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", 0x1000}, {&(0x7f0000001380)="a3d6d388930f504b958f12935a13e019c3f66083cae6c0effe4440620fe1e9bd1c98a5c35157e4ec063a", 0x2a}], 0x5, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000140)={0x7ff, 0x5, 0x6, 0x0, 0x7, 0x1, 0x9, 0xffffffff80000001, 0xfffffffffffff35b, 0xfff, 0x0, 0x6, 0x0, 0xa5, 0x8, 0x7, 0x3ff1ab47, 0x8}) [ 565.274205] binder: undelivered TRANSACTION_ERROR: 29189 [ 565.279776] binder: undelivered TRANSACTION_ERROR: 29189 04:40:25 executing program 1: ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x2008200) r1 = open(0x0, 0x4000, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 04:40:25 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:25 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:25 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:25 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x9, 0x200031, 0xffffffffffffffff, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000080)={0x0, 0x1c000}) 04:40:25 executing program 2: unshare(0x8000400) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$read(0xb, r0, &(0x7f0000000080)=""/210, 0xd2) pread64(0xffffffffffffffff, 0x0, 0xfffffffffffffcac, 0xd) 04:40:25 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:25 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:25 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:25 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:26 executing program 2: unshare(0x8000400) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000040)=0x7f) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x4e24, 0x8d4, @mcast1, 0x1ff}], 0x2c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:40:26 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:26 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:26 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:26 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:26 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:26 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:26 executing program 2: unshare(0x8000400) r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) pread64(0xffffffffffffffff, 0x0, 0x2d3, 0x0) 04:40:26 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:26 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:26 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:26 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:26 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:26 executing program 2: unshare(0x8000400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x42) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000040)={0x80000001, 0x8, 0x101, 0x4, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x49023f88a4685faf}}, 0x1c}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:40:27 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:27 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:27 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:27 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:27 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:27 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:27 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:27 executing program 2: unshare(0x8000400) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001240)='auxv\x00') setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001280)={0x6, 0x6, 0x2000}, 0x4) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x0, 0x9, 0x7fffffff, 0x4800, 0xffffffffffffffff}) fsetxattr$security_evm(r1, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="040d80"], 0x3, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f00000000c0)={0x6, "94df4aeaf5dddde2f4718daedc0506630ff92592926b3848bcd0fd00e41ff1ff", 0x2}) 04:40:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:27 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:27 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) 04:40:27 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x91et\x1b\x00\x00\x00\x00\xbfJ\xec\xc3\x864\xbe\xe0', 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) 04:40:27 executing program 2: unshare(0x8000400) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000100)=0x800000002) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000040)='rdma.max\x00', 0x2, 0x0) r1 = socket$unix(0x1, 0x6, 0x0) geteuid() pread64(r1, 0x0, 0xfffffff6, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) bind$xdp(r0, &(0x7f0000000380)={0x2c, 0x1, r2, 0x4, r0}, 0x10) 04:40:27 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:28 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:28 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x9, 0x200031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB]) 04:40:28 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:28 executing program 2: pread64(0xffffffffffffffff, 0x0, 0xffffffffffffffd3, 0x1) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/96, 0x60) 04:40:28 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:28 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:28 executing program 2: unshare(0x8000400) pread64(0xffffffffffffffff, 0x0, 0xfe38, 0x0) 04:40:28 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:28 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:28 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f0000000240)=0x8000009) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x101000, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000580)=0x6, 0x4) r2 = getpgid(0x0) sched_getparam(r2, &(0x7f0000000180)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) 04:40:28 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:28 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:28 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:28 executing program 2: unshare(0x8000400) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)="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", 0xfd) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:40:29 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) 04:40:29 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000000280)=""/255, 0xff}], 0x2}}], 0x1, 0x0, 0x0) 04:40:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:29 executing program 2: unshare(0x8000400) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80400, 0x0) pread64(r0, 0x0, 0x90, 0x0) 04:40:29 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f0000000240)=0x8000009) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000740)={0xbf, @remote, 0x4e23, 0x1, 'rr\x00', 0x11, 0x80000000, 0x3f}, 0x2c) getpeername(0xffffffffffffff9c, &(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x1, 0x0, 0x0) r3 = getpgid(0x0) sched_getparam(r3, &(0x7f0000000180)) lsetxattr$security_smack_transmute(&(0x7f0000000280)='./file1\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x1) 04:40:29 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:29 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = gettid() clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fe9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 04:40:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file1\x00', 0x6003, 0x0) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) fsync(r0) 04:40:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 04:40:29 executing program 2: unshare(0x10200) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:40:29 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) 04:40:29 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) [ 569.857366] binder: 23899:23901 transaction failed 29189/-22, size 24-8 line 2834 [ 569.969472] binder: 23899:23909 transaction failed 29189/-22, size 24-8 line 2834 04:40:30 executing program 2: unshare(0x8000400) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000040)={0x200, 0x7}) [ 570.015576] binder: undelivered TRANSACTION_ERROR: 29189 [ 570.021079] binder: undelivered TRANSACTION_ERROR: 29189 04:40:30 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x70024000, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x11002, 0x0) 04:40:30 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) timer_create(0x2000000000000002, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x80000, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) accept4$inet6(r1, 0x0, &(0x7f0000000100), 0x0) 04:40:30 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:30 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x2, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [], {0x0, 0x989680}}) 04:40:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/123, 0x7b}], 0x1}}], 0x1, 0x0, 0x0) 04:40:30 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:30 executing program 2: unshare(0x8000400) pread64(0xffffffffffffffff, 0x0, 0xffffffffffffff8c, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc001, &(0x7f0000000000)=0x1d, 0x7fff, 0x6) 04:40:30 executing program 0: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x105) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f00000000c0)='vboxnet0wlan1]\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x28) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280), 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 04:40:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00') ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000001e5, 0x0) 04:40:30 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 570.656843] NFS: bad mount option value specified: vboxnet0wlan1] [ 570.769991] NFS: bad mount option value specified: vboxnet0wlan1] 04:40:30 executing program 2: unshare(0x8000400) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x8, 0x50800) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000002c0)={0x5, 0x2, 0xf5e, 0xfffffffffffff542, 0x4}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000080)=0x0) r3 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x2, 0x806) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0xb, 0x3, r1, &(0x7f00000000c0)="402e6b3604bdf45730a580ffad58311dc794b4ae1015535b0542b24350f2baccf29159e3f9f599c60284a54c69f921593f9feeda166030dea33fe7d1d5207a6c50a93f43de76a8313c88fcf1601f81145ad7c2b418c7fa0c08960c7fcb6be72ec4f0663e3d64cc3f407fd9c5583e14c8e807e9dc4bef730991ae07659d52426c06bb9eab48b3a4e0d1185fc37da90d211ca9863d3eb3fdf5f175d05e4a3aadd9ed2902078bb90ea93dc60e27575b445a8c9d0a140841119aadd88dec982ce0838341bcd97dd5660020388de708", 0xcd, 0x5, 0x0, 0x3, r3}]) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x7, 0x4) 04:40:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000140)={0x0, 0x0, 0x2a5, 0x0, "e94b193b4953cdc9da34ad68755413caecc4eda3c6338a065d3e0720c0aa9dc1"}) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00') ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000000)) preadv(r0, &(0x7f0000000480), 0x10000000000001e5, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, 0x0) 04:40:30 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:31 executing program 4: r0 = semget(0x3, 0x0, 0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000d40)) 04:40:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000ec0)='ns/ipc\x00w\xe1\xff\xedOZ\xca\n\x82w\x16w\xc7\xd3\xd6\xd7a\x95\x04oe\xe4\xf5\xd7\x0e\xdc\xc0tL\xa6\xac^iS\xd1\x12z\x13%;\x8f\xda1\x17\xb1\n\xf54\xa6\xea\x1c\xfd\x02\xa4\x1fp\xec6[\xae\xe5\xa2\xee\a\xc8\xf4\xda\xb4A\xb7G.\xf6\xc4+\xb8\x81^\xac\xab,\xb5LM\xc0\x94`\x03K\x1f\xcd\x0f\"U\xf7~\r\xc20\xa0f\xaa\t\xd6,m\x95\x05t\b\xfa\x8bE\xb9%\xcb;t\x14\xd5&\xa6f\xda\xa0\xcb\bd\xe6\x9a}\xdf4\x166s}\x8f\xd6\f\xb7\xad\x15\xbf\vA\n\xf5\xf3\xc2\xbc\x00m\x17+\xb6\xdd\xf0\xf5\x03\"\xa9\xfb\x96y\x00\x00\x00\x00\x00\x00\x00\x00\xaae\xee\xd3~\xe7%\xbc\xf4g\x84}OD\x1a\xf5\xceh\xb2{Zb\xc2\xb5t') 04:40:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0x40345410, &(0x7f0000000140)={0x3}) dup3(r0, r1, 0x0) 04:40:31 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0xa00, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}}, 0x8, 0x4, 0xffffffffffffff00, 0xffffffffffffff81, 0x9}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x9, 0x800, 0x8000, 0x8, 0x8, 0x100000001, 0x0, 0x7fff, r1}, 0x20) unshare(0x60000000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x100) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000040)=0x7, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:40:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) write$tun(r1, &(0x7f0000000080)={@val, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}, @gre}}, 0x66) 04:40:31 executing program 0: syz_emit_ethernet(0x15, &(0x7f0000000180)={@local, @remote, [{[], {0x8100, 0x0, 0x3}}], {@llc={0x4, {@llc={0x0, 0x0, "8a"}}}}}, 0x0) 04:40:31 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) [ 571.396769] IPVS: ftp: loaded support on port[0] = 21 04:40:31 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x5, 0x6, 0x26) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000040)={0x1}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x40, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000003c0)=0xffffffff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r3, 0x101, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa129}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x70000000000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x867}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) getsockopt$inet_buf(r4, 0x0, 0x2c, &(0x7f0000000000)=""/145, &(0x7f00000004c0)=0x91) getsockopt$inet_tcp_buf(r4, 0x6, 0x1f, 0x0, &(0x7f00000000c0)=0x39a) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@loopback, @mcast2, @dev={0xfe, 0x80, [], 0x1f}, 0xc6, 0x9, 0x9, 0x500, 0x8, 0x80010000}) 04:40:31 executing program 0: mknod(&(0x7f0000000140)='./file1\x00', 0x88, 0x0) clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000b40)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8, 0x10000) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x1) r2 = dup2(r0, r0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r4 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000100)={0x400000000000}, 0x4) 04:40:31 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00Z\xc8\xaa\x93\x90o\x0e\x15\xce\xe6\x05\x8e\xe5\xc8JT\xbb\x8b\xb6\x9bh\xf5ZO\x0f\x12\xe5EJo\xae\xba\x8c\xeb]\x88/\xe7g\xab0\x0e\xae\x9f\bE\xab\xac\x1b-\x8b\x10\x1e\x83\x8fq\xe6I\xeaC\x1d\xf1r\xf8)\x10^\xf2\x91\xe4\a\xf8>p\xb8/\xe9\xa9V\x96c\x9aK_@+8\x06#^\xe1\xce~aq\xd3\v&\x0e*Q.\xe5u\x04\xea\xbd\x03V\xda\xc6\\S@eD\xe6\tVu\xc1,\x9a\xd3,_\xe8\xd5HZfUl9\xb9\xe8\x86\xf6\xe1\xf0K\xed\x12\xd7(\xcaZ\xf8\x90=\xc9\x10{\x19\xf6\xc5\x06\xae\x89\x8c\x17\xcb,\x85%|\xbbx\xdf\xa3!u') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) 04:40:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100)={r3}, 0x10) 04:40:32 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:32 executing program 2: unshare(0x44000800) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x4, 0xf3, [], 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=""/243}, &(0x7f0000000240)=0x78) 04:40:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') getrlimit(0x0, &(0x7f00000000c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x86) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0c0583b, &(0x7f0000000040)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x3) prctl$PR_GET_NAME(0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) 04:40:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1205531, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [], {0x0, 0x989680}}) 04:40:32 executing program 2: unshare(0x4000000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40100, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000100)=0x1) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x3, 0x4) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:40:32 executing program 4: syz_execute_func(&(0x7f0000000080)="ba66440f50f564ff0941c335e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dcc4bd31919") clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x2, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) write$P9_RVERSION(r1, 0x0, 0x0) 04:40:32 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = dup(r0) shutdown(r5, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x6, 0x3, 0xe8a4, 0x3]}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x3, 0x200000) memfd_create(&(0x7f0000000080)='!proccgroup\x00', 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000400)={'veth0_to_bridge\x00', 0x100}) 04:40:32 executing program 3: r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f00000001c0)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b80000800", 0x20) syz_genetlink_get_family_id$team(0x0) recvmmsg(r0, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f0000007f80)=[{&(0x7f0000006d80)=""/4096, 0x1000}, {&(0x7f0000007d80)=""/157, 0x9d}, {&(0x7f0000007e40)=""/135, 0x87}, {&(0x7f0000007f00)=""/36, 0x24}], 0x4}}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) 04:40:32 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) [ 572.526459] binder: 24055 RLIMIT_NICE not set [ 572.578191] binder: 24054:24068 unknown command 0 [ 572.583253] binder: 24054:24068 ioctl c0306201 200002c0 returned -22 04:40:32 executing program 2: unshare(0x8000400) pread64(0xffffffffffffffff, 0x0, 0xffffffffffffff1a, 0x0) 04:40:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') getrlimit(0x0, &(0x7f00000000c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)) getpeername$packet(r1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x3) prctl$PR_GET_NAME(0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) 04:40:32 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = dup(r0) shutdown(r5, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x6, 0x3, 0xe8a4, 0x3]}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x3, 0x200000) memfd_create(&(0x7f0000000080)='!proccgroup\x00', 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000400)={'veth0_to_bridge\x00', 0x100}) 04:40:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0485510, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [], {0x0, 0x989680}}) 04:40:32 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) [ 572.952977] binder: 24085 RLIMIT_NICE not set 04:40:33 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:33 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x18, @loopback}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x0, @loopback, 0xcbc7}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0xff, @dev={0xfe, 0x80, [], 0x18}, 0x80000001}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xc4) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='veth0_to_bridge\x00') unshare(0x8000400) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:40:33 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000023c0)='/dev/rfkill\x00', 0x40501, 0x0) writev(r0, &(0x7f0000002300)=[{&(0x7f0000000100)="9f", 0x1}], 0x1) [ 573.022239] binder: BINDER_SET_CONTEXT_MGR already set [ 573.027709] binder: 24084:24090 ioctl 40046207 0 returned -16 [ 573.049816] binder: 24084:24092 unknown command 0 [ 573.054908] binder: 24084:24092 ioctl c0306201 200002c0 returned -22 04:40:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00') ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000300)={0x3, 0x1, @start}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, 0x0) preadv(r2, &(0x7f0000000480), 0x10000000000001e5, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) [ 573.171954] binder: 24084:24090 Release 1 refcount change on invalid ref 1 ret -22 04:40:33 executing program 3: inotify_init1(0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r1}) write(r1, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:40:33 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x68) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_mreq(r2, 0x0, 0x24, 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x0, 0x0, 0x0) 04:40:33 executing program 2: unshare(0x20000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x101000, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7ff, 0x4000) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0xffffffffffff0001, 0x7, 0x4, @tick=0x6, {0x1, 0x7}, {0x759, 0x6211}, @note={0x5, 0x5, 0x6, 0x100, 0x80000000}}, {0x8, 0xb2, 0x9, 0xfffffffffffffff8, @tick=0x4, {0x7fffffff, 0x10001}, {0x4, 0x9}, @connect={{0x10001, 0x7}, {0x3f, 0x9}}}], 0x60) fchdir(r0) pwrite64(r1, &(0x7f0000000180)="d98868626c84d0137bcf395d2ae5d60836760361a3506ad4ac8b93e4915c5e6c58c47352eacc0683fc6133da6049270558962a38c5", 0x35, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = accept$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) io_setup(0x4, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000980)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x2, 0x9, r2, &(0x7f0000000840)="e347fbc850d7bc76f027dc409ab1a60f2c2c572d6cbfa74a564c02125992b04c80e7b3b4ae9b1f0cf59e636f11e65c23124f5d777b5ce1460bea5880b5051ae4bfefc7b78f663bcde1a93e069e93b81ee406ee00a7702ae6a71b1f4a577ec95f33ad8c5861eb89bf4b3921b83c298a64d545e4bd65fd76d02615193e13bfd27d1f28a22c5b91c38d78d401c3e0f8200d771ad4b5c908d41a5b080dd0232b4a3ec5d3db9a0924769357bd1b621752538065ea8958300ac70be1665c497de00f4ca5718530b8beec3fa98280a1ecb31f1ee5cdf1fc19881042976639e636c0", 0xde, 0x3, 0x0, 0x1, r1}]) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="38b25c1800000005000000000010d71fb9e1d47e6312b7d1c40000090000002ee9f009017c7d4f5123d7c788", @ANYRES32=r1, @ANYBLOB="00000000000000007d500000010000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0x9, &(0x7f0000000140)=""/9, 0x41f00, 0x1, [], r3, 0x5}, 0x48) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000500)=""/231, 0xe7}, {&(0x7f0000000600)=""/109, 0x6d}, {&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f0000000680)=""/181, 0xb5}], 0x6) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f00000001c0)=0x1) 04:40:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:33 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = dup(r0) shutdown(r5, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x6, 0x3, 0xe8a4, 0x3]}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x3, 0x200000) memfd_create(&(0x7f0000000080)='!proccgroup\x00', 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000400)={'veth0_to_bridge\x00', 0x100}) [ 573.650575] binder: release 24084:24092 transaction 35 out, still active 04:40:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 573.815759] binder: 24128 RLIMIT_NICE not set 04:40:33 executing program 2: unshare(0x8000400) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000080)='.}wlan0\x00', 0x8, 0x3) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7, 0x400000) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x81, {{0x2, 0x4e20, @loopback}}, 0x0, 0x7, [{{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x410) [ 573.861740] binder: BINDER_SET_CONTEXT_MGR already set [ 573.867123] binder: 24127:24134 ioctl 40046207 0 returned -16 [ 573.909376] binder: 24127:24138 unknown command 0 [ 573.914528] binder: 24127:24138 ioctl c0306201 200002c0 returned -22 04:40:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memt\x00\x8a\x11>\xe2\xf5bYQ\xf6\xf2\x8cro\xf8&\xbdL\x18\xbb\xfa`\xa8<\x9f\xb5\x03/\xb4\x93\xd0\xa5\xa0\nf\x18\xfd-b\xc2s\xccV\x0e3', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) [ 573.964644] binder: 24127:24142 Release 1 refcount change on invalid ref 1 ret -22 04:40:34 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:34 executing program 2: unshare(0x8000400) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x2100) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x8, 0x2000) [ 574.551869] binder: release 24127:24138 transaction 38 out, still active 04:40:34 executing program 3: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) setpriority(0x0, 0x0, 0x8) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000040)) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000100)) getpid() setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r1 = request_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='\x00', 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000480)) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000004c0)={@mcast1}, 0x14) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@loopback, @in6}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xe8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000001000)='/dev/urandom\x00', 0x103000, 0x0) write$P9_RREADLINK(r2, &(0x7f0000001040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 04:40:34 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:34 executing program 2: unshare(0x8000400) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8000, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xfffffffffffffffe, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x4, 0x2}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="3c775a1bade13774d97f6044ad54bf90cc04af1b226dbd35a45b79f18679", 0x1e}], 0x1, &(0x7f0000000180)="ab6aa0b442199319f45a16a63a78aba2c15602fb1fce4fe84d699b6d417d51d54974af8d050bde3e74f6d5567274995791f1099f77e6fe8ac142961448eb0f37acf168975e", 0x45, 0x4000040}, 0x10) pread64(r1, 0x0, 0x0, 0x200800002001) 04:40:34 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = dup(r0) shutdown(r5, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x6, 0x3, 0xe8a4, 0x3]}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x3, 0x200000) memfd_create(&(0x7f0000000080)='!proccgroup\x00', 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000400)={'veth0_to_bridge\x00', 0x100}) 04:40:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2, 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, &(0x7f0000000080)='}nodev\x00', 0x7, 0x0) r1 = dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) munlock(&(0x7f0000ff1000/0xf000)=nil, 0xf000) shmctl$IPC_RMID(0x0, 0x0) accept$inet(r1, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000065ffff0000000008003950323030302e757834b6a48f396d42136017cdada19c52c994e12fb8dee729"], 0x2d) [ 574.963367] binder: 24183 RLIMIT_NICE not set [ 575.008534] binder: BINDER_SET_CONTEXT_MGR already set [ 575.014114] binder: 24182:24186 ioctl 40046207 0 returned -16 04:40:35 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) [ 575.055117] binder: 24182:24186 unknown command 0 [ 575.060049] binder: 24182:24186 ioctl c0306201 200002c0 returned -22 04:40:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 04:40:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 575.143414] binder: 24182:24186 Release 1 refcount change on invalid ref 1 ret -22 04:40:35 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/exec\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xffffffffffffffff) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, r0) fcntl$setsig(r2, 0xa, 0x12) write$P9_RMKNOD(r1, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000100)=""/11, 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)) r5 = fcntl$dupfd(r4, 0x0, r4) open$dir(&(0x7f0000000180)='./file0\x00', 0x845, 0x0) pause() ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) dup2(r1, r3) tkill(r0, 0x80000000000016) 04:40:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 575.430738] binder: 24201:24204 got transaction with invalid offset (0, min 0 max 0) or object. [ 575.439861] binder: 24201:24204 transaction failed 29201/-22, size 0-8 line 3035 [ 575.476719] binder: 24201:24205 got transaction with invalid offset (0, min 0 max 0) or object. [ 575.485792] binder: 24201:24205 transaction failed 29201/-22, size 0-8 line 3035 04:40:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) [ 575.528984] binder: undelivered TRANSACTION_ERROR: 29201 [ 575.534576] binder: undelivered TRANSACTION_ERROR: 29201 04:40:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 04:40:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'nr0\x01\x00', 0x4006}) socketpair$unix(0x1, 0x10200000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) [ 575.711259] binder: 24214:24216 got transaction with invalid offset (0, min 0 max 0) or object. [ 575.720508] binder: 24214:24216 transaction failed 29201/-22, size 0-8 line 3035 [ 575.742057] binder: release 24182:24186 transaction 41 out, still active [ 575.790593] binder: undelivered TRANSACTION_ERROR: 29201 04:40:36 executing program 2: unshare(0x8000400) pread64(0xffffffffffffffff, 0x0, 0x20c, 0x0) 04:40:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 04:40:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 576.043610] binder: 24228:24229 got transaction with invalid offset (0, min 0 max 0) or object. [ 576.052784] binder: 24228:24229 transaction failed 29201/-22, size 0-8 line 3035 04:40:36 executing program 5: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000280)='./file1/file0\x00', 0x0, &(0x7f0000000b40)) ioctl$BLKRESETZONE(r1, 0x40101283, 0x0) 04:40:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 576.134140] binder: undelivered TRANSACTION_ERROR: 29201 04:40:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 04:40:38 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x200000, 0x0) 04:40:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$fou(0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000080), 0x1c) dup2(r1, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132196) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 04:40:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 04:40:38 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r0, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) [ 578.518799] binder: 24270:24278 got transaction with invalid offset (0, min 0 max 0) or object. [ 578.528019] binder: 24270:24278 transaction failed 29201/-22, size 0-8 line 3035 [ 578.568827] binder: 24268:24269 got transaction with invalid offset (0, min 0 max 0) or object. [ 578.577909] binder: 24268:24269 transaction failed 29201/-22, size 0-8 line 3035 [ 578.605313] binder: 24270:24283 got transaction with invalid offset (0, min 0 max 0) or object. [ 578.614359] binder: 24270:24283 transaction failed 29201/-22, size 0-8 line 3035 04:40:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 578.659226] binder: undelivered TRANSACTION_ERROR: 29201 [ 578.693385] binder: undelivered TRANSACTION_ERROR: 29201 [ 578.698935] binder: undelivered TRANSACTION_ERROR: 29201 04:40:38 executing program 3: 04:40:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 04:40:38 executing program 5: 04:40:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:38 executing program 2: 04:40:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 04:40:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmctl$SHM_UNLOCK(0x0, 0xc) 04:40:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 04:40:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000600, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, '\x00', 'team_slave_1\x00', 'veth0_to_team\x00', 'veth1_to_bond\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:40:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 579.373800] binder: 24319:24320 got transaction with invalid offset (0, min 0 max 0) or object. [ 579.383079] binder: 24319:24320 transaction failed 29201/-22, size 0-8 line 3035 04:40:39 executing program 3: 04:40:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:39 executing program 5: [ 579.489152] binder: undelivered TRANSACTION_ERROR: 29201 04:40:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:39 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 04:40:39 executing program 2: 04:40:39 executing program 3: 04:40:39 executing program 5: 04:40:39 executing program 4: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 04:40:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:40 executing program 3: 04:40:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:40 executing program 5: 04:40:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:40 executing program 2: 04:40:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 04:40:40 executing program 3: 04:40:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf", 0xc) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 580.330775] binder: 24364:24365 ioctl c0306201 0 returned -14 04:40:40 executing program 5: 04:40:40 executing program 2: 04:40:40 executing program 3: 04:40:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:40:40 executing program 3: 04:40:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd", 0xe) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:40 executing program 2: 04:40:40 executing program 5: 04:40:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b", 0xf) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:41 executing program 3: 04:40:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:40:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:41 executing program 5: 04:40:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:41 executing program 3: 04:40:41 executing program 2: 04:40:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:40:41 executing program 5: 04:40:41 executing program 3: 04:40:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:41 executing program 2: 04:40:41 executing program 5: 04:40:41 executing program 3: 04:40:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 04:40:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:42 executing program 3: 04:40:42 executing program 2: 04:40:42 executing program 5: 04:40:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:40:42 executing program 3: 04:40:42 executing program 2: [ 582.468079] binder: release 24445:24448 transaction 52 out, still active [ 582.475156] binder: undelivered TRANSACTION_COMPLETE 04:40:42 executing program 5: 04:40:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:42 executing program 4: 04:40:42 executing program 3: 04:40:42 executing program 2: 04:40:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 04:40:43 executing program 4: 04:40:43 executing program 5: 04:40:43 executing program 2: 04:40:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 04:40:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, 0x0, 0x0, 0x200000000001f6) 04:40:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:43 executing program 3: 04:40:43 executing program 5: 04:40:43 executing program 3: 04:40:43 executing program 2: 04:40:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, 0x0, 0x0, 0x200000000001f6) 04:40:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:43 executing program 4: 04:40:43 executing program 5: 04:40:43 executing program 3: 04:40:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, 0x0, 0x0, 0x200000000001f6) 04:40:43 executing program 2: 04:40:44 executing program 5: 04:40:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:44 executing program 4: 04:40:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000), 0x0, 0x200000000001f6) 04:40:44 executing program 3: 04:40:44 executing program 2: 04:40:44 executing program 5: 04:40:44 executing program 3: 04:40:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000), 0x0, 0x200000000001f6) 04:40:44 executing program 5: 04:40:44 executing program 4: 04:40:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:44 executing program 2: 04:40:44 executing program 5: 04:40:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000), 0x0, 0x200000000001f6) 04:40:44 executing program 3: 04:40:44 executing program 4: 04:40:44 executing program 2: 04:40:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800), 0x0, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:45 executing program 5: 04:40:45 executing program 3: 04:40:45 executing program 5: 04:40:45 executing program 2: 04:40:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x200000000001f6) 04:40:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, 0x0}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:45 executing program 4: 04:40:45 executing program 3: 04:40:45 executing program 5: 04:40:45 executing program 2: 04:40:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x200000000001f6) 04:40:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:45 executing program 4: 04:40:45 executing program 3: 04:40:45 executing program 2: 04:40:45 executing program 5: 04:40:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x200000000001f6) 04:40:46 executing program 4: 04:40:46 executing program 3: 04:40:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:46 executing program 5: 04:40:46 executing program 2: 04:40:46 executing program 4: 04:40:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:40:46 executing program 3: 04:40:46 executing program 5: 04:40:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:46 executing program 4: 04:40:46 executing program 2: 04:40:46 executing program 3: 04:40:46 executing program 5: 04:40:46 executing program 1: 04:40:46 executing program 4: 04:40:46 executing program 2: 04:40:46 executing program 3: 04:40:47 executing program 5: 04:40:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec158993", 0x8}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:47 executing program 3: 04:40:47 executing program 2: 04:40:47 executing program 1: 04:40:47 executing program 4: 04:40:47 executing program 5: 04:40:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') getrlimit(0x0, &(0x7f00000000c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x86) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0c0583b, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={@mcast2, 0x7c}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x15) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x3) socket$nl_route(0x10, 0x3, 0x0) 04:40:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e", 0xc}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f00000000c0)=""/8) 04:40:47 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) 04:40:47 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x20902) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x20400001) 04:40:47 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2", 0xe}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000000)={0x32, ""/50}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:47 executing program 4 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:40:47 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:40:48 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e0", 0xf}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 588.011236] FAULT_INJECTION: forcing a failure. [ 588.011236] name failslab, interval 1, probability 0, space 0, times 0 [ 588.022948] CPU: 1 PID: 24681 Comm: syz-executor4 Not tainted 4.20.0-rc7+ #15 [ 588.030261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.040151] Call Trace: [ 588.042804] dump_stack+0x173/0x1d0 [ 588.046485] ? __should_failslab+0x278/0x2a0 [ 588.050972] should_fail+0xa19/0xb20 [ 588.054752] __should_failslab+0x278/0x2a0 [ 588.059042] should_failslab+0x29/0x70 [ 588.062983] __kmalloc_node+0x1f5/0x1050 [ 588.067091] ? aa_file_perm+0x124/0x2530 [ 588.071207] ? apparmor_file_permission+0x1e6/0x490 [ 588.076288] ? kvmalloc_node+0x1ab/0x400 [ 588.080417] kvmalloc_node+0x1ab/0x400 [ 588.084384] seq_read+0x4aa/0x1d90 [ 588.087998] ? seq_open+0x390/0x390 [ 588.091680] proc_reg_read+0x2a2/0x3d0 [ 588.095650] do_iter_read+0x877/0xe00 [ 588.099522] ? proc_reg_llseek+0x360/0x360 [ 588.103821] do_preadv+0x3a8/0x5b0 [ 588.107442] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 588.112946] ? prepare_exit_to_usermode+0x114/0x420 [ 588.118042] ? syscall_return_slowpath+0x50/0x650 [ 588.122945] __se_sys_preadv+0xc6/0xe0 [ 588.126890] __x64_sys_preadv+0x62/0x80 [ 588.130915] do_syscall_64+0xbc/0xf0 [ 588.134688] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 588.139911] RIP: 0033:0x4579b9 [ 588.143148] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:40:48 executing program 3 (fault-call:1 fault-nth:0): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:48 executing program 2 (fault-call:1 fault-nth:0): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 588.162119] RSP: 002b:00007fe0a3271c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 588.169888] RAX: ffffffffffffffda RBX: 00007fe0a3271c90 RCX: 00000000004579b9 [ 588.177198] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000005 [ 588.184507] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 588.191821] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe0a32726d4 [ 588.199171] R13: 00000000004c42b2 R14: 00000000004d7488 R15: 0000000000000006 [ 588.247262] FAULT_INJECTION: forcing a failure. [ 588.247262] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 588.259391] CPU: 0 PID: 24691 Comm: syz-executor3 Not tainted 4.20.0-rc7+ #15 [ 588.266706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.276099] Call Trace: [ 588.278752] dump_stack+0x173/0x1d0 [ 588.282435] ? __alloc_pages_nodemask+0x7b0/0x5f20 [ 588.283375] FAULT_INJECTION: forcing a failure. [ 588.283375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 588.287431] should_fail+0xa19/0xb20 [ 588.287506] __alloc_pages_nodemask+0x7b0/0x5f20 [ 588.307822] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 588.313227] ? ima_match_policy+0x2220/0x22d0 [ 588.317811] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 588.323245] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 588.328657] ? process_measurement+0x2489/0x2740 [ 588.333476] alloc_pages_current+0x69d/0x9b0 [ 588.337982] skb_page_frag_refill+0x3b5/0x5b0 [ 588.342537] tun_get_user+0x10bf/0x71a0 [ 588.346570] ? apparmor_file_permission+0x1e6/0x490 [ 588.351663] tun_chr_write_iter+0x1f2/0x360 [ 588.356052] ? tun_chr_read_iter+0x460/0x460 [ 588.360519] do_iter_readv_writev+0x822/0xab0 [ 588.365096] ? tun_chr_read_iter+0x460/0x460 [ 588.369564] do_iter_write+0x302/0xd80 [ 588.373502] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 588.379001] ? import_iovec+0x40e/0x660 [ 588.383105] do_writev+0x397/0x840 [ 588.386715] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 588.392208] ? prepare_exit_to_usermode+0x114/0x420 [ 588.397259] ? syscall_return_slowpath+0x50/0x650 [ 588.402148] __se_sys_writev+0x9b/0xb0 [ 588.406080] __x64_sys_writev+0x4a/0x70 [ 588.410112] do_syscall_64+0xbc/0xf0 [ 588.413889] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 588.419112] RIP: 0033:0x457871 [ 588.422346] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b5 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 588.441293] RSP: 002b:00007f3d4e5faba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 588.449075] RAX: ffffffffffffffda RBX: 000000000000006a RCX: 0000000000457871 [ 588.456386] RDX: 0000000000000001 RSI: 00007f3d4e5fabf0 RDI: 00000000000000f0 [ 588.463694] RBP: 00000000200000c0 R08: 00000000000000f0 R09: 0000000000000000 [ 588.471007] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f3d4e5fb6d4 [ 588.478356] R13: 00000000004c5d34 R14: 00000000004daa40 R15: 0000000000000004 [ 588.485693] CPU: 1 PID: 24694 Comm: syz-executor2 Not tainted 4.20.0-rc7+ #15 [ 588.488828] FAULT_INJECTION: forcing a failure. [ 588.488828] name failslab, interval 1, probability 0, space 0, times 0 [ 588.493036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.493050] Call Trace: [ 588.493095] dump_stack+0x173/0x1d0 [ 588.493131] ? __alloc_pages_nodemask+0x7b0/0x5f20 [ 588.493168] should_fail+0xa19/0xb20 [ 588.493211] __alloc_pages_nodemask+0x7b0/0x5f20 [ 588.493280] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 588.538819] ? ima_match_policy+0x2220/0x22d0 [ 588.543403] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 588.548819] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 588.554225] ? process_measurement+0x2489/0x2740 [ 588.559025] alloc_pages_current+0x69d/0x9b0 [ 588.563515] skb_page_frag_refill+0x3b5/0x5b0 [ 588.568122] tun_get_user+0x10bf/0x71a0 [ 588.572132] ? apparmor_file_permission+0x1e6/0x490 [ 588.577250] ? __msan_metadata_ptr_for_store_4+0x10/0x20 [ 588.582763] tun_chr_write_iter+0x1f2/0x360 [ 588.587140] ? tun_chr_read_iter+0x460/0x460 [ 588.591596] do_iter_readv_writev+0x822/0xab0 [ 588.596152] ? tun_chr_read_iter+0x460/0x460 [ 588.600610] do_iter_write+0x302/0xd80 [ 588.604610] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 588.610106] ? import_iovec+0x40e/0x660 [ 588.614138] do_writev+0x397/0x840 [ 588.617762] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 588.623272] ? prepare_exit_to_usermode+0x114/0x420 [ 588.628359] ? syscall_return_slowpath+0x50/0x650 [ 588.633259] __se_sys_writev+0x9b/0xb0 [ 588.637210] __x64_sys_writev+0x4a/0x70 [ 588.641234] do_syscall_64+0xbc/0xf0 [ 588.644992] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 588.650207] RIP: 0033:0x457871 [ 588.653436] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b5 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 588.672391] RSP: 002b:00007f34a920aba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 588.680153] RAX: ffffffffffffffda RBX: 000000000000006a RCX: 0000000000457871 [ 588.687458] RDX: 0000000000000001 RSI: 00007f34a920abf0 RDI: 00000000000000f0 [ 588.694754] RBP: 00000000200000c0 R08: 00000000000000f0 R09: 0000000000000000 [ 588.702063] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f34a920b6d4 [ 588.709387] R13: 00000000004c5d34 R14: 00000000004daa40 R15: 0000000000000004 [ 588.716717] CPU: 0 PID: 24690 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #15 [ 588.724077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.733458] Call Trace: [ 588.736113] dump_stack+0x173/0x1d0 [ 588.739793] ? __should_failslab+0x278/0x2a0 [ 588.744263] should_fail+0xa19/0xb20 04:40:48 executing program 4 (fault-call:3 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) [ 588.748036] __should_failslab+0x278/0x2a0 [ 588.752328] should_failslab+0x29/0x70 [ 588.756299] kmem_cache_alloc_trace+0x125/0xb90 [ 588.761032] ? binder_get_thread+0x406/0xf60 [ 588.765514] binder_get_thread+0x406/0xf60 [ 588.769847] ? __msan_poison_alloca+0x1f0/0x2a0 [ 588.774575] ? do_vfs_ioctl+0xeeb/0x2c80 [ 588.778724] binder_ioctl+0x56d/0x2d20 [ 588.782664] ? do_vfs_ioctl+0x184/0x2c80 [ 588.786779] do_vfs_ioctl+0xeeb/0x2c80 [ 588.790730] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 588.796154] ? security_file_ioctl+0x92/0x200 [ 588.800703] __se_sys_ioctl+0x1da/0x270 [ 588.804748] __x64_sys_ioctl+0x4a/0x70 [ 588.808678] do_syscall_64+0xbc/0xf0 [ 588.812443] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 588.817668] RIP: 0033:0x4579b9 [ 588.820899] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 588.839851] RSP: 002b:00007f069e2d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 04:40:48 executing program 2 (fault-call:1 fault-nth:1): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:48 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 588.847608] RAX: ffffffffffffffda RBX: 00007f069e2d2c90 RCX: 00000000004579b9 [ 588.854908] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 588.862213] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 588.869527] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f069e2d36d4 [ 588.876876] R13: 00000000004bf00a R14: 00000000004d03d8 R15: 0000000000000004 [ 588.884372] binder: 24683:24690 ioctl c0306201 20000440 returned -12 04:40:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 589.033927] FAULT_INJECTION: forcing a failure. [ 589.033927] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 589.045988] CPU: 0 PID: 24700 Comm: syz-executor2 Not tainted 4.20.0-rc7+ #15 [ 589.053263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.062625] Call Trace: [ 589.065235] dump_stack+0x173/0x1d0 [ 589.068898] should_fail+0xa19/0xb20 [ 589.072658] __alloc_pages_nodemask+0x7b0/0x5f20 [ 589.077440] ? __inc_numa_state+0x7a/0x1b0 [ 589.081728] ? zone_statistics+0x1c9/0x230 [ 589.086008] ? __msan_get_context_state+0x9/0x20 [ 589.090804] ? rmqueue+0x11ef/0x1240 [ 589.094577] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 589.100044] kmsan_internal_alloc_meta_for_pages+0x80/0x580 [ 589.105784] kmsan_alloc_page+0x7e/0x100 [ 589.109869] __alloc_pages_nodemask+0x1587/0x5f20 [ 589.114739] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 589.120124] ? ima_match_policy+0x2220/0x22d0 [ 589.124714] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 589.130117] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 589.135497] ? process_measurement+0x2489/0x2740 [ 589.140318] alloc_pages_current+0x69d/0x9b0 [ 589.144786] skb_page_frag_refill+0x3b5/0x5b0 [ 589.149331] tun_get_user+0x10bf/0x71a0 [ 589.153383] ? apparmor_file_permission+0x1e6/0x490 [ 589.158466] ? __msan_metadata_ptr_for_store_4+0x10/0x20 [ 589.163989] tun_chr_write_iter+0x1f2/0x360 [ 589.168350] ? tun_chr_read_iter+0x460/0x460 [ 589.172787] do_iter_readv_writev+0x822/0xab0 [ 589.177339] ? tun_chr_read_iter+0x460/0x460 [ 589.181771] do_iter_write+0x302/0xd80 [ 589.185706] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 589.191175] ? import_iovec+0x40e/0x660 [ 589.195198] do_writev+0x397/0x840 [ 589.198804] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 589.204295] ? prepare_exit_to_usermode+0x114/0x420 [ 589.209330] ? syscall_return_slowpath+0x50/0x650 [ 589.214212] __se_sys_writev+0x9b/0xb0 [ 589.218153] __x64_sys_writev+0x4a/0x70 [ 589.222153] do_syscall_64+0xbc/0xf0 [ 589.225894] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 589.231112] RIP: 0033:0x457871 [ 589.234320] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b5 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 589.253247] RSP: 002b:00007f34a920aba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 589.260994] RAX: ffffffffffffffda RBX: 000000000000006a RCX: 0000000000457871 [ 589.268289] RDX: 0000000000000001 RSI: 00007f34a920abf0 RDI: 00000000000000f0 [ 589.275602] RBP: 00000000200000c0 R08: 00000000000000f0 R09: 0000000000000000 04:40:49 executing program 5 (fault-call:1 fault-nth:0): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:49 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:40:49 executing program 3: r0 = mq_open(&(0x7f0000000000)='systemnodev{&\\,system)md5sum-wlan0selinuxeth1\x00', 0x8c0, 0x100, &(0x7f0000000040)={0x8, 0x7, 0x5, 0x1, 0x2, 0x0, 0x873, 0x8}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) socket$inet_icmp_raw(0x2, 0x3, 0x1) shmget(0x2, 