[?25l[?1c7[ ok 8[?25h[?0c. [ 79.750941] audit: type=1800 audit(1546935069.802:25): pid=10281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 79.770076] audit: type=1800 audit(1546935069.802:26): pid=10281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 79.789670] audit: type=1800 audit(1546935069.832:27): pid=10281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.34' (ECDSA) to the list of known hosts. 2019/01/08 08:11:23 fuzzer started 2019/01/08 08:11:28 dialing manager at 10.128.0.26:40833 2019/01/08 08:11:28 syscalls: 1 2019/01/08 08:11:28 code coverage: enabled 2019/01/08 08:11:28 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/01/08 08:11:28 setuid sandbox: enabled 2019/01/08 08:11:28 namespace sandbox: enabled 2019/01/08 08:11:28 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/08 08:11:28 fault injection: enabled 2019/01/08 08:11:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/08 08:11:28 net packet injection: enabled 2019/01/08 08:11:28 net device setup: enabled 08:14:07 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000080)="02030000070000005b000000fff55b4202938207d9fb3780398d5375000060007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2d1594c3b50035110f118d0000f55dc62600009b000000faffffff00010000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, 0x0, 0x0) syzkaller login: [ 258.068182] IPVS: ftp: loaded support on port[0] = 21 [ 258.218494] chnl_net:caif_netlink_parms(): no params data found [ 258.283121] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.289651] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.297731] device bridge_slave_0 entered promiscuous mode [ 258.307129] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.313676] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.321516] device bridge_slave_1 entered promiscuous mode [ 258.353063] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 258.364965] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 258.394223] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 258.403406] team0: Port device team_slave_0 added [ 258.410390] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 258.418806] team0: Port device team_slave_1 added [ 258.425886] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 258.434303] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 258.616601] device hsr_slave_0 entered promiscuous mode [ 258.872267] device hsr_slave_1 entered promiscuous mode [ 259.123046] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 259.130493] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 259.158541] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.165108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.172444] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.178975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.217395] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.225795] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.283934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.298312] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 259.310701] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.317568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.325362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.339258] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 259.345509] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.357191] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 259.365872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.374407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.382586] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.389045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.404154] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 259.414428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.423141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.431415] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.437955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.451271] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 259.463593] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 259.477027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 259.489009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 259.496530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.505569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.514542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.524158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.532838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.541832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.556286] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 259.567956] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 259.577678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.587415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.598804] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 259.606246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.614633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.623059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.631691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.641000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.651546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.685834] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 259.709048] 8021q: adding VLAN 0 to HW filter on device batadv0 08:14:10 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="85390100000000000078c254c8677c350da5528b62d64717"], 0x0}, 0x48) 08:14:10 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2, &(0x7f0000000340)=@raw=[@jmp={0x5, 0x8, 0xb, 0x0, 0xa, 0x1, 0xfffffffffffffff1}, @generic={0x0, 0x7f}], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) 08:14:10 executing program 0: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000400)="3c002d2d05090065670f688b0c00004b0f06406868f30f7e026e880007e700fc4c4c0fc2ee005ccd00c4e12816ef0f1f4000e2dfdf31c4e2c18e1d00000000f30f38e2c5c1e39d0f69c6e1b85d5d00c4c275ac59d9786898d2f9f9c2692990f0ffff1fc3f2a5") [ 260.814801] IPVS: ftp: loaded support on port[0] = 21 [ 260.961993] chnl_net:caif_netlink_parms(): no params data found [ 261.026317] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.033437] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.041473] device bridge_slave_0 entered promiscuous mode [ 261.050644] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.057744] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.065756] device bridge_slave_1 entered promiscuous mode [ 261.101206] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 261.113668] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 261.145088] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 261.154419] team0: Port device team_slave_0 added [ 261.162033] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 261.170821] team0: Port device team_slave_1 added [ 261.177845] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 261.186420] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 261.256967] device hsr_slave_0 entered promiscuous mode 08:14:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 261.303049] device hsr_slave_1 entered promiscuous mode [ 