9173302f08edb1e8da5ebe25770999ce80280ddac79f1ce563052106fe2d72f97a71383f78a5593735811819289dbbc0bad40b4d85fc561d40898984737c0068c028583f106bb10a814313de3c99acb738849ba82894121926d1d6de8a44138ecca286048f8234ae06094d00a2424cb509de8107125290f9643956add1703da61da617fcf1035b24b62e7dbd7bfe347c6d0b1cd9d61f83e99b4fdbabef3dfb9b29051e30b0e7c6d6ce3847dbf9f00e7d15e9bdb4ad69aa759a0265f21966f1141d02d726fe89289bcabd6fcd70f5d84ec457e3b7c1f93f034dd69baa2b176f48015e0a55e95069e85407d2be3be1db9", 0x3, 0x81, 0x2, 0x0, 0x4, 0x10001, 0x1000}}}, 0x120) read$FUSE(r2, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) memfd_create(&(0x7f00000000c0)="5cecb69a4bc3be501306e05a13d0e6d78c57f5ddd3c936347ab48a7311714e75f9", 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000200)) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) [ 1910.887689] input: syz1 as /devices/virtual/input/input1073 [ 1910.900833] binder_transaction: 12 callbacks suppressed [ 1910.900853] binder: 18114:18128 transaction failed 29189/-3, size 24-8 line 2970 03:36:40 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x2, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @rand_addr=0xffffffffffff6015}, {0x2, 0x4e21, @broadcast}, 0x100, 0x7, 0xc0, 0x0, 0x0, &(0x7f0000000140)='veth0_to_team\x00', 0x8, 0xae, 0x1ff}) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x501100, 0x0) sendfile(r1, r1, &(0x7f0000000040), 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) preadv(r1, &(0x7f0000001680)=[{&(0x7f0000000280)=""/172, 0xac}], 0x1, 0x4) [ 1910.944667] input: syz1 as /devices/virtual/input/input1074 03:36:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2aea8}, 'syz0\x00'}) [ 1911.028765] binder_release_work: 12 callbacks suppressed [ 1911.028772] binder: undelivered TRANSACTION_ERROR: 29189 [ 1911.092473] input: syz1 as /devices/virtual/input/input1075 03:36:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xa00]}, 0x4}, 0x1c) 03:36:40 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x101800, 0x0) mkdirat(r0, &(0x7f00000003c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='fuse\x00', 0x7a00, &(0x7f00000001c0)=ANY=[]) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x100) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0xffffffffffffffff, r1, 0x0, 0x19, &(0x7f00000004c0)="4076626f786e657430657468306e6f6465760f286574683100"}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000005c0)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000540)=0xe8) r4 = getgid() sendmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000300)="3d37df7f", 0x4}, {&(0x7f0000000340)="862db20bf5b62e4ab6b57d8a11764820bbfbf70af8fa8684b788a9356f4a8cca810fc9b65eeae4b0783921e48e6c5d9f3440d773943c32db0bbd5cb4e630a87c8443275ab56487c5a389fc8e1d15b36a107e342bfbb2aabbe689f7e8ddd14051eb2a9bfc9a3f", 0x66}, {&(0x7f0000000400)="1db40c533c2c2065669630e75a4a148098fc820d822dac670117ef05daf00362f3edf7b5366c4beee6bb71f654c3a6025baf1c0c19a3496b6458f7faa23ec7369a38f7b60b0878abfed54c5d3e9f18b1fa9cc55ba8", 0x55}], 0x3, &(0x7f00000006c0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x30, 0x1, 0x1, [r0, r1, r1, r0, r1, r0, r1]}], 0x50, 0x1}, 0x800) r5 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x20, 0x2000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x6000, &(0x7f0000000180), 0x1, r5}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000100)='./file0\x00', 0x0) unlinkat(r6, &(0x7f0000000040)='./file0\x00', 0x200) 03:36:40 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x40080) ioctl$NBD_CLEAR_QUE(r1, 0xab05) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_VOICE(r0, 0x112, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x2) [ 1911.147865] input: syz1 as /devices/virtual/input/input1076 03:36:40 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0l\x00', 0xfffffffffffffffd}) 03:36:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x2ae95}, 'syz0\x00'}) 03:36:41 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x6}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000004c0)={r4, @in6={{0xa, 