0x1000, 0x22, &(0x7f0000ffe000/0x1000)=nil) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x20200, 0x0) [ 589.282891] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f34a920b6d4 [ 589.290184] R13: 00000000004c5d34 R14: 00000000004daa40 R15: 0000000000000004 04:40:49 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x101000, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0x5, 0xfffffffffffff801, [], &(0x7f0000000080)=0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000280)=""/169, 0xffb2}], 0x1000000000000057, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)=0x0) r4 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000240)={0xba, 0x797b, r3, 0x0, r4, 0x0, 0x0, 0x8}) [ 589.349257] FAULT_INJECTION: forcing a failure. [ 589.349257] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 589.361448] CPU: 0 PID: 24708 Comm: syz-executor5 Not tainted 4.20.0-rc7+ #15 [ 589.368765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.378159] Call Trace: [ 589.380835] dump_stack+0x173/0x1d0 [ 589.384559] ? __alloc_pages_nodemask+0x7b0/0x5f20 [ 589.389563] should_fail+0xa19/0xb20 [ 589.393343] __alloc_pages_nodemask+0x7b0/0x5f20 [ 589.398183] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 589.403613] ? ima_match_policy+0x2220/0x22d0 [ 589.408196] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 589.413765] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 589.419206] ? process_measurement+0x2489/0x2740 [ 589.424026] alloc_pages_current+0x69d/0x9b0 [ 589.428513] skb_page_frag_refill+0x3b5/0x5b0 [ 589.433093] tun_get_user+0x10bf/0x71a0 [ 589.437127] ? apparmor_file_permission+0x1e6/0x490 [ 589.442246] tun_chr_write_iter+0x1f2/0x360 [ 589.446638] ? tun_chr_read_iter+0x460/0x460 [ 589.451108] do_iter_readv_writev+0x822/0xab0 [ 589.455683] ? tun_chr_read_iter+0x460/0x460 [ 589.460142] do_iter_write+0x302/0xd80 [ 589.464099] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 589.469615] ? import_iovec+0x40e/0x660 [ 589.473662] do_writev+0x397/0x840 [ 589.477288] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 589.482802] ? prepare_exit_to_usermode+0x114/0x420 [ 589.487881] ? syscall_return_slowpath+0x50/0x650 [ 589.492804] __se_sys_writev+0x9b/0xb0 [ 589.496759] __x64_sys_writev+0x4a/0x70 [ 589.500797] do_syscall_64+0xbc/0xf0 [ 589.504591] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 589.509832] RIP: 0033:0x457871 [ 589.513111] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b5 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 589.532076] RSP: 002b:00007fe7eccf0ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 589.539847] RAX: ffffffffffffffda RBX: 000000000000006a RCX: 0000000000457871 04:40:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, 0x0, 0x0) [ 589.547192] RDX: 0000000000000001 RSI: 00007fe7eccf0bf0 RDI: 00000000000000f0 [ 589.554525] RBP: 00000000200000c0 R08: 00000000000000f0 R09: 0000000000000000 [ 589.561864] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fe7eccf16d4 [ 589.569177] R13: 00000000004c5d34 R14: 00000000004daa40 R15: 0000000000000004 04:40:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, 0x0, 0x0) 04:40:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000340)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000000600)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000180)="ede764c0cec9dcdfb6cf399b3377b2a6c5c2009b40d8cf1ddb6ba6c03944d305588734d65f78784363d6bd1452d0eee76dce56d8599d5f141829dd546c7d9cf5d79cf5878ec75d6e6c01b6d2454328b1d9e19203", 0x54}, {&(0x7f0000000240)="5c808644e0fcfe622df6a1ecd1016b627086e1f1d260620fab12f043387ffb191e3728532b8525f011c6cea5cd40b16fdcd7e18eacec10c1e84e4d5495814868bc85edf7940b5764ba863602668c3f85dc0ffb13dd3b7a8a54870cb9562a2bcd5645023c563b530dbf05d9d393421ec99aebdbc3461cd881300cf816a9f26a07a8e9fff56f1684af0dd17f827037f34ed5ae68", 0x93}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100020000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1], 0x90, 0x4}], 0x1, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000640)='/dev/admmidi#\x00', 0xfffffffffffffffe, 0x8000) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000680)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:40:49 executing program 2 (fault-call:1 fault-nth:2): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:49 executing program 3: syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xffffffffffffff15, &(0x7f0000000280)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x5, 0x6, "ea9449", 0x0, 0x3b, 0x1, @ipv4={[], [], @local}, @local, {[@fragment={0x5c, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x65}, @hopopts={0x0, 0x0, [], [@enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x100000000}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x2b, 0x0, [], [@calipso={0x7, 0x0, {0x4, 0x0, 0x6, 0x800, [0x100, 0x40000000000]}}, @jumbo={0xc2, 0x4, 0xe6d}]}, @srh={0x9f, 0x0, 0x4, 0x0, 0xb96d, 0x20, 0xfffffffffffffffd, [@remote]}, @dstopts={0xff, 0x0, [], [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x0, [0x0, 0x0]}, @hao={0xc9, 0x0, @dev={0xfe, 0x80, [], 0x1d}}, @pad1, @jumbo={0xc2, 0x4, 0x3ff}, @pad1, @calipso={0x7, 0x0, {0x100, 0x0, 0x6, 0x8, [0x9, 0x7, 0x81, 0x3645, 0x7, 0x23, 0xfffffffffffffffe, 0x7fffffff, 0xa339]}}, @calipso={0x7, 0x0, {0x1, 0x0, 0xffffffff, 0x0, [0x4, 0x1f, 0x1, 0xfffffffffffffffc, 0x1000, 0x903, 0x7, 0x8, 0x5, 0x4695]}}]}, @hopopts={0xff, 0x0, [], [@enc_lim={0x4, 0x1, 0x1000}, @jumbo={0xc2, 0x4, 0xfff}, @generic={0x80000001, 0x0, "5fdd30e05952d5a3573ec3918d62409e24c2408f8b11b95a35745fae9d2c680ce40e001040364337df5045976f27e1a072c6d63dddc6a88d9ed832f8b57a0fffc1755a9faef0e3c410deebc56ebf7ef78afb04d8c0441f5a1626d539c162393697cdb5eecadb245cde263fe0329f7b6050b211589736446fa25ab6d62794181c39b2ceaf2b7d95af8d89db76ae977124dd3ef3f1620621a2343cd16aae27f7b3a5d897227b74e9aa0ca3b4bc95b3f8d0b935c96cc249319dd9ed4a67a61f74d1b9b4ec7ee9c50eb948ff50f77da092e8babe2e8df3c55e3003426849b3dae220d7bf8a584bc7d22782f1"}, @pad1, @ra={0x5, 0x2, 0xdb}, @generic={0x38, 0x0, "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"}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x3f, 0x0, 0x9, 0x3f, 0x0, 0x1, 0x67}], @tcp={{0x4e23, 0x4e21, r0, r1, 0x83, 0x0, 0x0, 0x80, 0x7ff, 0x0, 0x2, {[@nop, @sack_perm, @exp_smc, @nop, @exp_fastopen={0xfe, 0x0, 0xf989, "2bab7d14ec1a0eb0"}]}}, {"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"}}}}}}}, 0x0) 04:40:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, 0x0, 0x0) 04:40:49 executing program 5 (fault-call:1 fault-nth:1): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 589.947464] FAULT_INJECTION: forcing a failure. [ 589.947464] name failslab, interval 1, probability 0, space 0, times 0 [ 589.958988] CPU: 1 PID: 24731 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #15 [ 589.966356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.975748] Call Trace: [ 589.978399] dump_stack+0x173/0x1d0 [ 589.982079] should_fail+0xa19/0xb20 [ 589.985894] __should_failslab+0x278/0x2a0 [ 589.990199] should_failslab+0x29/0x70 [ 589.994159] kmem_cache_alloc_trace+0x125/0xb90 [ 589.998893] ? binder_transaction+0x40de/0x13e00 [ 590.003711] binder_transaction+0x40de/0x13e00 [ 590.008378] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 590.013865] binder_ioctl_write_read+0x163a/0x1a0e0 [ 590.018973] ? should_fail+0x5e/0xb20 [ 590.022873] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 590.028325] ? rb_insert_color+0xbc3/0x1170 [ 590.032762] binder_ioctl+0x759/0x2d20 [ 590.036721] ? do_vfs_ioctl+0x184/0x2c80 [ 590.040839] do_vfs_ioctl+0xeeb/0x2c80 [ 590.044792] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 590.050217] ? security_file_ioctl+0x92/0x200 [ 590.054764] __se_sys_ioctl+0x1da/0x270 [ 590.058795] __x64_sys_ioctl+0x4a/0x70 [ 590.062738] do_syscall_64+0xbc/0xf0 [ 590.066505] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 590.071754] RIP: 0033:0x4579b9 [ 590.075000] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:40:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0), 0x0) [ 590.093971] RSP: 002b:00007f069e2d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 590.101756] RAX: ffffffffffffffda RBX: 00007f069e2d2c90 RCX: 00000000004579b9 [ 590.109075] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 590.116396] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 590.123708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f069e2d36d4 [ 590.131033] R13: 00000000004bf00a R14: 00000000004d03d8 R15: 0000000000000004 [ 590.138977] binder: 24710:24731 transaction failed 29201/-12, size 0-0 line 2913 [ 590.177979] FAULT_INJECTION: forcing a failure. [ 590.177979] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 590.189860] CPU: 0 PID: 24742 Comm: syz-executor2 Not tainted 4.20.0-rc7+ #15 [ 590.197147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.198176] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.206505] Call Trace: [ 590.206540] dump_stack+0x173/0x1d0 [ 590.206585] should_fail+0xa19/0xb20 [ 590.206632] __alloc_pages_nodemask+0x7b0/0x5f20 [ 590.226770] ? __inc_numa_state+0x7a/0x1b0 [ 590.231039] ? zone_statistics+0x1c9/0x230 [ 590.235305] ? __msan_get_context_state+0x9/0x20 [ 590.240090] ? rmqueue+0x11ef/0x1240 [ 590.243839] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 590.249282] kmsan_internal_alloc_meta_for_pages+0xf2/0x580 [ 590.255066] kmsan_alloc_page+0x7e/0x100 [ 590.259159] __alloc_pages_nodemask+0x1587/0x5f20 [ 590.264024] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 590.269402] ? ima_match_policy+0x2220/0x22d0 [ 590.273991] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 590.279426] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 590.284844] ? process_measurement+0x2489/0x2740 [ 590.289679] alloc_pages_current+0x69d/0x9b0 [ 590.294132] skb_page_frag_refill+0x3b5/0x5b0 [ 590.298681] tun_get_user+0x10bf/0x71a0 [ 590.302684] ? apparmor_file_permission+0x1e6/0x490 [ 590.307747] ? __msan_metadata_ptr_for_store_4+0x10/0x20 [ 590.313273] tun_chr_write_iter+0x1f2/0x360 [ 590.317655] ? tun_chr_read_iter+0x460/0x460 [ 590.322087] do_iter_readv_writev+0x822/0xab0 04:40:50 executing program 1 (fault-call:1 fault-nth:2): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:40:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0), 0x0) 04:40:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) [ 590.326641] ? tun_chr_read_iter+0x460/0x460 [ 590.331079] do_iter_write+0x302/0xd80 [ 590.335004] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 590.340496] ? import_iovec+0x40e/0x660 [ 590.344516] do_writev+0x397/0x840 [ 590.348124] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 590.353603] ? prepare_exit_to_usermode+0x114/0x420 [ 590.358637] ? syscall_return_slowpath+0x50/0x650 [ 590.363570] __se_sys_writev+0x9b/0xb0 [ 590.367505] __x64_sys_writev+0x4a/0x70 [ 590.371519] do_syscall_64+0xbc/0xf0 [ 590.375266] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 590.380481] RIP: 0033:0x457871 [ 590.383733] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b5 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 590.391045] FAULT_INJECTION: forcing a failure. [ 590.391045] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 590.402666] RSP: 002b:00007f34a920aba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 590.422166] RAX: ffffffffffffffda RBX: 000000000000006a RCX: 0000000000457871 [ 590.429444] RDX: 0000000000000001 RSI: 00007f34a920abf0 RDI: 00000000000000f0 [ 590.436721] RBP: 00000000200000c0 R08: 00000000000000f0 R09: 0000000000000000 [ 590.443997] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f34a920b6d4 [ 590.451276] R13: 00000000004c5d34 R14: 00000000004daa40 R15: 0000000000000004 [ 590.458602] CPU: 1 PID: 24743 Comm: syz-executor5 Not tainted 4.20.0-rc7+ #15 [ 590.466061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.475422] Call Trace: [ 590.478042] dump_stack+0x173/0x1d0 [ 590.481698] should_fail+0xa19/0xb20 [ 590.485453] __alloc_pages_nodemask+0x7b0/0x5f20 [ 590.490247] ? __inc_numa_state+0x7a/0x1b0 [ 590.494512] ? zone_statistics+0x1c9/0x230 [ 590.498786] ? __msan_get_context_state+0x9/0x20 [ 590.503575] ? rmqueue+0x11ef/0x1240 [ 590.507332] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 590.512770] kmsan_internal_alloc_meta_for_pages+0x80/0x580 [ 590.518504] kmsan_alloc_page+0x7e/0x100 [ 590.522603] __alloc_pages_nodemask+0x1587/0x5f20 [ 590.527473] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 590.532862] ? ima_match_policy+0x2220/0x22d0 [ 590.537438] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 590.542847] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 590.548270] ? process_measurement+0x2489/0x2740 [ 590.553091] alloc_pages_current+0x69d/0x9b0 [ 590.557577] skb_page_frag_refill+0x3b5/0x5b0 [ 590.562122] tun_get_user+0x10bf/0x71a0 [ 590.566125] ? apparmor_file_permission+0x1e6/0x490 [ 590.571186] ? __msan_metadata_ptr_for_store_4+0x10/0x20 [ 590.576740] tun_chr_write_iter+0x1f2/0x360 [ 590.581109] ? tun_chr_read_iter+0x460/0x460 [ 590.585540] do_iter_readv_writev+0x822/0xab0 [ 590.590094] ? tun_chr_read_iter+0x460/0x460 [ 590.594528] do_iter_write+0x302/0xd80 [ 590.598462] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 590.603933] ? import_iovec+0x40e/0x660 [ 590.607961] do_writev+0x397/0x840 [ 590.611569] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 590.617041] ? prepare_exit_to_usermode+0x114/0x420 [ 590.622082] ? syscall_return_slowpath+0x50/0x650 04:40:50 executing program 3: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000040)=@vsock, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000001480)=""/217, 0xd9}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x8, 0x7, 0x5, 0x2}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 590.626969] __se_sys_writev+0x9b/0xb0 [ 590.630893] __x64_sys_writev+0x4a/0x70 [ 590.634890] do_syscall_64+0xbc/0xf0 [ 590.638633] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 590.643840] RIP: 0033:0x457871 [ 590.644109] FAULT_INJECTION: forcing a failure. [ 590.644109] name failslab, interval 1, probability 0, space 0, times 0 [ 590.647047] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b5 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 590.647059] RSP: 002b:00007fe7eccf0ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 590.647078] RAX: ffffffffffffffda RBX: 000000000000006a RCX: 0000000000457871 [ 590.647091] RDX: 0000000000000001 RSI: 00007fe7eccf0bf0 RDI: 00000000000000f0 [ 590.647103] RBP: 00000000200000c0 R08: 00000000000000f0 R09: 0000000000000000 [ 590.647115] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fe7eccf16d4 [ 590.647127] R13: 00000000004c5d34 R14: 00000000004daa40 R15: 0000000000000004 [ 590.722560] CPU: 0 PID: 24751 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #15 04:40:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0), 0x0) [ 590.729879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.739275] Call Trace: [ 590.741925] dump_stack+0x173/0x1d0 [ 590.745611] should_fail+0xa19/0xb20 [ 590.749385] __should_failslab+0x278/0x2a0 [ 590.753670] should_failslab+0x29/0x70 [ 590.757643] kmem_cache_alloc_trace+0x125/0xb90 [ 590.762374] ? binder_transaction+0x4261/0x13e00 [ 590.767192] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 590.772629] binder_transaction+0x4261/0x13e00 04:40:50 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaa8aaaaaaaaff0000000000019078ac1414bbac1414000000007800000000400000db04dfa0878d13bf91085b000000000000010200ac1414aaacbb134c1d86f59a5f5c000000000000f8000000000000e000000100000000000000007f024100000000000000000000000000000000"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x80000, 0x2) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)=""/113) listen(r0, 0xbec4) r1 = dup(r0) ioctl$KDMKTONE(r1, 0x4b30, 0x3) [ 590.777280] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 590.782749] binder_ioctl_write_read+0x163a/0x1a0e0 [ 590.787829] ? ___slab_alloc+0x1ba1/0x2060 [ 590.792149] ? binder_get_thread+0x406/0xf60 [ 590.796634] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 590.802090] ? rb_insert_color+0xbc3/0x1170 [ 590.806477] binder_ioctl+0x759/0x2d20 [ 590.810436] ? do_vfs_ioctl+0x184/0x2c80 [ 590.814566] do_vfs_ioctl+0xeeb/0x2c80 [ 590.818517] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 590.823954] ? security_file_ioctl+0x92/0x200 [ 590.828500] __se_sys_ioctl+0x1da/0x270 [ 590.832542] __x64_sys_ioctl+0x4a/0x70 [ 590.836534] do_syscall_64+0xbc/0xf0 [ 590.840311] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 590.845543] RIP: 0033:0x4579b9 [ 590.848832] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 590.867781] RSP: 002b:00007f069e2d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 04:40:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{0x0}], 0x1) [ 590.875569] RAX: ffffffffffffffda RBX: 00007f069e2d2c90 RCX: 00000000004579b9 [ 590.882873] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 590.890176] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 590.897482] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f069e2d36d4 [ 590.904788] R13: 00000000004bf00a R14: 00000000004d03d8 R15: 0000000000000004 [ 590.912309] binder: 24744:24751 transaction failed 29201/-12, size 0-0 line 2924 [ 590.927330] binder: undelivered TRANSACTION_ERROR: 29201 04:40:51 executing program 2 (fault-call:1 fault-nth:3): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:51 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000effffffffffff08004500005c0000000000019078ac1414bbac1414110504907800106281a40000000000000000010000ac1414aaac141448082c00000000000000000000e0004429e01d0000e000000100000000000000007f0000010000000000000000"], 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) 04:40:51 executing program 1 (fault-call:1 fault-nth:3): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:40:51 executing program 5 (fault-call:1 fault-nth:2): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{0x0}], 0x1) [ 591.192721] FAULT_INJECTION: forcing a failure. [ 591.192721] name failslab, interval 1, probability 0, space 0, times 0 [ 591.204237] CPU: 1 PID: 24774 Comm: syz-executor2 Not tainted 4.20.0-rc7+ #15 [ 591.211562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.220961] Call Trace: [ 591.223612] dump_stack+0x173/0x1d0 [ 591.227292] ? __should_failslab+0x278/0x2a0 [ 591.231757] should_fail+0xa19/0xb20 [ 591.235534] __should_failslab+0x278/0x2a0 [ 591.239838] should_failslab+0x29/0x70 [ 591.243784] kmem_cache_alloc+0xf9/0xb90 [ 591.247893] ? build_skb+0x10b/0x6b0 [ 591.251669] ? copy_page_from_iter+0x939/0xd60 [ 591.256321] build_skb+0x10b/0x6b0 [ 591.259932] tun_get_user+0x1621/0x71a0 [ 591.263985] ? __msan_metadata_ptr_for_store_4+0x10/0x20 [ 591.269518] tun_chr_write_iter+0x1f2/0x360 [ 591.273920] ? tun_chr_read_iter+0x460/0x460 [ 591.278425] do_iter_readv_writev+0x822/0xab0 [ 591.283003] ? tun_chr_read_iter+0x460/0x460 [ 591.287467] do_iter_write+0x302/0xd80 [ 591.292466] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 591.297977] ? import_iovec+0x40e/0x660 [ 591.302019] do_writev+0x397/0x840 [ 591.305645] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 591.310776] FAULT_INJECTION: forcing a failure. [ 591.310776] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 591.311165] ? prepare_exit_to_usermode+0x114/0x420 [ 591.328000] ? syscall_return_slowpath+0x50/0x650 [ 591.332900] __se_sys_writev+0x9b/0xb0 [ 591.336844] __x64_sys_writev+0x4a/0x70 [ 591.340861] do_syscall_64+0xbc/0xf0 [ 591.344642] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 591.349875] RIP: 0033:0x457871 [ 591.353104] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b5 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 591.372050] RSP: 002b:00007f34a920aba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 591.379813] RAX: ffffffffffffffda RBX: 000000000000006a RCX: 0000000000457871 04:40:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) fdatasync(r0) [ 591.387125] RDX: 0000000000000001 RSI: 00007f34a920abf0 RDI: 00000000000000f0 [ 591.394437] RBP: 00000000200000c0 R08: 00000000000000f0 R09: 0000000000000000 [ 591.401771] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f34a920b6d4 [ 591.409078] R13: 00000000004c5d34 R14: 00000000004daa40 R15: 0000000000000004 [ 591.416455] CPU: 0 PID: 24782 Comm: syz-executor5 Not tainted 4.20.0-rc7+ #15 [ 591.423743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.433111] Call Trace: [ 591.435726] dump_stack+0x173/0x1d0 [ 591.439391] should_fail+0xa19/0xb20 [ 591.440620] FAULT_INJECTION: forcing a failure. [ 591.440620] name failslab, interval 1, probability 0, space 0, times 0 [ 591.443174] __alloc_pages_nodemask+0x7b0/0x5f20 [ 591.443198] ? __inc_numa_state+0x7a/0x1b0 [ 591.443229] ? zone_statistics+0x1c9/0x230 [ 591.443257] ? __msan_get_context_state+0x9/0x20 [ 591.443326] ? rmqueue+0x11ef/0x1240 [ 591.476179] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 591.481619] kmsan_internal_alloc_meta_for_pages+0xf2/0x580 [ 591.487360] kmsan_alloc_page+0x7e/0x100 [ 591.491456] __alloc_pages_nodemask+0x1587/0x5f20 [ 591.496313] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 591.501687] ? ima_match_policy+0x2220/0x22d0 [ 591.506257] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 591.511665] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 591.517055] ? process_measurement+0x2489/0x2740 [ 591.521840] alloc_pages_current+0x69d/0x9b0 [ 591.526302] skb_page_frag_refill+0x3b5/0x5b0 [ 591.530832] tun_get_user+0x10bf/0x71a0 [ 591.534833] ? apparmor_file_permission+0x1e6/0x490 [ 591.539959] tun_chr_write_iter+0x1f2/0x360 [ 591.544310] ? tun_chr_read_iter+0x460/0x460 [ 591.548729] do_iter_readv_writev+0x822/0xab0 [ 591.553269] ? tun_chr_read_iter+0x460/0x460 [ 591.557705] do_iter_write+0x302/0xd80 [ 591.561631] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 591.567100] ? import_iovec+0x40e/0x660 [ 591.571117] do_writev+0x397/0x840 [ 591.574723] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 591.580182] ? prepare_exit_to_usermode+0x114/0x420 [ 591.585216] ? syscall_return_slowpath+0x50/0x650 [ 591.590098] __se_sys_writev+0x9b/0xb0 [ 591.594029] __x64_sys_writev+0x4a/0x70 [ 591.598015] do_syscall_64+0xbc/0xf0 [ 591.601746] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 591.606958] RIP: 0033:0x457871 [ 591.610163] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b5 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 591.629076] RSP: 002b:00007fe7eccf0ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 591.636796] RAX: ffffffffffffffda RBX: 000000000000006a RCX: 0000000000457871 [ 591.644077] RDX: 0000000000000001 RSI: 00007fe7eccf0bf0 RDI: 00000000000000f0 [ 591.651352] RBP: 00000000200000c0 R08: 00000000000000f0 R09: 0000000000000000 [ 591.658644] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fe7eccf16d4 [ 591.665937] R13: 00000000004c5d34 R14: 00000000004daa40 R15: 0000000000000004 [ 591.673269] CPU: 1 PID: 24775 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #15 [ 591.680596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.689986] Call Trace: [ 591.692630] dump_stack+0x173/0x1d0 [ 591.696320] should_fail+0xa19/0xb20 [ 591.700099] __should_failslab+0x278/0x2a0 [ 591.704385] should_failslab+0x29/0x70 [ 591.708331] kmem_cache_alloc_trace+0x125/0xb90 [ 591.713060] ? binder_alloc_new_buf+0x1d92/0x2f70 [ 591.717982] binder_alloc_new_buf+0x1d92/0x2f70 [ 591.722754] binder_transaction+0x5961/0x13e00 [ 591.727400] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 591.732932] binder_ioctl_write_read+0x163a/0x1a0e0 [ 591.738013] ? should_fail+0x5e/0xb20 [ 591.741903] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 591.747361] ? rb_insert_color+0xbc3/0x1170 [ 591.751751] binder_ioctl+0x759/0x2d20 [ 591.755697] ? do_vfs_ioctl+0x184/0x2c80 [ 591.759802] do_vfs_ioctl+0xeeb/0x2c80 [ 591.763748] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 591.769171] ? security_file_ioctl+0x92/0x200 [ 591.773718] __se_sys_ioctl+0x1da/0x270 [ 591.777746] __x64_sys_ioctl+0x4a/0x70 [ 591.781695] do_syscall_64+0xbc/0xf0 [ 591.785461] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 591.790686] RIP: 0033:0x4579b9 [ 591.793920] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 591.812886] RSP: 002b:00007f069e2d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.820651] RAX: ffffffffffffffda RBX: 00007f069e2d2c90 RCX: 00000000004579b9 [ 591.827963] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 591.835270] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 04:40:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{0x0}], 0x1) 04:40:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xfffffffffffffcb6, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907802000000400000000000000000010000ac1414aaac141448082c00000000000000000000e0000002b4000000e000000100000000000000007f0000130000000000000000"], 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}, {0x2, 0x4e21, @multicast2}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='veth1_to_bridge\x00', 0x9, 0x5, 0x3}) [ 591.842618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f069e2d36d4 [ 591.849938] R13: 00000000004bf00a R14: 00000000004d03d8 R15: 0000000000000004 [ 591.858976] binder_alloc: binder_alloc_new_buf_locked: 24054 failed to alloc new buffer struct [ 591.867873] binder: 24773:24775 transaction failed 29201/-12, size 0-0 line 2973 04:40:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) fcntl$notify(r0, 0x402, 0x14) 04:40:52 executing program 2 (fault-call:1 fault-nth:4): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:52 executing program 3: syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x22001) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) 04:40:52 executing program 0 (fault-call:6 fault-nth:0): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 592.217644] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.250273] FAULT_INJECTION: forcing a failure. [ 592.250273] name failslab, interval 1, probability 0, space 0, times 0 [ 592.261725] CPU: 0 PID: 24804 Comm: syz-executor2 Not tainted 4.20.0-rc7+ #15 [ 592.269038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.275567] FAULT_INJECTION: forcing a failure. [ 592.275567] name failslab, interval 1, probability 0, space 0, times 0 [ 592.278444] Call Trace: [ 592.292249] dump_stack+0x173/0x1d0 [ 592.295934] ? __should_failslab+0x278/0x2a0 [ 592.300403] should_fail+0xa19/0xb20 [ 592.304185] __should_failslab+0x278/0x2a0 [ 592.308499] should_failslab+0x29/0x70 [ 592.312448] kmem_cache_alloc+0xf9/0xb90 [ 592.316570] ? skb_clone+0x300/0x580 [ 592.320365] skb_clone+0x300/0x580 [ 592.323972] raw_local_deliver+0x106f/0x17b0 [ 592.328448] ip_local_deliver_finish+0x25e/0xea0 [ 592.333294] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 592.338743] ip_local_deliver+0x44b/0x510 [ 592.342958] ? ip_local_deliver+0x510/0x510 [ 592.347315] ? ip_call_ra_chain+0x7a0/0x7a0 [ 592.351717] ip_rcv+0x6b6/0x740 [ 592.355041] ? ip_rcv_core+0x11f0/0x11f0 [ 592.359143] netif_receive_skb_internal+0x5d0/0x9a0 [ 592.364200] ? ip_local_deliver_finish+0xea0/0xea0 [ 592.369177] netif_receive_skb+0x246/0x270 [ 592.373467] tun_get_user+0x6d1d/0x71a0 [ 592.377572] tun_chr_write_iter+0x1f2/0x360 [ 592.381951] ? tun_chr_read_iter+0x460/0x460 [ 592.386415] do_iter_readv_writev+0x822/0xab0 [ 592.390965] ? tun_chr_read_iter+0x460/0x460 [ 592.395408] do_iter_write+0x302/0xd80 [ 592.399347] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 592.404848] ? import_iovec+0x40e/0x660 [ 592.408874] do_writev+0x397/0x840 [ 592.412495] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 592.418419] ? prepare_exit_to_usermode+0x114/0x420 [ 592.423473] ? syscall_return_slowpath+0x50/0x650 [ 592.428362] __se_sys_writev+0x9b/0xb0 [ 592.432307] __x64_sys_writev+0x4a/0x70 [ 592.436322] do_syscall_64+0xbc/0xf0 [ 592.440096] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 592.445326] RIP: 0033:0x457871 [ 592.448565] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b5 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 592.467494] RSP: 002b:00007f34a920aba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 592.475258] RAX: ffffffffffffffda RBX: 000000000000006a RCX: 0000000000457871 [ 592.482563] RDX: 0000000000000001 RSI: 00007f34a920abf0 RDI: 00000000000000f0 [ 592.489860] RBP: 00000000200000c0 R08: 00000000000000f0 R09: 0000000000000000 [ 592.497156] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f34a920b6d4 [ 592.504483] R13: 00000000004c5d34 R14: 00000000004daa40 R15: 0000000000000004 [ 592.511816] CPU: 1 PID: 24805 Comm: syz-executor0 Not tainted 4.20.0-rc7+ #15 [ 592.519126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.528509] Call Trace: [ 592.531153] dump_stack+0x173/0x1d0 [ 592.534827] should_fail+0xa19/0xb20 [ 592.538605] __should_failslab+0x278/0x2a0 [ 592.542912] should_failslab+0x29/0x70 [ 592.546844] __kmalloc+0xb3/0x3a0 [ 592.550372] ? sock_kmalloc+0x16d/0x2d0 [ 592.554403] sock_kmalloc+0x16d/0x2d0 [ 592.558273] af_alg_alloc_areq+0x85/0x310 [ 592.562486] skcipher_recvmsg+0x337/0x1880 [ 592.566796] ? skcipher_sendmsg+0x160/0x160 [ 592.571160] sock_read_iter+0x45b/0x4e0 [ 592.575206] ? kernel_sock_ip_overhead+0x340/0x340 [ 592.580183] do_iter_readv_writev+0x822/0xab0 [ 592.584742] ? kernel_sock_ip_overhead+0x340/0x340 [ 592.589714] do_iter_read+0x2fe/0xe00 [ 592.593588] ? import_iovec+0x40e/0x660 [ 592.597622] do_readv+0x2a7/0x620 [ 592.601139] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 592.606649] ? prepare_exit_to_usermode+0x114/0x420 [ 592.611705] ? syscall_return_slowpath+0x50/0x650 [ 592.616646] __se_sys_readv+0x9b/0xb0 [ 592.620498] __x64_sys_readv+0x4a/0x70 [ 592.624437] do_syscall_64+0xbc/0xf0 [ 592.628206] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 592.633432] RIP: 0033:0x4579b9 [ 592.636664] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 592.655604] RSP: 002b:00007ff9a6603c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 04:40:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000180)={r0, 0x0, 0x7, 0x9, 0xcdb}) getsockname$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) 04:40:52 executing program 5 (fault-call:1 fault-nth:3): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:52 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x1, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x0) [ 592.663373] RAX: ffffffffffffffda RBX: 00007ff9a6603c90 RCX: 00000000004579b9 [ 592.670675] RDX: 0000000000000001 RSI: 00000000200007c0 RDI: 0000000000000004 [ 592.677980] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 592.685293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9a66046d4 [ 592.692650] R13: 00000000004c42ce R14: 00000000004d7758 R15: 0000000000000005 04:40:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') sysfs$1(0x1, &(0x7f0000000080)='nodev#$vboxnet1}}selfem1ppp0\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) [ 592.807591] FAULT_INJECTION: forcing a failure. [ 592.807591] name failslab, interval 1, probability 0, space 0, times 0 [ 592.819072] CPU: 1 PID: 24814 Comm: syz-executor5 Not tainted 4.20.0-rc7+ #15 [ 592.826394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.835786] Call Trace: [ 592.838435] dump_stack+0x173/0x1d0 [ 592.842123] ? __should_failslab+0x278/0x2a0 [ 592.846602] should_fail+0xa19/0xb20 [ 592.850386] __should_failslab+0x278/0x2a0 [ 592.854690] should_failslab+0x29/0x70 [ 592.858641] kmem_cache_alloc+0xf9/0xb90 [ 592.862755] ? build_skb+0x10b/0x6b0 [ 592.866533] ? copy_page_from_iter+0x939/0xd60 [ 592.871194] build_skb+0x10b/0x6b0 [ 592.874810] tun_get_user+0x1621/0x71a0 [ 592.878915] tun_chr_write_iter+0x1f2/0x360 [ 592.883307] ? tun_chr_read_iter+0x460/0x460 [ 592.887882] do_iter_readv_writev+0x822/0xab0 [ 592.892496] ? tun_chr_read_iter+0x460/0x460 [ 592.896980] do_iter_write+0x302/0xd80 [ 592.900946] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 592.906447] ? import_iovec+0x40e/0x660 [ 592.910483] do_writev+0x397/0x840 [ 592.914101] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 592.919637] ? prepare_exit_to_usermode+0x114/0x420 [ 592.924719] ? syscall_return_slowpath+0x50/0x650 [ 592.926283] binder: release 24808:24815 transaction 56 out, still active [ 592.929621] __se_sys_writev+0x9b/0xb0 [ 592.929678] __x64_sys_writev+0x4a/0x70 [ 592.936569] binder: undelivered TRANSACTION_COMPLETE [ 592.940428] do_syscall_64+0xbc/0xf0 [ 592.953225] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 592.958455] RIP: 0033:0x457871 [ 592.961694] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b5 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 592.980630] RSP: 002b:00007fe7eccf0ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 592.988385] RAX: ffffffffffffffda RBX: 000000000000006a RCX: 0000000000457871 [ 592.995693] RDX: 0000000000000001 RSI: 00007fe7eccf0bf0 RDI: 00000000000000f0 04:40:53 executing program 2 (fault-call:1 fault-nth:5): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 593.002998] RBP: 00000000200000c0 R08: 00000000000000f0 R09: 0000000000000000 [ 593.010304] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fe7eccf16d4 [ 593.017617] R13: 00000000004c5d34 R14: 00000000004daa40 R15: 0000000000000004 04:40:53 executing program 0 (fault-call:6 fault-nth:1): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:53 executing program 1: pipe(&(0x7f0000000000)) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x18e, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 04:40:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) rt_sigreturn() syz_emit_ethernet(0x3, &(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES16=0x0, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYPTR, @ANYRESOCT=r0, @ANYBLOB="7058c26c687194b1fea359008c92cb0b8b74d213f9c38f2ba43f4f40816f2c475471cfc342884aa9b0b3ec3dc2c33752a2b23fd81a2a9c7998c0706a785859218a07a12f41b18fe4e96a189926c82ec3aa2c27766adc64398e78c6e39cd3bdbee2b22403ebadbf0c189d9ce6affd428fcae77d8573ee479f716837063114e5", @ANYPTR64, @ANYRESOCT=r0], @ANYRES64=r0, @ANYBLOB="99e6688845d9ca590782a34f08a7950b49dc25e072f506fbf86e60396a31ed6a314c93d72c6a124ce185acbd1ceb1a1e11d1e150d6f6bc72ba48a19fbd22509c23a7c6fe6f128a6a126124efdf9bbe36fddfca79980effbe43c6d275ae9d7057a2f57a6847d9ad4e01e34769a2fdd2210e37661edbc6300cb15e46c2050d77b3118aed9d94fdb655954dacb88f86934451b9c3178ec4326a18f40759e2faac9c0bcf8b452a340958860064ba58c3b80f983ee88eb4eddeffd9fe12ef6fe51e2553605ed74233f82a34ec9151214d44b1bd81f5e433ead165d77c0fd8df1d8d1f1f95cc835db0d49a7511412df0", @ANYRESDEC=r0], @ANYRESHEX=r0, @ANYRESDEC=r0], 0x0) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) [ 593.240983] binder: 24828:24830 Release 1 refcount change on invalid ref 3 ret -22 [ 593.249148] binder: 24828:24830 unknown command 0 [ 593.254180] binder: 24828:24830 ioctl c0306201 20000040 returned -22 04:40:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa5c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000001c0)={0x80000001, 0x1, 'client0\x00', 0x2, "737defc731745a39", "82c5651bddf34f068bfd9c5d26fc46fdb439392bdc8bb85b8bc015bf432bf1ab", 0x2, 0x1}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) getcwd(&(0x7f0000000000)=""/187, 0xbb) [ 593.300522] binder: 24828:24834 Release 1 refcount change on invalid ref 3 ret -22 [ 593.308658] binder: 24828:24834 unknown command 0 [ 593.313739] binder: 24828:24834 ioctl c0306201 20000040 returned -22 04:40:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={r2, 0x9}, &(0x7f00000001c0)=0x8) pipe2(&(0x7f0000000240), 0x80000) 04:40:53 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x80, 0x7fffffff}]}, 0xc, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:53 executing program 5 (fault-call:1 fault-nth:4): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="202e4040fe0000000000000000f3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r1 = socket$inet_sctp(0x2, 0x800000000000005, 0x84) r2 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000004b00)=""/82) recvmmsg(r1, &(0x7f0000004900)=[{{&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/102, 0x66}], 0x2}, 0x2}, {{&(0x7f0000000380), 0x80, &(0x7f0000002680)=[{&(0x7f0000001480)=""/251, 0xfb}, {&(0x7f0000001580)=""/122, 0x7a}, {&(0x7f0000001600)=""/114, 0x72}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x4, &(0x7f00000026c0)=""/10, 0xa}, 0x708c}, {{&(0x7f0000002700)=@generic, 0x80, &(0x7f0000003c00)=[{&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/78, 0x4e}, {&(0x7f0000003800)=""/135, 0x87}, {&(0x7f00000038c0)=""/208, 0xd0}, {&(0x7f00000039c0)=""/68, 0x44}, {&(0x7f0000003a40)=""/196, 0xc4}, {&(0x7f0000003b40)=""/134, 0x86}], 0x7}}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000003c80)=""/233, 0xe9}, {&(0x7f0000003d80)=""/34, 0x22}, {&(0x7f0000003dc0)}, {&(0x7f0000003e00)=""/207, 0xcf}, {&(0x7f0000003f00)=""/20, 0x14}], 0x5, &(0x7f0000003fc0)=""/213, 0xd5}, 0x3}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f00000040c0)=""/116, 0x74}, {&(0x7f0000004140)=""/238, 0xee}], 0x2}, 0x6}, {{&(0x7f0000004280)=@ipx, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004300)=""/162, 0xa2}], 0x1, &(0x7f0000004400)=""/250, 0xfa}, 0x7}, {{&(0x7f0000004500)=@can, 0x80, &(0x7f0000004880)=[{&(0x7f0000004580)=""/110, 0x6e}, {&(0x7f0000004600)=""/68, 0x44}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/23, 0x17}, {&(0x7f0000004700)=""/42, 0x2a}, {&(0x7f0000004740)=""/205, 0xcd}, {&(0x7f0000004840)=""/35, 0x23}], 0x7}, 0x5}], 0x7, 0x2, &(0x7f0000004ac0)={0x0, 0x1c9c380}) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000080)='/dev/binder#\x00', 0xd, 0x1) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000004b80)={0x10, 0x30, 0xfa00, {&(0x7f0000004680)={0xffffffffffffffff}, 0x0, {0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000004bc0)={0x11, 0x10, 0xfa00, {&(0x7f0000003dc0), r4}}, 0x18) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000140)={0x1549ce5c, 0x0, 0x10001, 0x7f}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000180)={0x3ff, r5}) r6 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x401, 0x4000) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10, r6, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000004c80)={0x0, 0x0, 0x3, [], &(0x7f0000004c40)={0xbb09ff, 0x1, [], @p_u16=&(0x7f0000004c00)=0x7}}) [ 593.544270] FAULT_INJECTION: forcing a failure. [ 593.544270] name failslab, interval 1, probability 0, space 0, times 0 [ 593.555843] CPU: 1 PID: 24848 Comm: syz-executor5 Not tainted 4.20.0-rc7+ #15 [ 593.563167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.572585] Call Trace: [ 593.575240] dump_stack+0x173/0x1d0 [ 593.578927] ? __should_failslab+0x278/0x2a0 [ 593.582990] binder: 24844:24847 unknown command 1077947936 [ 593.583398] should_fail+0xa19/0xb20 [ 593.589076] binder: 24844:24847 ioctl c0306201 20000440 returned -22 [ 593.592766] __should_failslab+0x278/0x2a0 [ 593.592811] should_failslab+0x29/0x70 [ 593.592854] kmem_cache_alloc+0xf9/0xb90 [ 593.592889] ? skb_clone+0x300/0x580 [ 593.592930] ? ip_vs_out+0x1c2/0x44b0 [ 593.592973] skb_clone+0x300/0x580 [ 593.622886] raw_local_deliver+0x106f/0x17b0 [ 593.627388] ip_local_deliver_finish+0x25e/0xea0 [ 593.632239] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 593.637666] ip_local_deliver+0x44b/0x510 [ 593.641890] ? ip_local_deliver+0x510/0x510 [ 593.644054] QAT: Invalid ioctl [ 593.646258] ? ip_call_ra_chain+0x7a0/0x7a0 [ 593.646289] ip_rcv+0x6b6/0x740 [ 593.646337] ? ip_rcv_core+0x11f0/0x11f0 [ 593.646381] netif_receive_skb_internal+0x5d0/0x9a0 [ 593.646418] ? ip_local_deliver_finish+0xea0/0xea0 [ 593.646460] netif_receive_skb+0x246/0x270 [ 593.667763] binder: 24844:24847 unknown command 1077947936 [ 593.671336] tun_get_user+0x6d1d/0x71a0 [ 593.671421] tun_chr_write_iter+0x1f2/0x360 [ 593.671471] ? tun_chr_read_iter+0x460/0x460 [ 593.671510] do_iter_readv_writev+0x822/0xab0 [ 593.671602] ? tun_chr_read_iter+0x460/0x460 [ 593.676008] binder: 24844:24847 ioctl c0306201 20000440 returned -22 [ 593.681490] do_iter_write+0x302/0xd80 [ 593.713580] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 593.719091] ? import_iovec+0x40e/0x660 [ 593.723126] do_writev+0x397/0x840 [ 593.726737] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 593.732235] ? prepare_exit_to_usermode+0x114/0x420 [ 593.737355] ? syscall_return_slowpath+0x50/0x650 [ 593.742250] __se_sys_writev+0x9b/0xb0 [ 593.746214] __x64_sys_writev+0x4a/0x70 [ 593.750231] do_syscall_64+0xbc/0xf0 [ 593.753990] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 593.759214] RIP: 0033:0x457871 [ 593.762453] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b5 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 593.781428] RSP: 002b:00007fe7eccf0ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 04:40:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) [ 593.789199] RAX: ffffffffffffffda RBX: 000000000000006a RCX: 0000000000457871 [ 593.796506] RDX: 0000000000000001 RSI: 00007fe7eccf0bf0 RDI: 00000000000000f0 [ 593.803820] RBP: 00000000200000c0 R08: 00000000000000f0 R09: 0000000000000000 [ 593.811138] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fe7eccf16d4 [ 593.818444] R13: 00000000004c5d34 R14: 00000000004daa40 R15: 0000000000000004 04:40:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000040)="1f0000000906ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0xa0200) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f00000000c0)={0x1, 0x0, {0x1f, 0x100000000, 0x80, 0x5}}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000000)=@generic={0x0, 0x2b, 0x8001}) [ 593.939950] QAT: Invalid ioctl 04:40:54 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:54 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x76, "2aafc9fc2dd3311f0a952621b53319ce4ffe057c847e576e5166258a6dfb9cc47b7b73c0c5b2d7b88de01d20b2d5bce8c5d7fd20ee8887012d5fe210e98e610a8ea1b5396d9767db3c1d253d71b312e64d788ed1eeb579a5d32364b3357f30f96b4b56e8c2f45dae25cd0b3a7efe7f63667a80c2afec"}, &(0x7f0000000100)=0x7e) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0x8) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 594.076152] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 594.083852] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 04:40:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000040)={0x5, 0x1000, 0x2, 0x10000, 0x10, 0x800}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) [ 594.121867] binder: release 24864:24865 transaction 57 out, still active [ 594.128808] binder: undelivered TRANSACTION_COMPLETE [ 594.134147] binder: release 24864:24871 transaction 58 out, still active [ 594.141023] binder: undelivered TRANSACTION_COMPLETE 04:40:54 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x101, 0x3, 0x8}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x12000)=nil, 0x2000}) 04:40:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000080)=""/1) 04:40:54 executing program 5 (fault-call:1 fault-nth:5): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 594.254639] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 594.262185] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 594.334763] Unknown ioctl -1072409599 04:40:54 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x881, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8020000", @ANYRES16=r1, @ANYBLOB="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"], 0x2b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) chroot(&(0x7f0000000680)='./file0\x00') getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0x8, 0x9d90, 0x4, 0x6b}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r2, 0x4}, 0x8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) accept$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000600)={0x0, 0xd3e}) [ 594.408393] QAT: Invalid ioctl [ 594.423113] Unknown ioctl -1071076861 [ 594.445257] QAT: Invalid ioctl [ 594.446703] Unknown ioctl -1072409599 [ 594.466862] binder: release 24881:24882 transaction 59 out, still active [ 594.473905] binder: undelivered TRANSACTION_COMPLETE [ 594.498335] Unknown ioctl -1071076861 04:40:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0xffffffffffffff40) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 594.514444] binder: release 24881:24886 transaction 60 out, still active [ 594.521356] binder: undelivered TRANSACTION_COMPLETE 04:40:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000040)={0x3, r0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:40:54 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 04:40:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x111000, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0xffffffff, 0x886, 0xffffffff, 0x3, 0x9, 0x3, 0xffffffffffff74c4, 0x8ec, 0x8, 0xffffffff, 0x0, 0xff, 0xfff, 0x0, 0x9b], 0x107001, 0x200}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) write$binfmt_misc(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x1004) 04:40:54 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40000, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000009, 0x10, r0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045b7c55c0000000000019078ac8d6ee88166295cca04907800000000400000000000000000000000ac1414aaac141448082c000000000100000000943f00e000000200000000e000000100000000000000007f00000100000000000000001c"], 0x0) [ 594.703370] binder: release 24901:24902 transaction 61 out, still active [ 594.710369] binder: undelivered TRANSACTION_COMPLETE [ 594.794449] binder: release 24901:24903 transaction 62 out, still active [ 594.801387] binder: undelivered TRANSACTION_COMPLETE 04:40:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000080)=0x1ff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:40:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:40:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0xe) r1 = accept4(r0, &(0x7f0000000100)=@tipc, &(0x7f0000000000)=0x80, 0x800) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f00000002c0)) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000240)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r3, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1000000000000163, 0x0, 0xffffffffffffff8b}], 0x1, 0x0) readv(r3, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:55 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac140df27fe9e82d4244856a569df253ff1014aaac141448082c008e4200000000000000e000000200000000e000000100000000bd0000007f0000010000000000000000a8a4767a183e1f8e727665d634996661e3a17a8930fac30bacbd1a1c7ea78718e01748096019a7757f8fc6a5f68a2e48131e87a04554cdb00d9e09edbdd3c1a6d602617b35a340870a60c6b7f7fbca12115aa9734498c2fbef554aa555163c3f62486002d5f70532e26db98f5d76bc7d2a8fdb464f3c31d9e5f7b4dcc4274a1e164fe79464cb4c94da5e35c62c18b98d3fe21c87fb500f1c7d0967c8854cc7f1b7a334410fc73b786742b7bb8505080000007de228f89e51941a1a43876975f559cb9819ecde3e7e745e2ab8b54463b3334265c4b35256a5f122c5e218c494b777b5c89610377b4b2db8cde2f78250526748e33451a27f95a24e9805998c682b465d6f5b76792a6b601d79cfeb6340bd131d71d9dc6c"], 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x1, 0x80) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000200)=""/110) [ 595.068703] binder: release 24922:24923 transaction 63 out, still active [ 595.075796] binder: undelivered TRANSACTION_COMPLETE 04:40:55 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="c217aaaaaaaaffffffffff0000000000019078ac1414bbac1414110504907800000000400000007dd9d7f4ad72390a65aa9be9299900000000000120000000142aac141448082c00000000000000000000e0000002000000e7df00000100000000000000007f00000100000000000000004335b2b4e6214adb26b867e97ce8ef3fe4e58bc5a000000000000000"], 0x0) 04:40:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414da001414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000bc244ecbcaba259bb419ba3d31e8ee2953eb68269d86205eae69b172a83a6763c6107fa027ab42f09a53d70a"], 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e21, @multicast1}, {0x6, @random="448004e40e22"}, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 04:40:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="106308400800000000000000"], 0x0, 0x0, 0x0}) 04:40:55 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @broadcast, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xb, @remote, @multicast2, @link_local, @remote}}}}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)={0x7, 0x0, [{0xafb, 0x0, 0x1}, {0x21e, 0x0, 0x4}, {0x0, 0x0, 0x800}, {0x94f78b79384cc4f1, 0x0, 0x80000000}, {0x9ee, 0x0, 0x9}, {0x39e, 0x0, 0x5}, {0xb7e}]}) 04:40:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaff080000000000000000005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000aaac141448082c00000000000000000000e000000200000000e00000010000000000000001f0ffff010000000000000000000000da44eafe8a2491c7babb18f4b6ca71f2e02e24c7ae3de0670f4f5195ccd676a0ee0594a83e07740f946b4c9f49c80ec956a96b6d176693a05bc2f907733896c6592d0f74d4247aa8bdee248398527b089afd6751e4ae7749924ae50400c10a2efdd9f2d9c54ab7756bd2"], 0x0) r1 = dup3(r0, r0, 0x80000) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x34889cd9, 0x4) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0xc) 04:40:55 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xa, &(0x7f0000001300)=ANY=[@ANYBLOB="81", @ANYRES32=0x0, @ANYPTR=&(0x7f00000010c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="6169c232923dbb646d3d41d076a1a2480ae22ff0d22f8a0893582afe420f1374b93867f2a55082026463458196b95389c1eefbcdbff0a830e0c703229a0924200e559df8d3f29e1bcf051361e378f8b51df6f7dfc7c18670ecd0abe665fc387d4082091a0c3f7c471ca91016d92a27276add583c0a5ac5646f71dbdf8bf25f36c4a2c0ec3fe71660ddbf280f2fa9736178b7e429f2fe4503a7dadea6258976777db21ac8dc923849a251ba39690ca231b869a250f8ed66ea6d63c4428cf4e73f5d1bc51b7d5c1e06588147c52ec69037edc023de4e36d6e6261e5813274a6ef2aec0b9b8", @ANYRES64=0x0], @ANYRESDEC=r0, @ANYPTR, @ANYPTR=&(0x7f0000001200)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], @ANYRESOCT=r0, @ANYBLOB="7fd8d934ceadd46148d9167c1b504966ad7b4c482be3093c06985978e72e57d86b6e198f962321777ea92633c77d69f932bfc0a8c9b0f8b713606baebdfb631bbe343db709ef4c91b96e587413f7ff8f88ec355886e5736c6919d44dbb74360e6ece2e3667bd8bc04d4300262de339e3259ffc1e0d6f694ea34c1b151e13ccfcae32370043d54a10507ef1a9bb695efdf09b1185b6ace5c169bcf849527f9ab7638e28f9bfd2f3dddec1a972039613fa7f1c2711c37fe7e8aa0e1c83e323c1dadd576b8e41", @ANYRES32, @ANYPTR64], @ANYPTR, @ANYBLOB="77ed9c1849116f026c186c613da78cae6496e3ef7ed91bde5399a1c57b42fd43516e1716e59915658b027d4658830f10300a94c195e7f4aea8f4abc22fccfc2a823a5fe7edd5d9561a4ae1aa2704c3bcb1cc8ca91e3e43686da4120ca6987ba9ca6cfc2aa956c3ca395cfbb67a02b299aabab95e05aa4ad724c02200b66c7b8b37115d81442e986dd9ca8969191132dc60f94b1ec895414ae1a9abe94aef5ebc40f19ebf0066f2c51e18774242364058f21b8d91a26f8f71cd", @ANYRES16=r0, @ANYRES16=r0], 