261.342975] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 261.350405] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 261.394312] binder: 10461:10462 ERROR: BC_REGISTER_LOOPER called without request [ 261.405775] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.412347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.419457] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.426030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.439588] binder: 10462 RLIMIT_NICE not set [ 261.444324] binder: 10462 RLIMIT_NICE not set [ 261.467652] binder: BINDER_SET_CONTEXT_MGR already set [ 261.473612] binder: 10461:10463 ioctl 40046207 0 returned -16 [ 261.492900] binder: 10461:10463 ERROR: BC_REGISTER_LOOPER called without request [ 261.520387] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 261.526661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.534832] binder_alloc: 10461: binder_alloc_buf, no vma [ 261.540541] binder: 10461:10462 transaction failed 29189/-3, size 0-0 line 2973 [ 261.552153] binder: 10463 RLIMIT_NICE not set [ 261.554318] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 261.569491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.578642] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.581733] binder: release 10461:10462 transaction 2 out, still active [ 261.591930] binder: undelivered TRANSACTION_COMPLETE [ 261.598226] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.606771] binder: undelivered TRANSACTION_ERROR: 29189 [ 261.612506] binder: release 10461:10462 transaction 2 in, still active 08:14:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 261.619227] binder: send failed reply for transaction 2, target dead [ 261.627046] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 261.649566] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 261.655775] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.687981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.696674] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.703261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.745209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.753485] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.759996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.769383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.785754] binder: 10465:10466 ERROR: BC_REGISTER_LOOPER called without request [ 261.794245] binder: 10466 RLIMIT_NICE not set [ 261.798793] binder: 10466 RLIMIT_NICE not set [ 261.811336] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 261.821174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.833902] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready 08:14:11 executing program 0: futex(&(0x7f0000000000)=0x2, 0x8b, 0x2, &(0x7f0000000040), 0x0, 0x0) [ 261.842107] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.850650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.859948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.868545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.905614] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 261.921968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.941933] binder: release 10465:10466 transaction 5 in, still active [ 261.948643] binder: send failed reply for transaction 5 to 10465:10466 [ 261.955900] binder: undelivered TRANSACTION_COMPLETE [ 261.961043] binder: undelivered TRANSACTION_ERROR: 29189 [ 261.994136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 08:14:12 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000840)={&(0x7f0000000700), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r2, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffff7f}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6fbb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x8080) r3 = epoll_create(0x80000000000009) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x90000001}) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47) vmsplice(r1, &(0x7f0000000680)=[{&(0x7f0000000140)="2f2946f9fc9f57086e1da757929129aa441fc3a2f7e7e4749cc1fb8d9377e6c9b343cb7099fd07caa97878e45cf0f01dd85afe3e860fc2e5a36fd1d8244c7dea98f12f05e34d12fb19a361dbbadb63d4599430df8741c3db6190839d5caf490359daad78bd356d722103d4daad4b0b05ce632f8effa50497e762b1874c5e9d7220c10e58f50d91a6eee623fb1e929caabb67b5e1256e8466df3b27be16857059d28d8d6da1ccf331970cdbf813df6ac720ed09851021cc2ab97a8eda307e4aceb9ff7183d708bcfdb48550bc80e219946405ea79642e4b4a7fc7d128147e238ea6", 0xe1}, {&(0x7f0000000240)="a4ff1ca1a362d2fc5b85f5d84eb50c2e782145207c592fd6f81e41c841237d615ce2f74bd2cb926ce23a1cd9ac74fd5f99476d6fa56525e9b6cbcfa2c722d155cb48db4a590e319360946d090fbd9fe9d90deda84731df32a5b72e372f4ececd912bcab6ab034bdc2b1e4e0da3a4012f1465b0c10ee25468ee303c656751105c0616125a34f33f54601d815fbeb4245b4ebf44e14e996fda56c1d5987c4752a74b73939e0eb21aa1a3e91b298b674f7e77fefdf960d397cb68f922a37754b10a0b33b0aa3ae8f14e5b360933f7ea65cc70501141fb1239e9ca05f1753bb255dd53c8f8ec0442ea14c723", 0xea}, {&(0x7f0000000340)="a4ef748874d6448243801e7373d93e5cf6644276fbf8dc854d4acfe115b059032c5f45deec6b7d249eb95748588d5aa559772f4348b1a00ed209c5d638564106249101f69a836a19b35e3926b307dc7b843780f27dcdea13f1f45b8d6cd6e3f9b3b4f2531923601b1bb3d042ebe27d313550256a5d002198129a9432446e98ac179dc10a755ce834e0999f76db007e37e99dfece6b6e1fdfb539e6f917db80852af30743eb8baf1c3080d2cc47e635a28924be58568aed59c77ecccb47deaef27a86d9b70d59370de08a3fee20d3b41bba6c32cc89fa169cc1af51a6ccce7c", 0xdf}, {&(0x7f0000000440)="394cce0e123bbe854dfda53a630da5632301dec23345cfede635d60ac0d96a4055835860e04fb5c9377364960f2aedfde5811a1a", 0x34}, {&(0x7f0000000480)="3e9fb0101e95a611d78ab0fb62d717ac0c6154516f83e690990011d21e038a0097cc37b31fad47afde87500f726b1a9cad394320060f4077a76909b29737f06970de1b40476be166fe9cae3dc84cb2e51909dab1fa7deade9e59f16fbbc7c2ed180e5638c431323d64c946af7d7c7ac7e993b2740cb0bb2a79faa302c12eb3c74d7bda92b4acf3354836453cda1485049eefb1c8baa2a3567fbf501f35e4bd4dc4e1673951f6", 0xa6}, {&(0x7f0000000540)="fecc45ffd21f38fa2383f97e0efcc048170482c3053a58bcb65d3c2e76581ce980987d4a09f8f0299d81e33136ce48043a505e2942057a13e66a7f04f8173200b1e346bf11cdb4aa43a80a6e87082b128bc917f66e9369576c208f8e2176796c74e47f137b98c271a799d3b495e9571ce3bd61", 0x73}, {&(0x7f00000005c0)="09fa68985e84666e4c5c0a5023131916c3e962d229295b5f9d8d315049fc77ad05b0745d3189e6b430eb30dde0f7197b7187e352f57fa46145a87498a71a4d9afdb4fa1e8b0bfea949237c455cede0667c456066e3926a8aaa6da711f84f8b4f848dc0cb09b512d44d2b6f94266ddbe21200732ee16e30312ab53bb41327ee0579602c5c88acb3565748d3d8747f5100701e07cc4ab7832c4366dd5bcc6797e5bacd2c67f2922b259982538d606bf8e5d3f833915ebb655ff61bb7eb069c29", 0xbf}], 0x7, 0xc) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:14:12 executing program 1: ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000700)={@dev={0xfe, 0x80, [], 0x15}, @mcast1, @dev={0xfe, 0x80, [], 0x22}, 0x3, 0x120, 0x81, 0x100, 0x10001, 0x800000, r1}) getsockopt(r0, 0x7, 0x401, &(0x7f0000000040)=""/15, &(0x7f0000000080)=0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x3, 0x7, 0x8) 08:14:12 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100)=0x8, 0x4) preadv(r0, &(0x7f00000017c0), 0x1a4, 0x92) 08:14:12 executing program 1: r0 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x600000, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000480)={0x100, 