0x4e20, 0x6, @mcast1, 0x100000000}}, 0x3, 0x4}, 0x90) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x0) listen(0xffffffffffffffff, 0x7ff) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0x108) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000280)=0x8) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f00000001c0)={0x2000000000000192, &(0x7f0000000140)=[{}, {}, {}]}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r5, 0x6430) r6 = getpgrp(0xffffffffffffffff) ptrace$peek(0x1, r6, &(0x7f0000000240)) kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r0, &(0x7f0000000300)={r3, r1, 0x6}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000340)=""/178, 0x113a000, 0x1800, 0x83b2}, 0x18) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r7, &(0x7f0000000100), 0x2a2, 0x10400003) 03:36:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1000000000001, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b3fdc)) write(r2, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x46) r3 = syz_open_pts(r2, 0x2) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="10", 0x1}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sched_getattr(r4, &(0x7f0000000000), 0x30, 0x0) r5 = memfd_create(&(0x7f00000000c0)='\x00', 0x7) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000001c0)={{0xb7, 0x4}, 'port1\x00', 0x0, 0x0, 0x95cf, 0x80000000, 0x2, 0x1, 0x1, 0x0, 0x4, 0x5}) dup3(r0, r3, 0x0) tkill(r4, 0x1000000000016) [ 1911.257595] binder_alloc_mmap_handler: 5 callbacks suppressed [ 1911.257613] binder_alloc: binder_alloc_mmap_handler: 18180 20001000-20004000 already mapped failed -16 03:36:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xa]}, 0x4}, 0x1c) [ 1911.301667] binder: BINDER_SET_CONTEXT_MGR already set [ 1911.328132] binder: 18180:18181 ioctl 40046207 0 returned -16 03:36:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x4000000000000000]}, 0x4}, 0x1c) [ 1911.371599] input: syz1 as /devices/virtual/input/input1077 [ 1911.400704] input: syz1 as /devices/virtual/input/input1078 03:36:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='proc.wlan0ppp0keyring\x00', 0x1000000000000007) fallocate(r0, 0x7, 0x7fffffffffffdffe, 0x5) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xfff, 0x0) 03:36:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xa9ae020000000000}, 'syz0\x00'}) [ 1911.452596] binder: send failed reply for transaction 6233 to 18180:18181 [ 1911.463387] binder: undelivered TRANSACTION_COMPLETE [ 1911.480438] binder: undelivered TRANSACTION_ERROR: 29189 03:36:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x14, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 03:36:41 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_pts(0xffffffffffffffff, 0x20c00) ioctl$KDADDIO(r1, 0x4b34, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_deladdr={0x2c, 0x15, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LABEL={0x14, 0x3, 'lo\x00'}]}, 0x2c}}, 0x80) recvfrom$inet(r3, &(0x7f0000000080), 0x0, 0x142, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) 03:36:41 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"627269646765300000000600", 0xfffffffffffffffd}) 03:36:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x300]}, 0x4}, 0x1c) [ 1911.585313] input: syz1 as /devices/virtual/input/input1079 03:36:41 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) syz_open_procfs(r2, &(0x7f0000000080)='net/bnep\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x7}], 0x1c) [ 1911.648702] input: syz1 as /devices/virtual/input/input1080 03:36:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x5, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x0, 0x100000], 0x100, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) close(0xffffffffffffffff) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000000)="2a86fd0bc4de246b8c0d02aa79d8ca56b520d434bfcdb85296854d2b956c", &(0x7f0000000300)=""/129}, 0x18) r2 