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000000c0)="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", 0x1000) r1 = semget(0x3, 0x1, 0x125) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000001400)=""/91) 04:40:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x90002, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000000c0)={0x6, "93da08151e908f5564d64deb5e354c1748865fba9a29f5a13ba2bbbb62ae62f0", 0x3, 0x200, 0x8001, 0x400, 0x4, 0x4, 0x3, 0x2}) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 595.478430] binder: binder_mmap: 24940 20ffc000-21000000 bad vm_flags failed -1 04:40:55 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x21, 0xff, 0x3, "aed0afceff8c76d89e76d99e161416f239167333003f3a4f8500e8e0190298bb53"}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200)={0xed03, 0xffffffffffffffff, 0x80, 0x8, 0x100000001}, 0xffffffffffffff46) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0x4, 0x7327d1a4, 0x5, 0x0, 0x0, 0x100000001, 0x10, 0x5, 0x101, 0xf838, 0x80000001, 0x2b1, 0x4, 0x5, 0x8, 0x7, 0x3, 0x6b, 0x5, 0x6, 0x10000, 0x8001, 0x0, 0x9, 0x3, 0x3, 0x7ff, 0x7ff, 0x0, 0x7fffffff, 0xf57, 0x2, 0x3, 0x0, 0x4, 0xf795, 0x0, 0x4af, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x400, 0x5, 0x400, 0x5, 0x96f, 0x20, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffff9c, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x2, 0x6}, @mss={0x2, 0x200}, @timestamp, @mss={0x2, 0x200}, @timestamp, @sack_perm, @sack_perm, @mss={0x2, 0x200}], 0x8) syz_emit_ethernet(0x0, &(0x7f0000000200)=ANY=[], 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) [ 595.582272] binder: 24940:24949 BC_DEAD_BINDER_DONE 0000000000000008 not found 04:40:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3d67, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400204) splice(r0, &(0x7f0000000080), r0, &(0x7f0000000180), 0x3ff, 0x1) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000240)=0x7, 0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000280)={0x1, 0x40}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') socketpair$unix(0x1, 0x6f10f6c1fe5da665, 0x0, &(0x7f00000001c0)) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:40:55 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x202000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000140)=""/78) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:55 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 595.666913] binder: 24940:24959 BC_DEAD_BINDER_DONE 0000000000000008 not found [ 595.666997] binder: binder_mmap: 24940 20ffc000-21000000 bad vm_flags failed -1 [ 595.773400] Unknown ioctl 21382 [ 595.837542] Unknown ioctl 21382 04:40:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) sync_file_range(r0, 0xfffffffffffffff8, 0x14ba, 0x6) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:55 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c000000008001907800000000ac1414110504907800bfde000073b28de83d95b27bb5f600000000000094ac0000010000ac1415aaac141448082c00000000000000000000e000000200000000e0000001000000f0ffffffff7e003ca3000000000000825ac8da6f8054afca161b010000009d259387de796720719568286b66732af1be709b9ff90c128606c709c262fc0000ac362464629b12f0e7c9d8588b816849f28b739bd900738f9add2c0150bb5aebd8a125763a50beed768b"], 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x20, 0x100) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80000) 04:40:56 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x6) 04:40:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x80400) getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000040)=""/56, &(0x7f0000000080)=0x38) fanotify_init(0x4, 0x1000) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x2, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0x1, 0x10001, 0x7fffffff, 0x72, 0x2, {0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0x3}}, 0xfff, 0x7, 0x81, 0x7, 0xffff}}, &(0x7f0000000180)=0xb0) accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x1c, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @empty}}, 0x5, 0x8, 0x8000, 0x200, 0x2}, &(0x7f0000000280)=0x98) 04:40:56 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff78ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c000000006c46dc427bca5926c1a535ecb1000000000000e000000200000000e000000100000000000000007f000001000000000000000000000000000000000000000000000080b320f7965ff3aed1380da30225574f041d4f4c62a6f82bff2766120075b84ddf46b82cc2da68f014804b6db25687dc77d944ce2674b1618a3c94ed09959e"], 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x2000, 0x0) r1 = getpgid(0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x3f, &(0x7f00000001c0)=""/234) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={r2}, 0x8) fcntl$lock(r0, 0x7, &(0x7f00000002c0)={0x0, 0x4, 0x9, 0x0, r1}) 04:40:56 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0x2, 0x8, &(0x7f0000000000)=""/120, &(0x7f0000000080)=0xfcdc) 04:40:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000340)={{0x2, 0x4e24, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x2, {0x2, 0x4e24, @multicast2}, 'team_slave_1\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x30000000000000, 0x4, 0x1, 0x7, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={r3, 0xb0, &(0x7f0000000240)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x2, @remote, 0x38}, @in6={0xa, 0x4e22, 0x1, @loopback, 0x80000000}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x9, @loopback}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e22, 0x5, @remote, 0x2}]}, &(0x7f00000001c0)=0x10) 04:40:56 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x22, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x7b, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4) write$P9_RREMOVE(r0, &(0x7f0000000240)={0xfffffee8, 0x7b, 0x400001}, 0x7) syz_emit_ethernet(0x6a, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000440)=0x2, 0x4) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000480)="cb3f599fdc295a685c5da0b1d67fde04fd34b4c5d085e29f72b6af8d182376a48df3c9ad7adf71c11fac39d4eb8d5aa37ac27b2e4857e6572b3e51dd917930040998e2dc0e08284cc5321decc3b3812a8e5b85392e05a4cd4bd6e0cfbb4dc10a1b4ac7e993d610fe341aa83ffb220cb35ef6034e23c506c1e702a6f0c94c6764be9ed1a7890972d4690a110de64f69f5bd83bcf0bbdb85a93101c1baee7b52b09f37d7dd47720c585e1d7f8af3d3118d2ba47998fe020725e7fd2f353322bbb9b725bf5acb7e7880dd68cea0c9ef1fd9370b7a10c20be09f86a50fd74453bd379918fe0e5115e4a2090997fc05f14d7b36") ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000580)=""/77) fremovexattr(r0, &(0x7f0000000100)=@known='trusted.overlay.origin\x00') arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) 04:40:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@ng={0x4, 0x7, "e0f98a0b3ef3357a26cdae2b0078cd0e"}, 0x12, 0x3) 04:40:56 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101040) r1 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffff9c, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)=[@increfs_done={0x40106308, r1, 0x3}], 0x68, 0x0, &(0x7f0000000080)="e2c46bff96f410c04321fb0d0d4f3d7383eae1db0eb69520ceb1af3599d6f8e5c321030ca1077d5d4664992772dad5f31fd0ab20bc287c3a657f3c7876ccf600c27a499bdd70ceac08398effa3c54394de85a29302f6204db2033a5180f881a6ca9864e57f55509c"}) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 04:40:56 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, r0) syz_emit_ethernet(0xffc6, &(0x7f0000000000)={@dev={[], 0xf}, @remote, [{[], {0x8100, 0xff5, 0x1, 0x2}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xfff, 0x2101) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000100)={0xfff, 0x1000000000}) 04:40:56 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045ee005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) 04:40:56 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xd6f) [ 596.595390] binder_alloc: 24054: binder_alloc_buf size 34359738368 failed, no address space [ 596.604211] binder_alloc: allocated: 200 (num: 13 largest: 32), free: 12088 (num: 1 largest: 12088) [ 596.613579] binder: 25012:25013 transaction failed 29201/-28, size 34359738368-0 line 2973 04:40:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x1) [ 596.721064] Unknown ioctl 9218 04:40:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x5, 0xc00000, 0x0, 0x81, 0x0, 0x100000001, 0x10100, 0x7, 0x8, 0x6ad2, 0xffff, 0x8000, 0x20400000000000, 0x3f, 0x0, 0xc68f, 0x6, 0x5, 0x7, 0xfffffffffffffff2, 0x3, 0xfffffffffffffffa, 0x7fffffff, 0x10001, 0x1, 0x8, 0x2, 0x3, 0x6, 0x3, 0x2, 0x6, 0xf7, 0x8000, 0x0, 0xffff, 0x0, 0x8, 0x1, @perf_config_ext={0x0, 0xffff}, 0x1, 0x7f, 0x4, 0x3, 0x7f, 0x3, 0x1}, 0xffffffffffffffff, 0x5, 0xffffffffffffff9c, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x10080, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x3ff, 0x2, {0x0, 0x0, 0x100000001, 0x2, 0x80000001}}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) [ 596.766525] binder_alloc: 24054: binder_alloc_buf size 34359738368 failed, no address space [ 596.775286] binder_alloc: allocated: 200 (num: 13 largest: 32), free: 12088 (num: 1 largest: 12088) [ 596.784864] binder: 25012:25026 transaction failed 29201/-28, size 34359738368-0 line 2973 04:40:56 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r1 = dup(r0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'dummy0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004010}, 0x8000) 04:40:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ioprio_set$pid(0x1, r1, 0x27) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f00002c30374d113781e9eb"], 0x0) r2 = getpid() migrate_pages(r2, 0xbd, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x7) [ 596.974350] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.979909] binder: undelivered TRANSACTION_ERROR: 29201 04:40:57 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac00000200000000e000000100000000090000007f0000010000000000000000000000000000000000000000000000000380f33143e266130a8c0a9aa41fe19dc5e1de5a8b5c9d84b20a05d92e3c0b5a342207d8cb1cb0b7e2ff9b150757ef0c351479840612c21eb4eb75a8ac0f061f0c3c38"], 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0)) 04:40:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x2d) accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) exit(0x460) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000240)={0x2, {{0xa, 0x4e22, 0x9, @local, 0x6}}}, 0x88) 04:40:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x4000, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0x0, 0x4}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac141411050490780099de146f58ab1e2800000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000263fac1451644c857ff961a8a2392e7d18aa"], 0x0) 04:40:57 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffffffb084645ac141411050490780000000040000000000000000400000069b6a242ac141448082c00000000000000000002e000000200000000e000000100000000000000007f00000100000000000000000000000000000000000000000000005a526747842e1d988bad328e5bc3286209e63d7d"], 0x0) 04:40:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="4c91db08000000000000000000000000000000000000000000000000000000edff0000001c000000000000000000000000000000000000000000edf5000000000000000043063ddb1d0da0647f1b5a10c680be22c283"], 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000080)='-vboxnet1\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)=r2, 0x4) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000180)=0x6) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r2, 0x4) 04:40:57 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000040)={0x4}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800100000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000400000000e00000010000000000000002000000000000000000000000"], 0x0) 04:40:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, 0x2, 0x3e8, 0x1}, 0xa) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:40:57 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000180)={@local, @multicast2, @empty}, 0xc) setsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000000140)="0660d464ec78a5c827992e3cb74ba35032853cb5a8903cb63d7839980b9870764a96186f0caca764191f59a2ca8b", 0x2e) [ 597.444753] binder: 25064:25067 unknown command 148607308 [ 597.450518] binder: 25064:25067 ioctl c0306201 20000440 returned -22 04:40:57 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xdd7, 0x4000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x46e5f9e2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0x40, 0x5}, 0x8) sysfs$1(0x1, &(0x7f0000000000)='{&selfppp1{-*\x00') ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000200)={0x1, r0, 0x1}) r2 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x3, 0xffffffff, 0x3, 0x10001}) syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) 04:40:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000540)='fou\x00') ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'syzkaller1\x00'}}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0x200, 0xd21a, 0x9}) [ 597.569169] binder: 25064:25067 unknown command 148607308 [ 597.575001] binder: 25064:25067 ioctl c0306201 20000440 returned -22 04:40:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@v1={0x2, "eb12257438"}, 0x6, 0x2) 04:40:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x10400) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x2}}, 0x18) 04:40:57 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, &(0x7f0000000040)=ANY=[], 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r2, 0x30, 0x0, @in={0x2, 0x4e23, @empty}}}, 0xa0) [ 597.949519] binder: release 25093:25095 transaction 66 out, still active [ 597.956660] binder: undelivered TRANSACTION_COMPLETE [ 598.000176] binder: release 25093:25095 transaction 67 out, still active [ 598.007383] binder: undelivered TRANSACTION_COMPLETE 04:40:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000340)=0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={r2, @in={{0x2, 0x4e24, @loopback}}, 0x8, 0x8, 0x80000000, 0x9, 0x3}, &(0x7f0000000100)=0x98) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000140)) 04:40:58 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200000, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0xffff, 0x9, [], &(0x7f0000000040)=0x8dd}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500105c000000000001020000001400000000000000010000ac1414aaac149449032c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f00000016c0)={0x7, &(0x7f0000000140)=""/106, &(0x7f0000001600)=[{0x7, 0xc8, 0x1, &(0x7f00000001c0)=""/200}, {0x4, 0x1c, 0x312, &(0x7f00000002c0)=""/28}, {0x1, 0xa5, 0x0, &(0x7f0000000300)=""/165}, {0x7, 0x46, 0xff, &(0x7f00000003c0)=""/70}, {0x2, 0xb0, 0x80000001, &(0x7f0000000440)=""/176}, {0x63de, 0xe6, 0x31b49c51, &(0x7f0000000500)=""/230}, {0x8, 0x1000, 0x8, &(0x7f0000000600)=""/4096}]}) 04:40:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x0, &(0x7f0000000000)="e1978c47611ce8ae3ccb2ffc940c4ac2be8cbcff28c48a7e94063041ebb1c75d78220c3f1c2f799dd0a532167614a5da47466464986883e12513819c427272106b9fb1d5212cf0befe92a2144841b2850818d99627fdcb82e77cb5b0ae1b8846e2639f319a0385420880e39d90b4c8dd6ca1f93d73c5d3a2a79208bc8aace6f641ad306d4a2feee3bc506b54a3bf02b2ee5a8afdf7fb619f4f96e342cb24e9b4bb7d85da59344d89c279165fbc54112d5c46a8d6dbbb0b69d5") syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:58 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be61721a8e3d0059000000"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) getpgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x200000111800) setsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000040)={@broadcast, @loopback, @broadcast}, 0xfffffffffffffdc9) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) [ 598.210797] binder: 25111:25113 transaction failed 29189/-22, size 0-0 line 2834 04:40:58 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x400000) preadv(r0, &(0x7f00000001c0), 0x208, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x260140, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x70) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000040)=r2) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:40:58 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$getenv(0x4201, r0, 0x8, &(0x7f0000000040)) 04:40:58 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) write$P9_RSTAT(r0, &(0x7f0000000140)={0x6a, 0x7d, 0x1, {0x0, 0x63, 0x8000000000, 0xc2, {0x4, 0x2, 0x3}, 0x40000000, 0x2e92, 0x7, 0x0, 0xc, '/dev/radio#\x00', 0xc, '/dev/radio#\x00', 0xc, '/dev/radio#\x00', 0xc, '/dev/radio#\x00'}}, 0x6a) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) fdatasync(r0) r2 = request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000240)='userkeyringposix_acl_access!lo)\'systemself\x00', 0xfffffffffffffffa) keyctl$get_persistent(0x16, r1, r2) 04:40:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80, 0x10000) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:40:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x10001, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000280)=r2) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x10000, 0x9}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000240)={0x2d, 0x3, 0x0, {0x5, 0xc, 0x0, '/dev/rfkill\x00'}}, 0x2d) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x8440, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 598.659935] binder: release 25143:25145 transaction 69 out, still active [ 598.666979] binder: undelivered TRANSACTION_COMPLETE 04:40:58 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffe796b22dfff8a7cf54005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000080000000e000000200000000e0000001000100000000"], 0x0) 04:40:58 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x303041, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x6, 0x4) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 598.701974] binder: release 25143:25145 transaction 70 out, still active [ 598.708967] binder: undelivered TRANSACTION_COMPLETE 04:40:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r0, 0x80000) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000080)={0x100000001, 0x6, 0x8, {0x77359400}, 0x5, 0xe63c}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000da5af4060cf11d7c420509c3918ef7f0ba68f037dbb62c6a8f9fb21f176cd71a11dd24458a3a684cf039fdf0d283be4379639e69790099a71dca4ccb636c6de2d053e3e5120945c1109cefa264764afd76fdd3a4da36bf6031ab600f6a53cb8082886a5894f59064d983b8293075d197802d2dd29448af47bec0de6d68e1b2a128d4d966865fc8dfa5c7ba31b246e688df658d6c618ada88eeb14ff7c2ff656d68"], 0x0, 0x0, 0x0}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000000002000, 0x0) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x1) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000200)=@get={0x1, &(0x7f0000000100)=""/166, 0x2}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f00000001c0)) 04:40:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000980)=0x0) process_vm_writev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000280)=""/111, 0x6f}], 0x5, &(0x7f0000000900)=[{&(0x7f0000000540)=""/48, 0x30}, {&(0x7f0000000580)=""/169, 0xa9}, {&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/57, 0x39}, {&(0x7f0000000740)=""/58, 0x3a}, {&(0x7f0000000800)=""/250, 0xfa}], 0x6, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x1) readv(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:59 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x6, 0xb315, 0x5, {0x0, 0x989680}, 0x9, 0x5}) 04:40:59 executing program 2: r0 = open(&(0x7f00000025c0)='./file0\x00', 0x18042, 0x125) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000002600)={'filter\x00'}, &(0x7f0000002680)=0x78) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 598.982928] binder: release 25159:25163 transaction 71 out, still active [ 598.989913] binder: undelivered TRANSACTION_COMPLETE [ 599.041747] binder: release 25159:25163 transaction 72 out, still active [ 599.048645] binder: undelivered TRANSACTION_COMPLETE 04:40:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:40:59 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xc01d, 0x7b619a4871ce0372) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, r1, 0x401, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffffffffbff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x4041) write$uinput_user_dev(r0, &(0x7f00000002c0)={'syz0\x00', {0x1, 0x2c, 0x8, 0x8}, 0x22, [0x7fffffff, 0x1000, 0x8, 0x401, 0xfffffffffffffffc, 0x7, 0x6, 0x100, 0x8, 0x1, 0x100000000, 0x11c, 0x59d, 0x0, 0x1, 0x7, 0x754c, 0xe49f, 0x5, 0x101, 0x8, 0x0, 0x400, 0x1, 0x6, 0x7ff, 0x76, 0x9, 0x3ff, 0xec6, 0x1, 0x0, 0xff, 0xd3f, 0x0, 0x6, 0x5, 0x8001, 0x200, 0xff, 0x0, 0x1, 0x83eb, 0x7e, 0x8, 0x18000000000, 0x4, 0x3f, 0x1e73, 0x9, 0x3, 0x8001, 0x40, 0x1, 0xc310, 0x3f, 0x7, 0xffffffffffffffe1, 0x10000, 0xdd, 0x4, 0x3, 0x8001, 0x1f], [0x226, 0x5a6, 0x15d3, 0x5, 0x7, 0x1, 0x1, 0x7, 0x7, 0xfffffffffffffff9, 0x2, 0x6, 0x7fffffff, 0x0, 0x3, 0x1ff, 0x5, 0x89, 0x0, 0x7, 0x2a, 0x10000, 0x10000, 0x4, 0x8, 0x1f, 0x2, 0x8, 0x100, 0x7fff, 0x8, 0x1, 0x0, 0x300000000, 0x1f, 0x2, 0x1, 0x9, 0x2, 0x8, 0x6, 0x101, 0x31, 0x1, 0x3ff, 0x9, 0x81, 0x7ff, 0xfffffffffffffffc, 0xffffffffffffffc4, 0x89c, 0x9e2, 0x4, 0xffffffff, 0x5, 0x5, 0xff, 0x3, 0x1f, 0x1, 0x1f, 0x7, 0x100000001, 0x1], [0x1ff, 0x100, 0x0, 0x4, 0xa65, 0x2, 0x8, 0x8, 0xffffffffffffff01, 0x8, 0x24, 0x1, 0x0, 0x40, 0x7fff, 0x52ce, 0x8, 0x100, 0x0, 0x0, 0x9, 0x7fffffff, 0x6, 0xc9, 0x3, 0x2, 0x34c, 0x6, 0x4, 0x8, 0x4, 0x1ff, 0x4, 0x1800, 0x9, 0x0, 0x6, 0x7, 0x5, 0x100000001, 0x1, 0xfffffffffffffff8, 0x6, 0x800, 0x3d3e, 0x4, 0x80000001, 0x1, 0x7fffffff00, 0xad, 0x0, 0x68, 0x10001, 0x0, 0x918, 0x1000, 0x101, 0xb, 0x101, 0x2, 0x8, 0x3, 0x9e], [0x4, 0x8, 0x8000, 0x6, 0xffffffff, 0x32, 0x3, 0x200, 0x3, 0xfffffffffffffffd, 0x1, 0x7, 0x80000001, 0x4, 0x9, 0xa81, 0x23c, 0x8001, 0x80000000, 0x8, 0x3ff, 0x0, 0x6b, 0x3, 0x9b36, 0x4, 0x2, 0x9, 0x1, 0x6, 0x9, 0xfffffffffffffff9, 0x1, 0x9, 0x3, 0xfffffffffffffff8, 0xd6e, 0x8a90, 0x7f, 0x2, 0x8, 0x4, 0x45f2aa16, 0x0, 0x5, 0x1, 0x7, 0xff, 0x854d, 0x6, 0x0, 0x9d, 0xffff, 0x3, 0x6, 0x2, 0x7fffffff, 0x5, 0x81, 0x9, 0x1, 0x24, 0x7, 0xfffffffffffffffa]}, 0x45c) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000280)=0xea44) 04:40:59 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/150, 0x96) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:40:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xffffffffffffff68, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, [], {@x25={0x805, {0x3, 0x6, 0xff, "23172b25d62548a75d81cf5d2595be356c31c2160c632565789b50299e9cfa2fbfbaca6523a90c01673c11ef245142307511b27003cc862116bb133b0106ba8ef0a933a9fd"}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4, 0x200, 0x1, 0x7ff, 0x0, r0, 0xd5ab}, 0x2c) r1 = msgget$private(0x0, 0x10) msgrcv(r1, &(0x7f0000000000)={0x0, ""/65}, 0x49, 0x3, 0x0) [ 599.246392] binder: 25180:25181 transaction failed 29189/-22, size 0-0 line 2834 [ 599.317116] binder: undelivered TRANSACTION_ERROR: 29189 04:40:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000e50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x81) 04:40:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) recvfrom$inet6(r1, &(0x7f00000013c0)=""/190, 0xbe, 0x0, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x10}, 0x8}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001240)={0x0, 0x9b, "17d805f4a847e58dcaa4499588e4186c136cc043c1b5852d24995315b3687c42bd5119466761ac389542ae69e9ae01afd9565737fcd0e782bf31c2e3b8786361f7a589efb6db1ef3b1717cf58e3572df471d3515dbe9ebde4b94fc897721d36f065de614eb160796ff70dd229568b651f46aa7649decc078295971c804a68243b8dde55927fd674705dabd9f3c7c7b9c24cca4e69c8e1518768e4d"}, &(0x7f0000000040)=0xa3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001300)={r3, @in6={{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffff}}, 0xfff, 0xfc, 0x1000, 0x9, 0x84}, &(0x7f0000000080)=0x98) 04:40:59 executing program 3: r0 = epoll_create(0xaa31) dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, &(0x7f0000000080)=ANY=[], 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) 04:40:59 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x3, 0x8000000000002b) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b00)="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", 0x52d}], 0x1}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) r4 = socket$caif_stream(0x25, 0x1, 0x4) sendfile(r4, r3, 0x0, 0x5) r5 = open(&(0x7f0000000080)='./file0\x00', 0x400100, 0x10) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="4ca0300807", 0x5}, {&(0x7f0000000240)="2451feea3ee202beb72fbe6b7ec929b3d59eb4b793a5fc6a2067374418f3947c11ce8784388c8799a14159488172fffbcdb4d91c476b0f0b536dafcb3ab216e742284c5107b9de06c8d4425c420348f640ee91071bc3c6ec6dc83c4c7dd46b7bcde1c9de1a60f3b4e8a3c2fd748d436c18e034bea5e8852b5fdd06b57627af274fe1051fcdac15d6fb1bcb33f5a5569bbed4f2592a641af963983018d9b25e", 0x9f}, {&(0x7f0000000800)="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", 0x1000}], 0x3, &(0x7f0000000440)=[{0xe0, 0x11b, 0xf4b, "9c3025531324a9af00615cc5810e0941bcc4e1a86b1d7eb04b86b58bafa7a9be937e2dcb8e726b350c3da2f0b6d1d1b9baeac21df7cf083230a8992bb81a608ba6a7c90c8e9ab03f67253436e78d8a2121b9cb95603e2872662fe28efacdf94855fbb18a4206d4c5507346b69c82ae2cb972f5fcdf1c402cd4bc13485dce261a0e612b9439f7a4e636554d8bc89f61b6cda869f34aadcdbd30d69ce08703b5fab7d520e104f59852a6e5bdc460e83fee989c612f01dc8fa5cebfd53567735bff7368881ef4318dce68b0b79550"}, {0xd0, 0x105, 0x1, "0e2c677516493d88b811433075df9b3ffc3891ac6d956a519838d1ad62cf2f3555c89c81f10f4dd14fb6fbd72642b29239a32a6cbbf38c62647ecbbd58f83aaabf03e2d2017f59e3d8c1e020a90873354a1032a3103e0d12017f5dc3d8c1d37fcbd95bdff709906fb3155831bc7ac43f14d2d560f64b3f7e6ecaaeca4ae860e58009d6de6e03a026e6a361ef5ffea6f5c580f3300a1833407fb759b54e06f18758fb823dc836467c13832df91f361cb8dc1f2a44f1dc244b1c25"}], 0x1b0}, 0x24004040) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000005c80)=ANY=[@ANYRES32=0x0, @ANYBLOB="5c00000073fd5df8758775137efe5849746dcb32a14b034973863e800b3024c1117e2c59f84070e656e90bd394b3a17a3b7ea9d8ccaf7a119204fa1c17117a3b13990c87c9a6d871f01b0581d0b56744794a670f6c4eb3b58f5d79bb6cabb45cf1c6956ae0069fa19f5837e86fd233bee84839346797c8780055e8cdc117fe7fdbdfa122976c0d8c0500000000000000d3dc9aafcba516a86d8b9523e0d4fddf8ba105ca"], &(0x7f0000000300)=0x64) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000003800)={r6, 0x101}, 0x8) r7 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r7, &(0x7f0000005a80)=[{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000340)="13de3b8cf99fd5dd7485a84742deb85984816327e1a28ab98e1f38e8575413852f350df4e0045c9e88c4782371063a342e81ee4e6469fe1611efa945eb058a83bc35cd98bad6702916f53f03bc7f4734b043ba2b31feac56d5eadbd00dc6"}, {&(0x7f0000001800)="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"}, {&(0x7f0000000600)="759bb9bf149a8a2f38029365f0a17e190e32f2cf461bf43d22ec1ed50ff119bf21ce0fa7b4a298c3b26777a150f1f3dabbf4fb8b53d8c83b5735860a7b84e94fcc2777f67e6b71e25b0cbe714bef3854f98820069b48baa4fc8812c03ca62af1b487049cc5bfd1246b65509c00bdfb87401044bcc95b67dc809fdba35c1392c9ba4e46047037ed9c206cf5e19e1a6b78bc5862da5cd7c8"}, {&(0x7f00000006c0)="5783c303d1ca927dca42f0f6161a441088a43b9ae6173ff1"}, {&(0x7f0000000700)="28b78f08d8d0596fca4be3beb88d0bd551d91dedcf4fd2512bff06a1787de0b8e8d791933b443d3691efd13c8958c41eb4cf7c4f980fa45f8c2e09882ca1a87f8cbb542f2664a376b19e64fbf3da4f468d97b5f3"}, {&(0x7f0000000780)="2ba6477f362f6ec4de74e01e73d9efcb6df784cc0c1d323123a4c8c94f9cd059aa2c"}], 0x0, &(0x7f0000002880)=[@op={0x0, 0x117, 0x3, 0x1}, @assoc={0x0, 0x117, 0x4, 0xf142}, @op={0x0, 0x117, 0x3, 0x1}], 0x0, 0x4000891}, {0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002900)="c6cffba3ea98c074a4823ceb032a3fe7dfb6986de4b86efb2f43790c58ff17f30c1835cdf9a84786931f774735e7d186ab5d385fd5dd81c21c00917b64b41b817f897c306f8583f68fa1db7a903a8eaced83908cdf0ed92eebb10a90db167f40c418876d2dc93607cf34674bda692cf1b2c3029528196e12b7f9d4de42470ac4712f267029c216f55b47ff71ffb67521186152945c0e5668fb73f48f3145b088252d7631c6b2c20606dc5ed9354de5a2b468de76477a957143e65686b80d8b8ad8dc5d6e567231854a0770eb35af3cf39bd1192fa8f51a556a4b57d426ed27386a3d08a730"}, {&(0x7f0000002a00)="e2e12272a5e9f4781e7a8d984070058caf2dc966e45679260eeef7a12e0aae9d27c9e416ffe1b1af14ffd18f08da393e8db2b42ebb4a45342401a2b743f3aa88bb511188b30da2afb6bf80ac6f49993a604f1472d289bf99c10293bf6951616a12e8270972e3208c64db953aa1bb75bc4a8929fc812b834950ea"}, {&(0x7f0000002a80)="1cb40420a0380f2ca0d55064307ed80a2e87328f0f45ac07a3c593ce3263dd39852d00db71471be2b37ef861929c1c51c7dd816d18a0614c5c8d3d322c79a9171f1227338df0bed1223bc7a3"}, {&(0x7f0000002b00)="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"}, {&(0x7f0000002c00)="4dfdd93e1eccd55163ffe02ad76bc80d091bdd8590a8d73d7b286134526ac83ec9fcd929e0e12c9c52d194ce36d570579cfa788b5d7fa5410faf75d8c3696cc347837d1b3607f449cec7242bea9cca0e9604b8e243431201c72918abc3e76dd12765894731d9b141b4bced3970a6d8f5defbfd8e4a2d0217d1f164e7b781b776cb3c09626ff6d58717584b061bcee5be690165686f9dd67c15b6fd264cea709d4c8424720a2ffdac4b97a96e94526d94ac0a7e988527d5d246dde62def875a0ca0bdccf3b530776cf53763a1a09be30544d3365922609eb1f34aa1e9466cc0198c166a657928045371eb7384c6fb8b1c24"}, {&(0x7f0000002d00)="765f8fef8b99d8171764c7169108f54d45145c1f235865cc6505756df56d9e124e4b6daaa2c72f5e"}, {&(0x7f0000002d40)="503f982a2232974c9cd04a5bc5128beff63ea46e2144c395ab95b36331ea889c4dd90a1218eca9db327e42dcef82da887eeb7b116dda072930117130622ac09d16b7b44a864f54cd889efae6595a939eb2b27c67282cc36710a65d8399e6b14d76266be77d7c161b9a2c561f724525603e80f3e3de12083b767fcc12201e675fe49aec6c722d8bc24b2ce2049d1888a092413c2f4515c059e0"}, {&(0x7f0000002e00)="f9d458ab1e8ac96876ec61042b641465bfef4bfd2dcaab589cdb140e6679f2ab0115b18903898ad12e45a9fd36358cfe4be9df2c951134bab50cac4e8d0fe9de97e6ac0a6dd1d8c95a1c96f658d6e7f95797eac6f730d08f6a7a6cd46e812242bdbcc0c18d513d074ba35d8f018c0b612dd582334f6b909f819dc670760cc151edfecd46373f3f125bcd14c1caa91790263e8c5c5abafc53a4"}, {&(0x7f0000002ec0)="e4ad3f0595483accd67cc5b92f3aaf588c30f19b07cef3cda731943adb2f269149b1002f39c323d167ae8ca5470a585fb9e13a2bb96e5609ea709ff645fd22572b49a12ee3dbb1e8a8c2fd0f1ae50752093da4f7fcbce875f5e952cfb0b63f8c8a75448ec885855ac8f7ca84601ec7010e9cab610a9fac4e8a198757b2a4ef78d51dc8fc"}, {&(0x7f0000002f80)="c1c969d40ec792b09b26bfc4f9c7d0fb6ff205eef340cc1b2612ed32b24a355a7d781936a6c4e509599924b85872e95340b7774f704e81f2683c36bc14e9def2f766b4fcc3449af1d8c9a6e5c4e259a0c60561879629ab420e834c2ef4a89a959cbf65d6f618aaa11ae161804517e98ae96a91726788ba5d034c64822fa88b06a2ed62b04999b8a5a8a83c130c6a9bbea7c2441ad7077aa75afa54604f9ee967430c405cb76c73"}], 0x0, &(0x7f0000003840)=[@iv={0x0, 0x117, 0x2, 0x0, "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"}], 0x0, 0x20000000}, {0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000003100)="08e0dd562538d202d699bff1f3778ebcbaba5f709daaaa3af5fd8f6fb393946f6c01465f108503259c1361cddb89c35935499f7056b49d6f8a6401c7540ece36b51d149d998baba75199ec0d91620b2639a05d3f6915832668250b800df36f8442a607d7e81d75f4e2548649b546362ab74871fb7515352d73c90d27c44cbe61599ed218283ed6442f676d02f30ce7d21367d05663c4e2342f3af893c37c6ebf831f35bae093ad6c67e0f05eb45aee662e96e6f29db060eb10fd86667ce62d1a3c501a0ad38ab083b6ce0885c12defa12fabfb5dc01fa189816a6706389f58507436c74e4146f8e536f3daf09292fd44c52c8dbee5114485377055"}, {&(0x7f0000003200)="f7"}, {&(0x7f0000004880)="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"}, {&(0x7f0000003240)="ce64a0467e66c20da42e99fc6192528304960ba23e91db6a80cdb206e7813a8d0aac7872ba588fd007738680b7f7f4b29005f84e3cbd7921061129d7b64490de5ee4cfce9179d2dc83b8dfcf40a93637ad2c89d7cf8c2bc5995e91e50b9b11fc9858969a1021350daa57b6"}, {&(0x7f00000032c0)="3d37c80792b1118934296555e981e7769661acd898a0b8884a4758c854b4ffce16cda314198cf8a04843f889bd4a413fce1596fe9b"}], 0x0, 0x0, 0x0, 0x40040}, {0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000003380)="92e728c42940ce984b33be79efdc0a20682b02efe73604b6b0bdaa13a9749eaed97cf2e55bd6f7b95142074102069a0748afb32d4f0e7509212aa5d587e7e9acc905433886339be2d61b4190281f1d26b34236ac6899a8173afebe52619272c4cbbe1e87d73493eed31d3831fcf01a6e4f2c20cc6db2ed2810210a0a947496e9b0b035933f23"}], 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f0000005980)=[{&(0x7f0000003480)="ef05eca5bfb7353e84860f14a35f7c973156cd9be2c87dc756cf84ff3b494304a85deda19ae389002dec447ddfdf0afb234c1b2b383ae4c30bbf9cd39e780cfa3e5030e8d052573ab0332c6bfb1aa5c413b1936f65a83c36c84ca4c2563f090781e84b1d4e1c8ba6ab3c491cdd1b79"}, {&(0x7f0000003500)="f2fe025c8d6d8e08cdc0aab5931fb39118100a10c2e7a636ba26cd27dce82178007d82e06022bdfde2d2725417791e376fee4b06609ccbea85495bc7b0deb19c7fa27357eb908e6ddd6195d8d28f593d0795c4ea19e407e27da857995ba1f561181da8fb1718fb4da7a6e0e0d367c739571baad91324eaab5dfbebfd63eb6b002e53db77"}, {&(0x7f00000035c0)="13087a58d9234f03eb98352c3518b3fd7ea66e00feb4789f8bcc37c223ad932fcd5fc8f1dbcfe01f9c25323c2946e4896474b39838aad5572b6183ad3d211bdb986c112fe5c78b36b056c8a4abf53c53dcc7105a1e2f03eef1e035e01e8f14b3d1393d94d2d1e955f10f783e3339b508a4d05da1257fb33db89578a726ec17d170d6a7aec3261437ff1d4b949d6caea39bb325761016c95dea5a20a2bc214b1bcf9b0f104e0f537e8224d8162299e86d0555aa262653e590ebda8408d7fe01e40fe30e07a608f0acc6327e3df7a024711fd19cb69a9459224066ccbf05b8b1303aa0f797"}, {&(0x7f00000036c0)="0a20630704dfffcec9b9f8ba4f547e8140432b3d7781d0cc762cb39efef2986b331ab35ba2e9ec8e5d0eb9dd023fc2cf19082ed1bc5fd1fb8918bf3696201cdb2ce1c278a05ccbc4ce2e8bb129844e93abddbaad0970bc35b8a79ca5b089521924844c2ef1602a4a2bfda377a5a37cb03ce6e5ea07c76b92d763235f"}, {&(0x7f0000003740)="1e09db96a0ec165d139ac3e6dd9d10690240228cf140bcfb90858da40ba6e52a27112a5a2f5b3126190416eeb587b8be4960532b56857860786e406e529e820a55198dd32a73f9f6d27e483a972ab513220412f28a815259613411c7abe9302ed5cddc0929a0947ea93d2e2cc02a80cd0c759ec435daca652f2d3fe07c5149ba48ea3b5070dc81ec5fe8ea616e1e"}, {&(0x7f0000005880)="f40a9ee6e76401bdcbab8b6a0f67ce9db9b0327643d81d9cb7fb760f65afd04907b3bd27b38e7a7afb3b6f4eb6d4cf1c0d209ef3bcd544d8dd07c116d0f1c1113d44fe6a73b874c71275d46c92fdeb15cc03f964861c94a7e115a288a21375bd1953d727a5759c0e5d3378fb51c9f37f9bd41c111f207b68107ed1245d6e3b2daad51258c399aa8de1fa8bd8b86df0899e6555c91a87a184f5f9413d4351bb815373ae076c7d4d02b271281d9b4e43f5f9b71bcf017ab4b3543650c871ce86f846fac2b448"}], 0x0, &(0x7f0000005a00)=[@assoc={0x0, 0x117, 0x4, 0x3}, @op, @iv={0x0, 0x117, 0x2, 0x0, "beba086206046f69d069e46b8d6354b14f8dab501a13d5da845094050b92ea59d2467908cae164568c68131732445cf3"}], 0x0, 0x20000800}], 0x4924924924927e0, 0x0) readv(r7, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:40:59 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, 0xb, 0x10, "59c6303e87bc9f98e82bf83016491b163fc64040e054f2afbc972cc3cae48ae29aa8feca5e251beeaae447564b8700767ad2510adad2b81c11174f8a6646d93d", "86d49ae6734dfa172e915eff1052b9d323cb0b0954ad5c4a5960958628d73938", [0x9b, 0xff]}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0x8, @empty, 0xf9be}}, 0x0, 0x3ffc, 0x0, "80e72b724354f9819f64d5a1ed2f08edd593eaade8221dc818e67c35cd32c48af7aa3e8b1e2ed6f43b2479ec950bb32ecbd22ba69e8e08f9024b3b12d3901c57097785f4fec17721e9b0bbca65d7d250"}, 0xd8) [ 599.512026] binder: 25194:25196 got transaction to invalid handle [ 599.518449] binder: 25194:25196 transaction failed 29201/-22, size 0-0 line 2834 [ 599.606565] binder: 25194:25204 ioctl 40046205 81 returned -22 [ 599.681323] binder: 25194:25204 ioctl 40046205 81 returned -22 [ 599.698188] binder: 25194:25196 got transaction to invalid handle [ 599.704738] binder: 25194:25196 transaction failed 29201/-22, size 0-0 line 2834 04:40:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000001e00)=ANY=[@ANYBLOB="00fb3702000cf682891d1cc988a5778758176b00d2aaf1c065d667d924a6bda0ac6347a82dad76c95b42ff1fae26ea1ea8a343f2e390187d4d5d0cbc68f4234f37"], 0x37, 0x3) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400005000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x81, 0x400000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth1_to_bond\x00', 0x3}, 0x18) sendmsg$rds(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001b40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x8b3, 0x2}, &(0x7f0000001200)=0x4, &(0x7f0000001240)=0x4, 0x100000000, 0x1ff, 0x80000001, 0x6, 0x4, 0x9}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001280)=""/168, 0xa8}, &(0x7f0000001340), 0x5}}, @mask_cswp={0x58, 0x114, 0x9, {{0x80, 0x10000}, &(0x7f0000001380)=0x60, &(0x7f00000013c0), 0x6, 0x1, 0x6, 0x463e9e52, 0x3, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0xc7b, 0x3}, &(0x7f0000001400)=0x9, &(0x7f0000001440)=0x7ff, 0x2, 0xc000000000000000, 0x80, 0x0, 0x1a, 0x87}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x6}, &(0x7f0000001480)=0x1, &(0x7f00000014c0)=0x800, 0x0, 0x9, 0x100000000, 0x81, 0x22}}, @rdma_args={0x48, 0x114, 0x1, {{0x1, 0x3}, {&(0x7f0000001500)=""/174, 0xae}, &(0x7f0000001740)=[{&(0x7f00000015c0)=""/49, 0x31}, {&(0x7f0000001600)=""/113, 0x71}, {&(0x7f0000001680)=""/58, 0x3a}, {&(0x7f00000016c0)=""/83, 0x53}], 0x4, 0x0, 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0xed3, 0x329}, {&(0x7f0000001780)=""/99, 0x63}, &(0x7f0000001a80)=[{&(0x7f0000001800)=""/97, 0x61}, {&(0x7f0000001880)=""/37, 0x25}, {&(0x7f00000018c0)=""/212, 0xd4}, {&(0x7f00000019c0)=""/169, 0xa9}], 0x4, 0x40, 0x9}}, @fadd={0x58, 0x114, 0x6, {{0x0, 0x1f}, &(0x7f0000001ac0)=0x8, &(0x7f0000001b00)=0x2, 0x5, 0x0, 0xe, 0x3, 0x10, 0x2}}], 0x278, 0x20000000}, 0x80) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x40) [ 599.735231] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.740753] binder: undelivered TRANSACTION_ERROR: 29201 04:40:59 executing program 1: fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000300)='security.evm\x00', &(0x7f0000000340)=@md5={0x1, "746c2ff988a66609900432a5a9169419"}, 0x11, 0x1) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x4000, 0x0) setxattr$security_capability(0x0, &(0x7f0000000380)='security.capability\x00', &(0x7f00000003c0)=@v2={0x2000000, [{0x101, 0xffffffffffff8000}, {0x2, 0x1000}]}, 0x14, 0x1) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000280)={0x0, 0x43, &(0x7f00000001c0)="4bda93075f8132b31976364ba0096934c901e4db889657638e2a957cb6135635034b9e7d7bc6e404b582e0c9b22febc3fef8c8e00042259f7ed6a4a4a6811362b6970f394d35037c95ff006b6f7d42f1e2ef53704890148646f3b8dee1fe33883e94ae79743f9abad8c211e57a36440d963bf424b647fdd11c2412344e6228ab9cc834ced009513c08a32591457155cc474c", {0x8000, 0x2, 0x7f7f5f5b, 0x7, 0x81, 0x3f, 0x2, 0x7}}) 04:40:59 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v1={0x1000000, [{0xff, 0x4}]}, 0xc, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000140)={0x7, "45fabab1a9810af98216581881ffa3ed344bdbb16647be89f3d4047cba40ce63", 0x5, 0x180, 0x9, 0x3, 0x4, 0x2, 0x40, 0x3}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x2, 0x5, [0x0, 0x9, 0x7f, 0x1, 0x200]}, &(0x7f0000000200)=0x12) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r2, &(0x7f0000000280)=0x4) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:00 executing program 4: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000040)=@nfc, &(0x7f0000000180)=0x80, 0x800) fsetxattr$security_smack_transmute(r0, &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00'}, 0x30) r1 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x0, 0x101000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fd) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) [ 599.954600] binder_alloc: 24054: binder_alloc_buf size 570425344 failed, no address space [ 599.963154] binder_alloc: allocated: 248 (num: 19 largest: 32), free: 12040 (num: 1 largest: 12040) [ 599.972593] binder: 25220:25221 transaction failed 29201/-28, size 0-570425344 line 2973 04:41:00 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500005c0000000000019078ac1461954c3449df2d6d2414bbac1414ff0504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000"], 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'batadv0\x00', 0x7}) 04:41:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x400602, 0x0) write$P9_RLOPEN(r1, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0xf0, 0x4, 0x1}, 0x7}}, 0x18) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r0, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 600.095595] binder_alloc: 24054: binder_alloc_buf size 570425344 failed, no address space [ 600.104055] binder_alloc: allocated: 248 (num: 19 largest: 32), free: 12040 (num: 1 largest: 12040) [ 600.113444] binder: 25220:25226 transaction failed 29201/-28, size 0-570425344 line 2973 [ 600.237343] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.243053] binder: undelivered TRANSACTION_ERROR: 29201 04:41:00 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffdfffffffff08004509fde443bbbe8d1f3f00005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000020000000000e000000200000000e0000001000000000000007f0000010000000000000000"], 0x0) 04:41:00 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000d80), 0x36a, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80389}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9, 0x60}}], 0x48}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:00 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x100, 0x0) sendmsg$xdp(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000029c0)="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", 0x1000}, {&(0x7f00000039c0)="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", 0x1000}], 0x2, 0x0, 0x0, 0x4}, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x80040) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000002800)={0x0, [0x4, 0x0, 0xd74, 0x6f9, 0x9, 0x100000001, 0x5, 0x7f, 0x8, 0x100, 0x0, 0x9, 0x1, 0x0, 0x84, 0x30, 0x9, 0x2, 0x7fffffff, 0xd7f2, 0xffffffff, 0xfffffffffffffff7, 0xd1, 0x3, 0x9, 0x0, 0xffffffffffffffe0, 0x2, 0x3f, 0xbc3, 0x2, 0x101, 0x5, 0x8, 0x6, 0x593a, 0x3, 0x8, 0x17f, 0x1000, 0x8, 0x5, 0x3, 0x1000, 0xffff, 0x1ff, 0x0, 0x9], 0x7}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002740)={0x0, 0xfffffffffffffffb, 0xee, 0x6, @scatter={0x9, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000140)=""/170, 0xaa}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000040)=""/71, 0x47}, {&(0x7f0000002200)=""/222, 0xde}, {&(0x7f0000002300)=""/53, 0x35}, {&(0x7f0000002340)=""/79, 0x4f}, {&(0x7f00000023c0)=""/63, 0x3f}, {&(0x7f0000002400)=""/135, 0x87}]}, &(0x7f0000002580)="f853bce7df781ab94259abfa9ace7018c5a9dcfb93344c40015e05d3be14463771c6926869edc946aec3e59335c64cd69b0520d1f5eaa6aabbb77e5d7ea4f38f67c75477e28c7e590c306ee5cadb6b03ac66d3041f52016e728e1be211fb01b79e1dd1a1856f760f6c45f61e57ccba156d66e2a82518bf794ee453e8e8fda99768c00321c887cb18e4fde36ebcdcec7244bb367cb6a25a2972fac659c71e9744ad9c16e03a145b0e07ee94df23a3fa229cd55d91c226c8a650b03151498b30d853d8271eed448cb7a688084cad1a91d597ba85ce004a06328116e9d02d81e6798bc106d2379b8920038191e58242", &(0x7f0000002680)=""/82, 0x7fffffff, 0x10, 0x0, &(0x7f0000002700)}) write$cgroup_int(r0, &(0x7f0000002880)=0x800, 0x12) syz_emit_ethernet(0x52, &(0x7f0000002940)={@local, @local, [], {@llc={0x4, {@llc={0x4, 0x2, "88", "9421efe0d9b93e3c83bf4bf8d5136fba5643eade8a5f63c8a7793ecf1b8630014ad72f820e996dc47eb3585b2fc4da06f05a86e534a9dce32c73053028e6a6c92d"}}}}}, 0x0) 04:41:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x6, {0x7, 0x1c, 0xb870, 0x4010, 0x1, 0xbf, 0x5, 0x755e}}, 0x50) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) openat$cgroup_type(r1, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 04:41:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0xcc, 0x8, 0x6, 0x5, 0x8, 0x4f}) 04:41:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000140)={0x5, @dev={[], 0x1c}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000240)=0x2aa0000000000, 0x4) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) [ 600.522228] binder: release 25248:25249 transaction 78 out, still active [ 600.529198] binder: undelivered TRANSACTION_COMPLETE [ 600.556979] rdma_op 000000004c7808c1 conn xmit_rdma (null) [ 600.564878] binder: release 25248:25249 transaction 79 out, still active [ 600.571958] binder: undelivered TRANSACTION_COMPLETE 04:41:00 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff, 0x400000) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x100) 04:41:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) r2 = getegid() setgid(r2) 04:41:00 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c07080000000000000000e000000200000000e000000100000000000000007f0000010000000000000000bbac73fdf9326494d1187e3ee790a1352b7b3519e4268f928058e8e64e63f4"], 0x0) 04:41:00 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) [ 600.814761] binder: release 25270:25273 transaction 80 out, still active [ 600.821918] binder: undelivered TRANSACTION_COMPLETE [ 600.861810] binder: release 25270:25273 transaction 81 out, still active [ 600.868754] binder: undelivered TRANSACTION_COMPLETE 04:41:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x5, &(0x7f00000002c0)=ANY=[@ANYPTR64, @ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x600000000000, 0x10000) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000000c0)={0x7, 0x102, 0x4, {0x0, 0x100000001, 0x63dd, 0xfff}}) 04:41:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x48000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000180)=ANY=[@ANYBLOB="010000001700000056a5000000000000bd6271c278dbd95d8a780a88"]) read(r1, &(0x7f0000000080)=""/251, 0xfb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:41:01 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2040, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000140)=""/166) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x41c000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000040)=""/9) getsockname(r0, &(0x7f0000000200)=@sco, &(0x7f0000000280)=0x80) 04:41:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000240)=""/169) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:01 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xfffffffffffffd29, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaabbaaaaaaaaaa24001559a2987a71c10fd4c055812cd0ac52e5fbc49d7555cfbfe6d8a0f419d0b385c2e2cd0fba348914f9f1ff059bf7f42be255bf7facd07ee0eb5f0abcf94e447097a68866a0aa9d9d5ba37ddeba5a5afd9e58e7047545873eb71de95a38ad24bd017efc490c456b000ddd74716aa6a1007ef9a0b8ef4478"], 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xb58b, 0x200) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x9, 0xe1, 0x1dd, 0x8, 0x2, 0x4}) write$P9_RLERROR(r0, &(0x7f0000000040)={0x12, 0x7, 0x2, {0x9, 'userproc)'}}, 0x12) socket$netlink(0x10, 0x3, 0x12) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) 04:41:01 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, &(0x7f00000000c0)=ANY=[], 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x3) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000100)={0x6, {0x4, 0x1, 0x101, 0x3}}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xfffffffffffffffb, 0x6, 0x66, 0x7fffffff, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x9}, 0x8) 04:41:01 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x4241, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000640)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000600)={0x8, 0x8000, 0x10001, 0x8e1f}, 0x8) syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbb39afe78f6d513c72b809158ac141411051e907800000200400000000000000000010000ac1614aaac080000000000000000000000000000e00e000200000000e0000001000000000000000c42766fbba4eb480000000000"], 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7f, 0x100) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000800)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) recvfrom$packet(r1, &(0x7f0000000400)=""/36, 0x24, 0x2, &(0x7f00000004c0)={0x11, 0x5, r3, 0x1, 0x100}, 0x14) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="04090000f0192ce80f548618520037c4e98c1126a0b555721559185621009642a2627e7963a5623781b2e7590bf4a50f0bad7d75bdfc4ea5a381161f37dfd0e0be080d33ee6c0d3c6e6a2ac084b16e3396e16398fe100666c846ce289c36bb784a2b30620849d9c500000000", @ANYRES16=r4, @ANYBLOB="040626bd7000fddbdf250d0000001400020008000b0002000000080003000000000040000200080005000600000014000100ac14140f000000000000000000000000080006000700000008000900060000000800080008000000080006000300000008000600020000005c00020008000500080000000800040004000000080004000100000008000600ff00000014000100ffffffff000000000000000000000000080007009516000014000100e0000002000000000000000000000000080003000000000008000600040000000c0001000800020032000000080006003500000008000500fcffffff140002000800080009000000080002004e240000"], 0x104}, 0x1, 0x0, 0x0, 0x20008084}, 0x1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1ff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e21, 0xe40d, @dev={0xfe, 0x80, [], 0x22}, 0x40}}, 0x1, 0x289}, 0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @broadcast}}, [0x3, 0x1, 0x400000000000, 0x8000, 0x5, 0x0, 0x8001, 0x1, 0x101, 0x9, 0x40, 0x0, 0x20, 0x6, 0x7f]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x3, 0x6, 0x1, 0x81, 0x2, 0x40, 0x8664, 0x9, r6}, 0x20) 04:41:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syncfs(r0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) accept$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) r3 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x3ff, 0x20080) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x80, 0x4) 04:41:01 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000140)=""/32, &(0x7f0000000080)=0xa) 04:41:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x800) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1, 0xb80) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:01 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000010100000000000000007f00000100000000000000004855d7b5b014ad19428a83e34a5ef0a498a00e416b9f1c159cdbdf0970e449deddd858a34cd7e349b3ffaeb4c5fd80d65519919899070504a629a7727f64c5fdb9bbaa98839bc91970289a6c94cddaca0ad7ac89aaf855ee4ee34e00000000"], 