0x10000, 0xffffffffffffffc8, 0x100000001}, 0x8) close(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x210002, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x4000) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0xdd, 0xfa00, {0x0}}, 0xa8b146e9) r3 = open(&(0x7f0000000300)='./file0\x00', 0x200, 0x1) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000340)={0x10000, 0x86d3, 0x1, 0x1, 0x26c7102d, 0x0, 0x7fff, 0x8, 0x1, 0x1, 0xffffffffffffffff}, 0xb) sendfile(r0, r0, &(0x7f0000000240), 0xfffb) r4 = request_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)='#em1#+\x00', 0xfffffffffffffff9) add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="585319ebecf8b3bf96dc4ee70e7c71abfde7ebc921a9a9ab0ea3488d919b09a9733b0749a49fe30d63dda7502bd434ba4cfca829dfef4385dbb2ed691e7359692b2188e4461120ce9d2c6765d23e1692498ec6c644796e3dcd4277359cc713ad7d8d092b9bd98bca9c15512e6f457479fd70fd691c2e6a51277dffffe9ed82e90a0ae540c53522f1e09059a3d7077904ea98d1cd855715cb91ecac3e8a8e37e01687f6b24dad099f2621e876f098717a6a331d44d6017a7908eb67c1", 0xbc, r4) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x80002000006, 0x11, r0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) timer_settime(0x0, 0x0, &(0x7f0000000200), 0x0) 08:14:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet6(0xa, 0x0, 0x1f) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000140)={0x5, {{0xa, 0x4e21, 0x800, @loopback, 0x100000000}}, 0x1, 0x1, [{{0xa, 0x4e23, 0x40, @dev={0xfe, 0x80, [], 0x29}, 0x101}}]}, 0x110) r2 = socket(0x40000000015, 0x805, 0x0) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2003) 08:14:13 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000001340)=""/197, 0xc5}], 0x2, 0x3) 08:14:13 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000840)={&(0x7f0000000700), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r2, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffff7f}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6fbb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x8080) r3 = epoll_create(0x80000000000009) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x90000001}) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47) vmsplice(r1, &(0x7f0000000680)=[{&(0x7f0000000140)="2f2946f9fc9f57086e1da757929129aa441fc3a2f7e7e4749cc1fb8d9377e6c9b343cb7099fd07caa97878e45cf0f01dd85afe3e860fc2e5a36fd1d8244c7dea98f12f05e34d12fb19a361dbbadb63d4599430df8741c3db6190839d5caf490359daad78bd356d722103d4daad4b0b05ce632f8effa50497e762b1874c5e9d7220c10e58f50d91a6eee623fb1e929caabb67b5e1256e8466df3b27be16857059d28d8d6da1ccf331970cdbf813df6ac720ed09851021cc2ab97a8eda307e4aceb9ff7183d708bcfdb48550bc80e219946405ea79642e4b4a7fc7d128147e238ea6", 0xe1}, {&(0x7f0000000240)="a4ff1ca1a362d2fc5b85f5d84eb50c2e782145207c592fd6f81e41c841237d615ce2f74bd2cb926ce23a1cd9ac74fd5f99476d6fa56525e9b6cbcfa2c722d155cb48db4a590e319360946d090fbd9fe9d90deda84731df32a5b72e372f4ececd912bcab6ab034bdc2b1e4e0da3a4012f1465b0c10ee25468ee303c656751105c0616125a34f33f54601d815fbeb4245b4ebf44e14e996fda56c1d5987c4752a74b73939e0eb21aa1a3e91b298b674f7e77fefdf960d397cb68f922a37754b10a0b33b0aa3ae8f14e5b360933f7ea65cc70501141fb1239e9ca05f1753bb255dd53c8f8ec0442ea14c723", 0xea}, {&(0x7f0000000340)="a4ef748874d6448243801e7373d93e5cf6644276fbf8dc854d4acfe115b059032c5f45deec6b7d249eb95748588d5aa559772f4348b1a00ed209c5d638564106249101f69a836a19b35e3926b307dc7b843780f27dcdea13f1f45b8d6cd6e3f9b3b4f2531923601b1bb3d042ebe27d313550256a5d002198129a9432446e98ac179dc10a755ce834e0999f76db007e37e99dfece6b6e1fdfb539e6f917db80852af30743eb8baf1c3080d2cc47e635a28924be58568aed59c77ecccb47deaef27a86d9b70d59370de08a3fee20d3b41bba6c32cc89fa169cc1af51a6ccce7c", 0xdf}, {&(0x7f0000000440)="394cce0e123bbe854dfda53a630da5632301dec23345cfede635d60ac0d96a4055835860e04fb5c9377364960f2aedfde5811a1a", 0x34}, {&(0x7f0000000480)="3e9fb0101e95a611d78ab0fb62d717ac0c6154516f83e690990011d21e038a0097cc37b31fad47afde87500f726b1a9cad394320060f4077a76909b29737f06970de1b40476be166fe9cae3dc84cb2e51909dab1fa7deade9e59f16fbbc7c2ed180e5638c431323d64c946af7d7c7ac7e993b2740cb0bb2a79faa302c12eb3c74d7bda92b4acf3354836453cda1485049eefb1c8baa2a3567fbf501f35e4bd4dc4e1673951f6", 0xa6}, {&(0x7f0000000540)="fecc45ffd21f38fa2383f97e0efcc048170482c3053a58bcb65d3c2e76581ce980987d4a09f8f0299d81e33136ce48043a505e2942057a13e66a7f04f8173200b1e346bf11cdb4aa43a80a6e87082b128bc917f66e9369576c208f8e2176796c74e47f137b98c271a799d3b495e9571ce3bd61", 0x73}, {&(0x7f00000005c0)="09fa68985e84666e4c5c0a5023131916c3e962d229295b5f9d8d315049fc77ad05b0745d3189e6b430eb30dde0f7197b7187e352f57fa46145a87498a71a4d9afdb4fa1e8b0bfea949237c455cede0667c456066e3926a8aaa6da711f84f8b4f848dc0cb09b512d44d2b6f94266ddbe21200732ee16e30312ab53bb41327ee0579602c5c88acb3565748d3d8747f5100701e07cc4ab7832c4366dd5bcc6797e5bacd2c67f2922b259982538d606bf8e5d3f833915ebb655ff61bb7eb069c29", 0xbf}], 0x7, 0xc) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:14:13 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000840)={&(0x7f0000000700), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r2, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffff7f}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6fbb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x8080) r3 = epoll_create(0x80000000000009) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x90000001}) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47) vmsplice(r1, &(0x7f0000000680)=[{&(0x7f0000000140)="2f2946f9fc9f57086e1da757929129aa441fc3a2f7e7e4749cc1fb8d9377e6c9b343cb7099fd07caa97878e45cf0f01dd85afe3e860fc2e5a36fd1d8244c7dea98f12f05e34d12fb19a361dbbadb63d4599430df8741c3db6190839d5caf490359daad78bd356d722103d4daad4b0b05ce632f8effa50497e762b1874c5e9d7220c10e58f50d91a6eee623fb1e929caabb67b5e1256e8466df3b27be16857059d28d8d6da1ccf331970cdbf813df6ac720ed09851021cc2ab97a8eda307e4aceb9ff7183d708bcfdb48550bc80e219946405ea79642e4b4a7fc7d128147e238ea6", 0xe1}, {&(0x7f0000000240)="a4ff1ca1a362d2fc5b85f5d84eb50c2e782145207c592fd6f81e41c841237d615ce2f74bd2cb926ce23a1cd9ac74fd5f99476d6fa56525e9b6cbcfa2c722d155cb48db4a590e319360946d090fbd9fe9d90deda84731df32a5b72e372f4ececd912bcab6ab034bdc2b1e4e0da3a4012f1465b0c10ee25468ee303c656751105c0616125a34f33f54601d815fbeb4245b4ebf44e14e996fda56c1d5987c4752a74b73939e0eb21aa1a3e91b298b674f7e77fefdf960d397cb68f922a37754b10a0b33b0aa3ae8f14e5b360933f7ea65cc70501141fb1239e9ca05f1753bb255dd53c8f8ec0442ea14c723", 0xea}, {&(0x7f0000000340)="a4ef748874d6448243801e7373d93e5cf6644276fbf8dc854d4acfe115b059032c5f45deec6b7d249eb95748588d5aa559772f4348b1a00ed209c5d638564106249101f69a836a19b35e3926b307dc7b843780f27dcdea13f1f45b8d6cd6e3f9b3b4f2531923601b1bb3d042ebe27d313550256a5d002198129a9432446e98ac179dc10a755ce834e0999f76db007e37e99dfece6b6e1fdfb539e6f917db80852af30743eb8baf1c3080d2cc47e635a28924be58568aed59c77ecccb47deaef27a86d9b70d59370de08a3fee20d3b41bba6c32cc89fa169cc1af51a6ccce7c", 0xdf}, {&(0x7f0000000440)="394cce0e123bbe854dfda53a630da5632301dec23345cfede635d60ac0d96a4055835860e04fb5c9377364960f2aedfde5811a1a", 0x34}, {&(0x7f0000000480)="3e9fb0101e95a611d78ab0fb62d717ac0c6154516f83e690990011d21e038a0097cc37b31fad47afde87500f726b1a9cad394320060f4077a76909b29737f06970de1b40476be166fe9cae3dc84cb2e51909dab1fa7deade9e59f16fbbc7c2ed180e5638c431323d64c946af7d7c7ac7e993b2740cb0bb2a79faa302c12eb3c74d7bda92b4acf3354836453cda1485049eefb1c8baa2a3567fbf501f35e4bd4dc4e1673951f6", 