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000002c0)='./control\x00', 0x0) times(&(0x7f0000000100)) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat(r2, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000023ff8)='./control\x00', r3, &(0x7f0000012ff6)='./control\x00') openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x40002, 0x0) renameat2(r3, &(0x7f0000bee000)='./control\x00', r2, &(0x7f000003a000)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000400)=0x4) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f00000003c0)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 03:36:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xfe80]}, 0x4}, 0x1c) [ 1911.724933] binder_alloc: binder_alloc_mmap_handler: 18240 20001000-20004000 already mapped failed -16 03:36:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xc9ae020000000000}, 'syz0\x00'}) 03:36:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x40000007f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="827021baca", &(0x7f0000000080)=""/98}, 0x18) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x141, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000300)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000500)=""/140}, 0x18) getresuid(&(0x7f0000000340)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, r3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), &(0x7f0000000200)=""/208}, 0x18) [ 1911.770629] binder: BINDER_SET_CONTEXT_MGR already set 03:36:41 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00t\x00', 0xfffffffffffffffd}) [ 1911.848618] input: syz1 as /devices/virtual/input/input1081 [ 1911.849587] binder: 18240:18241 ioctl 40046207 0 returned -16 [ 1911.911582] binder_alloc: 18240: binder_alloc_buf, no vma [ 1911.925954] binder: release 18240:18241 transaction 6237 out, still active [ 1911.934074] binder: 18240:18247 transaction failed 29189/-3, size 24-8 line 2970 [ 1911.945138] binder: undelivered TRANSACTION_COMPLETE [ 1911.954186] binder: send failed reply for transaction 6237, target dead 03:36:41 executing program 2: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x1000, 0x200080) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000100)=0x6, 0x4) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) migrate_pages(r2, 0x5, &(0x7f0000000940), &(0x7f0000000000)) 03:36:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x8000a0ffffffff, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1911.962848] input: syz1 as /devices/virtual/input/input1082 [ 1911.978720] binder: undelivered TRANSACTION_ERROR: 29189 03:36:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x5, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x0, 0x100000], 0x100, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) close(0xffffffffffffffff) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000000)="2a86fd0bc4de246b8c0d02aa79d8ca56b520d434bfcdb85296854d2b956c", &(0x7f0000000300)=""/129}, 0x18) r2 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000002c0)='./control\x00', 0x0) times(&(0x7f0000000100)) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat(r2, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000023ff8)='./control\x00', r3, &(0x7f0000012ff6)='./control\x00') openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x40002, 0x0) renameat2(r3, &(0x7f0000bee000)='./control\x00', r2, &(0x7f000003a000)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000400)=0x4) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f00000003c0)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 03:36:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x2]}, 0x4}, 0x1c) 03:36:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0xffff1f0000000000}, 'syz0\x00'}) [ 1912.090355] binder_alloc: binder_alloc_mmap_handler: 18282 20001000-20004000 already mapped failed -16 03:36:41 executing program 2: io_setup(0x8, &(0x7f0000000300)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000009, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r2, 