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x80) 04:41:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x53, "0586111aafdab70c84bbbb10602287e597fc69c98f574891d97a98b1b413856f337cec75b15597a270f48463b19671f04abc5a0b54c284f68adbb23bf0c72dd34146722f87e2d001a71b5b509774ae284b392d"}, &(0x7f0000000080)=0x5b) clone(0x90020000, &(0x7f00000001c0)="8463f63f35dbb0247a3c8d3d7914b701bcf788acfcdc72b81704552aa05ad90ce6c90cb901c2e4ca64229e810892f5b3828860cdd20d8255a76f54c3d8617d2be2419fb0477b5c2ff7acf72a18578b05a6ff59c8a88f2f069e9df1a7bd32f88000c754203d01cea2e92e8fc8695141acddd828a73ed9d6d131a172ad61e15a1aab6c8beab1df7e6ee1395a147fda9512708bdd877981ef69cc3beb57d295b5271e2a1d06ce8a7912b895950a847e6ec7d9a4e9befc301ffa0af0ab271bc4bdeb286430a61b695af7de336adbcce704cab9562c970bae466fe1706cfa0bf22b6171ba31837483277de3f0570ea49d19f69194ef5812c5", &(0x7f00000002c0), &(0x7f0000000380), &(0x7f00000003c0)="ecc73995fe09d6dd9cc037083bee0e2c1b31204f5e0a42628c9ff57bef33da51aec5") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 04:41:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8400, 0x0) getpeername$tipc(r1, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) 04:41:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f00000000c0)={0x0, {0x1, 0x1}}) 04:41:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) fcntl$getflags(r0, 0x0) 04:41:02 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000001ffffffffffff8100040008004500005c000000000001929078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000000000000007f0000010000000000000000"], 0x0) 04:41:02 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000000000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xce, 0x301001) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)) 04:41:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40003, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x3, 0x0, 0x7ff}}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:02 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x57d6, 0x3}) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000080)={0x0, 0x3, 0x4d}) 04:41:02 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) modify_ldt$read(0x0, &(0x7f0000000000)=""/89, 0x59) 04:41:02 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xa, 0x40) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x3, 0x10, 0x100008}) 04:41:02 executing program 0: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000001c0)="f45a", 0x2, 0x0) keyctl$update(0x2, r0, &(0x7f0000000200)="8590b4b4b8f37340be07a2d9ee36cb10c6bdc622059f3c10c75a87f1c894c08e9112b7bc78a7cc0db24f127dfd8c1a1a83b6d8362bdc780a9b30fac7d1bd29f7101f36f268d67b20b59a4f307477c6e1d0a4ef65d952322270947c83e52c50e259d8d918ffc13dbef28d4d30c21f63fbd062b25e1757edc050e06dc42e3d03b49aeaeea7eeee644eadc055916dc4f55840a4f80ee86ad22622afe8d1ea83830ae35796f6a979af095de77ca95513734f959d56f713fe8bb4a48e", 0xba) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/104, 0x68}], 0x2e9) 04:41:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x48, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01634040030000000000000003000000000004000000000011000000000000000000000000000000000000001800000000000000e3a4791b27fdfcba89b048bfd7a3b915c4e523747846420a454f6bb88a2b8abfbd47d3fa94688180e8ce49b871b26f567bbb5d60632e3765df26eb00fb652fd607663d2a436018ec21faabb5b5c9f7e2ed1f901839c41932fee4296ea9c881adb0098d7f517108dc8df4404b7234b01cd7de9827ac87c91d0537f2be3a01c55ca2764c05c35264a9370f3b1cd9593a7c8d48bc3184598b65eb559856a61ee7458ffa", @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="380000000000000048000000000000001800000000000000"], @ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000100)={0x3, 0x6, 0x87, 0x3f, 'syz0\x00', 0x40}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2000, 0x100) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) [ 602.502506] binder: 25374:25380 got reply transaction with no transaction stack [ 602.510134] binder: 25374:25380 transaction failed 29201/-71, size 0-24 line 2741 04:41:02 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x4, 0x5}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @local}}, 0x9, 0x3dad}, &(0x7f0000000240)=0x90) 04:41:02 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) accept4$unix(r0, &(0x7f00000000c0), &(0x7f0000000040)=0x6e, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="5d0000000000000000000000000400ded4462f725c1f650bcbf107ca7a6859ce85f711c5df935da710497d15dc3b5cd7a374a7aaa2b7e9d471f2be0e822a3b123d35ce4c1a04e6ee18f76315865eba3396352eb8d52c882424372f257ae0184ad46260aff0eeec9663205e8bc69e3a4a16b956ef89445a46b47c5a2b89074adb421dc4b910e9c7679be9491f05114fa1004d01081ca0425efb83e6bc419686776e103be395a6b17496f9e2f6c80fba0f9d234ac0b18cf3879feabebd03bf3d88bfddb4061b84b541391980f906611b1a9c886f750a43c44d22eaaafb882120907cfb2abd1c810077c3998adc4f"], 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x3, 0x0, 0x3, 0x9}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000180)={r1, 0x1}) 04:41:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) r2 = dup(r0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) ioprio_get$pid(0x2, r3) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 602.639708] binder: 25374:25380 got reply transaction with no transaction stack [ 602.647502] binder: 25374:25380 transaction failed 29201/-71, size 0-24 line 2741 04:41:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='n\x992\x85\x8f\xd1\xf0\xaf\xb3') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000180)=""/95) [ 602.800108] binder: undelivered TRANSACTION_ERROR: 29201 [ 602.810288] binder: undelivered TRANSACTION_ERROR: 29201 04:41:02 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @broadcast, [{[], {0x8100, 0x2, 0x90f4, 0x3}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:02 executing program 2: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000140)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x6, 0x73fc, 0x6}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000ce6900019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c0000000000000000e000000100000000000500007f0000010000000000000000"], 0x0) 04:41:03 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x20000, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000180)) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x1030, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x3, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)=[@flat={0x77682a85, 0xa, r2}, @fda={0x66646185, 0x7, 0x1, 0x20}, @ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x1, 0x3, 0x3e}], &(0x7f0000000100)=[0x40, 0x20, 0x60]}}], 0x0, 0x0, 0x0}) mknod(&(0x7f0000000000)='./file0\x00', 0x4, 0xfd9) 04:41:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x5}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:03 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x2, 0x5, 0x9) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f00000022c0)={0x0, 0x0, 0x2080}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 04:41:03 executing program 2: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'irlan0\x00', {0x2, 0x4e20, @rand_addr=0x80000001}}) [ 603.166919] binder: 25419:25421 got reply transaction with no transaction stack [ 603.174738] binder: 25419:25421 transaction failed 29201/-71, size 96-24 line 2741 [ 603.197123] binder: 25419:25423 got reply transaction with no transaction stack [ 603.204901] binder: 25419:25423 transaction failed 29201/-71, size 96-24 line 2741 04:41:03 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0100ffffffff08004500005c0000000000019078ac1414bbac14141105049078000000004000000000010000ac1414aaac141448082c0000000004000000000000e000000200000000e000000100000000000000007f00000100000000000000a168f7478152160000000004b9dee2c810c014ac45aa8ecb779b2bf30641c256ff68a852ece67b012bdf988cac4dd55240d4fd99bb5fb2a5814f3b21ea4b532eaf39e30a5de0aefa43885ded0021cd65b4cc5b6259d8ef01a7da264cf90204a4e00bb4e196c9343a8390f2f17d24c631118d4e1aef83377da76357304bd3760ad8c0045d483114a63d"], 0x0) [ 603.286419] binder: undelivered TRANSACTION_ERROR: 29201 [ 603.323770] binder: undelivered TRANSACTION_ERROR: 29201 04:41:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0xfffffffffffffff7) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) prctl$PR_SET_ENDIAN(0x14, 0x3) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x40000, 0x0) getdents64(r2, &(0x7f0000000440)=""/155, 0x9b) getsockname(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000100)=0x80) setsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f0000000140)=0x1, 0x4) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:03 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, &(0x7f0000000000)=ANY=[], 0x0) 04:41:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000480)={0x6, {{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x14}, 0x100000001}}, {{0xa, 0x4e23, 0x9, @empty, 0x5}}}, 0x108) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000101}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x6, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800000404c8c4}, 0x8000) 04:41:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000040)=""/121) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:03 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffde08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xffffffffffffff81, 0x100) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000040)={0x6, [0x101, 0x1, 0x16f, 0xaa, 0x7fffffff, 0x82]}) 04:41:03 executing program 5: syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) 04:41:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x83, "22412baf7d659f6135a289780f28fc6bb32e160d9254fcec82e150e3825769129965b8e9fc1a7a8c96c211fd6db944d6a42f6f15764dab4aba410972f572736e7a9eaaa674661d7e313d68f6555f4e8f3998ff8f814bb9ea94678a19b48740fbb3ac87f59b159e0bb8c11e462205649cf42ba7596c2cdabf433af04a4d03ddc13f021b"}, &(0x7f0000000340)=0x8b) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x6ea, 0x8, 0x24cd, 0x6af, r3}, &(0x7f0000000580)=0x10) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080)={0x4000000000}, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0x0, 0x108, 0x0, 0x0, 0x0, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x3}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@loopback, @multicast1, 0x0, 0xffffffff, 'nlmon0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x7f, 0x2, 0x42}, 0x0, 0x98, 0xc0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000440)="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", 0xfffffffffffffd42) [ 603.736066] binder_thread_release: 4 callbacks suppressed [ 603.736090] binder: release 25447:25452 transaction 90 out, still active [ 603.748743] binder_release_work: 4 callbacks suppressed [ 603.748752] binder: undelivered TRANSACTION_COMPLETE 04:41:03 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000840)='/dev/input/mouse#\x00', 0x9, 0x8040) accept$inet6(r0, &(0x7f0000000880)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000008c0)=0x1c) [ 603.823115] binder: release 25447:25452 transaction 91 out, still active [ 603.830126] binder: undelivered TRANSACTION_COMPLETE 04:41:04 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x0, 0x0, 0x9, 0xff}, {0xee2f, 0x8000, 0xff, 0x9}, {0x7fffffff, 0x9f2, 0x3, 0x7f}, {0x1, 0x10000, 0x10000, 0x1}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80000) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000140)=""/125, &(0x7f00000001c0)=0x7d) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:04 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c000000000000000500000000000000000000e00000f800000000000000007f0000010000000000000000ca68"], 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf2b6}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x72}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc87}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40041) 04:41:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x100000000, 0x31, 0x7, 0x0, 0x0, [{r0, 0x0, 0x7}, {r0, 0x0, 0x9abb}, {r0, 0x0, 0x3}, {r0, 0x0, 0x80000000}, {r0, 0x0, 0x7ff}, {r0, 0x0, 0x2}, {r0, 0x0, 0x80000001}]}) 04:41:04 executing program 3: socket$bt_bnep(0x1f, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x60) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x0, 0x9, 0x8001, 0x3354}, 0x10) 04:41:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) write$binfmt_elf64(r0, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x0, 0x0, 0x5, 0xd66c, 0x3, 0x3, 0x2, 0x31b, 0x40, 0x33, 0xffff, 0x2, 0x38, 0x2, 0x6, 0x18, 0x2}, [{0x2, 0x7ff, 0x3, 0x40, 0x4, 0x5, 0x1, 0xfe77}], "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", [[], [], [], []]}, 0x1478) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) rt_sigaction(0xf, &(0x7f0000000240)={&(0x7f0000000100)="c42195d9570336f0211966f30f5ce0c441697535f905000040f7bbdc4f00000fdb3507000021472c44c423f9df22bcd12143f1", {0x8}, 0x4, &(0x7f0000000140)="8fc828a6498700c48179161e43a5c4a37d086a0f00a906000000c4a239aa8000008020c42178ae9100000000f20f2ac8c40295ac596ad26bee"}, 0x0, 0x8, &(0x7f0000000280)) sendmmsg$alg(r2, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 604.129695] binder: release 25482:25483 transaction 92 out, still active [ 604.136859] binder: undelivered TRANSACTION_COMPLETE [ 604.176692] binder: release 25482:25483 transaction 93 out, still active [ 604.183779] binder: undelivered TRANSACTION_COMPLETE 04:41:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000140)="a43999003c15c1242b352a8fe458b4d947b9ab09a45b56eb11b6b01775aa0338496ca1bfc5aca74f9fd31031d9d24bc0fbc2ec3a49b6674dc671067da99b11a35a011e595bdfa7b9155579163f5267abfe7047d32abba7d7f46f450711a497b97b6a7ba0e56c5fcaed1144344935ca4ae7084e23756f31261d4e36122f7614b9922bad587452c3416777b26735af80bd903e85d29589fc1152de15bdb94592493dfb6646514223a561d3a60e6716f946a9e334f162df1d3c6be544950530c1804ef1bdba8da0e39dbd605050f0f7204c5ea947e02d5086cf9148afc2d18e003685797b713773199d44461d3e60aa54fea4") 04:41:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x88}], 0x1, 0x0) 04:41:04 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80000, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bind$vsock_dgram(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @reserved}, 0x10) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e063b73743000000e000000100000000000000007f0000010000000000000000"], 0x0) 04:41:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x220500, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000040)=0x100000001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xcb, 0x0, &(0x7f00000000c0)="8a74fd985eedc6e1241fdec837bd069386c3f5fb075e2f85407ea6068e7670eb2d8de7e0bb6813878773dbbfb8d8f4b8e2e1b1e5edbe9d385a4bb9d88197c90e02f9cb0b33c3557440ee51f50c59541f5cc73affed956948a3f1639c5e5d5fbbc108fc18d12b9650cd7219882fd66d35de362519f8b817f352eedffdea5de0a7ec2068513e7bf95e19f4e5f379f46a401218c300c2fa92504e28ee0a79657f71f904b7eb0bf69e46ac145b7ca21f252412a336a88d47589bc4448c91e0a8d9d293b5bc57860264930766f3"}) 04:41:04 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0xae, 0x10}, 0xc) 04:41:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = geteuid() fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000002c0)=[0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff]) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [{0x2, 0x4, r2}, {0x2, 0x0, r3}], {0x4, 0x7}, [{0x8, 0x6, r4}, {0x8, 0x4, r5}, {0x8, 0x0, r6}], {0x10, 0x1}, {0x20, 0x1}}, 0x4c, 0x1) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 604.513535] binder: 25499:25506 unknown command 0 [ 604.518570] binder: 25499:25506 ioctl c0306201 200001c0 returned -22 04:41:04 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000010100000000000000007f0000010000000000000000"], 0x0) 04:41:04 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x600000, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000080)={0x0, {0x800400000005, 0x80}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) [ 604.638211] binder: 25499:25516 unknown command 0 [ 604.643470] binder: 25499:25516 ioctl c0306201 200001c0 returned -22 04:41:04 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100003d31000000007f0000010000000000000000"], 0x0) 04:41:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x68}], 0x1) 04:41:04 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff00004500005c0000000000019078ac1414bbac1414110504907800000000400700000000000000010000ac1414aaa2141448082c00000000000000000000e0007bb000000000e000000100000000000000007f0000010000000000000000"], 0x0) 04:41:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x7fffffff, 0x4) 04:41:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x400041, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/exec\x00', 0x2, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:bin_t:s0\x00', 0x1b, 0x3) 04:41:05 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7, 0x2) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x70) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000e00100000000e000000100000000000000007f0000010000000000000000"], 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8000, 0x0) ioctl$TIOCNXCL(r2, 0x540d) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$int_in(r1, 0x5473, &(0x7f0000000000)=0x9) mlock(&(0x7f0000ff9000/0x2000)=nil, 0x2000) 04:41:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x0) [ 605.087984] binder: 25539:25540 transaction failed 29189/-22, size 0-0 line 2834 [ 605.165219] Unknown ioctl 21517 04:41:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) flock(r0, 0xc) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000140)={0x0, 0x2, 'client0\x00', 0x1, "c448146539cb27cb", "d85265ebd59a74aeb7d347a81dd5611a8a7fcad39576ea649072eb926559f73f", 0x4, 0xadb}) syz_emit_ethernet(0xffef, &(0x7f0000000200)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x5}, 0x4) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000040)={0x2, r1, 0x1}) syz_extract_tcp_res$synack(&(0x7f0000000280), 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000000c0)={'bcsh0\x00', 0x3}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)={@rand_addr=0x8, @broadcast, 0x0, 0xa, [@loopback, @remote, @empty, @broadcast, @multicast1, @broadcast, @multicast1, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x1e}]}, 0x38) 04:41:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = dup2(r0, r0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000000c0)) r2 = accept$alg(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100), &(0x7f00000001c0)=0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18}], 0x18, 0x1}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r2, &(0x7f0000000640)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000540)=""/233, 0xe9}, {&(0x7f0000000240)=""/90, 0x5a}, {&(0x7f0000000340)=""/99, 0x63}], 0x6) 04:41:05 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) rt_sigsuspend(&(0x7f0000000000)={0xec80}, 0x8) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 605.191002] binder: 25539:25540 transaction failed 29189/-22, size 0-0 line 2834 [ 605.193220] Unknown ioctl 21517 [ 605.260089] binder: undelivered TRANSACTION_ERROR: 29189 [ 605.268385] binder: undelivered TRANSACTION_ERROR: 29189 04:41:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000140)="3fd1207187fa618841628ffe989afae14f3222cf774bed288756c105a4e4dea738fc2454efad16edf676d33adc3d8ec8d57b024afc05e8083db773abf4fd750d21395421f197eb20a27231111f8fa71b8ceae5a341873b85415a72ceca3a7052382bb59765d235a352b57435848ca63d693f47915528142d7491853e022d71956596a7eb671620036e7ab193e3c806d84b0e018e9d6a6e1b6df6e16e2464bdf1761d7fefaed8cd34f13a99f3a68a1ad4b1ed24ad09db74ebd159be653bbcdf3e943c4d5b6541a712440b3a19670b8d92b2e7a429f6dcfc1d1159d71b520567810f50e88dd2ca9b37389eb23b2b354df3a250470a4f29d095e9") 04:41:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2, 0x0) syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x1000, 0x4000) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x400040, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x400040, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000240)={0x1, "c6ff811ee013e6e0cb3ddf6ac0dc39a185e13043443c0b30a899f10e713d3d6f", 0x3, 0xfffffffffffffffa, 0x2, 0x2ff26ff, 0x0, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') write$P9_RSETATTR(r0, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7) preadv(r3, &(0x7f0000000000), 0x10000000000001ff, 0x2000000000000000) 04:41:05 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8000, 0x4000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000d97f73077bf6c668c0c2a812ea0f7b1a64632d19075afffe2470246d161a2f2ac086338c99fe8ffac5e55a1a1545500169f1e1843aafb6f4bc7cf69b5e42887e"], 0x0, 0x0, 0x0}) 04:41:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x1, 0x100) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0xfffffffffffffffa, 0x1, 0x4, 0x66, 0xffff}, 0xc) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000440)={{{@in=@remote, @in6=@initdev}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x400, 0x123001) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000000c0)=0xffffffff) readv(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 605.497056] binder_alloc: 24054: binder_alloc_buf size 536870912 failed, no address space [ 605.505708] binder_alloc: allocated: 344 (num: 31 largest: 32), free: 11944 (num: 1 largest: 11944) [ 605.515056] binder: 25568:25569 transaction failed 29201/-28, size 536870912-0 line 2973 04:41:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'bond_slave_1\x00', 0x9}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x5, 0x4) 04:41:05 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @broadcast, [{[], {0x8100, 0x3, 0x6, 0x4}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) sysfs$1(0x1, &(0x7f0000000000)='GPL\x00') [ 605.704605] binder_alloc: 24054: binder_alloc_buf size 536870912 failed, no address space [ 605.713283] binder_alloc: allocated: 344 (num: 31 largest: 32), free: 11944 (num: 1 largest: 11944) [ 605.722667] binder: 25568:25579 transaction failed 29201/-28, size 536870912-0 line 2973 [ 605.751161] binder: undelivered TRANSACTION_ERROR: 29201 [ 605.756752] binder: undelivered TRANSACTION_ERROR: 29201 04:41:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:05 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7f8f, 0x200000) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in={{0x2, 0x4e22, @broadcast}}}, 0x84) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @dev={[], 0x28}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:05 executing program 1: r0 = pkey_alloc(0x0, 0x403) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8000, 0x0) faccessat(r1, &(0x7f0000000100)='./file0\x00', 0x80, 0x1000) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x4802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, r0) 04:41:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) connect(r1, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x3, 0x4}, 0x1}}, 0x80) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:06 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f00000013c0)=""/144, 0x90}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/59, 0x3d8}, {&(0x7f0000001240)=""/171, 0xab}, {&(0x7f0000001300)=""/30, 0x1e}], 0x6) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x10f000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) 04:41:06 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000080)=0xffffffffffffff69, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000000)) 04:41:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6, 0x600000) mq_getsetattr(r2, &(0x7f00000000c0)={0x4, 0x2f, 0x3, 0xc55, 0x1, 0x0, 0x100000000, 0x1fc}, &(0x7f0000000100)) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034d61}], 0x100000000000025b) 04:41:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000025e4cc1a91000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000594f845c8f0e7c5c1414715811964321b58624bd318e8bea9d31418eee22c2d83c15f13d5e31b7f72d211a1b59c6cf1e37dc85ba28eeb6e159e6b7c7c10aad1510076db9f758"], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200000, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0x50, &(0x7f0000000040)}, 0x10) 04:41:06 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 606.316532] binder: release 25611:25612 transaction 98 out, still active [ 606.323663] binder: undelivered TRANSACTION_COMPLETE [ 606.354288] binder: release 25611:25612 transaction 99 out, still active [ 606.361182] binder: undelivered TRANSACTION_COMPLETE 04:41:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x301840) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000080)=""/62, 0x1000000, 0x800, 0x3}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:06 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x20000) 04:41:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x500, 0x0) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @rand_addr=0x5}}, 0x1e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:41:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5c8, 0x18000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x200}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x74e, 0x2, 0x0, 0xffffffffffffffe1, 0x1000, 0x4, 0x1e53, 0x33d, r2}, &(0x7f0000000200)=0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffcbe, 0x0) sendto$unix(r4, &(0x7f00000000c0), 0xfffffffffffffdee, 0x0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'netdevsim0\x00', 0x900}) write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x1, {0xc, 0x1}}, 0x14) [ 606.596531] binder: release 25629:25630 transaction 100 out, still active [ 606.603687] binder: undelivered TRANSACTION_COMPLETE [ 606.617916] binder: release 25629:25630 transaction 101 out, still active [ 606.624970] binder: undelivered TRANSACTION_COMPLETE 04:41:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0xffffffffffffff15) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@iv={0x68, 0x117, 0x2, 0x54, "0ff6845f2d44c2cdfe8baab99109b36143be4c7fe434057140b3944cd1fa7a655da92110d075ffa3c5381a426b5fd92b3490e49d3ad6b0290a69047c3d67e01193959043d1b0bbf7e1779ea8fb4794cb9307cb3b"}], 0x68}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x5, 0xa0002) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x2}, 0x4) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0xbe4) 04:41:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup3(r0, r0, 0x0) mkdirat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x1ff) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 606.846850] binder: release 25644:25646 transaction 102 out, still active [ 606.854117] binder: undelivered TRANSACTION_COMPLETE [ 606.871399] binder: release 25644:25646 transaction 103 out, still active [ 606.878464] binder: undelivered TRANSACTION_COMPLETE 04:41:07 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0xd80, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'hsr0\x00', 0x100000001}) 04:41:07 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaffaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x81, @local, 0x8}, 0x1c) 04:41:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800), 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x3ff, 0x141000) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x7, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x30800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2200, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2a002, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x180, 0x0) accept4$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x800) 04:41:07 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaadaaaa76e0fffff5ff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) 04:41:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80a00000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x23c, r2, 0xa00, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb1b0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xcfb}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69f0ac24}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb269}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x90}, 0x20004000) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000000)=""/187, 0xbb) 04:41:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:07 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:07 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504900000000400000100006c9c788ab7dbfcf89745ddac1414aaac141448082c0000000000000000001be000000200000000e000000100000000000000002b5b20962f8e94f578"], 0x0) 04:41:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40080, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000040)={0x8, 0x4, 0x1}) 04:41:07 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x20000) write$UHID_INPUT2(r0, &(0x7f0000000040)={0xc, 0xe3, "0ef51afce31d7ea0ee70df797ef318e5922d8d069f3bf4e060e3f8b2dc68e843f79d86e32bb56787aeb4dae06537da0e95aa1300de72297b13af3d09a35a23b97045dc8723524cf03910b8be614ba9537b3449ce8a21a44b82a0d3339f8c8d3e2076bc6ad5b5f6d2fe776df741ef9b415b35f23cf0f04e32ede22c77eedf74a77cb9ee5612fbb254d26051fcb8bfc1bd6cd0da05337f3ec928b0f96f5c01c1b419f7209b598c21dfbbfe11397cc67246d7d0b9bafcf5b083523899d1ce557b2b1287217512f9d903727b874abd8bf37bdb671ae02f93b3114088a223320cf39434232a"}, 0xe9) socket$inet_icmp_raw(0x2, 0x3, 0x1) 04:41:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) r2 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x8000, 0x12001) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000600)={0x0, @empty, @multicast1}, &(0x7f0000000640)=0xc) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@ipv6_newaddr={0x2c, 0x14, 0x300, 0x70bd27, 0x25dfdbfe, {0xa, 0x40, 0x2a1, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x10002000000, 0x401, 0x3, 0x64b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c880}, 0x10) r4 = open(&(0x7f0000000180)='./file0\x00', 0x200000, 0x120) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000240)={0xfffffff, 0x7, 0x6, [], &(0x7f0000000200)={0x9909ca, 0x81, [], @string=&(0x7f00000001c0)=0x5}}) r5 = syz_open_procfs(r1, &(0x7f0000000040)=' \xe9\x1d\x99\x17>i\x05s7\xbf\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:07 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000080)) r1 = add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="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", 0x1000, 0xfffffffffffffff9) r2 = request_key(&(0x7f0000001180)='.dead\x00', &(0x7f00000011c0)={'syz', 0x1}, &(0x7f0000001200)='/dev/swradio#\x00', 0xffffffffffffffff) keyctl$instantiate(0xc, r1, &(0x7f0000001140)=@encrypted_update={'update ', 'default', 0x20, 'user:'}, 0x15, r2) syz_emit_ethernet(0x3d, &(0x7f0000000000)={@broadcast, @broadcast, [], {@x25={0x805, {0x3, 0x6, 0xf1, "864d8540895657f038e7cee9da6866d5f2d4cc5bf0c7948461d95e5bccc1711e94fd9b81bfbba4e5662cb772"}}}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000001240)={{0x3, 0x3, 0x81, 0x3, 0x7}, 0xcd8, 0x5}) 04:41:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) read(r0, &(0x7f0000000080)=""/171, 0xab) 04:41:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x0, 0x0, 0x0}) 04:41:08 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) sync() 04:41:08 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac14141105049078000000004000000000000000001b0000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f00000100000000000000008e468d872b8eec3257fb4fa9885f0e738700d8ecbe548b62c07f014038cb78a53da543dc53e9"], 0x0) 04:41:08 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x204000) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x16b, &(0x7f00000000c0)={@empty, @empty, [], {@x25={0x805, {0x0, 0x8, 0x17, "54123cb9155e3061d22319a11f1b37169c38c3d2f9bcb2b02c862016cbba165477a8e0244d78270bcfee747219a2e77c6aa35c5491f878"}}}}, 0x0) 04:41:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') ioctl(r1, 0x80000000, &(0x7f0000000240)="e92e42d31ebf1a2bef9dd1d95fc0644f49c1e980551edd5caa6963acb8b04f1efc4a965635873f57952c18f71f4c0a72e7d3ac7b50291c1e748409b05b20764dd29eb953cecfb6341be4f4395a49e9a1377e894b8621de607d28fb1e2ff18297e2a6ccc39262912773b318baa3c237cb8b202d9fdf38be95aa3bc053bc7ea635bf190e87b801bbef3eafc4122fcf34cc062b99401337c72cb4ba66afc2e782") preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000180)={0x4, 0x70, 0x4e27, 0x100000000, 0x1ff, 0x50, 0x0, 0x401, 0x1a1a4, 0x8, 0x10, 0x2800000000000000, 0x10000, 0x800, 0xffffffff, 0x80000001, 0x40, 0x1f, 0x1f, 0x9, 0x1, 0x8, 0x5, 0x0, 0x80, 0x2, 0x38802c7, 0x0, 0x4, 0x546, 0x7, 0x2, 0x8, 0x89f, 0x7fff, 0x101, 0x80, 0x5, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000040), 0xc}, 0x40, 0x401, 0x800000000000, 0xf, 0x8, 0x3, 0x1}) 04:41:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x1) write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) 04:41:08 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, &(0x7f00000000c0)=ANY=[], 0x0) r1 = accept4(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x80, 0x800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x7) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000600}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1b4, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcbf6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa44}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x86}]}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x840}, 0x8010) 04:41:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x14001, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=""/9, 0x114000, 0x1000, 0x6457}, 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:08 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x20, 0x2) 04:41:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x5, 0x4) [ 608.411482] binder: 25738:25739 transaction failed 29189/-22, size 0-0 line 2834 [ 608.487937] binder: 25738:25739 transaction failed 29189/-22, size 0-0 line 2834 04:41:08 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xfffffffffffffe41, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x61, 0x24, 0x10001, 0x3b3d78ba, 0xe, 0x7, 0x702, 0x100000000, 0x9, 0x6, 0x2, 0x9}) [ 608.592823] binder: undelivered TRANSACTION_ERROR: 29189 [ 608.601289] binder: undelivered TRANSACTION_ERROR: 29189 04:41:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140), 0x4) 04:41:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:08 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x3, 0x3, 0x1, 0x0, 0x3, 0x3, 0x401, 0xfffffffffffff000}, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000180)={0x7, 0x0, 'client1\x00', 0x6, "02351270aae3fed2", "0c5f915271c5d885a924eba40257ed89b2f572324c5e72b7b1f5bc8bc7bc45a4", 0xfe3, 0x7}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000ac141448082c00000000000000000000e000000200000000e000000151cd0000000000007f000001000000000000000000000000000000000000"], 0x0) 04:41:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000140)={0x1, 0x0, [{0x29}]}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f0000000040)) 04:41:08 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) socket(0xf, 0x80000, 0x6) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x5}, 0xffffffc7) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x101000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 608.985019] binder_thread_release: 6 callbacks suppressed [ 608.985043] binder: release 25771:25773 transaction 112 out, still active [ 608.997774] binder_release_work: 6 callbacks suppressed [ 608.997784] binder: undelivered TRANSACTION_COMPLETE 04:41:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x80007e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) 04:41:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0xfffffffffffffffa, 0x7, 0x4, 0x1, {0x0, 0x7530}, {0x7, 0xe, 0xffffffff, 0xffffffffffffff01, 0x6ca, 0x6, "f540db37"}, 0x800, 0x3, @offset=0xfffffffffffffffd, 0x4}) r2 = dup3(r0, r0, 0x80000) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000740)={0x10, 0x4, &(0x7f0000000640)="a53c1cc5eb73d0ffdb9b2f0cbf78690064b2dbfdecea73e1ec53e563687f8e503488c5cdb7997e153e26a8cd8971d3aee3765dbae67507fab1d73f0a6c21305dcb99b46ecf74a8baf25d3310f06ef5129bd6347f07bf99045e9fdfee0a1c25fe2a9d08a5418561eb80de12d35fa636f735f3b3d7edb1c8fd3bdfc73225569d0c29cb5a25893a1b27bb3b6d47408ad4753971d5807da6bd4f21bfc49b9bf6008e72e89e257ef72d6a9f05323c71bcea411104f32d08d38eb3f5813fd0526571a00d23000b7a725f00000000000000000000000000", {0x20, 0x61, 0x3132564e, 0x0, 0x148, 0x4dd, 0x9, 0x40}}) recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000040)=""/91, 0x5b}, {&(0x7f0000000340)=""/254, 0xfe}], 0x4, &(0x7f0000000440)=""/160, 0xa0}, 0x40) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x1) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000240)={0x1, 0x0, {0x0, 0x1, 0x100f, 0x2, 0xb, 0x0, 0x0, 0x1}}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000002c0)) r3 = request_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\xf9securitynodev\x00', 0x0) keyctl$unlink(0x9, r1, r3) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x8) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 609.105670] binder: release 25771:25773 transaction 113 out, still active [ 609.112719] binder: undelivered TRANSACTION_COMPLETE 04:41:09 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{r1, r2+10000000}, {0x0, 0x1c9c380}}, &(0x7f0000000140)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000180)=0x3) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa03000000ffff08004500005c0000000000019078ac1414bbac141411050490c303773f00400000000000000000010000ac1414aaac141448082c0000000a000000000000e000000200000000e00000010000000000000000000000000008000000000000"], 0x0) 04:41:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200000, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@random={'security.', 'cgroup!-GPL+-cgroup\x00'}, &(0x7f0000000240)='/dev/sequencer\x00', 0xf, 0x0) getrandom(&(0x7f0000000140)=""/177, 0xb1, 0x3) 04:41:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1000, 0x111000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000040)) 04:41:09 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0xfffffffffffffffd) 04:41:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000000c0)) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0xffffffffffffff85) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)={0x184, r2, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb91}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd58d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x70, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffff7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb282}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x13d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004090) r3 = accept$alg(r0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x202800, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r3, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="32f2fa566a9c26da1e9dd45b7bc85481d58f43f3758a0c22519290c6ce9a52853b55069f9594ed2b1bc89f59382593ba7d836c1269066d77aad264e92882f6ee09447d28dfc30e5654704666fea4d955e61026d40b80d4a17014b41678ff7bba69f2b26e85c5a21ec48a63ecb4ebc74f0c21aed7ff2d7b06accf6b01a402e584b8fec4ee29da639a9198d35e752364f01911505c1131e8c692b20d6039ce85517c23f2a1030e722f41e48cf1338b724c5036d2fc06d339f9070f149daf0fc8ba0eefc49acacfed278d488f4cbd5f5710ebba3ef94cc32d7a8619461c201f507071af5d9c6dfd735a9f98c4834f892516474930"}, {&(0x7f0000000140)="05aa32ca3c0555b6888fecbc262dd46483516f400905183621d6495d4228f8cba108ca01f036727136eb5cb6e6c8d83880528dd9c59c21"}, {&(0x7f0000000540)="72b4ed3b11eaa3e4b07af5e31c05241e65361576c5cb4a2bc42ab699ef99c2a983551577a34420b8786540bc65a169126f287b85ae36b465850d4f8ac6a20ae4bee52f194e965938af075c14a7abcc3feeb51cf66ccac083d1e83d4c00e7dd69460cc85d242cc5e6b01fa14222eefe93bbb1959b5a6d85d29c868e822a00c007a42b848b86afa9efb44e215ebac1d6899af03e3def04e38d1b112f294d5071d202bbf054f1258b496cada3125551b158761d3d88d57d8c1f8e1c75a9ad021686b7f51240d302311c031727efe282677f99"}], 0x349, 0x0, 0x0, 0x10}], 0x1, 0x8001) readv(r3, &(0x7f00000007c0), 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0xa199d2c82efcee20, 0x0) 04:41:09 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x90100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xff) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c000000000000dfffffffe000000200000000e000000100004000000006007f0000010000000000000000"], 0x0) fcntl$setflags(r0, 0x2, 0x0) 04:41:09 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', @ifru_addrs=@in={0x2, 0x4e20}}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 609.579872] binder: release 25811:25814 transaction 114 out, still active [ 609.587076] binder: undelivered TRANSACTION_COMPLETE [ 609.626858] binder: release 25811:25814 transaction 115 out, still active [ 609.634000] binder: undelivered TRANSACTION_COMPLETE 04:41:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) 04:41:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0xfffffffffffffff8, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00', r2}, 0x10) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x7f, 0x200000) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x100, 0x200) 04:41:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept$inet(r0, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000000300)=0x2a6) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000340)={r2}, &(0x7f0000000380)=0x8) r3 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x7, 0x101000) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000200), 0x4) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r5, 0x3ff}}, 0x18) [ 609.874983] binder: release 25833:25835 transaction 116 out, still active [ 609.882102] binder: undelivered TRANSACTION_COMPLETE [ 609.902482] binder: release 25833:25835 transaction 117 out, still active [ 609.909590] binder: undelivered TRANSACTION_COMPLETE 04:41:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={r2, 0x2000000000}) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000140)) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000200)='syz1\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) r5 = getegid() chown(&(0x7f0000000040)='./file0\x00', r4, r5) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@loopback, 0x76, r3}) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000340)={0x0, @reserved}) 04:41:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xe, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffe32, 0x0, 0x0}) 04:41:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0xfffffffffffffd6a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x9, &(0x7f0000ffa000/0x4000)=nil, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) timer_create(0x5, &(0x7f0000000180)={0x0, 0x31, 0x0, @tid=r1}, &(0x7f00000001c0)) r2 = semget(0x1, 0x3, 0x10) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000200)=[0x6b0, 0x0, 0x200, 0x7]) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x40400, 0x0) read$eventfd(r3, &(0x7f0000000280), 0x8) 04:41:10 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1f, 0x181000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 610.140098] binder: 25858:25859 ioctl c0306201 20000440 returned -14 [ 610.172722] binder: release 25858:25859 transaction 118 out, still active [ 610.179742] binder: undelivered TRANSACTION_COMPLETE 04:41:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:41:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008041) 04:41:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 610.467016] binder: 25876:25877 transaction failed 29189/-22, size 0-0 line 2834 04:41:10 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c0000000000e000000100000000000000007f0000010000000000000000"], 0x0) [ 610.514535] binder: undelivered TRANSACTION_ERROR: 29189 04:41:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@empty, @local, @empty, 0x9, 0x8, 0x9, 0x400, 0x3, 0x0, r2}) 04:41:10 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x6000) syncfs(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r1, &(0x7f0000000240)=[{0x101, 0x9, 0x8, 0x6, @tick=0x5, {0x7ff, 0xfffffffffffffffb}, {0x3, 0x200}, @ext={0x35, &(0x7f0000000080)="8454617c88944c7e3ca63f36824b5fa86a2bd6fec02c02bf3943cfc185eb6f14b777a79f11de75b52ef9f5d46c90410bc6c0dbe681"}}, {0x6, 0x9, 0x10001, 0x6, @time={0x77359400}, {0xfffffffffffffffc, 0x401}, {0x37df, 0x3}, @time=@tick=0xff}, {0x100000001, 0x0, 0xff5, 0x80, @tick=0x9, {0x82, 0x7ab4}, {0xaa9}, @quote={{0xfffffffffffffff7, 0x7fff}, 0x6, &(0x7f0000000180)={0x7, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, @time={0x0, 0x989680}, {0x10001000, 0x401}, {0x75af, 0x5}, @control={0x5, 0x6, 0x7}}}}, {0x1f, 0xffff, 0x7f, 0xfff, @tick, {0xd5c0, 0x7fffffff}, {0x7, 0x3}, @note={0x6, 0x948, 0x1ff, 0x98e}}, {0xff07, 0xffffffffffffff45, 0x3e2, 0xbdaa, @time={0x77359400}, {0x3, 0x41e}, {0x7, 0x7f}, @addr={0x400, 0x4}}, {0x9, 0x400, 0x2, 0x78e4, @time={0x77359400}, {0x6, 0x9}, {0x1, 0x4}, @time=@tick=0x5}, {0x401, 0x9, 0x1, 0x1, @tick=0x5, {0x9, 0x80000001}, {0x10001, 0x9}, @raw8={"c878bda70f397e448afd8874"}}], 0x150) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:10 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x1, 0x28, &(0x7f0000000140)="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", {0x9d9e, 0x1, 0x0, 0x5, 0x4, 0x9, 0x2, 0x3}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000001140)=ANY=[@ANYBLOB="aaaaaaaa9caaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c0000000000e705ed3f1d9859bc0200000000e000000100000000000000007f00000100000000000000008ff50bde12cb2ea841f9617c90fbaa03650d36db633b5fc96615f8d3f422b047c047271b1d94abb9a983facc960fabe5181b2a47e70eec6d5bc84216a8fb"], 0x0) 04:41:10 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@local, r1}, 0x14) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaff0063a30f43223ab42f6e6aa0e06610005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000fc8481d10bb49eae082800000000060000000000e40000020000003fe000000100000000000000007f0000010000000000000000"], 0x0) [ 610.838041] binder: release 25888:25893 transaction 120 out, still active [ 610.845171] binder: undelivered TRANSACTION_COMPLETE [ 610.871833] binder: release 25888:25893 transaction 121 out, still active [ 610.878856] binder: undelivered TRANSACTION_COMPLETE 04:41:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xf289, 0x0, 0x4, 0x10000, 0x2, 0x3e, 0xc06b, 0x136, 0x38, 0x113, 0x40, 0x7f, 0x20, 0x2, 0x32c9, 0xfffffffffffffff7, 0xab17}, [{0x7, 0x4, 0x1f, 0x3, 0xffffffffffffffe0, 0x80, 0xfb, 0x6}], "33936f79ab4b6becd4247c858708b5d99bb3cab6fc309983cfde4bbe7e90d327dfba0208a5b2f0d30a5afbc9aaf1da7b6c1fedb1b77931a04a7013f359e0d4611782b42e43ac03667a55854769fba88f80797fdc62dbe1c3f06279f01163e8a031055eec407e44388ecafd5880d2f1fcc2e9e0266ea264a0a437807326e91f15d9e66820aa66ccd928d9fa79d567f20e7391b79fa874422a847a8c8e1c934d99c116114d653b994a9b73c34a639473c3c1f5e6c9c9402956ce"}, 0x111) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) fdatasync(r0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @broadcast, [{[], {0x8100, 0x9, 0x8, 0x3}}], {@canfd={0xd, {{0x4, 0x7f, 0x90000000000, 0x8000}, 0x1f, 0x1, 0x0, 0x0, "7e5f95afdd1a4ed10e96088fb2b11604eb684ebea9d49a3f9e48b808044ff4705eeff357581c43e536f649a993764980a34ff4104d887070794ad42ca71f6dfc"}}}}, 0x0) 04:41:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000540)=""/210, 0xd2}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000640)=""/206, 0xce}], 0x6) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 04:41:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, &(0x7f00000031c0)=[{{&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000140)=""/118, 0x76}, {&(0x7f0000000080)}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/149, 0x95}, {&(0x7f0000001280)=""/15, 0xf}, {&(0x7f00000012c0)=""/69, 0x45}], 0x6}, 0x6}, {{&(0x7f00000013c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001440)=""/205, 0xcd}, {&(0x7f0000001540)=""/147, 0x93}], 0x2, &(0x7f0000001640)=""/244, 0xf4}, 0x4}, {{&(0x7f0000001740)=@x25, 0x80, &(0x7f0000001840)=[{&(0x7f00000017c0)=""/123, 0x7b}], 0x1, &(0x7f0000001880)=""/210, 0xd2}, 0x7}, {{&(0x7f0000001980), 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a00)=""/169, 0xa9}, {&(0x7f0000001ac0)=""/26, 0x1a}, {&(0x7f0000001b00)=""/238, 0xee}, {&(0x7f0000001c00)=""/20, 0x14}], 0x4, &(0x7f0000001c80)=""/90, 0x5a}, 0x3}, {{&(0x7f0000001d00)=@x25, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001d80)=""/195, 0xc3}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/24, 0x18}], 0x3}, 0x5}, {{&(0x7f0000002f00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x80, &(0x7f0000003100)=[{&(0x7f0000002f80)=""/182, 0xb6}, {&(0x7f0000003040)=""/110, 0x6e}, {&(0x7f00000030c0)=""/54, 0x36}], 0x3, &(0x7f0000003140)=""/81, 0x51}}], 0x6, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000003340)={@loopback, 0xa8b, 0x2, 0x3, 0x5, 0x6, 0x6}, 0x20) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x401, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000003380)={0x7, 0x7, 0x2000}, 0x4) 04:41:11 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x4) 04:41:11 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f00000000c0)) r1 = socket$alg(0x26, 0x5, 0x0) syslog(0x0, &(0x7f0000000440)=""/221, 0xdd) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x2ce, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xfffffffffffffffd}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) sendmmsg$alg(r2, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 611.224322] binder: 25912:25913 transaction failed 29189/-22, size 0-0 line 2834 04:41:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4(r0, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000001c0)=0x80, 0x800) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x7f, &(0x7f0000000080)=0x4) write$P9_RWALK(r1, &(0x7f0000000200)={0x8b, 0x6f, 0x2, {0xa, [{0x80, 0x3, 0x1}, {0xa, 0x4, 0x2}, {0x2, 0x0, 0x7}, {0x2a, 0x2}, {0x18, 0x4, 0x3}, {0x11, 0x1, 0x2}, {0x10, 0x2, 0x1}, {0x0, 0x2, 0x7}, {0x0, 0x1, 0x6}, {0x40, 0x4, 0x8}]}}, 0x8b) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @dev={[], 0xf}, [], {@canfd={0xd, {{0x1, 0xffffffff7fffffff, 0x2, 0x4a}, 0x3a, 0x2, 0x0, 0x0, "d256406eb30170fbceac228870235242b3586f08fa9ed096f46dece05384face88fecabd559c782fe460982ddb9b3fbe937eb5fb4b14f6f331ecd3a666044a1f"}}}}, 0x0) [ 611.324409] binder: 25912:25913 transaction failed 29189/-22, size 0-0 line 2834 [ 611.324456] binder: undelivered TRANSACTION_ERROR: 29189 [ 611.344305] binder: undelivered TRANSACTION_ERROR: 29189 04:41:11 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaadfffffffffff08004500005c0000000000012ae648f0202b10bb141105049078000000004000000000000000ac1414aaac14144808608a0ddbce13000000000000000000000000003783000000e000000200000000e000000100000000000000007f000001000000000000000000000000"], 0x0) 04:41:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = getpid() ptrace$setregs(0xd, r1, 0x1000, &(0x7f0000000000)="f6ad309e422671cb5b58d1ad84ae3158b9166333") 04:41:11 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, &(0x7f0000000080)=ANY=[], 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 04:41:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x80000) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x17, 0x10000, 0x7fffffff, 0xffffffff, 0x0, 0x924e, 0x141, 0x4, 0x4, 0x0, 0x3, 0x7fffffff, 0x80000001, 0xe42e, 0x5, 0x3, 0x9, 0x0, 0x644, 0x3, 0x3, 0x8, 0x37, 0xfffffffffffffffd, 0x4, 0x409c, 0xffff, 0x0, 0x0, 0xff, 0x0, 0x3f, 0x4, 0x1f, 0x0, 0xfff, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x100, 0x100, 0x4, 0xa, 0x401, 0x401, 0x10000000000}, r2, 0x5, r3, 0x2) 04:41:11 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x585cc0, 0x0) write$P9_RSTAT(r0, &(0x7f0000000040)={0x63, 0x7d, 0x2, {0x0, 0x5c, 0x4, 0x0, {0x0, 0x3}, 0x0, 0xfffffffffffffff7, 0x3, 0x5ca2, 0x0, '', 0x0, '', 0x8, 'vboxnet1', 0x21, '}systemvboxnet1#nodev-!