0xa6}, {&(0x7f0000000540)="fecc45ffd21f38fa2383f97e0efcc048170482c3053a58bcb65d3c2e76581ce980987d4a09f8f0299d81e33136ce48043a505e2942057a13e66a7f04f8173200b1e346bf11cdb4aa43a80a6e87082b128bc917f66e9369576c208f8e2176796c74e47f137b98c271a799d3b495e9571ce3bd61", 0x73}, {&(0x7f00000005c0)="09fa68985e84666e4c5c0a5023131916c3e962d229295b5f9d8d315049fc77ad05b0745d3189e6b430eb30dde0f7197b7187e352f57fa46145a87498a71a4d9afdb4fa1e8b0bfea949237c455cede0667c456066e3926a8aaa6da711f84f8b4f848dc0cb09b512d44d2b6f94266ddbe21200732ee16e30312ab53bb41327ee0579602c5c88acb3565748d3d8747f5100701e07cc4ab7832c4366dd5bcc6797e5bacd2c67f2922b259982538d606bf8e5d3f833915ebb655ff61bb7eb069c29", 0xbf}], 0x7, 0xc) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:14:14 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x2003, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc008561c, &(0x7f0000000000)) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000140)) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1f, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x80000001, 0x200000) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000100)=0x1) 08:14:14 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001300)='/dev/dlm-control\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000200)=""/107) writev(r0, &(0x7f0000001280)=[{&(0x7f0000000040)='/', 0x1}], 0x1) 08:14:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000120021000000000000000000fe80090000000000000000000000000000000000020041cf14000d0000000000009561000000000000212e5d2189eb6fff250e93475329a664f1070de081a0675bc0cb933767b41a7f48a7e9f53bbd9f06405451f470046f0995b5224aa5094c5d02005d0cd40583bb6a9cc6c56344b648e88ea066e495fca59e1e354258e1c7743de63161a90ca906737dd21c8dbb15973e3bf40ff768d0f47c3eeb4e9a5962000000000000000000000000"], 0xfec5}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x400000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x5be}, @in={0x2, 0x4e23, @multicast1}], 0x20) 08:14:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) ioctl$TCXONC(r0, 0x80045439, 0x0) 08:14:14 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r1 = open(&(0x7f0000000100)='./control\x00', 0x0, 0x0) lseek(r1, 0x2, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000040)='./control\x00') r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="24000000260007101dfffd946fa283df8fc4390009000000069effff000000000d00ff7e", 0x24}], 0x1}, 0x0) chroot(&(0x7f0000000080)='./file0\x00') getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x68}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r3, 0x5}, 0x8) 08:14:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) ioctl$TCXONC(r0, 0x80045439, 0x0) 08:14:14 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x80000002, 0x4) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x0, 0x3}}}, 0xa0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0xffffffffffffffbd, 0x0}}], 0x3fffcf6, 0x0, 0x0) 08:14:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0xc40, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f00000000c0)={0x3, &(0x7f0000000180)=[{}, {}, {}]}) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000016ffc)=0xfffff7fffffffffd, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x1005, 0x4) bind$inet(r1, &(0x7f0000008ff0)={0x2, 0x4e20, @multicast1}, 0x10) listen(r2, 0x0) [ 264.648612] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:14:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x0, @random="e3a80c9a5d40", 'batadv0\x00'}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000000020000000000000017c5fc52ca04380711cf246e04f74311dbc80aab28d633ed72a7f0122a5d0058a2a025e280712af9dd47487e9a89a37b6f599cacfe4334c2a95be9c745f6f30eba19dd8e541b4241baee46fcbf8f1c90836d863a92370945b4c51f5b8ab897daaa39e24e8000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012001000010069703667726574617000000004000201000001000200000000000000870a562ed1f157a408991320a872d7e683141c21f52cb08fe259609d82981727f1"], 0x44}}, 0x0) 08:14:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000100)={'lo\x00', {0x2, 0x4e23, @multicast2}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @rand_addr=0x9}}) dup3(r2, r1, 0x0) 08:14:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = gettid() fcntl$lock(r0, 0x27, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x1, r1}) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000000)={0xf000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f90a, 0x800, [], @ptr=0x709000}}) 08:14:15 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)='\f', 0x1}], 0x1}, 0x20008844) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x2001, 0x0) write$smack_current(r3, &(0x7f0000000140)='\x00', 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f00000001c0)=r1, 0x4) close(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000240)={0xa1, 0x1, 'client1\x00', 0x1, "643589ab0ce86c38", "6c8ceda1920d8ec08a2c6e6608d426af049de022260ce6d03c282ceddf5c04ee", 0x8d8}) 08:14:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002b80)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x5}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x40101, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000280)=0x1) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x100, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000002c0)={0x10001, 0xffffffff, 0xfff, 0x5, 0x17, 0xdb8, 0x1, 0x3ff, 0x8, 0x6}) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1ff) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40, 0x0) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x3, 0x7fff, 0x6, 0x6}, {0x20, 0x6e, 0x8001, 0x5}, {0x8, 0x8, 0x1000, 0x6}]}) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r2, &(0x7f0000000680), 0x4924924924925c6, 0x0) 08:14:15 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x7}, 0x4) timer_create(0x2, &(0x7f0000000100)={0x0, 0x36, 0x7, @thr={&(0x7f0000000080)="8d954589abc167a3b68a088e1090fae6bab6cc80d1713ebc941a7f6e3658165a61339014b894d10be7b4a3fcdcd0fc649c117831738bc3e34ae863", &(0x7f00000000c0)="305ff13e9d3e813bf1e6a088687575e7d06cd30b113a27c9ab20c0003d6b737d19f571f8db7da98d9a07d59eeb65dbc30ba107dda4"}}, &(0x7f0000000140)=0x0) timer_delete(r1) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000180)={0x2, 0x0, [{0x40000000, 0x1, 0x0, 0x6, 0x7f, 0x1ff, 0x100}, {0x4e2de6bebebe7fb, 0x148f, 0x4, 0x3, 0x23ce0a93, 0x63b, 0xcf93}]}) fchdir(r0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000200)=0x96) getpeername$tipc(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000002c0)={0x1, 0xfffffffffffffffc, 0x9, 0x9}) keyctl$set_reqkey_keyring(0xe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000300)) r2 = openat$cgroup_procs(r0, &(0x7f0000000340)='tasks\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000380)=""/4096) write$P9_RUNLINKAT(r0, &(0x7f0000001380)={0x7, 0x4d, 0x1}, 0x7) r3 = accept(r0, &(0x7f0000004e00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000004e80)=0x80) r5 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004ec0)={{{@in=@remote, @in=@loopback, 0x4e23, 0xffffffffffffffff, 0x4e23, 0x0, 0x2, 0xa0, 0xa0, 0x0, r4, r5}, {0x8000, 