0x802c550a, &(0x7f0000000080)={0x8002, 0x0, 0x5, 0x730000, 0xffffffff7ff0bdbe}) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r3, 0x50, &(0x7f0000000100)}, 0x10) close(r1) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000200), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) signalfd(r4, &(0x7f00000000c0), 0x8) 03:36:41 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0h\x00', 0xfffffffffffffffd}) [ 1912.156189] binder: BINDER_SET_CONTEXT_MGR already set [ 1912.181309] binder: 18282:18286 ioctl 40046207 0 returned -16 [ 1912.197600] input: syz1 as /devices/virtual/input/input1083 03:36:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xfec0000000000000]}, 0x4}, 0x1c) [ 1912.215102] ------------[ cut here ]------------ [ 1912.222358] binder_alloc: 18282: binder_alloc_buf, no vma [ 1912.231720] usb usb7: BOGUS urb flags, 1 --> 0 [ 1912.243531] binder: release 18282:18286 transaction 6242 out, still active [ 1912.251553] binder: 18282:18291 transaction failed 29189/-3, size 24-8 line 2970 [ 1912.259343] binder: undelivered TRANSACTION_COMPLETE [ 1912.267415] WARNING: CPU: 0 PID: 18304 at drivers/usb/core/urb.c:503 usb_submit_urb+0x717/0x14e0 [ 1912.269284] kobject: 'input1084' (00000000e7a0aeee): kobject_uevent_env [ 1912.276354] Kernel panic - not syncing: panic_on_warn set ... [ 1912.276354] [ 1912.276374] CPU: 0 PID: 18304 Comm: syz-executor2 Not tainted 4.19.0-rc7+ #274 [ 1912.276386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1912.276392] Call Trace: [ 1912.276420] dump_stack+0x1c4/0x2b4 [ 1912.276445] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1912.276475] panic+0x238/0x4e7 [ 1912.276503] ? add_taint.cold.5+0x16/0x16 [ 1912.276529] ? __warn.cold.8+0x148/0x1ba [ 1912.276552] ? usb_submit_urb+0x717/0x14e0 [ 1912.318398] kobject: 'mouse1' (00000000ae82d2c4): kobject_uevent_env [ 1912.318742] __warn.cold.8+0x163/0x1ba [ 1912.330373] kobject: 'mouse1' (00000000ae82d2c4): fill_kobj_path: path = '/devices/virtual/input/input1083/mouse1' [ 1912.334339] ? usb_submit_urb+0x717/0x14e0 [ 1912.334361] report_bug+0x254/0x2d0 [ 1912.334383] do_error_trap+0x1fc/0x4d0 03:36:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x700000000000000]}, 0x4}, 0x1c) [ 1912.334403] ? math_error+0x3f0/0x3f0 [ 1912.334421] ? vprintk_default+0x28/0x30 [ 1912.334442] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1912.354145] kobject: 'input1084' (00000000e7a0aeee): fill_kobj_path: path = '/devices/virtual/input/input1084' [ 1912.355284] ? trace_hardirqs_on_caller+0x310/0x310 [ 1912.355302] ? printk+0xa7/0xcf [ 1912.355330] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1912.355355] do_invalid_op+0x1b/0x20 [ 1912.380326] kobject: 'input1084' (00000000e7a0aeee): fill_kobj_path: path = '/devices/virtual/input/input1084' 03:36:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) [ 1912.389860] invalid_op+0x14/0x20 [ 1912.389879] RIP: 0010:usb_submit_urb+0x717/0x14e0 [ 1912.389896] Code: 83 fc 48 8b 45 d0 48 8d b8 a0 00 00 00 e8 d1 be 44 ff 45 89 e0 44 89 e9 4c 89 fa 48 89 c6 48 c7 c7 00 72 71 88 e8 49 bc 4d fc <0f> 0b e8 52 e9 83 fc 48 c7 c6 00 73 71 88 4c 89 f7 e8 93 ea 83 fc [ 1912.389905] RSP: 0018:ffff8801c863f268 EFLAGS: 00010286 [ 1912.389920] RAX: 0000000000000000 RBX: ffff8801c5242800 RCX: ffffc90003e76000 [ 1912.389930] RDX: 000000000000e960 RSI: ffffffff81650405 RDI: 0000000000000005 03:36:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xa000000]}, 0x4}, 0x1c) [ 1912.389940] RBP: ffff8801c863f2d8 R08: ffff8801ba2123c0 R09: ffffed003b5c4fe8 [ 1912.389950] R10: ffffed003b5c4fe8 R11: ffff8801dae27f47 R12: 0000000000000000 [ 1912.389960] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8801ce3b4b40 [ 1912.389985] ? vprintk_func+0x85/0x181 [ 1912.390006] ? usb_submit_urb+0x717/0x14e0 [ 1912.390027] ? kasan_check_write+0x14/0x20 [ 1912.454179] kobject: '(null)' (00000000c2151f5d): kobject_cleanup, parent 00000000ae82d2c4 [ 1912.456854] proc_do_submiturb+0x1b7d/0x4020 [ 1912.456873] ? __sched_text_start+0x8/0x8 03:36:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x500]}, 0x4}, 0x1c) [ 1912.456899] ? __might_fault+0xe1/0x1e0 [ 1912.456926] ? free_async+0x540/0x540 [ 1912.474913] kobject: '(null)' (00000000c2151f5d): calling ktype release [ 1912.478719] ? try_to_wake_up+0x10a/0x12f0 [ 1912.478756] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1912.478773] ? _copy_from_user+0xdf/0x150 [ 1912.478795] proc_submiturb_compat+0x544/0x800 [ 1912.478814] ? proc_do_submiturb+0x4020/0x4020 [ 1912.478853] usbdev_do_ioctl+0x19a2/0x3b50 [ 1912.498288] input: syz1 as /devices/virtual/input/input1084 [ 1912.498430] ? processcompl_compat+0x680/0x680 [ 1912.498449] ? kasan_check_read+0x11/0x20 [ 1912.571552] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1912.575977] ? mark_held_locks+0x130/0x130 [ 1912.580265] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1912.585480] ? drop_futex_key_refs.isra.15+0x6d/0xe0 [ 1912.590604] ? futex_wake+0x304/0x760 [ 1912.594426] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1912.599983] ? check_preemption_disabled+0x48/0x200 [ 1912.605021] ? debug_smp_processor_id+0x1c/0x20 [ 1912.609704] ? perf_trace_lock+0x14d/0x7a0 [ 1912.613951] ? perf_trace_lock_acquire+0x15b/0x800 [ 1912.618893] ? zap_class+0x640/0x640 [ 1912.622620] ? perf_trace_lock+0x7a0/0x7a0 [ 1912.626870] ? mark_held_locks+0x130/0x130 [ 1912.631120] ? do_futex+0x249/0x26d0 [ 1912.634842] ? kasan_check_read+0x11/0x20 [ 1912.638998] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1912.644302] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1912.649851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1912.655411] ? check_preemption_disabled+0x48/0x200 [ 1912.660448] ? debug_smp_processor_id+0x1c/0x20 [ 1912.665140] ? zap_class+0x640/0x640 [ 1912.668876] ? __fget+0x4aa/0x740 [ 1912.672344] ? lock_downgrade+0x900/0x900 [ 1912.676521] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1912.682336] ? save_stack+0x43/0xd0 [ 1912.685979] ? __fget+0x4d1/0x740 [ 1912.689455] ? ksys_dup3+0x680/0x680 [ 1912.693198] ? __might_fault+0x12b/0x1e0 [ 1912.697288] ? lock_downgrade+0x900/0x900 [ 1912.701608] usbdev_ioctl+0x25/0x30 [ 1912.705262] ? usbdev_compat_ioctl+0x30/0x30 [ 1912.709687] do_vfs_ioctl+0x1de/0x1720 [ 1912.713595] ? ioctl_preallocate+0x300/0x300 [ 1912.718014] ? __fget_light+0x2e9/0x430 [ 1912.722002] ? fget_raw+0x20/0x20 [ 1912.725466] ? _copy_to_user+0xc8/0x110 [ 1912.729463] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1912.735015] ? put_timespec64+0x10f/0x1b0 [ 1912.739175] ? nsecs_to_jiffies+0x30/0x30 [ 1912.743353] ? security_file_ioctl+0x94/0xc0 [ 1912.747782] ksys_ioctl+0xa9/0xd0 [ 1912.751267] __x64_sys_ioctl+0x73/0xb0 [ 1912.755175] do_syscall_64+0x1b9/0x820 [ 1912.759080] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1912.764459] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1912.769408] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1912.774281] ? trace_hardirqs_on_caller+0x310/0x310 [ 1912.779314] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1912.784353] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1912.789390] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1912.794265] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1912.799467] RIP: 0033:0x457579 [ 1912.802680] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1912.821583] RSP: 002b:00007f45b805bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1912.829294] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 1912.836563] RDX: 0000000020000080 RSI: 00000000802c550a RDI: 0000000000000004 [ 1912.843818] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1912.851077] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f45b805c6d4 [ 1912.858346] R13: 00000000004bf6c0 R14: 00000000004cf598 R15: 00000000ffffffff [ 1912.866634] Kernel Offset: disabled [ 1912.870262] Rebooting in 86400 seconds..