\xfccgroupGPL'}}, 0x63) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 611.685107] binder: release 25938:25939 transaction 124 out, still active [ 611.692404] binder: undelivered TRANSACTION_COMPLETE 04:41:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f0000000180)=@md5={0x1, "d00b28134625769c93ca5449687c886d"}, 0x11, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 04:41:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x1c, 0x0, &(0x7f0000000000)=[@dead_binder_done, @exit_looper, @enter_looper, @decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) 04:41:11 executing program 2: syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f00000100000000000000000000000000"], 0x0) 04:41:11 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100000001, 0x22000) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) [ 611.950701] binder: 25955:25958 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 611.958435] binder: 25955:25958 DecRefs 0 refcount change on invalid ref 1 ret -22 04:41:12 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4140, 0x1d2) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000140)={[], 0xfffffffffffffe00, 0x800, 0x6, 0x0, 0x80000001, 0x100000, 0xf000, [], 0x10000}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup3(r0, r0, 0x80000) write$apparmor_exec(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='exi\x00\x00\x00'], 0x6) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) msgget(0x1, 0x6) 04:41:12 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x40, 0x101100) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x1f8, 0x7, &(0x7f0000000040)=0xfd0}) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$KDENABIO(r0, 0x4b36) 04:41:12 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000040)=0x7, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:12 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000003300)=@sack_info={0x0, 0xffffffffffffffff, 0x101}, &(0x7f0000003340)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000003380)={r1, 0x4}, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) [ 612.365250] binder_alloc: 24054: binder_alloc_buf size 4294967296 failed, no address space [ 612.374071] binder_alloc: allocated: 528 (num: 54 largest: 32), free: 11760 (num: 1 largest: 11760) [ 612.383504] binder: 25982:25983 transaction failed 29201/-28, size 4294967296-0 line 2973 04:41:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/176) prctl$PR_SET_TIMERSLACK(0x1d, 0x7fff) [ 612.461036] binder_alloc: 24054: binder_alloc_buf size 4294967296 failed, no address space [ 612.469848] binder_alloc: allocated: 528 (num: 54 largest: 32), free: 11760 (num: 1 largest: 11760) [ 612.479187] binder: 25982:25990 transaction failed 29201/-28, size 4294967296-0 line 2973 04:41:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="0c997d63e8b7be9c4757080fb578e07e", 0x10}], 0x1}], 0x1, 0x1) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000040)={0xe, 0x3, 0x1, 0x8, 0x39, "3736740e0983ffdb9afcd85b08fbb01fd8c6aa48fbf30ea9c089c47d2769749aed2f89d97a030f47c4f8f1f3cd72db254143558ee40291c45c"}, 0x45) name_to_handle_at(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0xec, 0xf261, "ca25606d0f0b56d5a58ef92dd445ba05aab8e944b562d73675c4192086fa18777a899f6362b27a2cc2de603178d8e03aa1609cad4de52ec6303a63fa7de63dd5d0f2a0ed0b7919f18969269621f05774a249f38f381de59c746de066e6bb05a8388b8f38176ac08044109c2a8c3c9b97486c6f8a39d33e77a844beb7838bb7dae71a637b8216de4665066d0826d5ee46dfca29aa76d42bfcc2ee1c2607876c738bd9f4db2c7623399489654409a56aceb165f5e1d0cdb2c983f61691dbfdef347d9db69e2976d8c1a8e7c9284d3b3d374d7405bab4bc270299e23c11555c72016071edd5"}, &(0x7f00000001c0), 0x400) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) [ 612.595266] binder: undelivered TRANSACTION_ERROR: 29201 [ 612.600800] binder: undelivered TRANSACTION_ERROR: 29201 04:41:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x4, 0x7}) 04:41:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f0000000140)) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x7, 0x2}, {0xf3b}], r1}, 0x18, 0x3) 04:41:12 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bridge0\x00', 0x3}, 0x18) 04:41:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80080, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ce6264e5d7acf9376cff35de9beff2a28f41c347ac7ad06705e0472855527f29b073aef0c44380e5740b912e548f6a4398d9fa68406c75ffaada34e54e60f7ed1352fcea4e396e2fbbd48e59911fedde09252f4c4155efcb29f7fe8e2cecf26463670e"], 0x0, 0x0, 0x0}) 04:41:13 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x40040) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r1, 0x2}) 04:41:13 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@remote, @broadcast, [{[], {0x8100, 0x3ff, 0xffffffffffffffc0}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:13 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x200000, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'nlmon0\x00', {0x2, 0x4e21, @broadcast}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet6(r0, &(0x7f0000000200)=""/44, 0x2c, 0x100, &(0x7f0000000240)={0xa, 0x4e24, 0x4000000000}, 0x1c) write$cgroup_type(r0, &(0x7f0000000280)='threaded\x00', 0x9) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r2 = accept4(r1, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0xfff, 0xffffffff}, @window={0x3, 0x8, 0x2}, @window={0x3, 0x6, 0x3}, @window={0x3, 0x8105, 0x20}, @sack_perm, @timestamp, @mss={0x2, 0x3}], 0x7) 04:41:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x200000, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0xffffffff}, 0x10) r3 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000140)=0x3, 0x16c) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00630800000000000000000000000000000000000000000000002300000000000000f354a7832f233cce00000000000000001000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 613.273731] binder: 26045:26046 unknown command 549632 [ 613.279185] binder: 26045:26046 ioctl c0306201 20000440 returned -22 04:41:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'lowlan1system'}], 0xa, "aab59cf24134d17aaa33e0667004ebf9965a26ca383484f2b3bef4b5a74114d1bbb74ccd81c64dd36a01761d806a67e3f658762ff173355ad85ab289b5ab54d15fe9daceee76e65f4aa4dd7769165060db459ad0510580552f7e8773a5a75ede66b7962a1eb6b869b4c4e2db1fe8395be8ef3290ee04250a5d19189bd37e4df25eba044cc279aeca430e06bb15fe765dbea6"}, 0xab) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, 0x5, 0x3, 0x4, &(0x7f0000ffd000/0x1000)=nil, 0x10ce}) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1000000000000000) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}}, &(0x7f0000000040)=0x84) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000400)) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)=[0x40, 0x7, 0x6, 0x7, 0x3c5e, 0x8, 0x17ad7474, 0x2, 0x3, 0xfffffffffffffffd]}) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={r3, 0x8, 0x6, [0x40, 0x80, 0x3f, 0x6, 0x0, 0x8]}, 0x14) 04:41:13 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x20, 0x10, &(0x7f0000000140)="c06bb7427797a34d6fa791562b99bbee9ce4a01a77d2e4aa5f78848f0bbfa5c3aebb3d9a8f8311d2d304ed0e95218de8363d29f003bcf008875761fa56f347cc5f397d12a6ba24c0ae348bf949e7b835ede68027aaf65dd7546dbb897c82471c6a7ebd93f0a1cc1b3dffa753baa03197a90b325eb3590ab6bb5a12c72766e7cd59079c2ac73de1f34ffbcaad087072ded392022e23fbd37018b048962598a51bb96ac4c195bcfb1443c83d50cb7cfbc69250e5c24605c961634ceda8dfdf6cd05d7566eab9f0c69f41a896fef6aa00c3f6dc", {0x7f, 0x6, 0x3a337153, 0x3, 0x2, 0x7, 0x3, 0xdc}}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x6ae4) 04:41:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x29}, @local}, 0x8) 04:41:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x5, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16, @ANYRESDEC=r0, @ANYPTR, @ANYRES32=r0], @ANYBLOB="68ce501b35e57e0c8075cc4980bbe4f63500108ff92b08130db7c718eb8599f19209843eeca71c26", @ANYRESOCT, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESHEX, @ANYRESDEC]], @ANYBLOB, @ANYRES16=r0], 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x40) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000240)=""/139) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400100, 0x0) 04:41:13 executing program 1: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1f, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000100700001801000090040000000000001801000090040000400600004006000040060000400600004006000004000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0001801000000000000000000000000000000000000000000000000280069707636686561646572000000000000000000000000000000000000000011800000000000002800434c41535349465900000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500378030000000000000000000000000000000000000000000000005001686173686c696d697400000000000000000000000000000000000000000265716c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000636b257e000000003f00000000000000010000000200000005000000ff0f0000ff00000040f800000300000000000000380172740000000000000000000000000000000000000000000000000000000001000000195a000000020000000100000405000000000000000000000000fffffffffffffe880000000000000000000000000101fe8000000000000000000000000000bbfe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000ffffac1414aafe880000000000000000000000000101fe80000000000000000000000000001ffe8000000000000000000000000000aaff020000000000000000000000000001fe88000000000000000000000000000100000000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000ffff7f0000010800000028004e46515545554500000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008801b001000000000000000000000000000000000000000000000000900073726800000000000000000000000000000000000000000000000000000100ce06ffebdb0000fe8000000000000000000000000000bbff02000000000000000000000000000100000000000000000000ffff00000000ffffff0000000000ffffffffffffff00ffffff00ffffffffffffffffffffffffffffff20ffffffffff000000ffffffff080010000000000030006672616700000000000000000000000000000000000000000000000000000000000008000000ff0700001701000028004e465155455545000000000000000000000000000000000000000000000302000100020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x770) 04:41:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000040)=0x1c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x1, 0x4ab}, &(0x7f0000000140)=0x8) r3 = syz_open_dev$midi(&(0x7f0000000500)='/dev/midi#\x00', 0xa1, 0x80000) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000540)) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000002c0)=""/143, 0x8f}, {&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000000440)=""/105, 0x69}], 0x4) r4 = dup2(r0, r1) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e22, 0x9, @ipv4={[], [], @broadcast}, 0x7}}, 0x80000000, 0x7}, &(0x7f0000000240)=0x90) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) ioctl$NBD_DISCONNECT(r4, 0xab08) 04:41:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@remote, @rand_addr, 0x0}, &(0x7f0000000200)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in6=@mcast1, 0x4e20, 0x0, 0x4e24, 0x662, 0xa, 0xa0, 0xa0, 0x7f, r1, r2}, {0x2, 0x1ff, 0x6, 0x401, 0x4, 0xfffffffffffffffd, 0x9, 0xffffffffffffffff}, {0x5, 0x81, 0x2, 0x9}, 0xffffffffffffffe0, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x29}, 0x4d4, 0xff}, 0x2, @in6=@mcast2, 0x3503, 0x3, 0x2, 0x0, 0x4, 0xff, 0x5}}, 0xe8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1) 04:41:13 executing program 1: delete_module(&(0x7f0000000080)=')\x00', 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000180)={0x2, [0x0, 0x0]}) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xfe, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, &(0x7f0000000140)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x28, &(0x7f00000000c0)}, 0x10) 04:41:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x1, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1ff, 0x8000, 0x1, 0x4}, 'syz1\x00', 0x45}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') ioctl$SCSI_IOCTL_SYNC(r2, 0x4) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x7, 0x2, 0x0, 0x3, 0x19, 0xffffffffffffff99, 0x1000}, 0x1c) 04:41:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7fe74c4ee290000000007da2c8c9f49c4f4230529d6941583b8c1612786908655d4e1d310e524467c8a164"], 0x2b) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/1, 0x200000c1}], 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 614.074610] binder: 26088:26089 got new transaction with bad transaction stack, transaction 129 has target 24054:0 [ 614.085376] binder: 26088:26089 transaction failed 29201/-71, size 0-0 line 2884 [ 614.124999] binder_thread_release: 2 callbacks suppressed [ 614.125021] binder: release 26088:26089 transaction 129 out, still active [ 614.137652] binder_release_work: 2 callbacks suppressed [ 614.137661] binder: undelivered TRANSACTION_COMPLETE [ 614.148317] binder: undelivered TRANSACTION_ERROR: 29201 [ 614.164075] sg_write: data in/out 37054/1 bytes for SCSI command 0xe-- guessing data in; [ 614.164075] program syz-executor2 not setting count and/or reply_len properly 04:41:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) 04:41:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000140)=0x4) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:14 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/vga_arbiter\x00', 0x38440, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000001100)={0x99, 0x7, 0x6, 0x4273, 0x0, 0x5, 0x7}) syz_emit_ethernet(0x43a, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001080)=@buf={0x1000, &(0x7f0000000080)="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"}) 04:41:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400000, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:41:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:14 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaafffdffffffff082045000073ec1f0c1f0ffc7d092cc820b2c2a25c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000efc93990b5b884eb62a6b3e0000002"], 0x0) [ 614.385791] binder: release 26109:26111 transaction 131 out, still active [ 614.393018] binder: undelivered TRANSACTION_COMPLETE [ 614.416382] binder: release 26109:26111 transaction 132 out, still active [ 614.423487] binder: undelivered TRANSACTION_COMPLETE 04:41:14 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff07000000000000000000000000019078ac1414bbac1414110504902d45907800000000400000000000000000010000ac1414aaac141448082c000022c3717c00000000000000006000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) 04:41:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000080)=0xd7f) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:14 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e018000100000000000000007f0000010000000000000000"], 0x0) 04:41:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x100, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) fstatfs(r0, &(0x7f0000000000)=""/58) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x4, 0xde392fc, 0x1}}, 0x28) socket$caif_seqpacket(0x25, 0x5, 0x4) 04:41:14 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x13fac00000000, 0x0) [ 614.732029] binder: release 26129:26131 transaction 133 out, still active [ 614.739121] binder: undelivered TRANSACTION_COMPLETE 04:41:14 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x165, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff81000700000c010000a00001000a48c6eb4866006f214bd3e470e007"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x521002, 0x0) [ 614.773048] binder: release 26129:26132 transaction 134 out, still active [ 614.780070] binder: undelivered TRANSACTION_COMPLETE 04:41:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xffffffffffffff1e, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00e3404000c3d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 04:41:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2710e2d69cc92e72133b6438ff0765766988dc19aa984cca1af4a7458deb5e8fa62e00f488efc543bd5361b3b7f75d44fa5e6edbe3f5bc42dddf6c448aba389c6f5805eae0021f730ebec3ae01cf35ee1898e0a0e050c1ee4abab5933747587b934354c38c961ccda173f1e38abf693c3e9ab2681b383ad9ff8faeec4508f70cfa8b8699733d93aa889ede0dbaa0a86cf45b4acec8cba", 0x98) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) ioctl(r0, 0x8000, &(0x7f0000000440)="27d77cff736d1672866938bd0dbf62171cc1c3340644bb34ac75172efeeabbc031dc7058d56a8652d8818fcf050fbbd68ba01bacb983737ee78d72eaeddf1c6b3251871fa667eb2753954a5619c5a0a67d6444f0ae0c8a1d50d957c2f6da10079e90033145408fa9ba5196c4af0fe0bad14bf5d1ab7a0a3fb9ed21598d8a01c62476b3d8303fa95e63e538f6de2b45fb27cb357faf6b73ec7caa3ad27c74018d2e1916ef5594913ae0c7d32b79dab44b590cc00f9c4bb681592f2a4e083a42dd583f39982ee16191f83097fc7bd90e74cbf8a196c6f1930642a1e26e5a2bc5b5db41fb48a1aaca24476a5dc621") 04:41:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) finit_module(r0, &(0x7f0000000140)='/dev/cuse\x00', 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa93ffffffffffff08004542061294f01e5aeb00005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e0000001000000000000e444ad4b00e2cd98e37369"], 0x0) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x80000001}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000180)={0xcb7}, 0x1) io_setup(0x3, &(0x7f00000001c0)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) 04:41:15 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x203, &(0x7f00000000c0)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000040)=""/60) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:15 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_GET_THP_DISABLE(0x2a) pipe2$9p(&(0x7f0000000000), 0x4000) syz_emit_ethernet(0xfffffffffffffd18, &(0x7f0000000240)={@broadcast, @broadcast, [{[], {0x8100, 0x20, 0x1ff, 0x3}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getdents(r0, &(0x7f00000002c0)=""/4096, 0x1000) 04:41:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x119000, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e23, 0x4, @mcast1, 0x1}}, 0x0, 0x10000, 0x0, "68196ab3e74fc46f8cc8b28bc8bdf547253104eb3a82141b0fd8fb27c81f3f01872171ba02b65eb67b0c0e0586cb84d8a9fa0a8248bfd8b243c23fd0869f889d38d545bb78f1659df2db9936f0de2fdb"}, 0xd8) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) fcntl$setsig(r0, 0xa, 0x3e) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000de000000000000000000000000000000000000000000009757acce0f00000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 04:41:15 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x3, 0x3, 0x200, 0x0, 0x8}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:15 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20200, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@broadcast, @in6=@initdev}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac14141105049078000000004000000000005a0c00000000000000000000e000000200000000e000000100000000000000007f00000100000000000000fcffffffffffffff00000000000000"], 0x0) 04:41:15 executing program 5: write$9p(0xffffffffffffffff, &(0x7f0000000240)="7c4ee63dddc340da2d8aacfae271112808063609a8a78a9d306213c1754ac320301c75f1801e93af0e36a89ceb1efdf06134102a47f2c07f3a30c6164fbb7bde4ba0df83b529378358715d000a1aef3e7dcf6e54009ec6522af1b2eb4fcc0d3af6c4291ffa1d7cf3c0eda6870eeae138591d40741ac4424e0eaf8f148d25cf618bd59a", 0x83) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000300)={0x8000, 0x6, 0x1, 0x200}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0xd000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="37ba51e90f31a0a9a6"]) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x7004, 0x8000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) r3 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)) recvfrom(r3, &(0x7f0000000100)=""/138, 0x8a, 0x40, &(0x7f00000001c0)=@nl=@unspec, 0x80) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = shmget(0x2, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r4, 0x3, &(0x7f0000000000)) 04:41:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x200002, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000000c0)) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 615.454848] QAT: Invalid ioctl [ 615.467882] QAT: Invalid ioctl [ 615.495589] QAT: Invalid ioctl [ 615.530688] binder: 26177:26181 ioctl 81009431 20000000 returned -22 [ 615.537682] QAT: Invalid ioctl 04:41:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) [ 615.612580] binder_alloc: 24054: binder_alloc_buf size 67891910552 failed, no address space [ 615.621233] binder_alloc: allocated: 576 (num: 60 largest: 32), free: 11712 (num: 1 largest: 11712) [ 615.630645] binder: 26177:26181 transaction failed 29201/-28, size 0-67891910551 line 2973 04:41:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e22, @multicast2}}) 04:41:15 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xfffffffffffffcca, &(0x7f00000000c0)={@random="5e0977136d26", @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000240)={r3, r4+10000000}) clock_settime(0x0, &(0x7f0000000140)={r1, r2+10000000}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x7fff, &(0x7f0000000080)=0x2) 04:41:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0xffffffffffffffd0}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 615.764455] binder: 26177:26181 ioctl 81009431 20000000 returned -22 [ 615.843964] binder_alloc: 24054: binder_alloc_buf size 67891910552 failed, no address space [ 615.852733] binder_alloc: allocated: 576 (num: 60 largest: 32), free: 11712 (num: 1 largest: 11712) [ 615.862132] binder: 26177:26190 transaction failed 29201/-28, size 0-67891910551 line 2973 [ 615.936997] binder: undelivered TRANSACTION_ERROR: 29201 [ 615.944367] binder: undelivered TRANSACTION_ERROR: 29201 04:41:16 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) 04:41:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x80000, 0x0) 04:41:16 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) sched_rr_get_interval(r1, &(0x7f0000000140)) r2 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r2, r2, 0x2e, &(0x7f0000000040)={0x6, 0x7f, 0x80000001}) 04:41:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 04:41:16 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 04:41:16 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x1df, &(0x7f0000000140)=ANY=[@ANYBLOB="3a023756462e0180c200000386dd691b1d3b01a93b0400000000000000000000000000000001fe880000000000000000000000000101b716000000000000000100c910fe8000000000000000000000000000230109000000000000000000037aed49264c089703172f1ec0768c3c5e4d1470e4c1df17c7a384eb49890d682e6607ab2375441d87fd5d4297ef4f63fe5a4ee8dcb203a88ce61cc54bb2e0767313336b319264957d89fae691b74cd1a92d53fe124ef7ba78904b615584fd5d7219ef53e01b003a1ca1793350a5d6487df0f63c0d27c311e653716e040100050200050103000000c204ffffffff010100c204000000020032050000000000000401f2040109c20400000004070800000006002004000103000000c910ff010000000000000000000000000001000000ff0800000000000007400000007f0e01090001040000000000000600000000000000080000000000000001800000000000000600000000000000d37f00000000000001000000000000000000000000002e04010100000000ff020000000000000000000000000001ff010000000000000000000000000001ff000101650000000000000000000000000000000000000200004e2200004e2400000002000000040000000100000001000000030000000000"], &(0x7f0000000000)={0x1, 0x4, [0x5d6, 0x8c1, 0x4bb, 0xca]}) 04:41:16 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) [ 616.354070] binder: release 26228:26230 transaction 137 out, still active [ 616.361154] binder: undelivered TRANSACTION_COMPLETE 04:41:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x8) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078a6c3217aac14141105049078000000003b000007eb9027577aa9eb000000000000010080000000aaac141448082800000000000000000000e000000200000000e000000100000000000000007f000001c2efbec38b800d0f069191f894305f4ca5993866b03131c0b45fab5d958607a4230ac2728e9e354cbbd1ea58e09ace4802b4ff107b3b2534e016d5f849c99d618e90b50cba1e8f59e61e8a"], 0x0) 04:41:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000240)) lsetxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64MMAP\x00', &(0x7f0000000180)='net/tcp6\x00', 0x9, 0x1) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xfffffdd6}], 0x1, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000001c0)={0x18, 0x1, 0x0, {0xbd}}, 0x18) 04:41:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4800020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x0, 0x10000, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:41:16 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c00001414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f000001000000000000000000000000000000"], 0x0) r0 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="c040bb1b7470f7625f406ae5c674d96f5cb461", 0x13, 0xfffffffffffffffe) keyctl$describe(0x6, r0, &(0x7f0000000140)=""/253, 0xfd) 04:41:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x9, &(0x7f0000000680)="684333c1b323c7708db528eb6974a31eaf1b058dd10b9cbdaa9a7ab953101c937a15d894bdeeecf9843d98b7cde7cf95cbd1d9a71d5b199a8eb19628a489ad47f7521676c3a0404ec2c7194d21cfbfcf85528e5bbe8d634746361b9f39a3576f11d9743448b62dbd6af28f24259b6f041f91c65d47cc6eb3a1df3c4311a619ab03f83db291651729c267875e3951242310cd2f755fdd0ed1d37aa1026f16c1cbe78ab46affaf4183a6f156df8bc7c796e097a03a151d5ba40ce5b8b4af5bc85a2b8e69defaa50e10d9db") r1 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0xac6d, 0x80943) ioctl$KDDELIO(r1, 0x4b35, 0xb6) syz_emit_ethernet(0x2f2, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) r2 = dup(r0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0xfffffffffffffffd) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vga_arbiter\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000580)={0x0, 0xf08}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000600)={r4, 0xa, "4ed49fd4a32b65bc2e04"}, &(0x7f0000000640)=0x12) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb07e44500005c0000000000019878ac1414bbac14141105049078000000004000000000000000001448082c00000000000000000000e000000200000000e00000010000000000000004000000010000000000000000"], 0x0) r5 = creat(&(0x7f0000000480)='./file0\x00', 0x1) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x20480, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000500)=r6) [ 616.702960] binder: release 26245:26248 transaction 138 out, still active [ 616.710121] binder: undelivered TRANSACTION_COMPLETE [ 616.747860] binder: release 26245:26251 transaction 139 out, still active [ 616.755022] binder: undelivered TRANSACTION_COMPLETE 04:41:16 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x80000) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0xba20, 0x6, 0x7ff}) lseek(r0, 0x0, 0x2) 04:41:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:16 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000700)) ioctl$TCFLSH(r1, 0x540b, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaff7fffffffff08004500005c0000000000019078ac1414bbac14141105f48f7800400000000000000000010000ac14a1f2a9ac141448082c00000000000000000000e000000200000000e040000100000000000000007f004aa87c7f0000000000171747231fd91862703eecbf2ddf696d23d00977eee343290e51eff27e062423ad56660ccebe0b00000000000046bd1e68c25ef9b2b2cd91fe3a0717df5034000000"], 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x3, 0x200) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000140)={{0x8, 0x7, 0x400, 0x3, 'syz1\x00', 0x380000000}, 0x0, [0xb84, 0x9, 0x400, 0x80000001, 0x71c, 0x523, 0x7f, 0x0, 0x80000001, 0x1ff, 0x8, 0x1, 0x2, 0x1, 0x32, 0x4000000000000, 0x7, 0xfffffffffffffffa, 0x7fff, 0x5, 0x1, 0xdcb, 0x2, 0x401, 0x100000001, 0x4998, 0x1, 0x9, 0x100000001, 0x1d, 0x0, 0x1, 0x0, 0x4, 0xfff, 0x100, 0xffff, 0xd54, 0x401, 0x0, 0x2, 0x80, 0x5, 0x0, 0x9, 0x1, 0x6, 0x0, 0x800, 0xfffffffffffffff9, 0x10001, 0xf4, 0x7fff, 0x9, 0x1, 0x0, 0x6, 0x3f, 0xea21, 0x7, 0xffffffffffffffff, 0x0, 0x400, 0xae, 0x8, 0x40, 0x7fff, 0x401, 0x3, 0x728, 0x1, 0x33, 0x4, 0x0, 0x800, 0xfffffffffffffffa, 0x1, 0x8000, 0xffffffffffffffd2, 0x3, 0xacdf, 0x3e0000, 0x1, 0x5, 0x498, 0xa9, 0x80, 0x5, 0x1, 0x0, 0xc92e, 0x80000001, 0x3ff, 0x180000000000000, 0x9a8e, 0x81, 0x9, 0x40, 0x0, 0x3f, 0x1, 0x5, 0x7, 0x0, 0xbc, 0x3, 0x1, 0x2, 0x6, 0x7, 0xfffffffffffeffff, 0x1, 0x3, 0xfffffffffffffffe, 0x3, 0x5, 0x4, 0x2, 0x100000000, 0xfffffffffffffe4a, 0x58dc, 0x8000, 0xcba, 0xa82d, 0x9, 0x4, 0x8e0, 0x9], {0x0, 0x1c9c380}}) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040), 0x4) 04:41:16 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@local, @broadcast, [], {@can={0xc, {{0x4, 0x6, 0x101, 0x6}, 0x6, 0x2, 0x0, 0x0, "9f49834358c4cb2d"}}}}, 0x0) 04:41:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200002, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x402}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@newtclass={0xdc, 0x28, 0x20, 0x70bd2d, 0x25dfdbfd, {0x0, r2, {0x0, 0xffff}, {0xd}, {0xd, 0xd}}, [@TCA_RATE={0x8, 0x5, {0x0, 0x3}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x8, 0x5, 0xfffffffffffffffd}}}, @TCA_RATE={0x8, 0x5, {0x1, 0x21}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_MASK={0x8, 0x4, 0x8}}}, @tclass_kind_options=@c_cbq={{0x8, 0x1, 'cbq\x00'}, {0x44, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x8, 0xf}, 0x81, 0x80}}, @TCA_CBQ_RATE={0x10, 0x5, {0x3, 0x1, 0xffffffff80000000, 0x9, 0xc58d, 0xb007}}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x1, 0x8001, 0x0, 0x0, 0xffffffffffffff00}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7ff, 0x1, 0x5, 0x6, 0xff, 0x401}}]}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x8, 0x5, 0x401}}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0xc, 0x2, [@TCA_ATM_FD={0x8, 0x1, r0}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x40090) 04:41:17 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) process_vm_readv(0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/200, 0xc8}], 0x1, &(0x7f0000000300)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)=""/50, 0x32}], 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000080)) 04:41:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffffd, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, r1, 0x3}], 0x356, 0x0, 0x0}) 04:41:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, r2, 0x230, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x14d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd65}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40880}, 0x20000010) [ 617.246772] binder: 26287:26288 ioctl c0306201 20000440 returned -14 04:41:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x101000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)={r3}) 04:41:17 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0xffffffff, 0x4) 04:41:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000ef0000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev}, &(0x7f0000000280)=0xfffffffffffffe0a) connect$packet(r1, &(0x7f0000000140)={0x11, 0xf7, r2, 0x1, 0x2, 0x6, @dev={[], 0x14}}, 0x14) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) ioctl$TIOCNXCL(r1, 0x540d) [ 617.318090] binder: 26287:26293 ioctl c0306201 20000440 returned -14 04:41:17 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xd9, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [{[], {0x8100, 0x9, 0x200, 0x3}}], {@llc={0x4, {@snap={0x1, 0xab, "b9", "1b2e91", 0x88f8, "3c4f7ede57132c0d6818770da61ebb2691cb13be23d37b3ed5f316a78ee5edd0ffe81c4614574fa0e3e147d66498fa6e3b279fe4a57f9560e2b132338755a27aa4a3aaebb6a17b4cda1e2a3532023f967a9b1106014cd221103a91a4c9d90e805a6bd979322f48e9a97f135550e6077c798c66c870dcbdeb79b6f1ad403e3fc2563246cc428fd8d3421f90b0f5a6ec4298dfc83b1e77b31fe2491d85c32ea4d8d452cdf7d6498a1e65fe7b3ccd58ac1b9789499faa9489ae9efa42fb1d3815"}}}}}, 0x0) 04:41:17 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x5) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) socketpair$tipc(0x1e, 0x6, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r1, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x10) 04:41:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendfile(r0, r0, 0x0, 0x1) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x1c000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="4d38455b4f90cf6d94eddd7406af40e2", 0x10) r2 = msgget$private(0x0, 0x180) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000080)=""/178) 04:41:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000080)={'rose0\x00\x00 \x00', 0x8001}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x3, 'ifb0\x00', 0x1}, 0x18) syz_emit_ethernet(0xfffffffffffffc2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaa2791002d0081003d0008004500005c1c00000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac091448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) [ 617.675298] binder: 26312:26314 transaction failed 29189/-22, size 0-0 line 2834 [ 617.725279] binder: 26312:26314 transaction failed 29189/-22, size 0-0 line 2834 04:41:17 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0c004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) [ 617.773796] binder: undelivered TRANSACTION_ERROR: 29189 [ 617.788038] binder: undelivered TRANSACTION_ERROR: 29189 [ 617.814639] IPVS: Unknown mcast interface: ifb0 04:41:17 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000000004500005c0008000000019078ac1414bbac0490780000000040180000000017000001000200000000e000000102000000000000007f0000010000000000000000"], 0x0) syz_emit_ethernet(0x9c, &(0x7f0000000140)={@remote, @broadcast, [], {@ipx={0x8137, {0xffff, 0x8e, 0x1f, 0x5, {@broadcast, @current}, {@current, @random="c23ca9cfa87b", 0x10001}, "66628e221aeae9bc29a7163991e386a10598c85e75907d170e265d66a9446cbbad6a82db85b41bf74bc48909638d732d7df0e3edb8e3149589fc9e11681a7ced7c9abab33eb2ed7afd37a4a0c70fb2c71ae3f2257f53f33f94074c8488d7626b496e1ef3d56f9e9cf00558e4d4bbc02c"}}}}, &(0x7f0000000040)={0x1, 0x3, [0xb37, 0xbb3, 0x2a5, 0x1c8]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@loopback, @in6=@dev={0xfe, 0x80, [], 0x2a}, 0x4e23, 0x3, 0x4e22, 0x51, 0x0, 0x20, 0x80, 0x33, r1, r2}, {0x5, 0x1, 0x3ea00000, 0x6, 0x7, 0x6, 0x9, 0x7fffffff}, {0x81, 0x39bfa5da, 0xfffffffffffffffc, 0x4e92}, 0x4, 0x6e6bba, 0x0, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d3, 0xff}, 0x2, @in6, 0x3507, 0x1, 0x1, 0x100000001, 0x7, 0x1000000000000, 0x7fff}}, 0xe8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) [ 617.837625] IPVS: Unknown mcast interface: ifb0 04:41:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x4) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) clock_nanosleep(0x5, 0x0, &(0x7f0000000600)={r1, r2+10000000}, &(0x7f0000000640)) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffd58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x81, 0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000580)={r3}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x601, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x80000001, 0x88d6788, 0x7, 0x40, 0x80, 0x8001, 0x25bc, {0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x100000000, 0x9, 0x3, 0x7f}}, &(0x7f0000000100)=0xb0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="02002bbd7000fbdbdf2510000000080004000300000038000200080004000100010008000500060000000800070000800000080006000800000014000100e0000002000000000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780)='/dev/dlm-control\x00', 0x24000, 0x0) ioctl$EVIOCGABS2F(r8, 0x8018456f, &(0x7f00000007c0)=""/100) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000140)={r6, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x84) r9 = syz_open_dev$vbi(&(0x7f0000000680)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGBITSND(r9, 0x80404532, &(0x7f00000006c0)=""/6) ioctl$DRM_IOCTL_ADD_CTX(r9, 0xc0086420, &(0x7f0000000700)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r9, 0xc0086423, &(0x7f0000000740)={r10, 0x1}) 04:41:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xfffffffffffffff7, 0x70000) write$P9_RREADDIR(r1, &(0x7f0000000180)={0x87, 0x29, 0x1, {0x10001, [{{0x8, 0x2, 0x7}, 0x7f, 0xfff, 0x7, './file0'}, {{0x80, 0x1, 0x6}, 0x3, 0x1, 0x7, './file0'}, {{0x0, 0x2}, 0x8, 0x100000001, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7ff, 0x100000000, 0x7, './file0'}]}}, 0x87) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x1}], 0x1, 0x0) 04:41:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x68}], 0x0) 04:41:18 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x40, 0xc00) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000040)={0xa2}) [ 618.069060] binder: 26334:26335 ioctl c0306201 20000440 returned -14 04:41:18 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r1}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 618.171931] binder: 26334:26347 ioctl c0306201 20000440 returned -14 04:41:18 executing program 4: socketpair$unix(0x1, 0x8000000000000005, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='n\x05\x00p\x06\x83/d\x04\xe9-\x03') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:18 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xfd, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 04:41:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x40800, 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0) dup3(r2, r1, 0x80000) syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="0e43aaaaaaaaaaaaaaaaaabb08004500005c3b5e31fc890c900000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e0000002000000000000007f00000100aba737dfac9dac9fd5041574cae40967d2ad3d0bad05d56465fc4e97b3c2f9b0eab204cf88b95980ed841ef4684a2f600f2a28995a485863f1c3006cc81d39b91ba1d1c219467fd9abe00fa1f653f3c5207700"], 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/181, 0xfffffffffffffdd3}], 0x157, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) 04:41:18 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x94080) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000040)={0x80, 0x800, 0x200}) syz_emit_ethernet(0x0, &(0x7f0000000000)=ANY=[], 0x0) 04:41:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 04:41:18 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$getown(r0, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(r1, r2, 0x3, r0, r0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504900000000000400000000000000000010000ac1414aaac141448082c0000e100000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) r5 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@mcast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x7f, r4, r5}, {0x1, 0x3a12, 0x4, 0x732, 0xfffffffffffff6cf, 0x100000000, 0x7, 0x8}, {0x8, 0x7, 0xffff, 0x3f}, 0x101, 0x6e6bb5, 0x2, 0x0, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x18}, 0x4d6, 0x3c}, 0xa, @in6=@remote, 0x3505, 0x4, 0x2, 0x5, 0x8, 0x3, 0x3}}, 0xe8) 04:41:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) io_setup(0x4, &(0x7f0000000080)=0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x2, 0x0) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000800)="8c5d2a28b9e48fc92ff6d8f310dcc879535c118163334b9d1faefad7367cd8a71b5149598b8cd220bfb5b5af254ee9a3dfd84e67c87b9bd6f4d39e88b792342266f8d8dd38f000e6bc65cb9923116bb470c68ea47d6b509635ea26d0589abb1c76eb7660647fdd59417ccf0a1b2b5c75a89351728fb542ab5b8f0d59e9c6fe7f6445623e5b94d4b187b34af2aba2037423fd354655dcce0d923bb3496f9170c5cabf6f428d0fe355fd9b67515a650af8888fbc5c04d2c2978c7caf214d012a4f6658d00cb4e178246753461e1a44349f6ee5cda62bebd18aa72a2395a55002218ea98315a373d0050c273ad4131178b908151507263f292a1e43b246c03470691b2c14d050e7318b54edadb3b20289de39ce5f934123987619f36665bbc367913648a437b2681f852034ca0ab031a3a1c75a52d07afc46d4d71d6b31bc33546f6e64b0f761d2fde395cd86e14af663bbc2ee9610b37eab78d72203bd74bd475b939fa2a349b3a0d83d77d64c903a1566e86a32128478b374bf17495bfce3fa2d257f579ac8261a6c8f92b0dbdffc4c3c87f7878193c746fac332b502d0d61103de51c7c866ac685bd07d5b562560c1601460ed6f707cde73a75d7cc0315c0c101be10982491a9c17c41f9249a5f3b1245899f3554419b2aa152ad49b195425557c75011047571c7b45bf02b78b900d4cc5d794fd3207dd662bbc9f3184e0d4529a231d9e2813018192d433ed4f54c05cd14c9deec32384fd6c3d1d9f3744110cd1d702f4f5ba3cd8e5955704a3074dd8471b15685c57da21332ab21dd796ed2d82035c168ca2b1bd0a3af139dbc82c15b66ac5f9f93248067e2d27c8f41244ef19ed1750f54247db6fb015149a3d369ab8a42106d79451c087384f0dc869e130b732c4bd9e5699722975c76faae686d90574e61f1563fc0f402e1a676d131fb23460d4bf7193ae03608ecbd8133b8b82ca6df54434b7429d46f74db4f0e07c374c8ac152ef4dd620f0776798ec8ed1b4a46c5498378bc5f7a6d2787b0fa3721669bbd84ee918ca395e5f1d803e1dc94853b1bb56ed1564aeb6f8087148fb55d80c3519220d165cdb02920df9968fd95ce257802270eaaa8efe41f581ee79a426b4a25951d03b48eb51b35c38e36ce480f29e7e2ddfc745e302092bfc55a529db81cb30b8dc2c5de7486dfec62f5050f642970b8256b6ccd000bc81b26e4c314842cb3a16e02abd9df32be0daca7ef17ebd788059738eb961ced515d1d701cf6de35cdbd36ef61a72f45142ff3f6b0aa88b09033fb9e52b709095a684a2fe55f53db66b48f2134692ddc610655ed1cee1a1cb71883e1d0c8625644c40965b971e226d113ff8d48f80151d43deee064665a27f9d46cba3c1953839d2647be6bcf733fb061cbf51f8548956ad57785ce0fa0df13c6b1630138e6b1362ed564f20a79a1a7922025571342b124f2ed20a5c6938faa5899fec8a04397f533f56a2a0f43debd9c93c0d016ead908b9b74a09efdc0a8f79d6b82e65e15254e768c09c260f5f3afc585fb428aa205c0b68d62f2efb316c963bfba9388a3e79e83a603a2ea1a6036339558375fa434aad0072ea80395dfb9fd3a64282ada11cb181edc8ac255c06d7614b0669ff726d9b9d925da1788f8c4372b48174e9da76e1a962c988dace71f90e16ba235ab82cf814cce140c5f03b0647a3b1ac5bf048f0478a3c0e7ceb91b66ca85f87b373b78e67eccf550c24373e9d34a9417b8652a0b47cf36fd98663d3b9d6416eb0a00a87d4a02c0c26c191a1c80bb613883a4bd1b6b970f155ae2b1aeffc533741c37ec7528e1d1eb158f5fadda45f3b72c79c6400e4f41a9f4fa4c94d7760d7a7ba0173fcd27564460928411550204a840260c9b3fe7b608b898f7e1b536bb44bd33a58c9356511512b04a9cdbe9aaf983ab7709b2e33bfe24cd39d67a1b95951ab1e13513806084429a82a71e40e636a09ab6994aab555da5ee308a39825079dd3749af85035c7d60d3ee4d3d5a9369a823222f5e02015ce2b9b0a164882f60bb9c6d9e6ae723db25b76a7646ae3ba3f22c353dcd7e1756d79919908f38d80ef0a0df598269217e604f128ff584e7c7504d0c50e84d3ad9ac9e17e2dfeebd8868fb6569765278c2079ca5f621c8d5a681b1854b7ca0f7fd78d8620d30c74d3eff93091cec3a79b0e0cb6aefcc0b4b59d8697783d0c000f35826ce57816ac509d46f57b54655b5e32991401737980b45b34e059326891f8a4067ae43634e568efeee7e84f71fe1c3f9f5030e12c9c427582020fcdcb4fdec308cd34cf24c1ed50bd2d949130f4c74f8c957d9c30420ce146ef137d7b4749d6f1b64bfb41fae94c72c362a39e8a915059d8b9c0c1fe0669f2badd6b8486452710f9873487fe4366e69dab09251f1b573ac1c705bf710d3475a1f14a10cd13d3b5beb00ce7e0de0d89cfc3c6c7581ac36919753f5b862b31fbcb9fd360d2b773ecec5273f5b23deed2a06e675c265c2d171d5422bf73c5a30d715fc960fdf24aa262c8662c4fd81295132d21a91ac5701283cdd484a8c0d438e9781bfac22486afc323575c4868394514ff550c610c337cc10a2a216817e6eff7a9e857d534e4a66cddd7c4d8416465ccb4f96e74b8ca45b842ffec487da32bc09e91c06343ca5aba402d3463de15e459549deae9f137b8f39ad91e5034a4fd212e89955b8416e455e2e4fd07e9b6f2badbe5f2ef8d530f32dbac1b9c7efbad3c77511eff061adfc7f41d2c8649e9945b8412c0a5d7603bbac735cf37968e1e5738c93cd4f1682ac83968cf08d2b85298f3394019114d8be030940b4b4ae7b8e3547e7c1d2279a671cd1d6463240ea696b3f01938a8c4a2c1b0281d3c5cb01105964e8771e487b81123aca5b58f8f69d757fe3b9ea05dc149d73359d68f0ad5e8e005031e784f11bb9cc1521597dad22e81aeae02b83977d8b27b95c8cd6d0a1a137438a9fbc614eafef915f9fe979d368f1f0fd3f5aeaf05ceea552f405c8cba748ef8ee5c4640668b4f64c03866d3cd8f62395b715070f9b700e1f9f154ad5c86609dfa2f83a4ae7bb1757efd8b9a788583e4e39e2d2ae5c95c75b1632e974bfd4487fb9383ddf3790081847c6dd3858bf95f3b3ea57b10a910a96efbdbeb94294f52af68d02d6079ec07bc8843abb2f869ce04248e0d985469aacbfa299766067e7099f01303d7db729ee487cdab1b96f2f91d6d8c4250328f1b7acd26b983f238765e5fb9be3a0648266093334dbc0ebb5da2c91f497f26e32db2f9f5316b1168cb5f62661c7146bf1427e408caa9bfa76d2dd1e16886eaf8578d4783966201e27165769515ca4cb83dc3b7901d68717faa94c712e3690dae7cebacfc08ed0fe00d022e9811777bfb2a3d31e56fb9ec2d99ce5e6eca1e3b1ff8259461505be97a346dd22113944113594a2336699cb192d19a2d9c54aed89d198d65ed734460dd5929d83489f8bd9e34b725c8fb5c455bb940b5d93c10e355590f27a82e72274c6ca2f5895fcb4ded747774e0254022042953d721c3c849984c4c518574ca4c8dc5521b08e3e08d51619472fce4735c096e0dfcff55df73f70f1de0350a227ca5e20f383d54467d5f15555451724da6c2de4dce8b64857fc57fbceeb19a76854b905f0ae3e772e7e5fbf07b4c9e34946181ec9cfe464d05520a6f1f9cfc2f183bb49f97785325945f5b7b8bfe2a4a521b1b2a2a2966c5e269f48a83d895a3a708e19f1c7f341705b363fc6b06c350eb3b8ebd5fefe1e8aac5d1a93807ce5fbeef3c121d601a66df9d258ff0669fe20a877cec9749f9d61fe6dc16b73d508d10fa3ccd60327753a7fe971824f324025360b15ec8874a58e312bd7513a2737feb4e3a0586f63fc760481581660b75bdd460a7edf3668316cc2fe765dc224cbba0bffe48e77bc03f89bf1739c7fbfdfa5e2171637f45fead4cf302d4b31a38d1c7d3f4f191cae2cee0057b8b7bc3ca862bcbd110b4a35e0d5716ce11214fe59b8cf962372debebee61778208009a7482e0435fb4ed188c4bec92a1e62a02b294a314fb81ff90c621bfa446922cbab883121149221be9d885b4afca189245822c72c8797ad3e8536d0e08ca97cdd194a46f04abaaae55fe5afa23765df19c71e4c9b68ae1136c6138a7beedb5b1f2b17e071c0d0df385f7055f372a7d1386d891d47bfcf381ad04469e4daa93a6c495c1fcbb8ef3d0439b750214da34042de023f26072eff6e9feb6440d4fef5a835c6f9d851c887451047ad7687db9f2c6675f2808ce7a0f170ad42a257a0aac45bf0e4e725a1be54c2aa8dc934c7d174b305ed7b74b5997f94ebc4b71aa289dbe768e2d7124bacadddbd6243904a333aa35e1c2886ed6aa047eabeadb9e42f1568017afb65d4958f1a43576adc3d38d7564b110b5957abdc0f9199d5e2724e30e760eae1122f88145604a28ceb226c726ed25290420716f602045e4ca052e6a148328ef511637f6486dd3327dc5b959585819efff53b69e95d8e630e623e1aa8fc106465ba327ef69b9768aa22dfd52ae21d9b9cbaba47656ab8b54aab2a66b4dd13abcff96271ce862f6a082c82e6c4c684ccade4a9b73046aa1386611353ad78edb5f711dd2cfd8c2997c15b677f728e30b4ec99729e88eb7e417fcf87e1082b861e6a4e555c408ed1abb063c21380cc2dff87b4fba4e5c9fc29763bb61703b4d93cf890613d0d24221cef8f6cdcb112e61cc6786abb10a954c2e49ca7aaea9681a427a76623d3d2b4acbc2416a654e0230d79e0f44c529212df49dd78bdf8b7fb2d2921904b0ac7e460c9022ea4f1be03de2a312b4b36414404f945a3dea91bd08f10a24d524bd6d775cb2db366e5fa0102251883423e226df5ab485c643cddb386d3fa440cf2ad1b578e2dc4de45d24742b41dd92b8a59b791ac1344ab80b3133faf2edc78e4eec503b2ec344fbfd6a5403266a7a1f7055710f7b2a95fff0e0d7417688f8f1716f54d4aeb412d1acbc4891ea62214f31017a5859db787ab8a6ea275bc79aafdf94171b326a0c04f9148cedd3a866f2d84f8b686599e2e5ddcebf8b777f200de9d1a1e76197bf9f505f3ff44268fcfdcf98863f0ee851412770bbe6d8e00b0cb5856ca49bf3bd4105f8901310f475794801456035dcfda0244c50b321b9e490efd20dc1310afed70fea477a2debb10dff68b9c7b6c8b098b59a1dbf075ded829f4a388954378dd820738f916fd0cee993595852faf5dc8cfe774fd68f9ae125c817ad7d1e98034ba87efbfe02ba6201c8347f13a017bf5c6a5bd2954e3a5ee828ffb447dce80b71a5306a481b645d27ae94c12a405d3d698f2649a5195e50c27d5387fec52473ee481ad0c6a52d279eda67a04b08806ea292b2f2a43502419af8a79c1c86572e169c8250b5d3004df15b6af8c1cde8d559d623c17c740ac55f65def00e3084063f5e1a999dd612f234689b0a07f8a6d2871e3bbea1121538d5c06904abf586ef8a2432cf858e02d899b4a9ad699d1a143ff967df350866c88e6662bc5bac6714fa72f434cbf2dc083120a269618ca28b2a24a3a9d07031bc93402127a2ce7493d1c717667545b30ef817db687243cee637303ac5fa07c21e0c04de252a94656b1a9f3f4eedd5c4501a56f60c3b54aa679ebb6b518e07176b1e700e411f369a56db3ca84e75a802edc2fc793f48920ad29d2ebe21646cf0890a9525f1740576cb8d199f489b3d5d7232e94cae4c748b7831c98088107ae5ec52609fd083274674bbc716ee4471d7caf72", 0x1000, 0x100, 0x0, 0x1, r2}, &(0x7f0000000140)) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r3, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r3, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f000001000000dcd38968d7"], 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/vcs\x00', 0x400000008000, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x20000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x24}, 0x0, 0x3, 0xff, 0x1, 0x8, 0x6}, &(0x7f0000000a00)=0x20) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x892) 04:41:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) read$eventfd(r2, &(0x7f0000000180), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80002, 0x0) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f00000001c0)={0xd75c, 0xffffffffffffffff, 0x6, 0x5, 0x9c1}) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) [ 618.649118] binder: 26376:26377 transaction failed 29189/-22, size 0-0 line 2834 [ 618.765966] binder: undelivered TRANSACTION_ERROR: 29189 04:41:18 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000fa4415c0d2e740c8a5aec17ecc9a636614a1b5c9ec16864cab69341334b5badeb00100010000000000e2e50200e572bc3f08560fe304bfab146737b97aa59cf39ca5ee4495b13faaf31f49bc22452b583e11ea3dc1dc381f"], 0x0) 