0xffffffffffff8001, 0x7, 0x9, 0x1, 0x4, 0xfffffffffffffffd, 0x83}, {0x2, 0x6, 0x1}, 0x4, 0x6e6bbb, 0x2, 0x0, 0x2, 0x1}, {{@in6=@loopback, 0x4d5, 0xff}, 0x0, @in6=@mcast2, 0x3507, 0x3, 0x0, 0x40, 0xffff, 0xfffffffffffffff8, 0x4}}, 0xe8) getgroups(0x9, &(0x7f0000005040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xee00, 0x0, 0xee00]) mount$fuse(0x0, &(0x7f0000004fc0)='./file0\x00', &(0x7f0000005000)='fuse\x00', 0x60, &(0x7f0000005080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@dont_appraise='dont_appraise'}]}}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000005180)={0x3, 0xff, 0x3, 0x7, 0x8, 0x3, 0x400, 0x8, 0x0, 0x24}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000051c0)={@empty, 0x44, r4}) setgroups(0xa, &(0x7f0000005200)=[r10, r11, r7, r7, r11, r9, r10, r8, r10, r8]) r12 = openat$vfio(0xffffffffffffff9c, &(0x7f0000005240)='/dev/vfio/vfio\x00', 0x10000, 0x0) ioctl$TIOCGLCKTRMIOS(r12, 0x5456, &(0x7f0000005280)={0xffff, 0x1, 0x7, 0x1, 0x11, 0x8, 0x3311, 0x6, 0x3, 0x8, 0x2, 0xcb73}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000052c0)={0x20, {0x10000, 0x1, 0x100000001, 0x3aa, 0x0, 0x745}}) ioctl$PERF_EVENT_IOC_RESET(r12, 0x2403, 0x5) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f0000005300)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000005340)={{{@in=@remote, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000005440)=0xe8) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000005480)={0x1ffc, 0x2, 0x4, 0x4, 0x101}) 08:14:15 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x20000000000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) write$FUSE_DIRENT(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="f1000000f5ffffff06000000000000000000000000000000f8ffffffff0000007465616d300000000000000000000000"], 0x30) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0xa}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000001c0)={0xb15078e}, 0x1) close(r1) close(r0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x1, r5, 0x3b, r6}, 0x10) fdatasync(r3) 08:14:15 executing program 1: clone(0x0, &(0x7f0000000040), &(0x7f000006fffc), &(0x7f0000000000), &(0x7f0000cd6f68)) fcntl$getown(0xffffffffffffff9c, 0x9) getpid() getpgrp(0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x40000004, 0x0) 08:14:15 executing program 0: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x3, 0x10000) syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x10002) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000180)={0x7, 0x4, 0x0, 0xffffffffffffff81, 0x10, 0x4}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001580)=""/245, 0xf5}, {&(0x7f00000003c0)=""/61, 0x3d}], 0x2}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc3, 0x0) write$P9_RLINK(r2, &(0x7f0000000080)={0x7, 0x47, 0x1}, 0x7) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x0, 0x5, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x329]}}, 0x80, &(0x7f0000000340), 0x72, &(0x7f0000000380)}, 0x0) lsetxattr$security_smack_transmute(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x2) 08:14:15 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2000, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000040)) remap_file_pages(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x2, 0x2000) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f00000000c0), 0x2) [ 265.779764] mmap: syz-executor1 (10585) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 265.813544] IPVS: ftp: loaded support on port[0] = 21 08:14:15 executing program 1: mkdir(&(0x7f0000000140)='.\x02', 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0x3ff, 0x1, 0x2, 0x7f}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x1ff, 0x1, 0x1000, 0x0, r1}, &(0x7f0000000100)=0x10) 08:14:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x41, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="21dbe312", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x3, 0x2}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={r3, @in={{0x2, 0x4e22, @empty}}, [0x49, 0x3, 0x3f80000000000, 0x7, 0xeb, 0x9, 0xaae1, 0x8, 0x7, 0x6, 0x100000001, 0xd19a, 0x80000001, 0x400, 0x4]}, &(0x7f0000000200)=0x100) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r2}, 0xfffffffffffffe9d) 08:14:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x23) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x1, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000007c0)={0x1d4, r4, 0x927, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfbe7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x293}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38129377}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x48894) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) [ 266.011138] chnl_net:caif_netlink_parms(): no params data found 08:14:16 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) unshare(0x20400) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000180)=""/73, 0x49}, &(0x7f0000000080)}, 0x20) [ 266.170921] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.177626] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.185861] device bridge_slave_0 entered promiscuous mode [ 266.199353] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.205983] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.214464] device bridge_slave_1 entered promiscuous mode [ 266.249206] binder: 10598:10606 got transaction to context manager from process owning it [ 266.257750] binder: 10598:10606 transaction failed 29201/-22, size 0-0 line 2825 [ 266.296390] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 266.337583] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 266.384650] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 266.393178] team0: Port device team_slave_0 added [ 266.399608] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 266.408228] team0: Port device team_slave_1 added [ 266.416670] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 266.425000] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 08:14:16 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xfe, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000000)={0xa4e8, "432a7b7fa20e5918e4c1668e246d5379edc6f5b2a728ed7c72848d717725e00f", 0x2, 0x1}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0)=0x34e4, 0x4) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000180)=""/134) setsockopt(r2, 0x65, 0x10000000005, &(0x7f0000000040)="f0000003", 0x4) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x0, [], 0x0}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @rand_addr=0x9, 0x1, 0x1, [@dev={0xac, 0x14, 0x14, 0xc}]}, 0x14) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001580)={0x5, 0x0, [{0x5000, 0xe8, &(0x7f0000000280)=""/232}, {0x10000, 0x1000, &(0x7f0000000380)=""/4096}, {0x6000, 0x3c, &(0x7f0000001380)=""/60}, {0x100000, 0xb7, &(0x7f00000013c0)=""/183}, {0x6000, 0xd5, &(0x7f0000001480)=""/213}]}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000001640)=r3) [ 266.497544] device hsr_slave_0 entered promiscuous mode [ 266.532064] device hsr_slave_1 entered promiscuous mode [ 266.573132] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 266.580507] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 