04:41:18 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x49b, 0x20440) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000140)={0x3, 0x0, 0x2080, {0x0, 0x103000, 0x1}, [], "4c62cfef46ca92666b782ef4a0008c317d163e81ca9f170c8485d256836adf0b10da2769a32a957fcc9e26f328bede7c624480b0f82c08dca78099745a9d359d0a6e3f5ec9bb60e0afcf7c92b1d650888ed24566b496b170dddcce18313f7b5fdcea3f31dc8959a0af8e4573115946fe7644ef2fad639cfce98f06f60ae3ba19aa34a6e1d1fa044a1d30b8656ab20c68da84230ba884323c0a18be2e442b90b288a848ac6eeaff09cd2444dd740be4c6433b89df475a6ce481cdb16e266d73657908e74322bf40f2ba70fea0dbe76b78f4a2ad729245cbf05bd576e64f25b21757ce003c5cc891edf2b0d7504d95f04e27304db49c850a7fb3ab57b81eb673c0a5521eb6d6153052c93f348b7cbb1138dbe73d191d11050d512756feb3c86462ecf6afd87d8fe8ba2e66547aed1ae94b4ae42c23de0b00bce3d92bb10a4d231d9db3d413214684dcb7029efc2c81235cf76f163532746f1828e857fb2b1265dfb10661a6f9a165f7a5b905f32e4e33f1018d6a31a0cb5fbb97f5974fc5d3f23f92ea54344bf1705f0b5a6912352754759e795412383396e9b432bb32c0f2d8054d9ab3d4cfaf6c755afe73093d6d759086dafe4e5698b9aba865b80dd58afc3f9028ee58a6fe071e1da2e1fd931392e9b7f0551faabfd6fbb44620a9d692ebdade99871c60f37d3fc820c9a3952a8aeaffca44e9ca562d9e01e845e65f5814b1368ca5fefbf098aaad649dc4977651dfb97d835d9a3c51c52255aceeed09edeb9a4e16934e557c57bfc93926cce83fa99352b5cb1ac01ab8f0db86347fe7459cb82580c1abe6deb25e80c671dcc03bee30eef937ffefe7b60d7a3cce549fdb70bec65e5dffc4dbda9156dcf8fcb743e2f6ef872c4610adea7d7810885d0d5a44cb28f70e5b364a2b5abde8bf0da4505583139b4d6054ce18dfa5cec4af6ac45ee4ded71ece981445b830c56d09117a67d79301686b811f49522816a448b8cc527bc50bdad7b038683aedd9ca671c88728380579bbb42faf1ae2399ebe04d2c3d1d5dd12619af0af42c6cac8a5be2fac65e02a530a193308758864e0dcf26dd13934876b2d3ca60fac345c5baf2431f57ecbf6bed5867d41a775ed2c4310bdbcbe7a1c1a61ddb2e0b3620f688d55881e28d48c1a9d81a45d72d36b0894c7eff9777948e1293abad0d69c72cd4ca70356ccc06d91d46b565915db539e4275081e1404fa4cf4c2f41b0f64105b98a65d7b757fbe07b6f04d12c02e85590c1611930d9a5c805bb2fcadc50d1f2fda24758a528f84cd51a5cf22e04866ff30c31c2ee085826bd94e431861b7ea2fb46d2c7bbcdfb1309933db13c2e102cf07f6ef12c6e383afa09d178c503571c44f37baacee0e6f7aca6366bd05ed13d9f9d595b1a5dd8b4a38d2ca1064b1835ce1334c3cbb67170095ab098be27e89f6c7d34e7486112d775e00d088a86cb908c7b45b663ed9296cd4a8d7508607b539a44ee83af80db1711eb5f86f2bd585c66d7c4f492bb3cc06c66f4d7e25256cacc1ac133607c1564229c555a0df8f6d946b3d769ff61bb7d5869c04aaff5aeae8b2cdf226bf87204d40edf6012f6fa7ad15a792f3a5fc4ad3f0b9ef56406a22ff3c2785172056d8e2ed1eb5c91f63c0f2179010aad828f70e3c5d5e8bab8d60672e4e8e311caa9b9f7bbf80e51afcbf74cb3481ff2dd019025ac7b9b3e00584cf69b214385822c5812ce6e1843920b0828a8c350e81bf664800bb6bbf63d14e07a524dbf75f6d7f453e2f062c68e46904a44eeaedf2ef92615f85c4580ac1adce439d793a7a98d903ea26ef550eeec55a87ef89bbedb627a43f600575ab39c70d84548973229f96d6e7e83f6aff63a45bab7cd61072fd877d354e651341556443cb3030111f08d63d91b70e8044ffee125ae15879163214506b5ccddb2944704a96c91eafc47d86d5123c9bb0df4ba69a0cf4c370f2b645f5c3be3f9d771c9beacdc364517db206aca1a3aaa2c85fc2a054c445adebac716674816c389c7a7c55ca07998814211a1048e73e35182e4abd1e31a54b017a4c600ad218a6c07e8af1f9c34295f4281d1dd55ee2b927f0611d75c73d89a8063a8c7169f9b1a2be89cc989c2f4298de4fb20b0d6930bc8301183c1abf3e86e42ac0fafd51e674cfd399d7b06dcb73854b6baf929e260ff4e1522b7009361a3bc97237b54aa24611addd516702409f6155d84146fc65bb2cfe16354ef16781820a513a4e954548133dae31412e8bfdfe47b0500f5ed9d4c4a24577177cfb8836097bd89b32e10ecee6b5f5a955de9a43b972613bd56637d24d380ee23f4d88edea6b8de98d11c884855ae8f52fcb7ea43764bbcc2d5b630cd2f9570d1c801549b8dd1bef21cfc834fc845c67fa4d6f31feab3bca323bb80a1ed79330a78f93dbf6a0ac4d822d800306fd7b005864d231c78d5df0d34806682ba0a98cc6f8824efc1dd7b4b533234aff9d44fade5de080f9279b3733192573a0915cb947076b8fec7c0f598914be2cea3f66ca5bcbd91273a6807be27ce324349ece59bf9b9b8c87a63359567e3b84c45b143fa85168dfbce659294973d306a438599675840ff5b96693bd065046f934934b013650c4f0d73880407b0e29a117d1ed1c3f216b805f97361457699b7292f5d2f041f7845139f3a2c7f041cfd4297e957f554394b1f7e8d266b180a00edfc19c886551ed1fb4c243bd448c756ce030c7bf0592b8f6216ca310ef6ea0d740ae39972e2b98eb875a841a7f66cfb6475775a4e1107f839259f7f9a55b703854a5a0a1e06bfd2aa118dd480e6179369d13f23e715b1b28379b4b8d9e4a549242e9740dde44aa98fb9dc172677d82e5fb44518a98ba0a61f76db8f76fcf9391d96aa8e6315b2875a025633d8e913308d9f8611c056d4625828e789922a2eb6e162e6210efb3b3b89a5d0526127e7e9ca23a1241c95067936c3e5052dafc225cc34cd488d91e524fb7b463fcedb2d3481170bdfa4fcd34ffc1c235d236efcdfd3aff925ae7a2b6b6fc0f39d43a576e8cd4be75dc365c234dd371a8ed7a46637da17ad597bff4b4fa9a393fdecc6cbd9e2515008defe6d3e770ff00d9028cafa30b1171f64b039100b6716c01fab433531cc7b5a682a651a2675fe5c6fb7e25a66c3cf0db737b5428f5f395dd6fdd3dbd705397efff6959e7863ef26a59c6e5fe81760911f9e00f528ce36768d90147378ba9f6809de38e6366078ce3423fa27f7a47ac5bd7f7fc090d2337eb2327d9b2696cab4065d5372f165c72f55b1ea44a065508c970e7af1da2d08f4be1291b071ecfbb390971f2afd66211ba5935c96e39e724f0afa9e150caf765936bf06fd2fe1ff61b8034ae4ecbb71dfd01abefcd87883b19c628dfb896524e285f1a04029c094941e6832f4e5d2f58805265ec22d7e8fe1e2d9f3be0342c9ae2514d4d07b60b015b1bbffa7e512de6362f0365e231602646eea4d7ab2ff13f8be72c3dc784f83db127b683f0a7ec85c37b8626d648ffc8079e07079b960a27e608cb525f14f1ac461f083d4c11c85a576e0fec1d8f0cdbfd31dc891ea9c9fc46f6df33c62f59351ea4b2e620bf300446d789d897d5c53124ac26df15bdfa11fc4a01e5f9c6fffc9d6c578b8e52f52cdd36a3502e581a1e8bbc62ffe837e3948156c445315df8937a249c0fd6a8fe6e1d8635cb5df082dd997db41aee4d97d48937dc2bc4a29b71cdbaaa0bd8ce73fed5630f82394da7062776a8ba5e742ee4ac9e44a4c9c5e89430771c4e62370efb60db3a782a310e2a38f5aa3bc9ab62457b0ec1028e5cfa3ac77e9532981e947f65de73aa00449a83da797e0fa222c52ac3f9025b8752ef6a661413a4a97d65d3666ba52978b717431553de6d7fffd1c0c01aea030b94becbfe63b154db0d4ee7922c6c4903d9fa996c4ad3f2c77551a726b41bae01229f9abbd415c3fa0dbaa2fed396724ee7a14f701245c39c922b41fefb1adcf56f8b6bc3cb0dd93665a3b10d7a7fb84236b7db6008c0807171f8d29cba6450d081fffa0de5164a86173a4dfe484cc2d6a7670a9d6a23ee9cca0057372edd7d5707f7036b8d0c2780e5ca8b26b8ea4ba60c5ee749c5a6b3090c065f21fd3cb1fb95e8f76bfcbdc7d0aaf7244fcb328eab2eceb205282629e132b64adc89e64186e9fc3733baf84a122bbd2c9eb0c83f3c7581eada615ff5fd9f8427eb664e56a8204ab6141f27cccb6940b22c6fe8cfd30f9df9308ee3cc3afbbb9e22706fb7c572006939a8831cca9f58621326070ceaf482dcf99d9f919907983138ef7973ff1edb55b51c354253f56b87d63a2a0ddf7148e68960bbc0f3fb4d368a1b015df73715526726a6366b8927eecd8521e115e53792f9dad2996f309d99b9d8dcdedd43e30dea78461c9249dc4030ac9681efdd5ded2bda6e34f450137134cd7c12e22fec85bf504044adccde473ec10775431c491baf925c11e57b07c6d528aee4129608ec53914135060e28e395c55d6b1a15b474b3defc960fc44f787b140063ec93c238d69137fcc2dfa0d3d10255444219c785b4e7c5d697ba0046646adc8cd1d7e74fa5847d28c4619e698afaf877a45f26623cccd97640fa5dfd507114b295cb93ce704ccd560349e71c696cf899e8c39c395ed3e44cb82ce4c360d4388569d52f5a4b8ec037b03d770e1fbc9989b88992b5df331be76529102f80d885a160cedbaefa9d05553e59dea3923f447a051e8a3aa6458416263d49e809a7983d75d4b125f6bb3fad96ae183fc62611d0a8c7ed4f58be7b1d91e3e0f3045c4aa7a47f7819c141ae6842af030244db4fbb0a837f5ca7f523dcd6d91edd42499e0ce4de780ce6ad6b9287992c154154e0e11ada7168f51411b2a6fed0c5ae0a262ded0a0fb259ca2982ad3a123db0c7d6e71b53ae5f92fa8fc4b6d336e7f2be8fac4c391d2302b11f46cc623536ff4eb6829930cf21054c377624cac0b056c7acf41d8d46926eea94aa21381e9db882ffbfd1548da8f69676be98b984b3a65fbe7f73d50acff4472df67875497374390374fafbc009bbab84bdd7445562645e0341aa034fb6d4f6ffe740b5eb4c9f69a868a0fec81c2dee694040e9f8011401e709fc0577b3d329625eb57eaf5d1e00a4732208a1aac3965cc8a52edf511f3f9a10ef842d926b9df0df02fd7bb72d2e5a2a18ed65f18a7d0292638fd58d2d562946f21fe5d6734e2b8f660ec7dc52642ab3f21c6171e7b946dad31522d5ee1e23be350dd85be13b30b3fc734f0162448c160b4af73b9cc7ff1dd2c0ab570b3ceac906f7e95dbfd34f2d91952a75a90a23c2b89554ccc56ed2f4b1c4290a5f9e22c928922d12b246714d845dbe5685b432b709c1f1fa716b70947e70a099b1c8f6ec53938d544a2e93399e398d65c5fba400993b5abfb7ba2db5a088bbbdee50b5e54ce23b659e28c4492f65ade05d5cd5a790d0657c73ae7d30d19ea33bbda41c3e2444cd3858eb347c8a2806617e0c9bdfdd984ed687b7761a7b9a42003146961e485152fd3983de0cf62c2cef0db8b952aa8249fcc5877565f8231cfc9fb2dfcae8f49c509e8fc240ec322377cc61d03e557c5a8c2c076451ccafe6c173eaa19098a342683d1766dd78eb44f90bffeecc76124d311a5c48c297dd76435dacec30957364b87d3b3041bcd5c2f0224af7e55c86548152d3b025f6a0626cbf470718a130a23b7a30f15a8dedd97a6f308f4da39a0b1236d409284c55135c60bbd22fc109845bc49aee2dce80ae615198a0124ff1f3205ec9e35", "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"}) 04:41:18 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x7ff, 0x5, 0x80, 0xff}) syz_emit_ethernet(0x47, &(0x7f00000000c0)={@local, @dev={[], 0xd}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = shmget(0x3, 0x11000, 0x54000010, &(0x7f0000fee000/0x11000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000380)=""/84) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) userfaultfd(0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) open_by_handle_at(r0, &(0x7f0000000080)={0x5a, 0xfff, "81e1c30d1aa74e6b4c1b5f54347be638a3b2c66f519014c3b20a04dc4c090e5dfa83bb62394edcf1cf6957132fb1035f0751156be31b8b3c10acba3c0ae51bc803feb53cefaeebd6b96f48eaa1ba9e31e90b"}, 0x10000) 04:41:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 619.111973] binder: 26408:26409 ioctl 40106614 20000000 returned -22 [ 619.125054] binder: 26408:26409 ioctl 40106614 20000000 returned -22 04:41:19 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x200) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000040)=0x40, 0x4) syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000090000000000000078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000900000000000000007f0000010000abef3e25e351fea700000000000002884699f9d911b7cb5058f9108b10ec90be28e6bab75f3228e858ad7c6223eefeea1151819368e107d84c95d4f3ab7cf850c5158b0356894069f25cf53047a6e4c3cbef9708a3794bc640e1745cbc820c11f64607e16d7bfc9a7008a61069ff602a74cb81"], 0x0) [ 619.162075] binder: release 26408:26409 transaction 143 out, still active [ 619.169097] binder: undelivered TRANSACTION_COMPLETE 04:41:19 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000308004500005c00000000000190978f4636c8ad2ec878ac1414bbac1414110504907800000000400000000000000000010200ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f000001"], 0x0) 04:41:19 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x220000, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000140)=[0x4, 0x9ac]) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x9, &(0x7f0000000040)=0x8, 0x4) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 619.202280] binder: release 26408:26410 transaction 144 out, still active [ 619.209346] binder: undelivered TRANSACTION_COMPLETE 04:41:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1a4, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffffb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff8}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x20000050}, 0x8014) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="22634040000000000000000000000000000000000000000000000000000000000000000000c9dc0000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000480)={0x80000001, 0x0, 0x7}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000003c0)={r3, r4/1000+30000}, 0x10) 04:41:19 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x800, 0x10000) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 619.435913] binder: 26425:26430 unknown command 1077961506 [ 619.441795] binder: 26425:26430 ioctl c0306201 20000440 returned -22 04:41:19 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c00000000bbac1405110504907800000000400000000000ebffffa9ac1414d0082c00000000890000000000e000000200000000e00000010500000083000400000000000000000000000000a6e56208cbfab9ff01000000000000dbab4d8749301340063f2e874cb6e0232f313ecaf5d914e000000000000000"], 0x0) r0 = socket(0x5, 0x80002, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x19c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x62}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xbc}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x74, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0xffffffff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb986}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbc}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x1}, 0x40810) [ 619.481704] binder: 26425:26431 unknown command 1077961506 [ 619.487471] binder: 26425:26431 ioctl c0306201 20000440 returned -22 04:41:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r3, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') getsockopt(r5, 0xe25a, 0x6ad, &(0x7f0000000480)=""/103, &(0x7f0000000500)=0x67) read(r0, &(0x7f0000000040)=""/58, 0x3a) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) r6 = getpgid(0xffffffffffffffff) wait4(r6, &(0x7f0000000080), 0x3, &(0x7f0000000240)) 04:41:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:19 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000009000000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) 04:41:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x456, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x4e20, 0xffffffffffffff2c, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}}, 0xa0) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:41:19 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac14141105040000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f000001000000000000000000000000000000"], 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000080)={0x7f, 0x5, 0x20}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x210200, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) 04:41:19 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x5, 0x0, 0x40, &(0x7f0000ffe000/0x1000)=nil}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r3, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r3, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 619.848962] binder: release 26455:26457 transaction 145 out, still active [ 619.856163] binder: undelivered TRANSACTION_COMPLETE [ 619.861320] binder: release 26455:26460 transaction 146 out, still active [ 619.868486] binder: undelivered TRANSACTION_COMPLETE 04:41:19 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x10100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x5, 0x2}, &(0x7f0000000080)=0x8) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x3f) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0x4}, &(0x7f0000000180)=0x8) 04:41:20 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x1f8, &(0x7f0000000340)={@local, @broadcast, [{[{0x9100, 0x40, 0x20, 0x2}], {0x8100, 0x3, 0x2000000008, 0x4}}], {@mpls_mc={0x8848, {[{0x6, 0x3, 0x0, 0x8}, {0x8, 0x10001, 0x0, 0x7}], @ipv4={{0x44, 0x4, 0x4, 0x0, 0x1da, 0x66, 0x40, 0x100000000, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}, {[@ssrr={0x89, 0x13, 0x7, [@remote, @loopback, @rand_addr=0x8000, @broadcast]}, @noop, @rr={0x7, 0xf, 0x0, [@remote, @dev={0xac, 0x14, 0x14, 0xc}, @remote]}, @timestamp={0x44, 0x24, 0x1, 0x3, 0xffffffffffffffc1, [{[@multicast2], 0x401}, {[@loopback], 0x1ff}, {[], 0x96}, {[@empty], 0x6}, {[], 0x7f}]}, @ssrr={0x89, 0x1b, 0xffff, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x9, @rand_addr=0x3b, @multicast1]}, @cipso={0x86, 0x51, 0x8, [{0x5, 0x12, "f11ea04611fb67be94bd2415cabe1850"}, {0x7, 0x4, "cf1a"}, {0x1, 0xe, "4b16d7a392ee37959c1f6f40"}, {0x2, 0x6, "3bd5c99e"}, {0x6, 0xf, "ef354c4d274af187b55e374030"}, {0x7, 0xf, "55403e07af34f64460b1c3eedb"}, {0x3, 0x3, 'j'}]}, @lsrr={0x83, 0x13, 0x2, [@remote, @local, @multicast2, @local]}, @ssrr={0x89, 0x2b, 0x1, [@empty, @dev={0xac, 0x14, 0x14, 0xa}, @empty, @multicast1, @remote, @empty, @empty, @rand_addr=0x4, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0xb, 0x3, [@broadcast, @remote]}]}}, @udp={0x4e23, 0x4e24, 0xca, 0x0, [@guehdr={0x2, 0xfffffffffffffe01, 0x6, 0x4800000000, 0x100, [0x80]}, @guehdr={0x2, 0x81, 0xfffffffffffffff9, 0x1000000000, 0x100, [0x80]}], "3d7b740787b1b795fb183b97d95bc23ab58a8a5fc453af449aa7127f1265b6eb02b017359c33b35dfb0a041f637437e3cd34c2d1df20425a8002601f1ce909e8c409e4fc6673c89824b57188cc818c36e15d93482f495969e68a30c9afade9a936fd71f9671d06edc09902b5cf9d906444e55e2655e0007e2fab17669a2a1f7a237a00e9ffa21eb2b751cec51c12281685de2a2c8ef9bf2926f97193c8b88ac55ba2e89a00cd771dddbab54afb57334ed067"}}}}}}, 0x0) 04:41:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sched_yield() r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x100000001, 0x800) bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x1, r1, 0x3, r2}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffd0e, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 04:41:20 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfffffffffffffff8, 0x2000) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f00000000c0)={{}, {0x200, 0xcfce}, 0x1ff, 0x0, 0x7}) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:20 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2000006, 0x601) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000002c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) ioctl$void(r1, 0x5450) 04:41:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) 04:41:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff01004500005c0000000000019078ac1414bbac1414110504908400000000400000000000000000010000ac1414aaac141400082c00000000000000000000e000000200000000e000000100000000000000007f0002010000000000000000"], 0x0) 04:41:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x78, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x0, 0x2}, @increfs_done={0x40106308, r1, 0x2}, @free_buffer={0x40086303, r1}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x3, 0x0, 0x2b4e4bc0590c2bbc, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000000)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x1}], &(0x7f0000000040)=[0x38, 0x78, 0x0]}}], 0x0, 0x0, 0x0}) 04:41:20 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450078ac1414bbac14141105040000010000ac1414aaac141448082c00000000000000000000e000000200005300e000000100000000000000007f0000010000000000000000"], 0x0) 04:41:20 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x327, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x40000) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000380)={0x0, 0x0, [0x3, 0x3b42414d, 0x100000000, 0x1e]}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @broadcast, [{[], {0x8100, 0x9, 0x8, 0x3}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000002c0)={'filter\x00', 0x7e, "3024af98356195ac423d6e40b0fc3fbcbd3fc26b559b9375236d709dc13e166669d46799c5211b169eaf3c5dc2c770a150f04970bae1c99adde8aab1063f2f725a7fed293bb093e18432b3fc7de2cdff7bde054dcc8b77ae777283134a78a8a6c12488c7ee451fea02779f22967e70da1703a1ba92a7d8ec5e9b07d2524d"}, &(0x7f00000000c0)=0xa2) openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x440004, 0x0) fsync(r2) [ 620.593634] binder: 26497:26498 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 620.600662] binder: 26497:26498 BC_INCREFS_DONE u0000000020ffd000 no match [ 620.608008] binder: 26497:26498 BC_FREE_BUFFER u0000000020ffd000 no match [ 620.615045] binder: 26497:26498 got reply transaction with no transaction stack [ 620.622673] binder: 26497:26498 transaction failed 29201/-71, size 24-24 line 2741 04:41:20 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x88000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x1, 0x3, 0x3f, 0x3}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) gettid() 04:41:20 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) 04:41:20 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x7fffffff, "6f67ca4ed23f1c17bc78777903fe2dc24abece1423157dbf1c33eb5a9790abe8", 0x3, 0x800, 0x7, 0x0, 0x4000000, 0xe}) [ 620.751098] binder: 26497:26510 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 620.758332] binder: 26497:26510 BC_INCREFS_DONE u0000000020ffd000 no match [ 620.765480] binder: 26497:26510 BC_FREE_BUFFER u0000000020ffd000 no match [ 620.768797] binder: undelivered TRANSACTION_ERROR: 29201 [ 620.772501] binder: 26497:26510 got reply transaction with no transaction stack [ 620.772536] binder: 26497:26510 transaction failed 29201/-71, size 24-24 line 2741 04:41:21 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, &(0x7f0000000280)=ANY=[], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x101000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={@remote, 0x59, r2}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x2000806c) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x1, r3}) 04:41:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3, 0x10000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x46, "965c8261e834a4a96c9ccd487c710b0b58e8acaecf7b496efa3809ad6a2df1799ac3c7ed0bff3e6dab99f455c42b469b218a8b7f0c22d219ed5f664b28c53f90ddf405637b08"}, &(0x7f0000000240)=0x4e) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f00000002c0)={0x0, 0x0, {0x542a, 0x100, 0x2, 0xe5}}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001880)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000280)=0x1008) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r3, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r3, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x1, @sliced={0x6, [0x1, 0xbb6e, 0x7, 0x4, 0x9, 0x8, 0x7, 0x8fe, 0x6, 0xc566, 0x2, 0x8, 0x2, 0x0, 0xffff, 0x5, 0x1000, 0x5, 0x6e8, 0x0, 0x0, 0x8, 0xfffffffffffffff7, 0x2, 0x2, 0x87, 0x1, 0x100, 0x1ff, 0x7a39, 0x8, 0x1f, 0x1, 0x100, 0x6cb, 0x47, 0x100000000, 0x6, 0x9, 0x7f, 0x0, 0xc916, 0x100000000, 0x2, 0x7, 0x1, 0x78], 0x4}}) 04:41:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 04:41:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) iopl(0xe4b) [ 621.055115] binder: undelivered TRANSACTION_ERROR: 29201 [ 621.233817] binder: 26531:26536 transaction failed 29189/-22, size 0--3026418949592973312 line 2834 04:41:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1ff, 0x440000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x9}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:21 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 04:41:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20008022}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x68, r2, 0x708, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x8}) r3 = accept$alg(r0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000005) r6 = dup3(r5, r4, 0x0) writev(r6, &(0x7f00000024c0)=[{&(0x7f00000002c0)="0f", 0x1}], 0x1) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r3, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="0c907d63ec3300004d60c598c494dfa011c9a80af5d4d05b6e658946bcb04d54271d2ffe4930ceafd09da6a64ccab5fd0862e7c5796a41bafe5c7fe20aa470095bdcdaa4df3f106d2ed6e861128f6d03c5743f7cbb", 0x10}], 0x1, 0x0, 0x0, 0x2}], 0x23b, 0x0) readv(r3, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 621.277134] binder: undelivered TRANSACTION_ERROR: 29189 04:41:21 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@dev={[], 0x27}, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 04:41:21 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x22000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x200, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @rand_addr, @multicast1}, &(0x7f0000000240)=0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r1, &(0x7f00000002c0)="afe1a778327ca8e2a26d1b814fdeec60735f166adc0e297eff5c391a7f0f7cd45a932d"}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x5}, 0xfffffffffffffc45) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) 04:41:21 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, &(0x7f0000000040)=ANY=[], 0x0) [ 621.589053] binder: release 26555:26556 transaction 150 out, still active [ 621.596243] binder: undelivered TRANSACTION_COMPLETE [ 621.607713] binder: release 26555:26556 transaction 151 out, still active [ 621.614830] binder: undelivered TRANSACTION_COMPLETE 04:41:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d325cd152a0c7f16a11898613fddfd536fe2b9fa95a6ecf5e4618951948d49cd7cbf94874c4e851594821bf776111dfbf24ffe2c72f7643d16edc830cc35d2a5fdf2526ce118c679aa6e841ca"], 0x0, 0x0, 0x0}) 04:41:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac14141105049078000000004000000000f2dbc751d25edc3062e800000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f00"], 0x0) 04:41:21 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0x88000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000240)=""/48, &(0x7f0000000280)=0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getgid() write$FUSE_ATTR(r1, &(0x7f00000000c0)={0x78, 0x0, 0x7, {0x9, 0x4, 0x0, {0x3, 0x3, 0x80000001, 0x3, 0x2, 0x86, 0x87, 0x9, 0x6, 0x1f, 0x0, 0x0, r2, 0x8, 0xf466}}}, 0x78) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000040)={0x5c9bad3, 0x600, 0x1, 0x281, 0x1, 0x8000, 0x8}) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x8) preadv(r1, &(0x7f0000000080), 0x338, 0x0) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000180)={0xffffffffffff2a01, "6e6e2433dd0d1dad54169cc80a71b6a19feab358475d9d97e036f11cc217665c", 0x1, 0x1020, 0x5, 0x0, 0x1, 0x3, 0x9, 0x10001}) 04:41:21 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x40, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0001000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r1, 0x501, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7c000000000000}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x85}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xac1ae9b423773e05}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xcf03ea7281bb391a}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000340)={0x10f002, &(0x7f0000000300), 0x1, r0, 0x1}) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000280)=0x5) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x28000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x3, @mcast2, 0x4}], 0x1c) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f00000000c0)=""/60) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 621.851029] binder: release 26565:26566 transaction 152 out, still active [ 621.858230] binder: undelivered TRANSACTION_COMPLETE 04:41:22 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000140)) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40441, 0x0) listen(r1, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 04:41:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0xffffffe) r1 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) r2 = geteuid() r3 = getgid() r4 = geteuid() r5 = getpgid(0xffffffffffffffff) ptrace$cont(0x9, r5, 0xb9, 0x6) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = fcntl$getown(r0, 0x9) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x100, r2, r3, r4, r6, 0x4}, 0x9, 0x3ff, 0xfffffffffffffffb, 0x100, r7, r8, 0x9}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000180)=""/49, &(0x7f00000001c0)=0x31) syz_emit_ethernet(0x0, &(0x7f0000000000)=ANY=[], 0x0) 04:41:22 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f0000000040)}, 0x10) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r2) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x121200) [ 622.195135] binder: release 26588:26589 transaction 153 out, still active [ 622.202405] binder: undelivered TRANSACTION_COMPLETE [ 622.215281] binder: release 26588:26589 transaction 154 out, still active [ 622.222369] binder: undelivered TRANSACTION_COMPLETE 04:41:22 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x33, &(0x7f00000000c0)={@local, @broadcast, [], {@x25={0x805, {0x3, 0xffffffff, 0xff, "2d10eeb8b2ed010199d8b3e55297f03dc874f7a4f315e861953262385edccea49dfe"}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 622.292321] IPVS: length: 49 != 8 04:41:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1b, &(0x7f0000000440)="737ce5ef693c502e3fcaac24169da87327c9ae895c6eedd6750d2bcbfeb09e7ec6a395fdaae49fae6229449138624556d6e43006375f0afb0a952f52f43a3a29429c95519b78747923cff0acdded8aba561ca0f7d691c4a841d02908034b822a6132fe505ff7caa84dc39028aeb99b38d0f93a613cc6fa1712cac029b72ed179d55c352000e7217aceb506bc3827eb0e5bb6dec0dcda5062ae32a45acaec7a681103fb86062b65eab654c50ba048c30268e6f7e3333d67b3ff1088fc959d3d02d0b7f16ff6541787ac71d329b84d5181a302de839ac7de50bc73046b72f4ebb4d502b74356baff6552d7cd97072a66c3", 0xf0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={&(0x7f0000000080), 0xc, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000b060501ff0080fffdffff2e0a0000000c000100060000007d0a00010c000200000022ff02f10000"], 0x2c}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400002, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040)) [ 622.384994] IPVS: length: 49 != 8 04:41:22 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000009078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) [ 622.517786] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 622.564814] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 622.600968] binder: release 26608:26612 transaction 155 out, still active [ 622.608060] binder: undelivered TRANSACTION_COMPLETE 04:41:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000338014aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f00000001c0)=0x7) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0xf004, 0xf000}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x33, @remote, 0x4e23, 0x2, 'wrr\x00', 0xa, 0x7fff, 0x27}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x4e24, 0x0, 0x9dc7, 0x88, 0xc8}}, 0x44) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) 04:41:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x218, &(0x7f0000000180)={@local, @broadcast, [{[{0x9100, 0x8, 0x7, 0x4}], {0x8100, 0x4, 0x7fffffff}}], {@ipv6={0x86dd, {0x1, 0x6, "c5f208", 0x1da, 0x0, 0x1, @empty, @mcast2, {[@srh={0x87, 0x8, 0x4, 0x4, 0x5, 0x28, 0x41c9, [@local, @local, @loopback, @loopback]}, @hopopts={0x33, 0x3, [], [@ra, @pad1, @hao={0xc9, 0x10, @mcast1}, @pad1]}, @fragment={0x2f, 0x0, 0x5, 0x3, 0x0, 0x2, 0x64}, @dstopts={0x3a, 0xe, [], [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x20, {0xde, 0x6, 0x7d02, 0x5b, [0x7f, 0x1160, 0x7]}}, @ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x20, {0x401, 0x6, 0x1, 0x8cc0, [0xfff, 0x80000000, 0x0]}}, @calipso={0x7, 0x20, {0x2cb0, 0x6, 0xf0, 0x101, [0x1ff, 0xf30, 0x7]}}, @pad1, @enc_lim={0x4, 0x1, 0x7f}]}], @udp={0x4e22, 0x4e23, 0xe2, 0x0, [@guehdr={0x2, 0x6, 0x4, 0x7, 0x100, [0x80]}, @guehdr={0x1, 0x400, 0xc385, 0x4, 0x100}, @guehdr={0x2, 0x98, 0xfec, 0x100000000, 0x100, [0x80]}], "eb192bb7cd1db531b4df188b12aff3a2cd0a03c5a78d2f3ffe0f0098863302db4a2e80be7b808c2f010ba51521dd603de5cd8c31efd4f59a94238af944947baf02c17ff4a82e8e732a9d51901e3cf09fe4af5b1214ee7eee7c55de5cf68af8f5feef327077acae4a3239f75384a0087aba04db2a0c797dddca0e63d1686ed2236e87e9ec172af0bde397e58852243e954d3822f69ab1bf487596e9adf91c1befcdb76485fa5f1bd43060d1000cf3d0f880162978e3514d082019a7d14b1187cdd11543849f5f"}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000100)={{0x33, @multicast2, 0x4e23, 0x4, 'fo\x00', 0x0, 0xc0e, 0x49}, {@local, 0x4e24, 0x10007, 0x9, 0x0, 0x3}}, 0x44) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x16d000, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0xff, 0x2, 0x2b88b4b5, 0x40, 0x0, 0x8001, 0x2, 0xfffffffffffffffe, 0x80000001, 0x3, 0x3, 0x3}) 04:41:22 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffff9c, 0x0, 0xfffffffffffffd71, &(0x7f0000000140)=' em1^veoxnet\x17(\\\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=r2, 0x4) syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 04:41:22 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x400000) setsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000180)="f73ea1dfb1c81e415146d0872ed79e1634", 0x11) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x6, 0x5d, 0x10000}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x1873}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={r1, 0x89, "872c0e79ef051785039f48f7b0efe1f613f085d1b00bac9ae15eb170ebcff2355c642455667d6e2abdef2266fb120016d6900b1dba87a710c0789a9b224f6e1d7155d5fc0ee502b054481e21e547b63f9dfdb056450e91408d64d34b917fc53b1960122dd5741f9b460735c6959a13e39f5e25738395869869798c7aba4f1e36a0d8baa5ec49bdf7bb"}, &(0x7f0000000380)=0x91) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f00000001c0)={0x6, 0x81}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) ioctl(r1, 0x8000, &(0x7f0000000040)="a8ee59e49f585599b24e20c0208341b227ba84f2678902d9a2ab77f8fcd4e8382ea99e7e915248") [ 622.802278] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20003 [ 622.823870] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20003 [ 622.905172] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20003 [ 622.921802] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20003 04:41:23 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4103, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000080)={{0x1000, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x1}) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0x800) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x8721) r2 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='/dev/binder#\x00', 0xfffffffffffffffa) r3 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="028323befb0eb1dc3487c0a6f7ecb91e0c714bfa0ea8c2c82265333a7d696ce1ce9578a42e", 0x25, 0xffffffffffffffff) keyctl$negate(0xd, r2, 0x2, r3) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:41:23 executing program 3: syz_emit_ethernet(0xe7, &(0x7f0000000140)={@dev={[], 0x1c}, @link_local, [{[{0x9100, 0x8000, 0x8001, 0x4}], {0x8100, 0x3fe0000000000, 0x7, 0x1}}], {@ipv6={0x86dd, {0x400, 0x6, "6be15a", 0xa9, 0x3c, 0x9, @local, @remote, {[@dstopts={0x0, 0x7, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x1ff}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @mcast1}, @pad1]}, @routing={0x84, 0x8, 0x2, 0x45, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, @ipv4={[], [], @broadcast}, @ipv4={[], [], @empty}]}], @tipc=@payload_conn={{{0x19, 0x0, 0x5, 0x35, 0x80000000, 0x6, 0x3, 0x2, 0x1ff, 0x0, 0x1, 0x81, 0x5, 0x0, 0x0, 0x101, 0x0, 0x4e24, 0x4e24}}, [0x0]}}}}}}, &(0x7f0000000000)={0x1, 0x2, [0xf86, 0x346, 0x3e5, 0x663]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:23 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)={0x103, 0x29, 0x2, {0x8, [{{0x4, 0x2, 0x1}, 0xfffffffffffffffa, 0x51c, 0x7, './file0'}, {{0x1, 0x0, 0x2}, 0x1000, 0x7, 0x7, './file0'}, {{0x21, 0x3, 0x1ff}, 0x2, 0x5, 0x7, './file0'}, {{0x8, 0x1, 0x2}, 0x1, 0x9, 0x7, './file0'}, {{0x4, 0x1, 0x2}, 0x80000000, 0x4, 0x7, './file0'}, {{0x1, 0x3, 0x2}, 0x73, 0x1, 0x7, './file0'}, {{0x40, 0x2}, 0x2fd5, 0x9, 0x7, './file0'}, {{0x8}, 0x100000001, 0x9, 0x7, './file0'}]}}, 0x103) 04:41:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000003580)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000cdde9c67745ecb6c746cde3d00000000100c000000000000000000cc9f47ac20b2cb209900000000000000000000000000000000000000000000000000000000a90000"], 0x0, 0x0, 0x0}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000030c0)='/dev/vga_arbiter\x00', 0x20800, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000003100)) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000300)=0x5) recvmsg$kcm(0xffffffffffffff9c, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/177, 0xb1}], 0x1, &(0x7f0000000180)=""/7, 0x7}, 0x40) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000340)={0xfffffffffffffff7, 0xaa7}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000003500)={0x0, @broadcast, @multicast2}, &(0x7f0000003540)=0xc) recvmmsg(r2, &(0x7f0000002f00)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/28, 0x1c}], 0x1, &(0x7f0000000480)=""/191, 0xbf}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000380)=""/22, 0x16}, {&(0x7f0000001540)=""/135, 0x87}, {&(0x7f0000001600)=""/74, 0x4a}, {&(0x7f00000003c0)=""/30, 0x1e}], 0x5, &(0x7f0000001700)=""/159, 0x9f}, 0x1}, {{&(0x7f00000017c0)=@ax25={{0x3, @rose}, [@default, @bcast, @netrom, @netrom, @netrom, @bcast, @null]}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001840)=""/171, 0xab}, {&(0x7f0000001900)=""/63, 0x3f}, {&(0x7f0000001940)=""/238, 0xee}, {&(0x7f0000001a40)=""/165, 0xa5}, {&(0x7f0000001b00)=""/41, 0x29}, {&(0x7f0000001b40)=""/156, 0x9c}, {&(0x7f0000001c00)=""/180, 0xb4}, {&(0x7f0000001cc0)=""/102, 0x66}, {&(0x7f0000001d40)=""/68, 0x44}, {&(0x7f0000001dc0)=""/12, 0xc}], 0xa, &(0x7f0000001ec0)=""/252, 0xfc}, 0x3ab}, {{&(0x7f0000001fc0)=@nfc_llcp, 0x80, &(0x7f0000002540)=[{&(0x7f0000002040)=""/171, 0xab}, {&(0x7f0000002100)=""/66, 0x42}, {&(0x7f0000002180)=""/8, 0x8}, {&(0x7f00000021c0)=""/92, 0x5c}, {&(0x7f0000002240)=""/76, 0x4c}, {&(0x7f00000022c0)=""/112, 0x70}, {&(0x7f0000002340)=""/109, 0x6d}, {&(0x7f00000023c0)=""/56, 0x38}, {&(0x7f0000002400)=""/173, 0xad}, {&(0x7f00000024c0)=""/122, 0x7a}], 0xa}, 0x7}, {{&(0x7f0000002600)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002680)=""/62, 0x3e}], 0x1}, 0x6}, {{&(0x7f0000002700)=@pppol2tpv3in6, 0x80, &(0x7f0000002880)=[{&(0x7f0000002780)=""/11, 0xb}, {&(0x7f00000027c0)=""/53, 0x35}, {&(0x7f0000002800)=""/69, 0x45}], 0x3, &(0x7f00000028c0)=""/149, 0x95}, 0xfffffffffffffeff}, {{&(0x7f0000002980)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/144, 0x90}, {&(0x7f0000002b00)=""/83, 0x53}, {&(0x7f0000002b80)=""/54, 0x36}, {&(0x7f0000002bc0)=""/181, 0xb5}, {&(0x7f0000002c80)=""/155, 0x9b}, {&(0x7f0000002d40)=""/221, 0xdd}], 0x7, &(0x7f0000002ec0)=""/2, 0x2}, 0x7075}], 0x7, 0x100, 0x0) 04:41:23 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400000, 0x0) r1 = syz_genetlink_get_family_id$nbd(0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x4000, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x80, 0x0) r4 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0xe5, 0x40000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r1, 0x830, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0xc804) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, &(0x7f0000000040)=ANY=[], 0x0) 04:41:23 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$getown(r0, 0x9) fcntl$setown(r0, 0x8, r1) syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414111504907800000000400000000000000056ea6800010000ac1414aaac141448082c00000000000000000000e0000002000000000300000000000000000000007f0000010000000000000000"], 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000240)) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000080)=0x1) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TUNSETLINK(r3, 0x400454cd, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000140)={0x3, r3}) syz_emit_ethernet(0x47, &(0x7f00000000c0)={@local, @random="7f60366af0e5", [{[], {0x8100, 0x0, 0x6, 0x1}}], {@generic={0x9, "08f7a0440d27d3d063634842018f58a91b72482fe9bf7c4f12bb0dc9374ffa9c12d6de585a429acd5cb93816e3a1fd495b43eaa0bb"}}}, &(0x7f0000000200)={0x1, 0x4, [0x278, 0xb34, 0x3e8, 0x896]}) 04:41:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffff9c) openat$cgroup_int(r2, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x6, 0x204000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="570000000072f850d78eaccf90a437422908e5e3585c12c69d23c6a52cce778f0a179f7eedf870de0bfa267cea1c8f3861453baf949804c1376ccc95e6165e99e2d834d821bbde3d93bef884aa7e62e15d4c21fcec09afb46a1cf1"], &(0x7f00000002c0)=0x5f) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) [ 623.547296] binder_alloc: 24054: binder_alloc_buf size 5161067998564319232 failed, no address space [ 623.556691] binder_alloc: allocated: 704 (num: 76 largest: 32), free: 11584 (num: 1 largest: 11584) [ 623.566045] binder: 26672:26673 transaction failed 29201/-28, size 202375168-5161067998361944064 line 2973 [ 623.650183] binder_alloc: 24054: binder_alloc_buf size 5161067998564319232 failed, no address space [ 623.659580] binder_alloc: allocated: 704 (num: 76 largest: 32), free: 11584 (num: 1 largest: 11584) [ 623.668964] binder: 26672:26673 transaction failed 29201/-28, size 202375168-5161067998361944064 line 2973 04:41:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:23 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac14141105049078000000004000ff0f0000000000000000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x181201, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r1, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f00000001c0)=0x10) 04:41:23 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xffffff43, &(0x7f0000000140)={@local, @broadcast, [{[], {0x8100, 0x7f, 0x4, 0x3}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0xe0802) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x5, {0x20, 0x2, 0x2, 0x401}}) [ 623.844405] binder: undelivered TRANSACTION_ERROR: 29201 [ 623.850905] binder: undelivered TRANSACTION_ERROR: 29201 04:41:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0x100000000, 0x800) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000640)=0x1100) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x11) r2 = request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='skcipher\x00', 0x0) r3 = add_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000240)="4c658536bdf76ef721881eeaea5ef65afe91560370167199ccf5749567229bbf1333ca5e8f02050e2f0cc0bb0d82", 0x2e, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000680)="97da2618f50df4ab2896670ead4c48249645385b5b96b2494056ab653ae3a99d81a76cfeb6ff4c25dc15e3b6a9d164aea74f8df5a4b9f49cb214d9a1cbd415e89224471b2f3fe10ea11011eac38a9ea538d28a54a920616cf4f4bd9fcab7c587bf31969d749e442e8ce4b6bbfc9b583e3be1e7157ed2a0c658e54b51305d75530dbc2e89c734db4cb680e81ff34152ca5d2b02e520f41ff792cc3314a6b781c1ab691634d53273b225501b17fd07a2c8d0192b6c243877bcfe71598fce0e69eafab78cbd762f41fbeef96bf0c1bce7e83dd813ec13", 0xd5, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000340)={r2, r3, r4}, &(0x7f0000000540)=""/244, 0xf4, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x0, 0x0, 0x0, 0x80}], 0x1, 0xfffffffffffffffd) readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r2, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") unshare(0x8020000) semget$private(0x0, 0x4007, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x100) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) 04:41:24 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x6, 0x5, 0x4, 0x20, {0x0, 0x7530}, {0x2, 0xc, 0x0, 0x1dd, 0x7979, 0x3ff, "d3c85070"}, 0x55a3, 0x3, @offset=0x4, 0x4}) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa765b42ef8cbb08004500005c000000082cccbd0000019078ac0e3addb9b8945bac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e00000020000ba1d3f394dcf16c90000e200000100000000000000007f000001000000000000000000000000000000"], 0x0) 04:41:24 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r1}}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c00000233bd15ab51eab0113d4a9f43000000017a78ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000"], 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20004}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x144, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hwsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hwsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x80) 04:41:24 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x240001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000080)={0x2, 0x7, 0x0, 0x2, 'syz1\x00', 0x4199}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup2(r1, r1) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x20002010}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:24 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) r0 = socket$vsock_stream(0x28, 0x1, 0x0) close(r0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:24 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x1ff, 0x80000000, 0x7ff, 'queue0\x00', 0x76d}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@int=0x6, 0x4) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:24 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x5, 0x3, 'client1\x00', 0x4, "f1760c1cd9cd153c", "81cba1ca0f1565e2e7d65e5a7a08aaec188d251a6220a5e50d77bc3d565d07d6", 0x1, 0x5b26}) syz_emit_ethernet(0x0, &(0x7f0000000040)=ANY=[], 0x0) [ 624.523588] binder_thread_release: 4 callbacks suppressed [ 624.523612] binder: release 26712:26713 transaction 162 out, still active [ 624.536356] binder_release_work: 4 callbacks suppressed [ 624.536366] binder: undelivered TRANSACTION_COMPLETE 04:41:24 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6905, 0xc4000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x20b, 0x3, 0x80, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x4f7f, 0x7fff, 0x0, 0x9, 0x8}, 0x14) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x3) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x68}], 0x1) 04:41:24 executing program 5: syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c000000000001bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f00000100000000000000000000000000"], 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80080, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000040)="75a3d448422e32d92c5638c9903fcb5f8f70134306e56983a2bded49ab82cbe7290288d3b0e52b", &(0x7f0000000140)=""/241}, 0x18) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000240)) prctl$PR_CAP_AMBIENT(0x2f, 0x7, 0x1) 04:41:24 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) getrandom(&(0x7f0000000040)=""/25, 0x19, 0x1) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000280), &(0x7f00000002c0)=0x40) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xfffffffffffffff1, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x20, @loopback, 0x52}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x6, 0x8, @loopback, 0xfffffffffffffffa}, @in6={0xa, 0x4e21, 0x1, @mcast2, 0x8}, @in6={0xa, 0x4e23, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}, 0xca10000000000}, @in={0x2, 0x4e20, @rand_addr=0x4961}]}, &(0x7f0000000240)=0x10) 04:41:24 executing program 2: io_setup(0x3ff, &(0x7f0000000000)=0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = syz_open_dev$midi(&(0x7f00000010c0)='/dev/midi#\x00', 0x7, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001140)='./file0\x00', 0x420000, 0x6) r4 = syz_open_dev$midi(&(0x7f0000001200)='/dev/midi#\x00', 0x6, 0x40a800) pipe(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$swradio(&(0x7f00000022c0)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x305}, &(0x7f0000000080)=0x8) linkat(r6, &(0x7f0000003ac0)='./file0\x00', r2, &(0x7f0000003b00)='./file1\x00', 0x1000) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003a40)={r7, 0x8}, &(0x7f0000003a80)=0x8) r8 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r9 = timerfd_create(0x4, 0x80000) r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/zero\x00', 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_open_dev$cec(&(0x7f0000003580)='/dev/cec#\x00', 0x0, 0x2) r13 = syz_open_dev$dspn(&(0x7f0000003640)='/dev/dsp#\x00', 0x1, 0x1) pipe(&(0x7f00000036c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000003b80)={0x6, 0x0, 0x0, 0x68460429, 0x9, [{0x495, 0xffffffff7fffffff, 0x80000000, 0x0, 0x0, 0x202}, {0x5, 0x100, 0x4, 0x0, 0x0, 0x80}, {0x7fffffff, 0x50c0, 0x101}, {0x4, 0x6, 0x389}, {0x80, 0x100000001, 0x1f, 0x0, 0x0, 0x1000}, {0x5, 0x7fff, 0xff, 0x0, 0x0, 0x981}, {0xd6, 0xffffffff, 0x7, 0x0, 0x0, 0x800}, {0x10000, 0x3, 0x8, 0x0, 0x0, 0x400}, {0x100, 0x9, 0xc57b, 0x0, 0x0, 0x2}]}) r15 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000003840)={0x0, 0x80000, 0xffffffffffffffff}) io_submit(r0, 0x9, &(0x7f00000039c0)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f00000000c0)="41aeb2d530b87b6bac14f599b6824333810ff06542ed12b6e855b8f9c20e61f93fd8eee147dec455fc030092d31631d9793cdd421523cfb231dd08a49f5cf34e770908a4f7f0235e3adb1fc160fcc55559442bfe96ace0aa88d1e1c48e4e4cf50a25be31c90eb6e45240351c9ddff5f1eea91ad6bc8fadcdc9d514ddaf5f7dab48b274272306f83a3ec3225d9a248a114c19380b6b86585dca67dfeab0dc3b9e1219a2ed348d6959cad2d93f9924cbf9432c7e4d00bd3895b09bda4acc433a3e55fa461eef3367465ee5680d32b8809cc59674a872c7b7a0ee7b8c5072ae4ff107704af7e52a9b1b77aae05832c055ccf8fbcc100102d131323688c29d75002642be32d2ebca29cd7c148d4a96ffe3103b8da100fd53e2a767a6e5aac6b38dd7962b894ed9757490dfbbdd4e84e90ca1f0f8442fae3955d072d6d016ce4ea9c15a45dea8512b89b29a083c631fa707df66052f23071796096cb2975c18be039be65a54281956c4891826edb0611361e7a52b213c09e09229b57525ebaecb822a994434d1071c65dc7db4ebba8c13d7d5c428db5083b2b9b70159232a614dfbadba86ce2a373168026ee1a48b11a275af11a4c480b4e8c53f93591e400b5d3ac827f6ec0a368b6d1b7267cfaf86899c81bab77622aa889561aff0efac104c8a2e583b25c650db95d0a1689d5513fd4a94e48dc2a198f736190f01aa660a509dcadf7817abb1cc8405095589f755bed9c542883478a7c1f44b91a5bffa198abb74425296d9b6df548bec4f72e4af90b97730b91f277ce7d1694dc9fac331e598c4520f0207c49369589b1fc8f32c447f29a98deecbbd9e63f5073eb255a67eba488d19db5fdb8283431d624c4ddf5bf185abd6c097152b0cacdfd020b0bec20ca1c0940c691ace358e2cb607f802dfa4fc6777874af4d7ce96b986598b177f614fdfcdccd241a610f492201b842726a255f2e58565d617dbf1d350a632d95d9880d4cfd68d8f6acd187fc975bc1f014e297242cca999e45836f186447e0f0435e4332fde9a29a2c3d425d24e89d09b5dd7489146914da9385f3780524d314f9c5dad877bf72e015001ebe940448bd64ae0f75ec61768e96235a1e39f553b8ffd2ec089a724ab0e085230fab3f1b29926800ab6fb08a06d7f420679a0e493ff81c0e77bb10452170249132e212c8487b191bf1e20030a95c49b8f24e165692d6bc1e8dc60d995e76be009958849548a8ef6d62f19d8b2be29eae9020c12016c3287b03425990c8abcec68bd1fa49acb64fd9a05c3bba26f9ea865fdcdd647aba1ff41451fd9767e89699ef5ea78321e5ec8540ef0d4ead7af7da6297d34422bc189b0470e9ebb9ba1f417c10108453b453dabf60be06d2194838da4b42387a22ce76ea614d4c5ffc0d6ebdd41d192e6dafa0c0f7f624ce359c42e48fcafd6cb49175d17bb7ec3b6aba741db0c63f0a6fead0271082fdff440e35a0a294ba1c69f71d7e468fca3d604d49d709325dfd711b8e636ac51ad4170b74320a6c33e3dc87fbc307d4ce3363d21aba3ceb4e2dd93664ea91c4afb8931124abd942c7c22519109d7c9d2d08f9bcdf0181c362342f2ad491c55089b8a32fd86c98fa2d30ffed0486c08cfb70749163a5ce7bca2bbe36241cf5ca181def40ab562815189328fb60c9c0d874e0bc83ac72df1f91bc6d54b8d3011dd78d97391a7514b90f6ec66ece12f6dcc566d1acddff3775c8f33b06d6070de24cac84881c53772c0cb52dd06d1b85f26aea3b0c139959db6032c9e935ef5f109ab94957a5d44685850f336b9c8d9e1c1085dd7ebe44acc24d579213bfde27c92969fa77ff8e80ee6c18826d37dd8ff979aad0cc0adcfc6494defef11b4a38d02e0fb0cf65be2efa22a14bb44e7c5d1d5f37016958991a9765e9b14111102c2caf51c9675a2fdf100037f3a41edc9a04b4b4c8a1dfc8a012003c60348efd0ef32bb33c43cb18f6e57c62170b237f0410017a4dc63f739bb413cfa9009874475a93d374a5090da417abb237bcbdef3d4aeb983270838d78f05d83bc44ed42ca0171d12a7575fa9925a268688bd27ee09a6c5e3ba7d27309aa01b85e23d1bfb08208b805804cfec0579c9c1bb61a1850aebae86b4b03ee4dc0c8b2f50780c957302964d4c15be066be462a42ce0d87ecf678735fd346f47bd9a77afbc8bc7b9adcc99b8da7e15627e0e4f9702d1830b81382d3893be40f9f0542107c6d1c989b86db92e309a6561f34deb79d75eb8c8785201a1d2f7d39cb38189040fc85467271db94c3544dd86408042a7b37128cc818581a0c4d850ae61e1a6022c3db2f5f9803f8c30e42726d6a3e6a238da2d57cc9208c00761ac44b54d2fd7d957e9e342ee42875b20839dfcf97f047a4c39059059df7b58f5f35f8e24574e8aca74fa3dd038ea9671c6cd030c2729cccd259efe71a7b8e097707cdfb69c1934d2d97df6a530f7e04046b6d26eaf1a562baa24cbbf28d4979261b7a8a834ac24fd31fd268bcaa3906a13bf35653f1ae55c14191dc20e5e871343af0086ab37f0b910ea5b4740fac7a585bbd8b387de9b9eba3585043ab386ba718dbe0d4200046242622f4b0075b958f6b3b9bba7ff0e988a29af661169f0692f0218f67a8a0c3554a9d124e6971b2f3c3bf50375bfbdd7a13528307a90381a8ea9aa16f963e3b054a45f17242820bdc15f94236accd6aa15b28d942e4c4dddb4ed6f2392d6b3ed7eba5aad8d15b663449ce6e062eb1cc01cbab9355e581ce5b12d135b9593158b4ffbd0857676f0fbf3e45f92a3929077941545891cc20893fcc8ed06d32a72bc9d14d1baa46cf59127ded3a5d70dcc6bc21b7e0d490d5bd77a01f80f684024dd6f1fcd08f77225276da33163ccb07703f105ace00ff1abc942a3c40ea00369ba89b5313ad5b5b6e7bcd60a260d33f417a71a90202bfb78eed6205bf339691bb799c356108493b856a6760688cffe61a5e74c4dded2b526f73dd2bf44eaf7771a2efe2b45b35d7fae709be67a9ba66ae5b323105859e4cc8b76f9d56cb3314a85904f02c1e8550e4d7c0db8faadfb3567bcd5dd8d4fb8e761b6b1b3b62b319e9f33cd2046c35ee6b23fa73b5a9c69346bb5f60c5b4e600c8900f71d6fe472b3702843d87382949df96bf2ad560348053e58d08151263b4f41a954c60695d0cf436d8d9685164ca62fb9d26bd4a90c059f146aa7da7baccea2d5dc2c037cb064b54f0509c094a52edf7577fa7713e38d5ee30079ad8350681887fcc789b2567aecfd2ed6e4cba663719646b0ec376dd08f598827d8f3b54d27639c8ca6404105ce949ec0c1180b3cbea5a98e0b0e8f95c5db64837ee51c251a0d4e1f3a35f4fb93a30ed8188163203ab77237fe5fd0548c344bc03aa43b71c35e702292b18b5f7bcf0f6a5153218951464eac5c4a4ecf05bb16533c756f0f80da3b1afbfbb15d77c9eb21de030911dd14706d5ab539c929c9e33431b0b3c816b4579db6e4a99f8815871af3f26a8f48c4f5fb922fa24954a650735203baae2ca31608a6b9e7f959e3b8e8a67947f810a03d7830d36b7ae5f5fa21c4d1632a5b1d28f6fdaa5cf983596e1835ef320f123ebcbc8fee99718070093a6819b08adf0d89d28f0b296edc59b386ef24744b5bfde78f6a1c43cd0e0242b7f3a7d3395f3a844c8317aa296ea42a43cb44e8467406374264b30cacc8e912ac0acf74e3b6c09eb8f64b326d05e4a96d7af10a4493bd3eb2ebebacf7ec9850eee8092d2c62dd7c80d801c88add42668596ef5b222e9969972fc5a6a307966030954ccb0f6072a142e5c6650669c81126d8cf2ec5b6f6e1c3eaf95d5745c417caf39329004eafd3b558512d54f727f529e88f2f6238b29bd2385c4f8e53ac25df74d7bef505429a62aec47928daa3a8125ca812082a395b11b6a2ef4eb52ec045385e60a8afc153f4a361720baeb21541e422b815690259839267dfc8af7a66c96695fcbb10095b2ca101a10999c3497cbdfcb6aaf6d2badfd5d81067c7addb04ac2b73b5f4b0c3ed243aec863b9c98c8ce3f4e03f232a558f6901c493ed94b04be77128a1c51323abf1518c2fccdf2d340affd53592dba15ccd9d99050055e56f1ca5a23cb9084c865416599f41b6f35b98e6d9fc2a88e68b846d257e366693f784b3d8285ca260fd770ca7438a6562249a1898ab40900ad50755b2ae1cd4b900cf4f548d205151cf8def5f0fb539d2f4b56b464b7c0e7d21428a6b98942e82fce2300f3c0a9d42d84c3bcca5e621776339561103b54eef6adfd947fe3f0f7e487cbb892e36654560c67ff6717a14f9e48416f3dbc1f2faea9dd2b9bd491e747f197eacfc9c09f0f683c0668dd36955abcd12445800604ee5b444bf6afea379b7f78aae34d0dda6199bcd1694a8096817df32483553228f4c190b5d17b35bd5c9a316aa9201b28a3035289a0a3acf180f4f18725c8d80ec2285887983205085becf13add60e2004a20f548b6ea038b4d7a6516b520b31feee4a80f739b37d362dc8cc8ccd946f51280626f41fb0eaa34846092b289bc0c8bc3e31d935e4a5260f1bd85404a52c1f6f883e2610f8b3ac6811638890511b80107a5d6e1894c418538798216423341c0d3dcb383fbefc87e1f29462e8c294004f32a67c461be93adc3fea5c182dd97d4bd1303fd48f417cfb4b6906e89c5293e5069bf452b2e6b43327242bded90d587ffd63123c3c9bacfd621fa23816593d86bb7ca5a14021609327bc62a871a69b3b3d56c259a57fc93449280d51ca91f9103880a87980bc5cee0de9cd345a926cc56339b63849176a27f5246d3ab7a9ebb0ae21b391a0a765815f0ac982e2404b0c3ca61205c7b81c557a39b31af1bc2d623315d1063c5073879ed1a0b66e4a04429d02f4a103400a1a22b8fbbff7e9feba29dacae1a461368ac97eaae03bcf7cba0dba51960501e9310ef11de6d05688dd0d21332666de12b91db3a03198ad91e426c3ecafdf881fb14a61845bed09cfa06a63496ea642e40ca5caccbf9b3391775bd9f9f6ab7e1dc4e4c8959cb828ae749183de5cb938523c3a9fe63749fe1221c455aba98c95db799e6d6fa7ed563e9afa590ba66abf988f3d614bacc5692179c288229bd2b79499f938b027f761116b047544f15913c845efc25643b70ff2bf803ef2228e8a90e10501c59f37457d0a981ce6ff56bd8683a6a2210944b8907f8114af96faf6432293a352d9e331260f40fc0100a9317013e0286e93e8a7c5b92f59aa890fa47852c9d71703d8ed861d4dea2aa80ce919ad20cd4b0d62821a23e2c3d505a0cc7075a34bcb387127e1f232774d81e69ab0b844bcc71c16e5089831988fd36f2bb5c91a7915bb73878bec752e0da02d05a5e88dc72f28cb4e21d5d76e72fa59499b2a15c0e3588063efdfb9251fdeabd18d399d48cd3ac8c79836a2c7a4d700659063afb3204742ca0e9c7f326e307da4e96301cfd182ec09536c662298caa2e2a18b23905a1e40c5a854103ece3e850d83c4844550ee0164bce29b3459c442c60f03aef6bae2965af4f95b8481b50942bdc80530e09eac8fb57a7dba59139af3bae89348da4752723f5bec36b5ffc85b997adef64bd4807e6c53561345a6806275c93bfd8a3925d1b80e49d7c32b356c82763c970b619645a2f956f42273cf77010ed19df802a75e42c845a65585bd064dcf806ccead78cc242e98548d0549f2f03ae207c7c8d844473bae12aecc33d2b3449acb2f740577da28ff69cf10f0272fc89179772702b9f84ba0a240276", 0x1000, 0x6, 0x0, 0x2, r2}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x3, 0x7, r3, &(0x7f0000001180)="bce8caba9bddfaf914f1d96ff4755f05ff541e24cf43e0a2579bc92d2789d19d20916afe94e767981030c950249a3852df4e0a87cc95f073e1e4ae4bc4c3564d8cde4db2abfd38950b3d32382e859def5afa083ebf1e40ec298b75cf582a39f2e4", 0x61, 0x1f, 0x0, 0x3, r4}, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x6, 0x6, r5, &(0x7f00000012c0)="b47cdc3dcf53d508c0038e172e346b1deaecb751aa9652646ca06d05350abb0709dfd7685589bbe60ac358d2bb1df08619b9518031a01dbfa09d44095ec86d9b92cddeb1f75a7f0e3dc0577a063f9224709ff5074d79ca1bfa13d5738f1c7569299f9e64de7b94d377aec39274d0b684060c113536e1c0f436e75e3faf3bed70cae81811c42a9fa88a8c115184958e05921b206294de8c14b39cc6fc16a54aad0bee69c161b509168ad08a1fcc3cc60ceef34fbfbcd37abb33447ce1c06e7b4d7484780e27c4403a684aeb678b3ed467558e80c30a24d47a64b2179c8047d2fa7e2947495226f5764c95c574c4674c79c2e21fccccef103a4539e42c86890c2c26c8dddf56f519e7cec3e9e008b39f9aeeaa3b9fa92f4f5ac157b17d7ceb7d7304af21188604fe598bc8342cded89c19228ac375e5883c11af32272142713754e1484ec1c358dd142fb08a5ee8def3e37fbf51381650b54f721ab85e47f1171ee7b2897b4f1ece6a4afdc2f5f00ba9f9ad9d597f8eca3fd2ffacf770446c100e01a99b07d128f0c366337176d622ac18104fa22236c6a158a6d1d69d5c96870ed772f4c10e462c9564db5f71af117e60c85544e71f42705b4975b3ff1f18ca1456d24a567de0af03929781c6427d5646070f6173073bb519aa5dc04a6d8a93f38c25d2616561bf9ea78c3ce83aa0d93df81310aee26257bfc7702ffdc7a3b557018f770f3fadd4bf860afd3a7912685adfd1c5157562334b20fc4987cf63aea8d9aec87c8cd3bbc52a1a81ea70601ed7919abdabc9d0f0a3e41121ec50f1ec2fa3370d97358ba39a7588aaa644a79ca88ae5f9b2a1faebf274db2b9a875ca9a8605cfc218beb5875530131e693b30e010b9e043311a2823a0bb703f7ffab12b3d88406af0949b14a96587eb38d35f329c85329cda8efe79160ab3cd03e44bd3fe6ee009a7cb5d5de18fd4bdcddefbbf7aecd79423ad96126a8394fee8e247aa8ff67b92363b416e8090c0728cfd59dd120680781383dd5e5ebf0d6300230ed212e1f21269ea7e440a5bbae44dffb8f250fac88673ff276723a6d88538e854ee42b62d47263eb79e1905190fc3a8db0a44b504e33e3b969080302ebbea9f560dcde57dfecd9b59c9b960b64d4c6a4ca03365971d3a0614d1f7841b60232425a9c00d8e40fd2bf473c38aa86e5549c6baf11c203da8646c5e9d35ab5303051d4c27167c44fa8bae1bab55dbb344e27f798529bfca650db461acd047eaed2102613b12cb78a3810fc0e023fe4e1d09cc4353d9cfaeb37455a607cbd79c124c48ad4711714ec2686041741eb0925af31283cfe382617ea320547f9d15c93cdf40ea2aa3748c8600843ac236b2f3ff9371d284559e747eda2871694017c4c95dfe49f7abc70d9a929013c185c66ac52ae49fe70d14258ec3fff8a117c580bda66096698036d96ad6b87da4e99df37640ce517397049f4b5d447c2574450af1405a2067695a7cb1492bdfb9f84c92e3bff3c67ec3fcbe7288fcf47f85655d15f5997562908bad73560fff4abb52af0a30b7f53b01187c6712a7f0ead68a74d8909f46c3e89d243875b054bf3d1942e4398abb393367d39b1db0602b6ffe58a97fccfd0461b1788790ca070344fefee0ef0e7b7ad6ed8805a28b3e11f242c34d3bccb676c4b332f76dadfd0e92764be68c06c14ba6acab6e7117878f26d86918258da8899fb59b20343a858492bb8ef46dcf61941af6b596be3434e6427632feb0cebf6ad4b08f0919fec1e6e12b40a828809acf2a48919c890ba62e7552da5f10fee2fec716bbf0dc11d17885d5836fb965eb7331146a76f0f9130149e886d5cdfb5e47ef393aca9ccbc50ce5f6d2085b2d7c36f7d16df08e977a8eb75b5cb5f29216b870d66698e0ccf7402a79b35ccef7fa602b16ff9c9abd23a623408b876f1f0abb58483ebb2ea0c0f5f3d64e2db39ae40bd8cbdb5fcf163094edf8f3d24a4748a0b732357ee4e769c0d1bd4ab2f62000629b8efb8e9c72b19b2eb512131698de890917eab40a265ec8ba50a80d13e6cdd2a7026ba753bc3b32a9e58940f3c82dd7c7fb97270c9cc2dd6ada2d4b879f12d2395a2aa8d495e755dc7d98aff6defa846f839a36a67f1468d480933ccb0422992a7374036ebff69dbe8d4d8ce0c5d7ac40791af9fcca7fb4df17adcd6194cec67138856f1120917e9e4f0262b093808ef7cdaa6b0b3bcb59b44de82a57907fb3d653b814f30e250514bac02ff69515280df57c0090a258f055222087aa827923cc96652a88d96e0f15bb2769bd65517aa70481d64518621d4416c6dc55b09291bff7839bffaad6354b0ec79e77e4025d66457d147b9ed028e170eca3d600b60cad65a4ce6bd956ff363ed3304c6b92a0ee48f2418e8bbd7cedcdcf42db0bd3df91858efd5bfb0125433f3938ac6aaaa66fcb3ad157a86b784bfcd9c2cbbef1614f9b86b4d76cb832dbb3839d0884a37483b1d1cb62eba92c44cb6e77be7259d171e7994cb1d48116aba7ddcf09718ae75c6d6ad1a16bce9903fa63c993b2018e48ebe79c117459a69d382fc35b1a1e6e8c1c58b999a6b5242a2d3370321237ab75ad64589f30120ddfe73c98e906fb5474655cc203b4e516306552e8b081644f609f81f50c36c0de532f7131868d81403a7897314c6a51f3d4991ae0cf98d8928f018b72df6819abf5cafc84c7a3f871dafab22057c4a7cc2c1d0722bbf41b0a2ed4460babe61d87843e26df45fcb936e3040e958b53297168e98b922836dbcdb7edd59d0ea231d0cd69552e61d5b73c17c030bdae1cf1050b815cfcd3806683723b1b09f7983d59614fdf140a145fb893850a7b9c413d99e0167679cd18e74f038f307e3e2476d7d166de85108cfb62f95cab9363109d4b7743a4f1b5c75421f9b814ce9dec9e687e9d4b6791b199d979e002f428d451c470ba83b7626dec57b8a6b52d5f810c81a1b2cd3a4f2ca6a72f1fd40ac7b3a8f69e6314079d0ba025c7e868bb820a52a3938df243ae883da4c88b997ebf8bfb9fe5f0ece2d65553f278cfd7a861edd8f032e70bcb845027c060296c86aeaab1cde9dde544254757ded5831fb52e7cd9cc76ec3d0db7d11c28ff9ad4e6adf4e672b9a4b5d151cf1075dd482e877ef9623f3c9053490789b172c239c42aa560cf75f78445aadef4777723ab5c305874523c03c31fd4d0e5dddcd8ef5f96a8c7b11eca4df3a524c010fd1e48437654f34073c8b356b2e55fb9d587f5d0bef9eb91649590a9b980e45c8ce88849f78e6435e07aa08c415c507dc3fd24997c770954ea65486007169322d974f0a4ea50e1072d8804579c3c05e270099a62280908ad514d103a7bac990e188ec86c95ef58ca449e7c222d8917f2fc8322ca0a1740a366ae075785f5b0168680b017baf3192288d815c447fcf4b3d01ec189715f1711f31d76573dedbbfbad7dc4720bc6c0a891b52676de5b20abcc342245237a13930a21d9c4ed9f2c208cb8819fd11d6ed339922ae64c5ee30f5afe64897ae1c0ed36d8477112e1d02c30744dbca392bf1cb540e4091d5ed7764261e5cbb3f500407e491ae5cbc8fbe00ca11efafb7cc65f355cf12d39a1de06f3f12cedcec98e74a96d44557ef9b11d71b36d82df613bcc5ecdeabf0b8f4810745d1935f8147f693161c7ad5fd1c2e3e00f183e8104a452c62a346c6a2b664bb66e7f7c413b9e7af733fe8e14a51344e5ff4a08904c8fd08eb82b955b0897fbf7653a5bcfa68c944198436dd7e4dd49fca4a7e167e6b5b911f3e97ee9478f89807693a4409f44dd93435bcd26a5d94c6c76c3fed8f26ba8c3b5eaa0966a84532abd51cf49cf6fc746f4d92e03e9fb4663b4acedc73dccc72698241d7375dcc0f90852005f5d090eb93a8f0dcc91a2d5881ad61ceb68cab1101de412f56309a08c69e0d46b4e448cf69326383e64a6b64bc5719afa20ceccb76a8628adace514efa775f598f0633908ea12c28ef8b253e44c2fa45cc83bcda139b09d5d08ab33dfbb8788283020a1b3e303959e0ff6bf441fb9599e7c66bb7d0481ac7e45af9fbcdf5eaed758c5c32d141de9813a3c636a0ea1f5d1347c1233ba9ab163746ef8dcebcff9027bede4762f61d5263f5524e47fbf21ea33ec6d1ef21484ba38529137114e1458614ba01e6a53f0857c6a68fe811b8df521a66255a79ae8093c984955f6d8fc07d1afbcf5d3f0665d3f68ace1e319f7bea299b455b326f6a72becf7d9867ea70517d123653defaa13238c5351a9201cf3687f91e6defec6fab14572e44994477c027acdde86751200a16eb72e50ebfc9b2bf6d6322d0a04835f0072fa7e1aa5051db3d8fe912f73b7c9cd61dd7137571307c39ccb23d05f1162081d4248c5aa962da572a5f8aac37f3d34ebb82d783b1ae74ce5f2a7fc20e46576492129eb6d4e9ebce50487fa5d756a25bc30cbca4a2b9da80b201e31578b6f31305486ec70cf5fa9257f881019ab2481e0ac3a6e9f6a3e484cb260ee6d646e5fc9720db5b74669ad2dced69f74667d1c32904f4fcf190cc401da42d6ce1bfbc820c77e0d5cb9939c9da65425bf9d2c817e389fff694897b22e6521794b6ef53b60021c4ee9ae3b46db4ca9210edb8475d9ac7177d69dcac0f3275eacc8e192bd1cc9f54d70ac384612d532ac257cd3fda1f9b8487d49d7bb3e73b9371b8c95049974702035bc0ae34ddb1b5b1dee8ea56437976be1d2c1d4ea6112be92e9849ab67a2f7196b41c068cd75a319ce0c43780281865b10350eec5908a1ba03688edb155a8f1d3796f64437928e02a859b1bb21ea2b4d59e0d6b744f8aa0a7fa5a7f1553b6c1633a8ec6b0e542e0b0503dc3158c843b4938fb1d5a6f20157d125668619c33c296df8ae00c2fc5f67c7d5b2d93e92b574423ad151a3240830dba061cc901fefe2727eedfe115f83c67f8585f223f7963de9135a5d048310599240c155e5a0898f1e5267c285dc6f6af8ac41a1fdfc14e291d8a9855cd513ddb373e25acfaea95d047e96aef6d8b4f32454c0babadd573429242aaabba702aa562051d53a8c2b4405ee984b112741f844af531e68c9e67ded855cf4900f2020239cb767eeaa64e60f9a3f54a2850ccc1c675d7ec6faa3c74ff33adfd5bc6213c4e36472bc9cc6fd1c37e1ebd5c05ac1c41a5301c0231959d0f7045a670832d6389861e06202947c9e351e66a156efe6861c7bc5c869b1de46b0e2b91d4b591f212585b156e422ec166ee6dc35309f384aa4742109f046eed7e2c60d2a42be6dae1e3a45ecdc49895e2e08219a23cadf877efc25d94cc3919b4cfea000f574fb7d73988a3b91bea232e4a5b1558585ab0bdb5ecc198c8a7f3303d733e893c346b1dea9d9c1d95788482cab8673c5cd594585360c5fc4ab9aeed0beb453234496b2e1d7cc329ab323cd63ed050ffd02fc7d1e38355f3983bfcd80117f9d29bcf7e7976554402cb78060a2f210be221f0ed86bfa512f0628cdc2bca971c98c529ae647392a1e1ad1ae8bd4556833ff7fbae004bd830e40239a9b97ebc9266831128a1563ea48c226751a7f2be20c1cb911bf22eea45ad8c0b1a9bc83c477cc401e7fd0c8e368bf821d1f0718af2fc165282c659d8733dd403222245a3fe4d6eaa3a0d980897c980e7e85ce27fe9fb94466c760da5b30182aa26a34e54c1a452d49842f7051614662f73987b70df42e0079ff59a5f0537e465232e4b94ba456dc56d07262789056b5f778e1039a3048fb8b1b63b8e76c764d9ac3197e4fab7bf6a9faa652c72b", 0x1000, 0x3, 0x0, 0x1, r6}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x6, 0xfffffffffffff000, r8, &(0x7f0000002340)="965c0d93b4a429396350540e495909274fe6d200d381bac5c900d8632d4c596a9f497d7f76efa702f308754efbd2b57e100f35a9d5db32d9f8103a85288933e3fcf168", 0x43, 0x3, 0x0, 0x3}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x7, 0x5, r9, &(0x7f0000002400)="dd0c86d2105ae6ed6c91d4290b90d85a24f9db5d6a04102fff3e97afbdf4da41ad96f2de758a298e06d18f7cfe28413d5dc494c9d7889a86a3092cb46500f438ba1224a9a81c41d5594e4e229e840afbd5756a5cc018c0ee7c448f27fb45936b69d6448dda3fee2edcefb6a9a955a9a4c4b500acc8cb3b1872755b7d27f6cb2c14efdf416a177bd0c588d16637b4", 0x8e, 0x8, 0x0, 0x2, r10}, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0xfff, r11, &(0x7f0000002540)="3ca7dd577505909b15b32b4559b8c6258dab7352fe0a0dbec38e143258c673348dbb981c5ec0bb8d0e123227f31368383193f952a99ab38025ad60490d273274f86bb0a0b7ed8632dd103b1548a8c9bae3778c828cf55ad9b29b1e80a4bf076da8aeba11a666c319eceb4bb52dc914e79b489476f555ce3798315122c421df2304d30b0c5da06c36abbfe34f9fedcc9b151e763d865b4d1253e428ab852de35cf83d3044b0c0cb7097be767a873c0c3dd916a78d811a58a5c467e72f017cce10047755ca5c013d8ee720557d0a83b0d9bcef576ae1ae18555ea0bedfac97472c7377e619c9222470fec601d1c0dda4158dd2d49eee3a287e6c55659cd4d3139be46057e0dea884997425ab6fa84b356e718a42a071f3543b170b5d25ecac7ff27433c88c2dceda2194ad532f692cc137fd6557cf441eb344ad65a76e6667313e21fb350c87ed310f8db9620472478b83c907b509aade3c6d04dde4bcd00e71c99247a5d8dcf795a35732120e27a6b30fe2f6a98cc72476d24f96c126e807c2242120711da9d852bf9ff9a61301f9ed925244e80682d15b5d63e89d91c62aca1b59d5eec22696819796ed41ae88d4bbc0687f0f419e97ad38026be7820b60963037b4731292914958e45c17a524dcbd7ba6f656ca54868f4460779d54a54cc00e9e50b92ff37b35bc5f8a5424e0a0d0023f98208f350bf77dbe4de8a055cad87a8bf82f94b7af28a5c2fb7d60e1683e7c7228ed311fccd760882bcf55c451effa2371370a6cac0cc6b07289841bb8d893e1547532a3a99ea0a966148ae32c3c4db9696fd8ac1e342b5278c8180971f5db9e89f8daf6f0195b30e0fdf5517441c82ba75e2b0f3a7a522130233d759733ff740699a3e3e9b558326b646bd49bda41cb7b12074d82b285e581bdb53a5040f3b71b731ab85d58786cff42b43b336ee6fe03e49ff40903396e9efee53a8fe4ae93e6577ab880703433b46de56e8f41646f2290b6a762b09a244d21154c20473278cc2a686860c9e189357fdcc603ffc14fb202b36bc0bc3a0443c63d4172e7d62c148e3f8a408e88a18735d952c3fdc8406fdcd14f017b8f3b35c870dd6108b1903386b0ae0f54ed0caa2b7fdcb07843f4c7f34a335d5abe81dea8dad8752aabe97bdc18b884026b666f52361c63e44c0bc86d3f54c71a9c66aa37d4678842c91f8d085e12d49da081b7149cec1c0dd93cf669d6837b898e81db4fa54087e2b3526d47d01f6375915d7e5510e9f489a7333c92c771be0a4a05859bce9796d3d8a6234b572600c760eb8def241d6b8f61efed28fb07e96ce631ce04b4fbc6b637edb30d8e7e30760817525bcff3ac5876f538be34714e24c86745c3958b219f245a18af58db1e350030e574091d0e446852e9e9d440ba1f68db304980d5b496520638b88585c61e1f23a1d48d670c8d41ac1ad7b4d60cd72476e236beae0e84654750b07b68fd397dfb23b7d3d07392406603451842f867394a244f4f5b9a2b1f394a9247d1c2a1bb361f324e269984c9fca3aacf94ee4161f5bb9432d7ec6624e42b57a34a4c45d8ea4e4b8d9f4002cdc24f22bf0e3b7a609cfe18f6052a998002292889a35adc12b9503014f7308106258977b37c2b292604e70271c8c2886afba86f36710f5eb4b019107ffbd3e38d4216fbf8755b2c19d9b3a6f99512472debe7c81eec21459dc62fc356293d8ee2de4cdf1cc9f98297383b8fd06627abcd7d8fdca11d27a65633cbb1973166636aa06d20fddb8ea31a81ee9aaf5a5d02fc84c604a23199338b681ee485b4439a9456ebd7ad8e89008dbe21860e1d4bba21270495903546400ad9e3c8a44eef72f388d80658dd19975dcb1c3904f317a50b0c906cad780bdaf06fc90016525b5b7bd13cfefd088dfda5fefd5c74c00d70b0dd8be235102276e2e92b95e6f5d4b5a694c0fda6a4c5dc810db2bf28efa8f292004800d1ce6329870ac77df5a67e6d8d48f5745be6fe195df0622b098a22dc6b8101a230387f979095571d1fd5ad0e943269e7c4fe8bacc55fe8ee78073d9d031a4a750ecc13fcaed1ee509216a3ec832455be4c9a76afc67816d404dd0cf1e14f261cfe7f3e8ae0158e4b79c5efcede090f574e5f2871acdbcf9a482e043e098eebc447fda2ee8fa87112b71be9bff2eaacc10c8b9e7f645a6dd3e04c6b7b8848637956dd049117df19f07aba76c2b05ae63807de590ea7509c7953c6ed13cd0c3830e1761219c842402656133880f8f4f664ac689774b520b84ad5cae8ae62b38ac283c427ad2046d38ac4814d4f1ccbb53fb841e847ecc41fe943f4793afcf6443b66a4dd43d7a4c5858f9c81e85896466042c9359c73ab5a16d98fd29da7d8db3d451e88b94f7d23b051a30febd80e2cd1361e7ae08c4c2a89f40c3cd2f2bf890c311143649614aa758db9090b5f523d098349477498adeae456bdaf24efad4cdf61a776886917a92bcc345e12166bc7da992aa9648fc81800143b4e5aca877945c95dbedd21c6ec4e951c1191802089e33aa22abcc8424e6aa8ca6216abdab2cbad2dd03b45931ec3fc1edb4d5ad4277f434f609cca526fe957a166433f3f3688562e85af42730134aaba2958b43a2c350c6f1a2d9ab7ddef80b4163405bef99895459b23ddd3053efe19657d044d8b37500cc4b46b42cde2a80f3b6f7720604674ff82f221d08dc43733676dc2d5fd9c197f3b3b0ff3ddca79a7428cf4e902f3d94ea3260b3dab706834eb4d6ee4d7d845d31b2db74cda98705f13bfc963f062e259955cc9b8e2107fc9c2e366b2bd30b1f7edc47149d3d36435ab9c0ca8520ed8e772ce7e5f2adf8ad42b3d6ce522a8c55fc0d378cb42b2b6ee11ca94180df71318c13afae6e538d5c249e28c346f3e43550a833c09b56456d3ba14accb9698b04e9ed88db692e0804cb7e63b0098fe6523dd97b35c6823a0080fbd9c81f026ff81da41b1589ee8ae4770454d4f9784e87fa0328b110d4a62aff833e79ffe7433ae5ea9d50bca940a6974081eb180052334c4ff7e4aa6e68b6995edc567c7e214559edb938433479d1ed2ebc95e586724ce0d2943be4ae08a25473479fa06de132b99047e4f1934ddb2283b81ea4daf5c71c35946c487813a51e24d01f8a65a9d6c813c748ad79e19beae2f8b7ea3a9a3caa08221e8a12505f903bedaaaee23d48e3bc46937ce6270e61d0433520995d70e84e679d875046f5c71d216482268c64d1810519b7c9356c5d9e9d8c0ea44168df84e862470da4412943ba21641a14f87b9a197e77f421d5fdf1967e9d51ae1f7c23785789be89d2f70a69487dff9a5dbab46ae5d883458ff1b2629635b8950a8e66909ca59b324fda13bccc69460e2a65cc1f87760a36774407954708339175d6a26eb2376725f6d801fe2d17c2d32f46f0a939c0da30466b6efc1ede70a3175f1682e036e8ae90361122bffe6ae96aa7d509c45f3f49ab47efb6ea62f124e2d5934bc5b3f99e9f4e72df97a82e3f4f794a02d4c03859ba0cee69a8c2ff6676120ec7e416c80ae542d2650ebc418a825bdc253aeacd9596c66c594d74708a310ca4ab847014809b37312ed3546e2e47b348f232549de385aaae0b6ed20683be17bd05d2b34ecf26985a34dc923cc9dabeac2066835efa307f5faee5f47f2983c4b2bea6abae478c9fcebc2baf8ad0154c64196b05726bdc86ddd8bb630a55866af2412f1103e2269caaf3e365b6ea111e2e150ef022f756edf2e6f3b04d8b6ed2a98cbaedcb6772189ed45ea093487b636f8dd7e04f6bf1654bb207ad0e251108c2366fbbfaeab13235270b213e68b0cb7a3c1cdec1dd25948af61c284ce2e36dc0962aa8f56a493e8659b6d1a62c0add62e4086f04a035dfc06de7a7fa617b9f713ead3328eee308d944e616f444c053db471b2890a9e803ff784a953e9e6b64f00819d8f37fea0a0e0c09ab65a343d154899d27bdffb32eef4fd3be5a253a7d47b54aba7842f1ba8abd95d48bed5bc1def5b35c94daba1991021f072c6963e2e0baba88e3ae9a6c5cfa5dd831c81d301b562b9cd2bca96cd303dcb4fcfbb853b3f1a0cb5c7822f9b8326ae1ef6f3717700c08e856603fc52a270287b71fc9a606906c0c9474109a98145b0dc545f6f8ec17f4bf0f916563bf0d71a04ea2c49edbc707867a22630bce843007475bdfd563b80ee3017aec6394cb6cc3c648f7275c16d1b80101a73941575f62366758af8d580c24ef7cae50d3cd61ea632c02bd4c151b6f94fb7837ddfd75ba7b29b86c38aaff87636f4a51f4f81356ba0ba3e6e6cb8e03c720d00936bf76b58e9936407ec4674922aeb7d9c0e86efac05878d71d1a3d96c65d3e25fe86f801fd99ae84801c757304224fe0242380954af1ff6a99c31c8b578a1d9c7e9fce6091bec530081ba5881e7a7506c59a6ede5262c4b1db9fc6402d7de3ea9bb6684ae344bf0155f6563eaed212d0f527146165ad86e41d42bf47b77cf899fa06b93f5181de65c66d13cb06d4e370498e18ca37591ab9a782c3a2f69c31341fdabcfc7053ff28a846dc89e246b930e489f73a6ccdc6c21682c902d538178767883113bdd767253c6b06f4af57ef9a104517acfda549f22c4835d79c61854d25226df522ee8f724b24055acb9650c3f9e5aa73df8c228aa2a866fa7224a18f89002951cf7ac71e13039a4fd0ecc56aff42e7b3986206f6d6997d6cb36bdd3e2377ca1526db25ebbb15893236fc2d0e83e62ef27369391fb33d5f9e51f72b29250a4a74da0b55daa1a4ebad254f9e1d04c924fd0efd13b54811f498f808847302cf45d4819634293b78b7843fd09cc33a6f64b2601dc206b690a0ce71a09cad9e9afb905eb16f65e9d0af44126196999c191dd5a8b574cf2080e607699141406aa7664a824499261fd32f965faff90437fc8fa9f838b7b32a49022902154061734f6be6a993e536ce2f7b2f73150d31ae6a1ff833778d6db5a877ab78cff287be7b42ecf2f49e261a20f7456901c5345aa6c2bca7f78d6b4952aa7f8d3e922f5839ece1dfaf519632a19b78755e98465ae5c3ef9ab6a22324e4bb9b51882606c25eb52e2af101845ee2ce5cd951cca10b85623d31399871f0c6851e2dbf340afc0990aa2c2bd571cab2b4c30dac492021486104808de24c962fa8b2ddf548c4cc8b7eb396453d8289af6b2747bfd2556b61ca062d0a6d5143790f7dd16df68b5a2261525c1ea252233c13b4f0c180b0d11f2046824e1c0928f65bf6de300e15295a89af946df58ceac6090471ee9806dad975b8bd56f664c5d6134d04439a84ca903772fea73a0da97087b10b24f6459887b0c184208802897d6722ac7baef7486799718a11ed43cad9637e705c304c15c7357a360dbe45b8ddc3fdd1aa35e50f07934310a71025a215dc9cc6367f76a94f6459af967178290bb470a08cd5ffde9c0971c6f1ebee9e3be95ae34122464bda0ba2c364e33dcc84ba6abe5eaee1d3797a951bc0bbd396062150a48e732de0968d70265ea6782a21bd26f7af3bc2304a9a308f57abf540207f89af93604817a44f17159d4c042bf70c1e9314fdf5cd2576f0e152e62876ccab367a0e6c8a617924d4cb852e658f72ca75bc2beab5cb1b940a41e818cdbe049371466c4d12de5e57889ca8234daedf6f010d06519ad620adf75ef18031ed8d6a431d9116c4f42f52a780b0bdf0ae5a4ef96197c284d094180f82f39661d328c1898433053b10564d3236fed10dc4b0d0dd1fb19c9ae37c01c7becf33ce28d86423adcaae7de19eb", 0x1000, 0x7f, 0x0, 0x2}, &(0x7f0000003680)={0x0, 0x0, 0x0, 0xf, 0x8, r12, &(0x7f00000035c0)="5d7522ae5d8d0b19eb6fe97519afd5ec3ca236c8382f9889626128c993bf5264075ae8f46adcb57cd785d2f87e4e929c5aa32858ff596b8043a34f7217ad0ea0bbbc101c59a22a6ccd27a0817119af6fa43e5705fc6097b2f52b83a79c4e6fefbead8e5ae096884022341009106e9284", 0x70, 0xfffffffffffffffc, 0x0, 0x0, r13}, &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x101, r14, &(0x7f0000003700)="026daf1cc42c3aaed0b3bb1142c60f75581aeb63302d12cb21f3fbae25893a3f0daaa5d9efcbf582f2f9fb992482e95a9f5d1a02c7bbbd3ddb552bbb7c877745934bf2eb53409943c257867385f690e1901a032b5d603baf66549f3a85c307a76d6ba4e759756bcfeb6c79324b506fbf3500e5ee6983a6aea8447be5b21eea7f718ecfc45a743db12b19bcd927891f12bd936b99ccede1b02dd4be4fecd570acc1727f391000de4de365abf6b8fc422c185f136d300090cd366af02341be5fca26f95defb54ee1fa1550", 0xca, 0x101, 0x0, 0x1, r15}, &(0x7f0000003980)={0x0, 0x0, 0x0, 0x1, 0x4, r16, &(0x7f0000003880)="ce06704d6d738cddd54178b19ee6694092899cbbed528f283a1182de7e4b9904623854a2d9e8dea2c3a4d33e4a89253f737cb5ba5a813af37fb2c82766caac3fb90660bf6a5168cfd329289c37a1a9b42dec2591d529e98225093a0aee71196fe8f43097dfd439860c09260e0b6746e09ffc6d1c63d2cd4928669add4d76a7f8e784afa986fc56d3935870d2fe46ceb3bb7a4094ae6056ab9bed7bc3003c02c3f465f667c005a30a2b7550f13d74d8259e19f528ce1836c30ea04bcc0d097a20005bc088dffe9b2b70e7f459664871ed4358184eb14cd84a3a106e779f8a3a1d9c4b195c708ca3f99184117b4eb739b62cedbd615243", 0xf6, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) getsockopt$bt_BT_SECURITY(r14, 0x112, 0x4, &(0x7f0000003b40), 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) 04:41:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') sendmsg$FOU_CMD_DEL(r1, 0xffffffffffffffff, 0x20000081) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x14800) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x6d, "dc5bc54d998063d5530780ed87b29b8d522eb8c7dd810fdda2248b458a9ff5e91b076c6a56561ef94f6a7261814a2a0820582d6a87ae8ae881b1a1f65c5ccf759599bf04494efce68c57d8ae1dd647fffd86a04b722afca1c7a6215eb038b2616a487376df6e606060ebf65d86"}, &(0x7f0000000100)=0x75) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0x9}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:41:25 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c000000000200000000e000000100000000000000007f0000010000000000000047000000000000000000"], 0x0) 04:41:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0xffffffffffffff76) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x8001, 0x200000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffff9c, 0x50, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r2, r3, 0x0, 0xe, &(0x7f0000000100)='\veth1vboxnet1\x00', r4}, 0x30) [ 625.062120] binder: 26763:26767 transaction failed 29189/-22, size 0-0 line 2834 04:41:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000000)="e959267f3f116619de7efe23f24e711b71187827f48e462ecd0011441984d79a76d9f0c02806cf665b814122b5", &(0x7f0000000040)=""/32}, 0x18) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 625.147005] binder: 26763:26776 transaction failed 29189/-22, size 0-0 line 2834 [ 625.167916] binder: undelivered TRANSACTION_ERROR: 29189 [ 625.176980] binder: undelivered TRANSACTION_ERROR: 29189 04:41:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfea8, 0x0, &(0x7f0000000000), 0xfff2, 0x0, 0x0}) 04:41:25 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xe9, &(0x7f0000000340)={@empty, @broadcast, [], {@ipx={0x8137, {0xffff, 0xdb, 0x9, 0x5, {@current, @random="8658838aaee0", 0xf44}, {@broadcast, @broadcast, 0x80000000}, "4e6c436babf4c95b04e9a4d631c3354406128c9c5803fb06002c2deaeab9c15a022671d28565f58ab4d925724fffb7e131665f82eedec147ac3ec82fee23c4632f203be1443dbf818232295b1cc4bc964ee8a884f25bbd70c747283d83079a250dca8948ad48bdbc4ce2c19253dec027b63cbc5156ae086bdf84b5aab507a2c961bae5fbae9ba89295cdc9d5f211b481ba622859105eff758e65c45094eedc243a5c9f5ee0fd2aebc45eab9af3bd9e15df25a0be8cb1743b9a15508318"}}}}, 0x0) 04:41:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0x0, 0x3, {0xde}}, 0x18) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000100)=""/68) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 625.418722] binder: 26783:26784 unknown command 0 [ 625.423834] binder: 26783:26784 ioctl c0306201 20000440 returned -22 04:41:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf8, r2, 0x702, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x81ab67a20083cf40}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd825}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1cf7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x100000000}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb9f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x24040045) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0}) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPIN\x00', &(0x7f0000000040)='/dev/binder#\x00', 0xd, 0x1) 04:41:25 executing program 3: socketpair(0x1, 0x80006, 0x6, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x40000003, 0x0, 0x10003, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/255, 0xff}], 0x1, &(0x7f0000000980)=""/101, 0x65}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x5) close(r1) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 04:41:25 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80, 0x80000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x5) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) 04:41:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r1, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) dup2(r1, r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x200000000) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) dup3(r1, r0, 0x80000) 04:41:25 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac14140800000000000000000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) 04:41:25 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000791489e870876d130000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x1, 0xffff, 0x8, 0x5, 0x0, 0x9, 0x4dc85a83c028041, 0xf, 0x7d, 0xff, 0x85, 0x1, 0x3, 0x34a20000000000, 0x1, 0x7, 0x6, 0x100000000, 0x101, 0x80000001, 0x1, 0x2, 0x8000, 0x2, 0x100000001, 0x3, 0x8a6, 0x1, 0xc5, 0x8, 0x1f, 0x9, 0x5, 0x7ff, 0x3, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0x59, 0x5, 0x9, 0x101, 0x6, 0x6}, 0xffffffffffffff9c, 0x4, 0xffffffffffffff9c, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8000) 04:41:26 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x180) fchmod(r0, 0x80) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)={0x30, 0x4, 0x0, {0x2, 0x2, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xffffffffffffffe0, @dev={0xfe, 0x80, [], 0x20}, 0x800}, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0xf}, 0x1f}, r2, 0x3ff}}, 0x48) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000d20000000000000000000000000000000000000000000000000000000000000000000000008167693bdd36ac8de8fb000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 04:41:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x101, 0x1c7e, 0x8032}) [ 626.242917] binder_alloc: 24054: binder_alloc_buf size 7458242457902252032 failed, no address space [ 626.252420] binder_alloc: allocated: 720 (num: 78 largest: 32), free: 11568 (num: 1 largest: 11568) [ 626.261864] binder: 26828:26830 transaction failed 29201/-28, size 0-7458242457902252032 line 2973 04:41:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000)="1f261eddc65ce00b7a6561a5b2b14605d2bb55e76ddcce2efd71b3a44bd12e82217746df5c3c910e367437b7e0605ca6e489550514e091928cbcf4a6555583b2a052a28826943e291f594b92d93770b1962e780be605a8ccf33199c7401c0a68b84b11b85097d7f43d4a3cac159759", 0x6f) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x4, 0x0, [{0xc0011877, 0x0, 0x3}, {0xc0010bfd, 0x0, 0x7fffffff}, {0xaef}, {0xbdf, 0x0, 0x6}]}) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) [ 626.352335] binder_alloc: 24054: binder_alloc_buf size 7458242457902252032 failed, no address space [ 626.361791] binder_alloc: allocated: 720 (num: 78 largest: 32), free: 11568 (num: 1 largest: 11568) [ 626.371061] binder: 26828:26833 transaction failed 29201/-28, size 0-7458242457902252032 line 2973 04:41:26 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x9) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac14928b0f610147c77f690814bbac00000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e00000017c3157c869d4226f822559d54d00000000000000"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 626.522095] binder: undelivered TRANSACTION_ERROR: 29201 [ 626.530337] binder: undelivered TRANSACTION_ERROR: 29201 04:41:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:41:26 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x50002, 0x0) tee(r0, r1, 0x1, 0x8) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x5, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000013000/0x4000)=nil, 0x4000}, 0x2}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, 0x0, 0x0) close(r4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x129100, 0x0) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000240)=""/131) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x11, &(0x7f00000001c0)={@broadcast, @random="3c2313082f21", [], {@llc={0x4, {@snap={0xaa, 0xaa, 'H', "8555c3", 0x88b5, "7aa9b681ee62c58cf2b3b1619a9d17c1d9040372c9e4b678fd9c0f56ac45e5ddb89ad52d91ec2edf09b9642e4fc92943891924a42bdce5294b3ac17b488fc004fcfac9d9c8004f43f10f75a6b5e5803e4f2bf308bfc4ef6055706c72"}}}}}, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0) ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f0000000040)=""/202) 04:41:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 04:41:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x2bd) r1 = accept$alg(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:26 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x113, 0x5}}, 0x20) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000001c0)=""/54) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) syz_emit_ethernet(0x72, &(0x7f0000000140)={@empty, @broadcast, [{[{0x9100, 0xfffffffffffffffc, 0x3f, 0x3}], {0x8100, 0x0, 0x2, 0x1}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x115400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffff9c, 0x0, 0x4, &(0x7f0000000080)='eth0', 0xffffffffffffffff}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) [ 626.930948] binder: release 26858:26859 transaction 167 out, still active [ 626.938055] binder: undelivered TRANSACTION_COMPLETE 04:41:27 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 04:41:27 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x40, 0x101000) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3, 0x3) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000000c0)={0x6, 0x9}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="b7f2288a911993f0265df5fbdbd9a14d", 0xf) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCXONC(r2, 0x540a, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) r4 = semget(0x2, 0x3, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x117, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100000001}, r5}}, 0x30) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x2}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x80000000, @ipv4, 0x4}], 0x58) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000080)=""/39) 04:41:27 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000040000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f00e28311b6b125da03a911fad500010000000000000000"], 0x0) [ 627.259290] binder: 26879:26880 transaction failed 29189/-22, size 0-0 line 2834 04:41:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 627.348750] binder: undelivered TRANSACTION_ERROR: 29189 [ 627.411486] binder: 26879:26880 transaction failed 29189/-22, size 0-0 line 2834 [ 627.442088] binder: undelivered TRANSACTION_ERROR: 29189 04:41:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000004000000000000010a1621d208e6b00"], 0x0, 0x0, 0x0}) 04:41:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8, 0x400202) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000004c0)=""/170, &(0x7f0000000100)=0xaa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c00000000822a2ddcb50f13bc5300019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f00000100000000000000007b391740438d442db4051e476e949024b276843ae2aa65669a316e3e9def195a5d352ecb83fb849dd1ee84e4566dff2bb17b2d6c62cfaa93121738bab85d2aa5c699a28db117ed27ef63e3db304d4e576c71aa141fa914e35689c48e3c951a5a0e2fc8df51aa5990174a8b806b417234707285a0885caa6addc7e6d1b81cad3addb1f2494633ac6ba3ebb0c54f876117e55e4adee313a32b3b1dc64f8f4e3eb00a7bbcd90db25e57596bfffbf74c19a38cca9e2b56f80c4d956e1ea1f052a80a0cb7b9ccc30a270a9de0dc67889e9a50e6382ebb46af86f4c5792cb7617f12ff364b817afff5aca3cebc85e102fdf501c03cbe113145b6cd250ac3bb63b21c920d5c2c084ebf1c01b17f1ea1a2e497aa68a23b0c882d3b4bd90505879e105dd9321d3636a6376d09a8559a13d7f863cd798e4ba68f066213f32c0fc4ace4b85a6ac3ab7f38fe83239fdce13052d096bfd963de685fe27960"], 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x3, @empty, 0x2}}, [0x0, 0x80000001, 0x4, 0x825, 0x7ff, 0x3, 0xff, 0x10000, 0x6, 0x2, 0x6, 0x7, 0x8000, 0x9, 0x7]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={r3, 0x800, 0x2, [0x6c61b78c, 0x3083]}, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) 04:41:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) msgget$private(0x0, 0x400) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) [ 627.594311] binder_alloc: 24054: binder_alloc_buf size 7750167319336259584 failed, no address space [ 627.609580] binder_alloc: allocated: 728 (num: 79 largest: 32), free: 11560 (num: 1 largest: 11560) [ 627.618936] binder: 26902:26903 transaction failed 29201/-28, size 4194304-7750167319332065280 line 2973 04:41:27 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/95) syz_emit_ethernet(0x0, &(0x7f00000000c0)=ANY=[], 0x0) [ 627.746734] binder: undelivered TRANSACTION_ERROR: 29201 04:41:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:41:28 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{}]}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:28 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) 04:41:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 04:41:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:41:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0xe3}], 0x1, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000140)=[0xee01, 0xee00]) r4 = getegid() fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x4, &(0x7f00000002c0)=[r2, r3, r4, r5]) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='clear_refs\x00') setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000800)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000008004000040010000580200000000000098030000980300009803000004000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc6100000000000000"], @ANYBLOB="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"], 0x4d0) [ 628.007597] binder: release 26920:26921 transaction 171 out, still active [ 628.014686] binder: undelivered TRANSACTION_COMPLETE [ 628.030074] binder: release 26920:26921 transaction 172 out, still active [ 628.037137] binder: undelivered TRANSACTION_COMPLETE 04:41:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2000000802) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) r2 = dup(r0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1480000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbfbd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x48080) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xbd, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x2, 0x3}, @free_buffer={0x40086303, r1}, @enter_looper], 0x1fb, 0x0, 0x0}) 04:41:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x50) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000000480)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000004c0)={@multicast2, @local, r1}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:28 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000080)={0x3}) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 628.314754] binder: 26942:26944 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 628.322142] binder: 26942:26944 BC_FREE_BUFFER u0000000000000000 no match [ 628.329110] binder: 26942:26944 unknown command 0 [ 628.334101] binder: 26942:26944 ioctl c0306201 20000100 returned -22 04:41:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) r1 = syz_open_dev$video4linux(&(0x7f00000005c0)='/dev/v4l-subdev#\x00', 0x3, 0x200) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000600)={0x6, 0x6, 0x4, 0x4000000, {}, {0x0, 0x8, 0xfff, 0x1, 0x80000000, 0x3, "910e9095"}, 0x4, 0x2, @offset=0x6, 0x4}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000580), 0x4) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x36d}], 0x1, 0x40) sendmmsg$alg(r2, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x480, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x117}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x7f, @mcast2, 0x8}}, 0x7, 0x2, 0x7, 0x80000000, 0x10001}, &(0x7f0000000340)=0x98) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000380)={r5, 0xd41, 0x3, [0x4, 0x68, 0xb859]}, 0xe) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000440)={0x9, 0x108, 0xfa00, {r4, 0xb6, "466a93", "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"}}, 0x110) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000680)) readv(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) getpgid(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) r2 = getpgid(0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:28 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x101000) write$sndseq(r0, &(0x7f0000000040), 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:41:28 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xea, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [{[{0x9100, 0x8, 0x2, 0x1}], {0x8100, 0x9, 0x2, 0x3}}], {@x25={0x805, {0x3, 0xf6, 0xfb, "896fb0338eacc19837c2b864138f718afec324fbe7aff160855645f1b8300094a7d70b78693ec9799ace21174fafafc2cfddc3007bc039c1dc876cf9f04c47c4e0712ce969405f7dc2ef21a3f84a4f435f8240e0f8dc1dc72b8c7a568a38d415837291338d365aad7f67d52fa1460fe84ae760282ff2e0ff48906b1815454aeb549932c90aafac7d0f6829a5a28915aaafeef00837817739da18110342129002cc2bb6172323aa89df166f2cec240aaa3b6617fcf81d4255666cea08007b81bd753763cd73e4208c212ba321fa0f861a91"}}}}, 0x0) [ 628.718723] binder: release 26965:26966 transaction 173 out, still active [ 628.725849] binder: undelivered TRANSACTION_COMPLETE [ 628.744196] binder: release 26965:26966 transaction 174 out, still active [ 628.751220] binder: undelivered TRANSACTION_COMPLETE 04:41:28 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xff87, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff81001f0008004500005c0000000000019078ac1414bbac14141105049078a27f09ee0955bd7c00000000400000000000000000010000ac1414aaac141448082c00000000000000000000e000000200000000e000000100000006000000007f000001"], 0x0) 04:41:28 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/203, 0xcb}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)=""/55, 0x37}], 0x3, &(0x7f0000000380)=""/40, 0x28}, 0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e24, 0x7, @loopback, 0xfffffffffffffffd}}, 0x3, 0x3}, &(0x7f0000000400)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000540)={r1, 0x7}, &(0x7f0000000580)=0x8) 04:41:28 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:41:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvfrom$unix(r0, &(0x7f0000000240)=""/240, 0xf0, 0x2001, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:29 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@remote, @dev={[], 0xc}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 04:41:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x101000) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000040)={{0x6004, 0x17001, 0x1b, 0x9, 0x0, 0xf697, 0xffffffffffffff92, 0x897, 0x66, 0x5, 0x3, 0x3}, {0x0, 0x4000, 0xe, 0x5, 0x80000001, 0x7fff, 0x400, 0xcc3, 0x200, 0x100, 0x200, 0x7fffffff}, {0x1000, 0x2001, 0x1f, 0xfa, 0x3, 0x2, 0x8, 0x80008000, 0x3, 0xffffffffffffffc0, 0xf025, 0x2}, {0x5000, 0x1f000, 0xa, 0xde, 0x1ff, 0x6, 0x1ff, 0x2, 0x6959, 0x33da2436, 0x9, 0xe86}, {0x10f000, 0x5000, 0x0, 0x6, 0x7fff, 0xe5, 0x5, 0x800, 0x8000000000000000, 0x1, 0x81, 0x7}, {0x7000, 0x3000, 0x0, 0x6, 0x9, 0x8, 0x4, 0x101, 0x5, 0x40, 0x3f, 0x8}, {0x2001, 0x3000, 0xf, 0x0, 0x7, 0x2e, 0x6, 0x1, 0x6, 0x1f, 0xdb, 0x6d18}, {0xf000, 0x2000, 0xf, 0xf208, 0x18000000000000, 0x1ff, 0x6, 0x87f, 0x9, 0x6, 0x3d43}, {0x5000, 0x4004}, {0xd000, 0x10f000}, 0x40000, 0x0, 0x1f000, 0x20400, 0x800000000000000a, 0x9000, 0x10000, [0x8000, 0x4d, 0x6e83, 0xffc]}) 04:41:29 executing program 5: socket$inet_sctp(0x2, 0xffffffffffffffff, 0x84) r0 = getpid() socketpair(0x1, 0x80e, 0x8d9, &(0x7f0000000080)={0xffffffffffffffff}) accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x10, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0xa0, 0xd8, {0x0, 0x2710}, {r3, r4/1000+10000}, {0x2, 0x7, 0x0, 0xee07}, 0x1, @canfd={{0x4, 0x3, 0x3f, 0x9}, 0x11, 0x2, 0x0, 0x0, "a1db4597ac8b2fd17bbc2632353c01b61f3e290d09acd96793bf7a0c647dea38d48ca1eb9a4a07b714e46353c412d4503df94b17963b1f0c8a2353479b585669"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x0, 0x7, 0x9, 0x0, 0x100000001, 0x4}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x39f, &(0x7f0000002240)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x1, 0xab, 'H', "12ce7e", 0x0, "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"}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 04:41:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x48540, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x10001, 0x4000) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000240)={0x6, 0x2, 0x57a, 0x4000, r2}) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r3, &(0x7f0000003800), 0x0, 0x0) r4 = getpgid(0x0) rt_sigqueueinfo(r4, 0x40000000000036, &(0x7f0000000080)={0x41, 0x7fff, 0x2}) readv(r3, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000780)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(r2, r0) 04:41:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000080)=[{r0, 0x8}, {r1, 0x8}, {r0, 0x406}, {r0, 0x4000}], 0x4, &(0x7f0000000180), &(0x7f00000001c0)={0x8}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x4e23, @remote}}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, [], [{0x6, 0x9, 0x100000001, 0x26, 0x1, 0xffff}, {0x1, 0x2, 0x0, 0x1}], [[], [], [], []]}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x6) 04:41:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5ef42dd8b5508a304efeaa2cb13d5068680f468", 0x1e) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc) 04:41:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="80", 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x0, 0x0, 0x0) fallocate(r0, 0x10, 0x0, 0x400) [ 630.149522] binder: 27039:27040 transaction failed 29189/-22, size 0-0 line 2834 [ 630.256944] binder: undelivered TRANSACTION_ERROR: 29189 04:41:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = dup(r1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0xb3, "108834a62368fa52dd49fce69b5826ebc8c1e82027a45089c5ff71e4cfc6bb1c20b3d25eaab5cad2139324c52c85c7704afed7b8db0bc268eea6700b63856d4e89404c99f55670f3b1a92eee6a0b6c54863c670f24314c98652b072bae1ef8ce83d4590aafad432a9ea9727d1b43ab6673591c2650381063159cd63a3ef784df9a6dc645a7a022beffe55203d14fa0412002c1d2a67ec8480b43327a7494151e73e3dbe672f2661f90c40498262c09efa64ee1"}, &(0x7f0000000140)=0xbb) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="360000009574c7fa9d17bfce4e95aa3a832ee3827487be410209dba697edbdd828260e09642e0b7d4d1935c63431b2fba33196e74de4109e9d5320d6f63d97b6339a5e10071514ef932ad6047f20c4efed07faf31e958a5b0bff74cc33320d4fcb0b2d2f1845c2be7edaf0845764d884bcc387e2b0d610786cf1b64e6214d1b96284c9a826612c700b121dcb4f17423e6242a9446e07e789e11136d02495a2f4af76e14f6b8d74294ef6ad043e35fc6be23397ad697a05cc080589c316093d6c720acddd"], &(0x7f0000000240)=0x2) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x362, 0xc004}], 0x1, 0x2) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:41:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 630.471098] binder: release 27061:27062 transaction 180 out, still active [ 630.478359] binder: undelivered TRANSACTION_COMPLETE 04:41:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) [ 630.556394] binder: release 27061:27062 transaction 181 out, still active [ 630.563492] binder: undelivered TRANSACTION_COMPLETE 04:41:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6f) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x6, 0x2, 0x5, 0x1}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) 04:41:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000006c0)='/dev/usbmon#\x00', 0x4d3, 0x4000) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000700)={0x0, 0xec23, 0x1, 0xad31, 0x1, 0x62c, 0xa41b}) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8200, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x10000}, &(0x7f0000000100)=0x8) r3 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000340)=0x80, 0x80800) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000380)={0x77359400}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e24, 0xeddf, @remote, 0x80000000}}, 0x1, 0x3a, 0x0, 0xc000000000, 0x4}, &(0x7f0000000200)=0x98) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7ff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000480)={r2, @in6={{0xa, 0x4e24, 0xec9, @loopback, 0x4}}, [0x5, 0x100000001, 0x9, 0x159b, 0x9, 0x2, 0x2942d54e, 0x6, 0x8, 0x2, 0x7ff, 0x10000, 0xffffffff00000000, 0x9, 0x8a]}, &(0x7f0000000080)=0x100) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="006340400000000000c3000000000000000000000000000000000000000062000000000000000000000000000000000000000000000000000000000000000000000000008ada475f076501dcb3d11959d949b81f0febbfd3ddc3a0ea128bc86c93d474fe070534db279f614f33ec91f86cc00c56e61086603a5a38a7fb51cd6f0651ee7149f7ff163f7bdbcaf00762dd54dc0fe4f6cddf1b04007bbeafd4ee11630355df1f3443fda93da3c1579e4ce002ca15801cb8c5cf4ea1ac36260208d0f4358f8664080000001e69baaa7474fc12a2048c8bffaddfe18673f780f7f472265b13e46e678b1bce2c3f3270c63dd7b1ed"], 0x0, 0x0, 0x0}) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000680)=0xc) [ 630.885185] binder: release 27076:27078 transaction 182 out, still active [ 630.892319] binder: undelivered TRANSACTION_COMPLETE [ 630.903217] binder: release 27076:27078 transaction 183 out, still active [ 630.910250] binder: undelivered TRANSACTION_COMPLETE 04:41:31 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 04:41:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x40000, 0x0) getpeername$unix(r1, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="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", 0xfffffffffffffebe) r2 = accept$alg(r0, 0x0, 0x0) ioctl$void(r0, 0xc0045878) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000180)=0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x38a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="8b6889a2d25aa71072779608e53f9efde15590f1243f4fa705bf5dacb69756447a42335847827a42", 