266.612899] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.619475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.626607] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.633171] bridge0: port 1(bridge_slave_0) entered forwarding state 08:14:16 executing program 0: r0 = signalfd(0xffffffffffffff9c, &(0x7f00000000c0)={0x5}, 0x8) fsetxattr$security_smack_transmute(r0, &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x3) r1 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="91b642eaf9fb9b9e3c630900"], 0x0, 0x0, 0x0}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) poll(&(0x7f0000000200)=[{r1}, {r2, 0x100}, {r2, 0x3000}], 0x3, 0x0) [ 266.729552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.769025] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 266.780610] binder: 10619:10620 unknown command -364726639 [ 266.786572] binder: 10619:10620 ioctl c0306201 20000000 returned -22 [ 266.807250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.818649] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.830436] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.854898] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 266.860999] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.869574] binder: 10619:10620 unknown command -364726639 [ 266.875766] binder: 10619:10620 ioctl c0306201 20000000 returned -22 [ 266.898960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.903286] binder: BINDER_SET_CONTEXT_MGR already set [ 266.907314] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.911726] binder: 10598:10600 ioctl 40046207 0 returned -16 [ 266.918122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.976928] binder_alloc: 10598: binder_alloc_buf, no vma [ 266.982626] binder: 10598:10600 transaction failed 29189/-3, size 24-8 line 2973 [ 266.990068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.999961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.012118] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready 08:14:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e657624ebb0e16d0f9066d9beb496234f5b9d757365723a26"], 0xffffffffffffff81, 0x0) add_key(&(0x7f0000000380)='en#rypted\x00&\x819VP\x85\x1d\xef1\xe2{\xe1y\xf5\x84\xb0tA\xc8}\x86\xb5\x1d\x1f\xbaE\xf8\x8c>TX\x9e`R\x04\xdf\xae\xfa\x1382>i\xe7.r\x1d\xfbC\x88\x97\xf2\x81\xbbI\x9c\xd2p\xf7\bO\x9e\xe8nB\xa3\xa4\xcb\x8d\xd0\xf7\x1a\x13\x03@?\x16\x10\x1eA\xb7 \x96\xa9\xbd\xaf\x00\x90\xddn\xee\xea\xc8\xbd\xc2\x8d\x95iB\\\xf8\x8bV*\xf8\xcbY\xd3\xf6\xbff\xd25\xa1_p\xc2\xbao5aMJ\xec)\xbd\x925U\n\xf6qn\x90}}sz\xdd)/O\xbbT\xab\xb4\x04*\xdb\xfbw\x1bi\x9c/T\x04n\xca2(n\xd6A\xa0\x12p\x98W\x99\x96Q\xa9 \xb8\n%^aJ\xc5\xcf', &(0x7f0000000180)={'syz'}, &(0x7f0000000340)="5b733e8642329439bac3996bbeb7be3ff86a8b34531aba12f88edb05000000000000004868601649b450ac233edf3d81f37013", 0x33, 0xfffffffffffffffe) prctl$PR_CAPBSET_READ(0x17, 0xf) [ 267.072055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.080220] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.086735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.096444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.106040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.114581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.123194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.143783] binder: 10598:10606 got transaction to invalid handle [ 267.150087] binder: 10598:10606 transaction failed 29201/-22, size 0-0 line 2834 [ 267.168968] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 267.182520] binder_alloc: 10598: binder_alloc_buf, no vma [ 267.188185] binder: 10598:10600 transaction failed 29189/-3, size 0-0 line 2973 [ 267.208337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.214110] binder: release 10598:10600 transaction 7 out, still active [ 267.221246] binder: unexpected work type, 4, not freed [ 267.226653] binder: undelivered TRANSACTION_COMPLETE [ 267.231890] binder: send failed reply for transaction 10 to 10598:10606 [ 267.305042] binder: undelivered TRANSACTION_ERROR: 29189 [ 267.310685] binder: send failed reply for transaction 7, target dead [ 267.318151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.326514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.454344] binder: undelivered TRANSACTION_ERROR: 29201 [ 267.460014] binder: undelivered TRANSACTION_ERROR: 29189 08:14:17 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x7}, 0x4) timer_create(0x2, &(0x7f0000000100)={0x0, 0x36, 0x7, @thr={&(0x7f0000000080)="8d954589abc167a3b68a088e1090fae6bab6cc80d1713ebc941a7f6e3658165a61339014b894d10be7b4a3fcdcd0fc649c117831738bc3e34ae863", &(0x7f00000000c0)="305ff13e9d3e813bf1e6a088687575e7d06cd30b113a27c9ab20c0003d6b737d19f571f8db7da98d9a07d59eeb65dbc30ba107dda4"}}, &(0x7f0000000140)=0x0) timer_delete(r1) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000180)={0x2, 0x0, [{0x40000000, 0x1, 0x0, 0x6, 0x7f, 0x1ff, 0x100}, {0x4e2de6bebebe7fb, 0x148f, 0x4, 0x3, 0x23ce0a93, 0x63b, 0xcf93}]}) fchdir(r0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000200)=0x96) getpeername$tipc(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000002c0)={0x1, 0xfffffffffffffffc, 0x9, 0x9}) keyctl$set_reqkey_keyring(0xe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000300)) r2 = openat$cgroup_procs(r0, &(0x7f0000000340)='tasks\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000380)=""/4096) write$P9_RUNLINKAT(r0, &(0x7f0000001380)={0x7, 0x4d, 0x1}, 0x7) r3 = accept(r0, &(0x7f0000004e00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000004e80)=0x80) r5 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004ec0)={{{@in=@remote, @in=@loopback, 0x4e23, 0xffffffffffffffff, 0x4e23, 0x0, 0x2, 0xa0, 0xa0, 0x0, r4, r5}, {0x8000, 0xffffffffffff8001, 0x7, 0x9, 0x1, 0x4, 0xfffffffffffffffd, 0x83}, {0x2, 0x6, 0x1}, 0x4, 0x6e6bbb, 0x2, 0x0, 0x2, 0x1}, {{@in6=@loopback, 0x4d5, 0xff}, 0x0, @in6=@mcast2, 0x3507, 0x3, 0x0, 0x40, 0xffff, 0xfffffffffffffff8, 0x4}}, 0xe8) getgroups(0x9, &(0x7f0000005040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xee00, 0x0, 0xee00]) mount$fuse(0x0, &(0x7f0000004fc0)='./file0\x00', &(0x7f0000005000)='fuse\x00', 0x60, &(0x7f0000005080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@dont_appraise='dont_appraise'}]}}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000005180)={0x3, 0xff, 0x3, 0x7, 0x8, 0x3, 0x400, 0x8, 0x0, 0x24}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000051c0)={@empty, 0x44, r4}) setgroups(0xa, &(0x7f0000005200)=[r10, r11, r7, r7, r11, r9, r10, r8, r10, r8]) r12 = openat$vfio(0xffffffffffffff9c, &(0x7f0000005240)='/dev/vfio/vfio\x00', 0x10000, 0x0) ioctl$TIOCGLCKTRMIOS(r12, 0x5456, &(0x7f0000005280)={0xffff, 0x1, 0x7, 0x1, 0x11, 0x8, 0x3311, 0x6, 0x3, 0x8, 0x2, 0xcb73}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000052c0)={0x20, {0x10000, 0x1, 0x100000001, 0x3aa, 0x0, 0x745}}) ioctl$PERF_EVENT_IOC_RESET(r12, 0x2403, 0x5) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f0000005300)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000005340)={{{@in=@remote, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000005440)=0xe8) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000005480)={0x1ffc, 0x2, 0x4, 0x4, 0x101}) 08:14:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000000c0)={0x3, 0x3, 0x9, 0x0, 0x1, 0xfffffffffffffffd, 0x2}) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@deltfilter={0x2c, 0x2d, 0x705, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 08:14:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x23) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x1, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000007c0)={0x1d4, r4, 0x927, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfbe7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x293}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38129377}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x48894) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) 08:14:17 executing program 0: socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x0, 0x40) fsetxattr$security_smack_transmute(r0, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000380)='TRUE', 0x4, 0x3) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x710e37f5, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x1, 0x401) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xb) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) write$P9_RCLUNK(r2, &(0x7f0000000040)={0x7, 0x79, 0x1}, 0x7) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/207, 0xcf, 0x0) mmap(&(0x7f00002a9000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 08:14:17 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000040)="16cf4d3409e28dd2101e5b9828faf1d71b23d2eaeae721fb9c2b1d296c155ab40633559bcaede1e9ae445b758650167075860aa8aab93700a2bf70ce5219dd82f3b4bc13fba012a632ae99c4bf6d97aebfdd100dfa7b141afce1c990d89272522578d68d83a934f10af10f918472ef8bea64af334c6aff4fbdaa7a7726b652b3d88859d63caf55d31ed3436b2dddaf75", 0x90) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000000)) [ 267.877884] binder: 10638:10648 got transaction to context manager from process owning it [ 267.886550] binder: 10638:10648 transaction failed 29201/-22, size 0-0 line 2825 08:14:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@rand_addr=0x80000001, @remote}, 0x8) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000016ffc)=0xfffff7fffffffffd, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x1004, 0x4) bind$inet(r0, &(0x7f0000008ff0)={0x2, 0x4e20, @multicast1}, 0x10) listen(r1, 0x0) 08:14:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x7d, &(0x7f00000000c0)=0x33b4679c, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000180)="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") socket$inet_tcp(0x2, 0x1, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/userio\x00', 0x80, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'gre0\x00', @ifru_flags=0x800}) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x7b, 0x4000) 08:14:18 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'pids'}, {0x2b, 'rdma'}]}, 0xc) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x10000) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x10000000010, 0x4000000001, 0x0, "e5f9fe8eb2df5e42090cca28e805b2eabd7ce700a1468fe351a06e3de92acc3c"}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000140)={0x3, 0x0, 0xc6, 0x3, 0x7f}) 08:14:18 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x42, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x62b0, 0xfffffffffffffffa, 0x1, {0xa, @win={{0x2, 0xffff, 0xffffffffffffffe0, 0x74a8}, 0x8, 0x3f, &(0x7f0000000100)={{0x81, 0x9, 0x4, 0x2}, &(0x7f00000000c0)={{0x6, 0x6, 0x7fffffff, 0x7f}, &(0x7f0000000080)={{0x0, 0x1, 0x8e5, 0x1}}}}, 0x80, &(0x7f0000000140)="61d102170603777019509b894388e8c934eaa8b250ea17eb339754084b4561ffd4af5b6b26fbb94015edcde3fe93aa77cb19bcb6fd5fa0856c954288f773088f92739c34a020e30029c20ae2c70a388db6e7c9088acdf4ef68d62f05bc615be61e0b219d15032e025cda5adcf4caa175397aeda3172be867b6344b907593", 0xf1}}}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xfff7ffffffffffc6, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x303, 0x0) 08:14:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x23) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x1, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000007c0)={0x1d4, r4, 0x927, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfbe7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x293}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38129377}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x48894) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) [ 268.540439] binder: release 10638:10639 transaction 16 out, still active [ 268.547452] binder: unexpected work type, 4, not freed [ 268.552879] binder: undelivered TRANSACTION_COMPLETE [ 268.558086] binder: send failed reply for transaction 19 to 10638:10648 08:14:18 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="431ea9ea0e62cd58fb05", @ANYRES32=r0, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="87189ee79ed3526031e1c64905f827be228e4a0bfa1d472f97573f2e0f8b468867323d5631fb98cc67bb17954be15291eb305b9d644273c5ac6770153d317cb985c4744dc76dd8398aa7bf4c2f1258a022f48a5ceeb4d8cfa0c84faf28e124e1c5285973544e90e5fb0d4dfc36305f7f30ec5ba6bf5c768c50ec64df4457d5a84a7c33b7464c6f96c353313bed59d8be7410a22b80622cadb1385baf0bdad9d63b5a32cce85f9d3a1f8bf4c35aa44f28b76e3feeb3a1dba6a492834525d3f9d05ab2", @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYBLOB="46036cff6acdf0586c2b4d1ff01a8e9bdd94118ff11159dd246ed98f839d42c14ddb1b2df32493726f7fb293312a6241909fb9eb9b3d34a2ae6d1506493617ad84d2cdee31e381ee1e227ce7ec2584a9ed5ef35078a3925d26e2928b77fd1af2f216d4c588d65e0478c22322e690e74e6d701672fd6b02f5200b145f8bb0fe170dec7196230fa2b2bd6a4c1dd38057e000cbe1e72a23e7c13cd4640a13f99cd157eb362a2ac6ab", @ANYRES16=r0, @ANYRESHEX=0x0, @ANYPTR64, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESHEX=r0]]]) connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc) 08:14:18 executing program 0: r0 = getpid() r1 = gettid() getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, &(0x7f000031e000), 0x1c) shutdown(r2, 0x2) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80}) [ 268.622487] binder: undelivered TRANSACTION_ERROR: 29189 [ 268.628010] binder: send failed reply for transaction 16, target dead 08:14:18 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="431ea9ea0e62cd58fb05", @ANYRES32=r0, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="87189ee79ed3526031e1c64905f827be228e4a0bfa1d472f97573f2e0f8b468867323d5631fb98cc67bb17954be15291eb305b9d644273c5ac6770153d317cb985c4744dc76dd8398aa7bf4c2f1258a022f48a5ceeb4d8cfa0c84faf28e124e1c5285973544e90e5fb0d4dfc36305f7f30ec5ba6bf5c768c50ec64df4457d5a84a7c33b7464c6f96c353313bed59d8be7410a22b80622cadb1385baf0bdad9d63b5a32cce85f9d3a1f8bf4c35aa44f28b76e3feeb3a1dba6a492834525d3f9d05ab2", @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYBLOB="46036cff6acdf0586c2b4d1ff01a8e9bdd94118ff11159dd246ed98f839d42c14ddb1b2df32493726f7fb293312a6241909fb9eb9b3d34a2ae6d1506493617ad84d2cdee31e381ee1e227ce7ec2584a9ed5ef35078a3925d26e2928b77fd1af2f216d4c588d65e0478c22322e690e74e6d701672fd6b02f5200b145f8bb0fe170dec7196230fa2b2bd6a4c1dd38057e000cbe1e72a23e7c13cd4640a13f99cd157eb362a2ac6ab", @ANYRES16=r0, @ANYRESHEX=0x0, @ANYPTR64, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESHEX=r0]]]) connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc) 