0x28) 04:41:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:41:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000f0ff000002000000000000ffff00000000000000000019000000000000000000000009157621d9e59eb6686c2742205ffdbca30b7f07ed428d5908c08070925b04cd44259761fbd540d74dffc6b84cb0f6744b9fe780ac6154113493fd7ad107"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x0) getdents64(r1, &(0x7f0000000040)=""/223, 0xdf) [ 631.084243] binder_alloc: 24054: binder_alloc_buf size 16908032 failed, no address space [ 631.092865] binder_alloc: allocated: 824 (num: 91 largest: 32), free: 11464 (num: 1 largest: 11464) [ 631.102232] binder: 27095:27096 transaction failed 29201/-28, size 131072-16776960 line 2973 04:41:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') read(r0, &(0x7f0000000240)=""/223, 0xdf) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x1000) [ 631.176351] binder: undelivered TRANSACTION_ERROR: 29201 04:41:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 04:41:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040), 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:31 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000180)=0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = getpgid(0xffffffffffffffff) ptrace$cont(0x27, r3, 0x7fffffff, 0x101) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0xc36b, 0x1, 0x9, 0x3, 0x10001}, 0xc) sendto$inet6(r2, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="03177f454c46060507000700000000000000020000000d0000007b0300000000000040000000001000008f02000000000000160000003f00380001000900ff03010002000000094baa0614256024989fb0daa1e1dc3a7d03463851928c68c9ffe59594233c4bef7f70046e4111b2d3b988770d0c8a195b53a1330668e1e4707c91a3dc0aac000000000000000000"], 0x8e) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/current\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0xf34f, @remote, 0x2}, {0xa, 0x4e20, 0x40, @remote, 0xed}, 0x5, [0x74c7, 0x1, 0x6, 0x69d9cfdd, 0x10000, 0x548, 0x3, 0x3]}, 0x5c) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 04:41:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x10000008}) 04:41:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r2, 0xa28, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r3, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r3, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$xdp(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) [ 631.788982] binder: release 27129:27131 transaction 185 out, still active [ 631.796177] binder: undelivered TRANSACTION_COMPLETE [ 631.813605] binder: release 27129:27131 transaction 186 out, still active [ 631.820574] binder: undelivered TRANSACTION_COMPLETE 04:41:31 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 04:41:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 04:41:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x19) getpeername$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000240)="45792739fad6277eebc4ff848afd900623", 0x11, 0x800, &(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x1}, 0x10) write$FUSE_IOCTL(r2, &(0x7f0000000140)={0x20, 0x0, 0x2, {0x36ce, 0x0, 0x80000001, 0x1}}, 0x20) readv(r1, &(0x7f00000007c0), 0x0) r3 = getpgid(0x0) getpgid(r3) [ 632.066583] binder: 27145:27147 transaction failed 29189/-22, size 0-0 line 2834 [ 632.075553] binder: undelivered TRANSACTION_ERROR: 29189 04:41:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20141, 0x0) ioctl(r1, 0x80, &(0x7f0000000480)="c45d2e50f055d62542be9dc5e08647c33075d5dcde6fcc5a89eaeb4d1afce6922e296dffdf6db298e8c145c889a5e94326dafe1fb30fbc620dfb9ba9c9eb6344a2663196991f1b8d75d2ddfefc7872d50fdd429b9c302739938c966994e57a25d8b1c7ee6ece4b670a4214c45db6981e71da8d1fca320ce7db1b68cc21e7a2d6253ca0cec401ff31c6ff36b9825d4709635750ad447c21a3c40bd498551cd8298ba83818fd10d920d73ea670d0bdafa55d8848ed00256a32de79b8cc24f2140d2837cde297e3e32c9c06f59475da673f550966332d28ab2eb8f77862be24f3cb96bf08878b5e962b3d764bf51ffbe0fbde92fe40623287c14f23b05a9cd9c84aa9c1320679e43061c63ee661031bca81ffa0e4599d0aa65fb8f7172eb901e5ae786a955e565e562eb49243eda887682c64d6d7391b77a68a9cd773a9f6b6401a2d06d4a7273e19226d4a16ebb4e462c1ab390ad6764a173a44b90602f0ae7454ad71eaaae72424afa37f2e9a30b17eda35238416972f078eba6bdef62ea5bea2f506371046ae6067c1fe1b6cdf424eae1aff6acc12d184c4a43e517b45e306ea7fc018f5c13390c3aad24016c5817f4fa6e4f495c08299e5de355f2857c95faab5355974654679ec606899026816b9c442fc4de197707c9b66c2f4337213f3dacb0f92a9b00d001672271ae951ea50bba37e64137c342f309225db30a9a3a4e621ae6f1daba3834149996347543faa6fcd3993819607b2ad31cac99bbbd21e2a97faa9bc393cb6ddfabbad2582efd16cf41be56460792947a684bc76d6a1ab3cdf5dc1a76434cc846e20cd124fb13ce30b975860ac359667ad10e82d0f00d7261eda89fa2b4d7059f9e27fe7883772a4ca834ec819b37fae9a8ecc48971744ad03a223638449c8ef500033679b18e9e47df426ea2002116e625ca7e4574286f0144c9504ec2e5ff997813c4ef3b7b815c7c25cb525e86d2450413bd4fb40a658006dd363630ce9a328f3fabddef0e7d184435423a6712e5408c934bbe90aeddf01e3ca11e396a1429b9c7b7691b91d57321bbdd626d1b1c52146bf70052a13db64db9761235554066f3996acee5849026e6a9b6f4215d562ba01658839684cd2a69a1b2b657a334eb4265f3e7523117434fd2dd7e4e56a6fd4731d6c4976bb682cfda270c3f7a567bdf279dc71b69c8acfde9e24daebf51ca71e7a6aeb17fbe6a43e9ed245dc965ca69471eb48da82d6c603342705d2ad2951101138e96ee6eb0e60e1a5276fe23340dd7c74d00043a883dbdc3edb2bd465c6c3a92a1edc3216eb519b4e2939257eb878475cc9ba0332291e220c4f0369a3b39e832cfd670c6687b16c43d94a9810a37edb6c867a1adc7c85846a926a9aa40f06ea29629d92ddd8bb549ad107d8ef53233513fd37b808de6bb0dde3675b4680ec18c15997a39c174b117e09b6945b97615d85f28579bac0597158e4bd3b333cce61ed754e03ff37c7de00b6bc0235ca5403cd9ff32c8fcff47cb29be1159a11a85ad15168fddc83c6a6dde4e5fbdc96ee5c6f579a315ee691101ea5f227378d98232380169cbe383efb49c75d2d3fb50b66ceaa9586c91f38c035d9f789c8276f2f2dbd670419d070c06e63bbafa7e4ff359328badada06f4c5411e51b688b8fd5352167b3d230545824073a7af428594d6f8db5bc03dae43b14783bfa0d38fa1a6575da0e0220db3194e59bf5d628632850c646f0cd7e9d57a85f758f8329e70c77383ca271d7f9fe908b35b5aeaa4436e86414b8110d1fea6749de2753b4cfa088d568428cd5473709c0b4260f3c7bc3b0b7912ad6a5f7300376776dbe59cd33558c599de7a2793bcd464cd616326378b3fdd5d1f87428beb8572e4110bffff0fedd88dd22d7399065f493c24b0378d1eeb8a6ebf30f8409cccaf95aa1c23555e62996a76953a7df23474f9f997702345117cca180a28d3ad3e5f9cc0e8411b949f36f6682d643b6325af0c463eef86ada450cfdb3816fe47a453cd2a831b016c7f09e32307d7a8658839c3b8747b32dac508b2060c01a36a5c2b69c4576100fec110d741657c4d15f7231a1c4668018def31df77a72641db1f2007e8af72976b6e7a4b5a1b37cb7aa1f5d98c39101ae59873c773abf85bdec43387c021ae4d6d8d6273626d616d4cd0aec3612eb49457d24859b752eb7780bf9f74e614914be938738578341ccbb6da81ff867e64783fbcd2df755affacfe4f3ffe71706a1160eedc703bf7439626bc8c4bd4642f35130d259195b0992376e9c6a582a49d4f4e78832e0bd77b09bfa58344f1427e80db50e7122536eeabd6d6f1af2c3666d111ba607fc94fd206d464fa62d28a3c45e9339263863721e0eefe06c5a657e64957ff0d4eac5fffbddc2c894faac0727771c3193b420a98e8c70a7a60fa460c9e555adca4713e4afced31ba58a87962c7cfa95797a0619d3c83efeeade243b5972e4a5636f84717e6af3edad0aeccaea82a93295525610ffc0d99f2ac624437646dfb14b0ea78f17a9b516ce2ca46b5844648e822b111b113b4d08f4e96f1d05aecb473287cc40505c5d97efcd66c4617584ea87f5d620a9651ad337a3225ee2bebc286fafdf4fae8b4b1aa9ae916b4d897a1395e800df6e90ac39f0286205f37c369914d5eea2409bf822c27984a61d85bc78a30996a4a7c41261b5e298e15b4d9a0e9c58d4dcaab803aa45213536df111ef187f070bdbbd8b47480c6dd2894b33c1c06591fad1283f373b2a76dee40535e26ecc7ea4a09b8a8bc2346bce16d1da0a2e8fd07c888b1c3c0474f86b6a51afd224f4af9912f83a4dce7a40e995f667069fc0c4049c016232fb34ebd1ca633c7f1a326f0f465f8b030c0554cace1a2734774c5dfd0a7584465cab20dd76112a76ae1abceb1c5bd6c7ba30392c47b44657202a882d5ec70ad8eaac95fef25d491d93eacfa205e024e6e167ab4903b186d399039a942d84374787bfb44240d4c35f8af9a5f550d9ade7396bbb97642265f9149bcce27a43bab88601313ab5b60a0bc348a04a61a4c85ff6123b2a964b11ce4d0365b5360157c226a2dc8d065570ac805f208cf9c8fac03816c37d64cddfee6054774aa1027a18921d709c079c58585356162b1e481106ddbecf132d337db81079a3faae5f400dcfb376e94ff122c11d53c6bf275e620deb30aa5e3d7b0c1051ed4481a0e65c35afa1047d2f7e2af96a26f8e6e58aff68f8a28cd21b216249cdc6916ecc228b1552b7c5c64240de4170b957f5e5d180ffa757f12d7bcc6c061a1f5807e80a8c912063aa9cf4165e9eeec08b256ae1b6f986cdf04b9621a7a0548c32e788b51fffb68f345af12e44af29bf64aa913a1d2af3e903eba7adcfd80f74729670eb2a19c904b2711caa6b4e1cc6ad7df52f1349071df20195a16b7e333f0da550277e475ccd7f8241ef9ab94eaa656f4c88af8a3d58c7cbb9f218f6a67d531b74ad7aa55a222c7855fb6e194de1616e34acc5191a193dd0d4ca06eaa6b1413a35ddca3e2e750931ec88fa08e9a9e4ee77f0855c6cf8418c9d28920c87aaa0906aa8980660ff8418504f6b258f58f9203e2b2da5411d738ec96240eb5ffc21c90f25c23b936e8070d75103d0164c6b310956ad4d49bd85dc981c4b0cd04135df80010e84749fc35b7f2b9e91fbcab86aff23575b0b614d40925b1cfd5eb3c52826cc14b12e729fbaaed2a0c2d2c49b784613b82c040a5903751963bbfc86bc6e2015807ad513c67afdd1237df2cc608ff246b2e54a0330f92663028b78a4f40b440008fef69d1be55edfbffe6803e11386740e5fae07178333c7c234bde93f92f383cf3649f19b079f7d51a2f04c73a4f42295b31115ba909abbf583b51ac3dbb1ee654c1b4c53f386dfd5c93346fca3dffe3dc1506aa0a07dfe57480b4e5e1aefceb2abff498548e10ed4136ba83799596568d11d247ce9e5303dcb7907a39a22b844bfc2b2b97a2b22bb934275273f12212c9ffa6381aea3550a144aba471a904a647c01c0a7d5cebadd695f97005d3de20ff9b51ffe00d78c3bef7f3f4b58515c5807fd10de7cbebd558624569aabb226350c54ba45bbdb111c6e886332679ad2280ae4cad19b43535ad374537ca240a01528d2c641414669d73e9d4ad348997fd8d349f59f240f8401f04b03ca5eedfafa8ecce6e8b206067f148a9beb6ac8a674c5efe36209b17877ecf32193d0cd11adc31f4ddc42b56f55601762e2e38f1f3c5fb8c386d63b050912496297b90ac5386c6a0e4de995f15d090840ec4cca5e46998fcfece28f17b7a5f270bdaba29f58f004c7143e3af9047b90bfc3ac46d30ac2f3499cd2e454498bacdb76d847e8d25ed900828d44310c624583b05d1ddc5f5a1503946e369e5df3bd2ea9be0a16a7d075424c45fd60c76514ff286b05d5e96ff939374e4f42b1cb4878608a847e029a24709fa7dffea8b4824520a9d07562c97ad52b1c0cdfe233bbf3953cbe472072c869a669b88e5f2b14aa32fda34e2489c89522c06de5fbd20856b5d36bf1dae334963532802c825fa4112bf12b02ac28016ba19784a7c851d82613327e81d278cf49e6d72215347372b090b3e64e8c83d7e6c7da13d8ed472c77f2d52942058762e8bcad393d9081b73e6edcb913c32f0a85f3abc854f0c60cea5373c1d9bef5a1a65220a9524b758e3103b12e72d5a2e19fceb4bb8b9bf5c70363b8cedb871bd7adda368ddad8fea570b627c6ac35eeab2cf4096c1afa3fa941268f5c5a9eafc4b5a3116c8de669421c49998cbdc2a719fa8b2d53d274320d4b9981d16da6069475221d7e8d0e2bd3ec138243c83ec44cdeebcac99a92ea29aa8532cafc155c2cfc83ce7216f32cee020e268722c42132703f752495f8bfc2150770e0b348d9a8c696f94ca8d47a1254af0630c4f9d7f31213f4efd5b2a7b63ebcde18600f01e346267ca9a11550b50a8eae04a78cb643a1e5292b7de9a9c7ef52d153fb765f4918270e43eb168a9200c08b5401154e7c010dcc313b2edc85829c5bd7b3a18f15f237fab147687b61f8541c19359eadd803af0498213e3f962202d0c3dc35f5efbee1832310ebb357aae6f3d70a3b3fdf5e83153b97ed22613d29c1ecff199ffcf81589fbca230280968ef1eea2f42e7fb19732292433d9da00c7ec38e5adc66e2e39c526584d04f2d1f7e055db309a5030480772c819bb0649c45a6a152717c5cf6b30fcd6fdd76dd908a20f29562a5fc16bba6dcf0ab15b97c0183c2ff239647eb53cd6ebfb0cbfea810d45c9234113e014e53cfe741df372de3485325e1e4892baf3f3988935ecd7e88c547a2a89d60e63325c8bd5d0444b474cf624195420ea0b9db88aa8fd53faecf62078853ef46bd895f33fbe1fe148d42c7d2ee54ae5b2338df8b39bd2edb174c75e83dca3fbb689bca17a9940a1742ad39decae6ef7bedbd21acc95b0f027d5e81e505f0cdbb798f55c1158182b4a7f1036dc919d289c0bbd53cc18a560cf19e2d4b02e2324efa3ddddeb9030edd30950caac9795d5d2d141847599c10addb1f65e0d878e653ce2f550c24d14085689c6bcddf708472a66d5e24ac6be2bbd708b069f03d244b9d8d84af616a619946964fcaed91be003d3d74853394ccda4304dd5fed60c34efac090f4a1e0857586c527becd0b7b735fe93734b2a470906f522fcc3f7abfc335d848e8583b3e0710ab28969d7578659ddd54950b8c3d35271cf6fba464cc5605f2f33b04a6b135b6accaa69512e048a65253dc8b9d073904e04") get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x7fff, &(0x7f0000ffe000/0x1000)=nil, 0x4) write$UHID_INPUT2(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0c0000001d002306fff18dbf3082e55b1a6957904952c478539ecf892490ea250c7051"], 0x23) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x3, 0x3, 0x4}, 0x6d561f2}}, 0x18) 04:41:32 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iqv\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x00\x00\x00\x00\x00\x00\x00\xae\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.g\x10H\xa8\xc9\x1f\xfc\x1e\xdfF\x16K\a@\x8c7\x1d!\xfd\xb0\xefW\x8f\xb8\x19\x8dS\xcer\x00SE\xdcD\xd2\x98\fy\x8dQ?7m\x9a\xe3\xca\xb0~\xdb*\xa7\xbf\xeftV\xa1\x94\x911\xa7\x8cYiY\xd2\xecF\xec\xb4/\xca\x97~^o\xd74\x11\'\xe1\xce\x06\xe1\xebV\xfd\xaa\x19\xd3\x14\xad\xea=o\xf2\x15g\xa9\xca\xa7\xc6\xd6\xaa\x86\xcc\x03\xcfD\xfe\x0f\xd4\xa7\x9f\xd8\n\x13T\x83\xdb\x19}\xf1\xa9\xac\x9eV\xb9\x15\x852\xfd\xaea\xff\xcb\x86d:\n\x85\x807]\x96\xb4\x96\xbc\xa6\xe6\x86\x80Gy\xfe\x8c\x1aV\xce\xb2h\xfd\xee*\xf0\xb3\xc38o\xac\x96Y\xa6\x81~\x8e\x8b@k\x7f\x88\xdd<}\x91\x83\xb0[\xff\xe3\xb9\xc6P\xd7\xc9\x87 \xef\xc9M\xa7\xbc\x1c\xa4~\x9b\xee\x94\x02&\x980\x10\x96\x96\\\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, 0x0, 0x20020102000007) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xfffffffffffffda1, 0x3f00, &(0x7f0000000100)=@abs, 0xa) [ 632.375356] binder: release 27159:27160 transaction 188 out, still active [ 632.382630] binder: undelivered TRANSACTION_COMPLETE [ 632.394082] binder: release 27159:27160 transaction 189 out, still active [ 632.401228] binder: undelivered TRANSACTION_COMPLETE 04:41:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x6, 0x400000) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000180)=""/123, &(0x7f0000000080)=0x7b) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000280)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x3, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000140)) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8000, 0x20400) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0x5) 04:41:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 632.641671] binder: 27170:27171 unknown command -256 [ 632.646976] binder: 27170:27171 ioctl c0306201 20000440 returned -22 04:41:32 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 632.738148] binder: 27170:27171 unknown command -256 [ 632.743541] binder: 27170:27171 ioctl c0306201 20000440 returned -22 04:41:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="b7f2288a911993f0265df5cf1cdd8b55928d8a7bf616cc8e3f15be0533b7091c31f202b9b82d97c5960edb56d81148ccddbe300d41f14f18c93c33f1e3057dfff3273bf446f326a711377d36cfb16e013468d59930f83cfba66348c5828314057e206f8d92b3a501b22d28cb90b404c232fdde4dbe2ff551d2373e5725b70ccc13d735b686431588c6f1462bc2b3bb56234869e7c866428dcec109cf541ffa37f231d2ae259180b59dae1fa542f2c58351406ff05af58261601facb50b4fa941279b2e73ada845d51f0dff0d7db5cf528be470e51f9c174283eafd03977920bba7ec7ac88a06937cbbe46c70f352309ef18bded9a4", 0xf5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x100) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x3000, 0x1}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='proj.\xca_\x05\x00\x00\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$xdp(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:41:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={r0}) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000000c0)={{0xe4, 0x1ff}}, 0x10) 04:41:33 executing program 4: r0 = add_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180), 0x0, 0xfffffffffffffff9) keyctl$get_keyring_id(0x0, r0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:33 executing program 1: r0 = socket(0x10, 0x2, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 04:41:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x105) 04:41:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:41:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f00000000c0)={0x1, 0x8, 0x40, 0x400, 0x8, 0xfffffffffffffff9}) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:33 executing program 1: getpid() perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x181, &(0x7f0000000180)=0x9) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) io_setup(0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 04:41:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$xdp(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:41:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20004}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x1bc, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xea96}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab1b}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc28}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb22}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3733}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2b8e95a9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7b746cab}]}]}, 0x1bc}}, 0x4000) 04:41:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x360}], 0x1, 0x2) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0xac0000000000000) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty=[0x6000000088caffff], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3005ca, 0x3a, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 04:41:34 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r0, 0x0, 0x0) 04:41:34 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x30314752}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 04:41:34 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="80", 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fallocate(r0, 0x10, 0x0, 0x400) 04:41:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$xdp(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:41:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:41:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000440)={0x8, 0x9, 0x7, 0xfffffffffffffffe, 0x5, [{0xe2ff, 0x8, 0x65}, {0x5, 0x0, 0x9f4, 0x0, 0x0, 0x600}, {0x10000, 0x7, 0x7, 0x0, 0x0, 0x200}, {0x101, 0x200, 0x1c4, 0x0, 0x0, 0x804}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x1405}]}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @loopback}, &(0x7f00000000c0)=0xc) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0c997d63ec1589934df94e2e14c2e06c", 0x10}], 0x1}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20034ad0}], 0x1) 04:41:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 04:41:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000180)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x8601, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) write(r2, &(0x7f00000001c0), 0x102f8) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) ioctl$TCSBRKP(r2, 0x5425, 0x6) [ 634.788635] binder_thread_release: 2 callbacks suppressed [ 634.788659] binder: release 27276:27277 transaction 194 out, still active 04:41:35 executing program 4: lseek(0xffffffffffffffff, 0x0, 0x2) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x1f, 0x4, 0x3, 0x7fffffff}, {0x3000, 0x1, 0x4, 0x10001}]}) 04:41:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 04:41:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:41:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 635.149320] binder: release 27296:27297 transaction 197 out, still active 04:41:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_genetlink_get_family_id$tipc2(0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:41:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 04:41:35 executing program 3: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 635.332108] binder: release 27303:27304 transaction 200 out, still active [ 635.339683] binder: undelivered TRANSACTION_COMPLETE [ 635.381778] binder: release 27303:27304 transaction 201 out, still active [ 635.388745] binder: undelivered TRANSACTION_COMPLETE 04:41:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 04:41:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) [ 635.478151] binder: release 27309:27310 transaction 202 out, still active 04:41:35 executing program 4: mlockall(0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 04:41:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='\x03\x00\x00\x00tcp6\x00') ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 04:41:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) [ 636.197872] binder: release 27341:27342 transaction 205 out, still active 04:41:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_genetlink_get_family_id$tipc2(0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:41:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:36 executing program 3: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 04:41:36 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 04:41:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 04:41:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:36 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000240)={0x0, 0x4, 0xd9, [], &(0x7f00000001c0)=0x81}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x7, 0x3, 0x9, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000002c0)={0x4, 0x3, 0x4, 0x40030100, {r5, r6/1000+10000}, {0x4, 0x2, 0x6, 0x0, 0xffffffff, 0x10001, "bcbfbe9a"}, 0x5, 0x4, @fd=r1, 0x4}) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:36 executing program 1: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 04:41:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket(0xa, 0x20000000001, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 04:41:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80800) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x111080) ioctl$VT_ACTIVATE(r1, 0x5606, 0x7fff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x80000, 0x0) syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x200, 0x80000) openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer\x00', 0x9fc, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x9, &(0x7f0000000280)='net/tcp6\x00'}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000380)={{0x0, 0x0, 0x5, 0x4, 'syz1\x00'}, 0x5, 0x403, 0x2, r2, 0x4, 0x0, 'syz1\x00', &(0x7f0000000300)=['\x00', '/dev/bus/usb/00#/00#\x00', 'securityvmnet0securityem1vmnet1user\x00', 'net/tcp6\x00'], 0x43, [], [0x1f8, 0x81, 0x8, 0x3]}) r4 = syz_open_procfs(r2, &(0x7f0000000540)='gid_map\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) socket$inet(0x2, 0x80000, 0x3) 04:41:37 executing program 3: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 637.078389] binder: 27378:27379 ioctl c0306201 0 returned -14 04:41:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_genetlink_get_family_id$tipc2(0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:41:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) 04:41:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket(0xa, 0x20000000001, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:37 executing program 0: capset(&(0x7f0000000040), 0x0) mlock(&(0x7f0000000000/0x3000)=nil, 0x3000) 04:41:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) 04:41:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) 04:41:37 executing program 0: syz_execute_func(&(0x7f0000000080)="ba66440f50f564ff0941c335e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dcc4bd31919") clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x2, 0x2, 0x5) clone(0x3ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c001}, 0xc0) 04:41:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket(0xa, 0x20000000001, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:38 executing program 4: socketpair$unix(0x1, 0x2005, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x800, 0x82044) fsetxattr(r2, &(0x7f0000000200)=@known='system.posix_acl_default\x00', &(0x7f0000000440)='net/raw6\x00', 0x9, 0x2) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000400)=0xc) r4 = syz_open_procfs(r3, &(0x7f0000000500)='net/raw6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000240)="8940624d7c8c1b2458108554966912199cf0056e7f37c94527fd605fccf0d5fe9b190e63d511bc29e178ce48d432de5c479c1f2a2ca96d3b124f7a9c8a0588f2d893b8a54abdc032604e807286ca8e7cf40e7b08c5ea8f722b657dcf287cd2fc5f5449ecc9049152607c7bd058c2f0b3be2f2efb98981a2e18839d85adffb1670c852f57f4199cf87b34c6efa5cbf8c6a70b559872cddd40b15d697a909e6e2d47ac9b02606b75df152b2d33c43293429220663764c1a6e1fd75015790699848d0a56b13a22974bef0d5884d06cb", 0xce, 0xffffffffffffffff) keyctl$update(0x2, r5, &(0x7f0000000340)="0d27ff1b4b650bcd85df4b567a85b2b2178b67e8dfec077aa0a56a3881f711b728471e8a3185fe17e667d809ce9ab7b8b55cf411bfa25957a755e7aa5395ab463539b862454b1845643ce5ae9c8d024b5d2a6498fb5560e5737631d400ab6c312429b74436fcdaeba8b08ea99768f86c0e1fc876f18788506d1b126f2b7c8f508dfbba42b2e0d2b4d4e0776f58", 0x8d) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000180)={0x3}) 04:41:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:41:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x0, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:41:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 04:41:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800210a00000000000000000a00000000000000000000001400050000000000100000000000000000000001"], 0x1}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492805, 0x0) 04:41:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x0, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:41:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x6, 0x5, 0x4, 0x3}) 04:41:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 04:41:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:41:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 04:41:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x80) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$xdp(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:41:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:41:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 04:41:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) [ 639.300251] binder: 27481:27482 got transaction with invalid offset (0, min 0 max 0) or object. [ 639.309583] binder: 27481:27482 transaction failed 29201/-22, size 0-8 line 3035 [ 639.401118] binder: undelivered TRANSACTION_ERROR: 29201 04:41:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x101, 0x800) accept4$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x0, 0x800) getsockname$unix(r1, &(0x7f0000000200), &(0x7f00000002c0)=0x6e) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000b40)="762d013abf428f831f537d10987f3f009e134c11cb6b5d479d61fac22b7c399e31904cab65dc1f2efc95ac1348db76ab634cf0fbde36acede0e45438773d28036919fd3c82e3622eb6f09975594f6bda43d29d0021a06e309383d903c1c4fd79f21eb35886e667dbe75fbb8a1776c59f77e1961978da59134185390c0115e544b0809812c6eb14099f93d4062b880cd31663931a2f3824e464ec867498516e7162951d2d1f84973c62924ba4ca03ed", 0xaf, 0x4008000, 0x0, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/72, 0x48}, {0x0}, {&(0x7f00000006c0)=""/113, 0x71}], 0x3}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000380), 0xffffffffffffff49) lstat(0x0, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000003c0)={0x2d, 0x4, 0x0, {0x1, 0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) umount2(0x0, 0x0) 04:41:39 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x6000, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:41:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 04:41:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) [ 639.804601] binder: 27495:27496 got transaction with invalid offset (0, min 0 max 0) or object. [ 639.813889] binder: 27495:27496 transaction failed 29201/-22, size 0-8 line 3035 [ 639.840267] binder: undelivered TRANSACTION_ERROR: 29201 04:41:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 04:41:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:41:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:41:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) [ 640.027078] binder: 27509:27510 got transaction with invalid offset (0, min 0 max 0) or object. [ 640.036300] binder: 27509:27510 transaction failed 29201/-22, size 0-8 line 3035 04:41:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x4a000, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/28) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000240)='./file0\x00', 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x8) 04:41:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 640.223038] binder: undelivered TRANSACTION_ERROR: 29201 04:41:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00Z\xc8\xaa\x93\x90o\x0e\x15\xce\xe6\x05\x8e\xe5\xc8JT\xbb\x8b\xb6\x9bh\xf5ZO\x0f\x12\xe5EJo\xae\xba\x8c\xeb]\x88/\xe7g\xab0\x0e\xae\x9f\bE\xab\xac\x1b-\x8b\x10\x1e\x83\x8fq\xe6I\xeaC\x1d\xf1r\xf8)\x10^\xf2\x91\xe4\a\xf8>p\xb8/\xe9\xa9V\x96c\x9aK_@+8\x06#^\xe1\xce~aq\xd3\v&\x0e*Q.\xe5u\x04\xea\xbd\x03V\xda\xc6\\S@eD\xe6\tVu\xc1,\x9a\xd3,_\xe8\xd5HZfUl9\xb9\xe8\x86\xf6\xe1\xf0K\xed\x12\xd7(\xcaZ\xf8\x90=\xc9\x10{\x19\xf6\xc5\x06\xae\x89\x8c\x17\xcb,\x85%|\xbbx\xdf\xa3!u') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) 04:41:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 04:41:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000680)={0x81, 0x1, 0x0, 'queue0\x00', 0x8}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000040)=""/72, 0x48}, {&(0x7f0000000180)=""/113, 0x71}, {&(0x7f0000000400)=""/12, 0xc}, {&(0x7f0000000440)=""/18, 0x12}], 0x6, 0x4) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000500)}, {&(0x7f0000000540)=""/241}], 0x100001d7, 0x1) 04:41:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) [ 640.888607] binder: 27537:27540 got transaction with invalid offset (0, min 0 max 0) or object. [ 640.897799] binder: 27537:27540 transaction failed 29201/-22, size 0-8 line 3035 [ 640.941016] binder: undelivered TRANSACTION_ERROR: 29201 04:41:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, 0x0, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:41:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 04:41:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r1) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) [ 641.225715] binder: 27558:27560 got transaction with invalid offset (0, min 0 max 0) or object. [ 641.234909] binder: 27558:27560 transaction failed 29201/-22, size 0-8 line 3035 04:41:41 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x0) 04:41:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x10, &(0x7f0000000100), 0x10) [ 641.298264] binder: undelivered TRANSACTION_ERROR: 29201 04:41:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:41:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 04:41:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) dup3(r1, r0, 0x0) [ 641.626760] binder: 27577:27579 got transaction with invalid offset (0, min 0 max 0) or object. [ 641.635869] binder: 27577:27579 transaction failed 29201/-22, size 0-8 line 3035 [ 641.735522] binder: undelivered TRANSACTION_ERROR: 29201 04:41:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:41:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 04:41:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x80) r2 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) [ 642.082740] binder: 27604:27605 got transaction with invalid offset (0, min 0 max 24) or object. [ 642.091986] binder: 27604:27605 transaction failed 29201/-22, size 24-8 line 3035 04:41:42 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 04:41:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x8080) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000003c0)={'rose0\x00', {0x2, 0x4e22, @rand_addr=0x10001}}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) fchmodat(r2, &(0x7f0000000180)='./file0\x00', 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) recvfrom(r0, &(0x7f0000000240)=""/236, 0xec, 0x10021, &(0x7f0000000340)=@l2={0x1f, 0xbe, {0x9, 0x9, 0x0, 0x3, 0x6, 0x5}, 0x3, 0x9}, 0x80) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000001c0)=0x20, 0x4) 04:41:42 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x10, &(0x7f0000000100), 0x10) [ 642.513247] binder: 27627:27628 got transaction with invalid offset (0, min 0 max 24) or object. [ 642.522586] binder: 27627:27628 transaction failed 29201/-22, size 24-8 line 3035 04:41:42 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port0\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00\b\x00\x00u\x16\x04,\x00\x00\x00\x00\x00\x00\xb4y\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000004c0)={{0x0, 0x10001}, {0x80}, 0x0, 0x7}) 04:41:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 04:41:42 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:41:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x420240, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0xfffffffffffffffd) close(r0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 04:41:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x8000000000000800) [ 642.937201] binder: 27642:27648 got transaction with invalid offset (0, min 0 max 24) or object. [ 642.946444] binder: 27642:27648 transaction failed 29201/-22, size 24-8 line 3035 04:41:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x80) r2 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:41:43 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)}) 04:41:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x80000000, @empty, 0xfffffffffffffffe}}}, 0x88) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) 04:41:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000002c0), 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000180)={'mangle\x00'}, &(0x7f0000000080)=0x54) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') getcwd(&(0x7f0000000300)=""/83, 0x53) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 643.359786] binder: release 27669:27670 transaction 217 out, still active [ 643.367466] binder: undelivered TRANSACTION_COMPLETE 04:41:43 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)}) 04:41:43 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) [ 643.659780] binder: release 27683:27685 transaction 218 out, still active [ 643.667075] binder: undelivered TRANSACTION_COMPLETE 04:41:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 643.708476] binder: release 27681:27684 transaction 219 out, still active 04:41:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)}) 04:41:43 executing program 0: inotify_init1(0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 643.954051] binder: release 27696:27698 transaction 222 out, still active [ 643.961286] binder: undelivered TRANSACTION_COMPLETE 04:41:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x80) r2 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:41:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:44 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 644.275596] binder: release 27712:27713 transaction 223 out, still active [ 644.282784] binder: undelivered TRANSACTION_COMPLETE 04:41:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) 04:41:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e23, 0x400, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}, 0x9, 0xee3, 0x7, 0x4, 0x22}, 0x98) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:41:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 644.508564] binder: release 27718:27719 transaction 224 out, still active [ 644.515780] binder: undelivered TRANSACTION_COMPLETE 04:41:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 644.690347] binder: release 27728:27729 transaction 225 out, still active [ 644.697540] binder: undelivered TRANSACTION_COMPLETE 04:41:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 644.926707] binder: release 27740:27741 transaction 226 out, still active [ 644.933929] binder: unexpected work type, 4, not freed [ 644.939234] binder: undelivered TRANSACTION_COMPLETE 04:41:45 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/icmp6\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x803, 0x9) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000180)={{0x2, 0x0, 0xda8, 0x7fffffff, 0xfffffffffffffffd, 0x9}, 0x5}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@mcast2, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f00000006c0)=0xe8) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x14) stat(&(0x7f0000000100)='./file0\x00', 0x0) getdents64(r3, &(0x7f0000000440)=""/180, 0xb4) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c40), &(0x7f0000000c80)=0xc) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r0, &(0x7f0000004200)=""/4096) 04:41:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') accept4$unix(r1, &(0x7f0000000040)=@abs, &(0x7f0000000180)=0x6e, 0x80800) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000002c0)={0x6, 0x401, 0xfffffffffffffffd, 0xfffffffffffffffb}, 0x14) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x13, 0x10, 0x70bd25, 0x25dfdbfd, {0xc}, [@generic="d9c54cfa7e2f09cbdc", @generic="93837fdb1cb2f65ddeb0bf5c7ca407687657e7fa64163cc650a87e1ac50bc4d97d94dfc9f5128bbde8cce0c75bbd", @typed={0x8, 0x65, @ipv4=@local}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f00000001c0)={0xffffffffffff8001, "d4acde661604907b6ebb71959367204a092afd64c46713cf344c00adb576b94f", 0x2}) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000240)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000280), 0x4) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffe000/0x1000)=nil) 04:41:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:41:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'veth1_to_team\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth1_to_team\x00', 0x1}) 04:41:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:41:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:41:46 executing program 1: inotify_init1(0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:41:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r1, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) [ 659.112153] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 659.123586] clocksource: 'acpi_pm' wd_now: 31bf1b wd_last: 9c4920 mask: ffffff [ 659.132992] clocksource: 'tsc' cs_now: 1651ebc4b4f cs_last: 15ea284d443 mask: ffffffffffffffff [ 659.143748] tsc: Marking TSC unstable due to clocksource watchdog 04:41:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memt\x00\x8a\x11>\xe2\xf5bYQ\xf6\xf2\x8cro\xf8&\xbdL\x18\xbb\xfa`\xa8<\x9f\xb5\x03/\xb4\x93\xd0\xa5\xa0\nf\x18\xfd-b\xc2s\xccV\x0e3', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\n']) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x0, 0x9}) [ 659.164434] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 659.173331] sched_clock: Marking unstable (659232901468, -68485568)<-(659290598988, -126183478) [ 659.174415] clocksource: Switched to clocksource acpi_pm 04:41:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x202, 0x100) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000240)={'security\x00', 0xbb, "b9edba2bbe213dcbeeb622d2959814b2add7d28a929cc57e7dc47654aa54da6bbe798187cc70506be45f9dd4917fb757c69893850d2a7caf842063d4b663e336361fc290b5c25be36d4ce11ee420822570038bb2cf505ced7e5303296f46698cc09f10353c86fa8103b02acfe2b62ba6ba71e928b0e37b5291163fede0d8d6f37a4fea911457f1f8f312317a5e074a17c876f298fd327e992decaba36bcbb4c0acac3caadb95ee42c5298552e20f692545a5d65aba1294bfe94009"}, &(0x7f0000000180)=0xdf) fadvise64(r2, 0x0, 0x1, 0x5) ioctl$TIOCCONS(r2, 0x541d) 04:41:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r1, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:41:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:41:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:41:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000000c0)={{0x480}, 'port0\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 04:41:59 executing program 1: inotify_init1(0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:41:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:42:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:42:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r1, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:42:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f05"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:42:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x100) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00\x19aD\xd1\x84\xe5\x16|\xec\xbde\\~\x18\xe1\xc8\xb1\xc3\xe5p\x95\xf4]sQpT\xba\xc0Yk\xe7,5\xf3\x1d_\xd8p\xb5\xee\x89\x9b\xe1\xbc\xb4\xc8_V\xb1\xea_\x1cc\xd8I],,+\xd0X') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:42:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:01 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r1, 0x2}}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0xe) 04:42:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/11, 0x163) prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffb53) prctl$PR_GET_TIMERSLACK(0x1e) syz_execute_func(&(0x7f0000000040)="3666440f9bf56664400f9f3241c3c4e2c9975842c4c27d794e003e0f11581010196f04cd04cd0f2902") 04:42:01 executing program 0: r0 = gettid() clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fe9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 04:42:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:42:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmsg$key(r0, &(0x7f0000000200)={0x20480, 0xfec0000000000000, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="023b000007000000000000000000000005001a00ffffffff000000000000000000000000ac1414aa"], 0x28}}, 0x0) 04:42:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x80) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:42:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000240)=""/151) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r2, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x1, {"db5d91b94ebdad8dfb0d367ab93a44ee"}, 0x3, 0x8, 0x4}, @ib={0x1b, 0xff, 0x7, {"6f824c11dca8805a2fc7007ffec2c3e4"}, 0x4, 0x10001, 0x2}}}, 0x118) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:42:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x80) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:42:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) memfd_create(&(0x7f00000000c0)='cgroup:GPL,,/md5sum\x98vmnet1{system\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="03177f454c46060507000700000000000000020000000d0000007b0300000000000040000000001000008f02000000000000160000003f00380001000900ff0301000200000009"], 0x47) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 04:42:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:01 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x80) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) [ 661.905512] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:42:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0), 0x20) 04:42:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:42:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0xccc, 0x7c52}, {0x7f, 0x8}, 0x7fff, 0x7, 0x8}) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:42:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') poll(&(0x7f0000000400)=[{0xffffffffffffffff, 0x600}, {0xffffffffffffffff, 0x4119e47e23ea9317}, {}, {r1, 0x4020}], 0x4, 0x749216e3) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40040}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x0, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x84) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x10000014c) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r4, r3, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x20, 0x8}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 04:42:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0x0, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0), 0x20) 04:42:02 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x80) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:42:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x35d, 0x8040) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) 04:42:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0x0, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4, 0x48980) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x3, r3, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000180)=0x1, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f00000001c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x7fffffff}) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xc202) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000240)={0x81, 0xffffffffffffffff, 0x4}) preadv(r4, &(0x7f0000000000), 0x0, 0x0) 04:42:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:42:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0x0, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0x80000000, 0x103, "d42fd22c24ead4ccb5797bba43e278f94594d0f0cff075b7946693d63afc5fc2", 0x86, 0x2, 0x1000, 0x8, 0x7, 0xef0c, 0xffffffffffffff81, 0x2, [0x9, 0x5, 0xfffffffffffffffd, 0x7]}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:42:03 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(r1, 0x208202) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) 04:42:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:03 executing program 0: socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) clock_gettime(0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) getegid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigreturn() 04:42:03 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x80) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:42:03 executing program 4: socketpair$unix(0x1, 0x805, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 04:42:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100)={r3}, 0x10) 04:42:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)}) 04:42:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:42:04 executing program 0: [ 664.195536] binder: release 28022:28025 transaction 229 out, still active [ 664.202738] binder: undelivered TRANSACTION_COMPLETE [ 664.207888] binder: release 28022:28029 transaction 230 out, still active [ 664.215125] binder: undelivered TRANSACTION_COMPLETE 04:42:04 executing program 4: 04:42:04 executing program 1: 04:42:04 executing program 0: 04:42:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) open(0x0, 0x0, 0x0) getpgrp(0x0) pipe(0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000680)) bind$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0xe0, @dev, 0x6}, 0x1c) getpeername(0xffffffffffffffff, &(0x7f0000000140)=@can, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) 04:42:04 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x80) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:42:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000001c0), 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) 04:42:04 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40345410, &(0x7f0000000140)={0x3}) dup3(r1, r0, 0x0) 04:42:05 executing program 0: 04:42:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:42:05 executing program 4: 04:42:05 executing program 0: 04:42:05 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x80) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:42:05 executing program 1: 04:42:05 executing program 0: 04:42:05 executing program 4: 04:42:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:05 executing program 0: 04:42:05 executing program 1: 04:42:05 executing program 4: 04:42:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:06 executing program 1: 04:42:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR], 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:42:06 executing program 0: 04:42:06 executing program 4: 04:42:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f0000000100), 0x10) 04:42:06 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x80) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$xdp(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x20008004) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0x3f00000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:42:06 executing program 0: [ 666.346206] ================================================================== [ 666.352034] BUG: KMSAN: uninit-value in tipc_conn_rcv_sub+0x187/0x9f0 [ 666.352034] CPU: 0 PID: 13711 Comm: kworker/u4:16 Not tainted 4.20.0-rc7+ #15 [ 666.365352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.365352] Workqueue: tipc_rcv tipc_conn_recv_work [ 666.365352] Call Trace: [ 666.365352] dump_stack+0x173/0x1d0 [ 666.365352] kmsan_report+0x12e/0x2a0 [ 666.365352] __msan_warning+0x82/0xf0 [ 666.365352] tipc_conn_rcv_sub+0x187/0x9f0 [ 666.365352] tipc_conn_recv_work+0x3dc/0x5e0 [ 666.365352] ? tipc_conn_send_work+0x11b0/0x11b0 [ 666.365352] ? tipc_conn_send_work+0x11b0/0x11b0 [ 666.365352] process_one_work+0x1607/0x1f80 [ 666.365352] worker_thread+0x111c/0x2460 [ 666.365352] kthread+0x4a1/0x4e0 [ 666.365352] ? process_one_work+0x1f80/0x1f80 [ 666.365352] ? schedule_tail+0x1b2/0x410 [ 666.365352] ? kthread_blkcg+0xf0/0xf0 [ 666.365352] ret_from_fork+0x35/0x40 [ 666.365352] [ 666.365352] Local variable description: ----s.i@tipc_conn_recv_work [ 666.365352] Variable was created at: [ 666.365352] tipc_conn_recv_work+0x68/0x5e0 [ 666.365352] process_one_work+0x1607/0x1f80 [ 666.365352] ================================================================== [ 666.365352] Disabling lock debugging due to kernel taint [ 666.365352] Kernel panic - not syncing: panic_on_warn set ... [ 666.365352] CPU: 0 PID: 13711 Comm: kworker/u4:16 Tainted: G B 4.20.0-rc7+ #15 [ 666.365352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.365352] Workqueue: tipc_rcv tipc_conn_recv_work [ 666.365352] Call Trace: [ 666.365352] dump_stack+0x173/0x1d0 [ 666.365352] panic+0x3ce/0x961 [ 666.365352] kmsan_report+0x293/0x2a0 [ 666.365352] __msan_warning+0x82/0xf0 [ 666.365352] tipc_conn_rcv_sub+0x187/0x9f0 [ 666.365352] tipc_conn_recv_work+0x3dc/0x5e0 [ 666.365352] ? tipc_conn_send_work+0x11b0/0x11b0 [ 666.365352] ? tipc_conn_send_work+0x11b0/0x11b0 [ 666.365352] process_one_work+0x1607/0x1f80 [ 666.365352] worker_thread+0x111c/0x2460 [ 666.365352] kthread+0x4a1/0x4e0 [ 666.365352] ? process_one_work+0x1f80/0x1f80 [ 666.365352] ? schedule_tail+0x1b2/0x410 [ 666.365352] ? kthread_blkcg+0xf0/0xf0 [ 666.365352] ret_from_fork+0x35/0x40 [ 666.365352] Kernel Offset: disabled [ 666.365352] Rebooting in 86400 seconds..