08:14:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0xa) r2 = socket$can_bcm(0x1d, 0x2, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x260, 0x6c13f42b, {0x0, 0x2710}, {0x77359400}, {0x2, 0x200, 0x4, 0x400}, 0x1, @can={{0x1, 0x4, 0x5, 0x1}, 0x8, 0x1, 0x0, 0x0, "29ab1989f6376661"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) [ 268.814026] binder: 10678:10683 got transaction to context manager from process owning it [ 268.822542] binder: 10678:10683 transaction failed 29201/-22, size 0-0 line 2825 08:14:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000000)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'Xat\n\x00\x00\x00\x00\x00\x03\xe0\x01\x00', 0x19, 0x3, 0x3e0, [0x20001600, 0x0, 0x0, 0x200018d8, 0x20001908], 0x0, &(0x7f0000000240), &(0x7f0000001600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x1b, 0x0, 0x86dd, 'sit0\x00', 'erspan0\x00', 'b\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x12f, 0x198, 0x1d0, [@statistic={'statistic\x00', 0x18}, @ip6={'ip6\x00', 0x50, {{@local, @dev}}}]}, [@snat={'snat\x00', 0x48, {{@dev}}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast}}}]}, @arpreply={'arpreply\x00', 0x10}}, {{{0x3, 0x0, 0x0, 'vcan0\x00', 'nr0\x00', 'veth1_to_bridge\x00', 'ip6gretap0\x00', @remote, [], @remote, [], 0x70, 0xa8, 0xd8}, [@snat={'snat\x00', 0x10}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @broadcast, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x458) r2 = dup(r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0xce6, 0x2, 0x4, 0x10000, 0x8c, 0x8000, 0x3, 0x8, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x5}, &(0x7f0000000140)=0x8) close(r0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0x3) [ 269.020597] kernel msg: ebtables bug: please report to author: Wrong len argument [ 269.063866] kernel msg: ebtables bug: please report to author: Wrong len argument 08:14:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x800, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xfffffc45) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x26629f641587cf4d, &(0x7f0000000480)={&(0x7f0000000600)=@getlink={0x0, 0x12, 0x424, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0xc0, 0x4}, [@IFLA_PROTO_DOWN={0x0, 0x27, 0x200}, @IFLA_PHYS_SWITCH_ID, @IFLA_AF_SPEC={0x0, 0x1a, [{0x0, 0x7}, {0x0, 0x1f}, {0x0, 0x1e}, {0x0, 0x1f}]}, @IFLA_WEIGHT={0x0, 0xf, 0x1}, @IFLA_CARRIER_CHANGES={0x0, 0x23, 0xfffffffffffff258}]}, 0x28}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffe10, 0x0, 0x333}, 0x2021) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101, 0x0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1484000019000100000000000000000000000000"], 0x14}}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x200, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000000c0)=0x5, 0x4) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @multicast1}, 0x200, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x100000000, 0x48c}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2) fcntl$setlease(r0, 0x400, 0x1) 08:14:19 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x402000, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x5, 0x100, 0x4, 0x32ad, 0x49249249249270c, [{0x3ff, 0x5, 0x1, 0x0, 0x0, 0x2201}]}) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x9c03, 0x802) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000100)={0xa, {0x0, 0x0, 0xfffffffffffffff9, 0x7fffffff}}) 08:14:19 executing program 0: r0 = socket$kcm(0xa, 0x9, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f0000000040)="153f6234418dd25d766070") r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@mcast2, 0x5, r3}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f00000001c0)=r4, 0xfe91) 08:14:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00004cc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 269.468151] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 08:14:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x23) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x1, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000007c0)={0x1d4, r4, 0x927, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfbe7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x293}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38129377}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x48894) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) [ 269.583298] binder: release 10678:10679 transaction 22 out, still active [ 269.590196] binder: unexpected work type, 4, not freed [ 269.595629] binder: undelivered TRANSACTION_COMPLETE [ 269.600801] binder: send failed reply for transaction 25 to 10678:10683 08:14:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = memfd_create(&(0x7f0000000240)='GPL\x00', 0x0) sendfile(r1, r0, 0x0, 0x88004) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e00000006324c206a0bc9a0ba6590eb80536a69eec20012f1eda38f25007c90466635ef4e94e7d73a9295437073cb9b702868b8c875a72fac1d69ce89eb93bf8b952703e56ff6bdca39784d095c078c1d5bc2d866dcd1c1f6b37ecc0660d5359b44ed347ae45fc59545daa337a0e4aac393dd6daa1a23f9d83efbe427fa9a5de66ca3ec884214808a3d200ca58274f48ca1db2ac8f10432facfe929e9c5dcac93200d091dd9cfd082eb7a78dee4b39645a4a56e3194f46f422d07d5a838ac1adb573e4519e18342699224228605a758a5fc160b541da423facc09ca69f060447516d1fec"], &(0x7f0000000000)=0xe8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, 0x124) [ 269.701821] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.707376] binder: send failed reply for transaction 22, target dead 08:14:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00004cc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 269.794735] binder: 10715:10722 got transaction to context manager from process owning it [ 269.803350] binder: 10715:10722 transaction failed 29201/-22, size 0-0 line 2825 08:14:20 executing program 0: add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)="41dc712111061699cc46b6e1a585c2121e58129efd361f6639e0b1086bcde93779e83ea7ae7e8a3c7c52306dd1c15eaa35733395c7c5ae817701ed722ed5e369b70065dd4b35b60f79f93f3b349501f196900b1bbaebe9bac97d828b", 0x5c, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)="ff6de5514ac3c98d09722b8b3db5183835ee89078a72fac5375a9ce52c6f0a0ad49e91e5be9544c7c4f3df9a44a57c3861b53b03430388bba3ab9540d7c256446481613fd2424a3edf686124b14b193bc91d5eb6b9595c6984ab7153fa94937f84d3edff1aec7c5f50aa718992d0c093fd2acc954871f566805a8820dea1deee737422c67d88ae9849749c35c3ddd3861381791052", 0x95, 0xfffffffffffffffd) add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)="6d0d9389367ac5c9d131a2416992c6ccbf0138bfdb84555d8a4cef511268acabc2e0c80957b4f4d9026834a9c548fb87f77ce99ad8e040cf3c4e43687ade7fbd0d49b187ed7cae6487266c12b7c5970a527bdea620c6f2838536a154609927968e5a853cdcb1e1a2ab4094a6cfd4b7658ae4709630ccb439892b100e53f0dba8f10947c208a2bc06bab51850df560c56b0b0270ae6a078c191318bd227e9adbcf8f662ffec264a0e01627575f1e2c9b38b20c3ca9e11f59813e9d8b40c7a97dd663edc6c5d61d9412b92", 0xca, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000740)='keyring\x00', &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate_iov(0x14, r1, &(0x7f0000002cc0)=[{&(0x7f00000007c0)="8ca93c4976103f82599121b48d27887dbc3875d48f1d32ee79695feb397f20aaa0a949d4d90763600a8f90ff223061934e4b149316764f720e2b856a85680242015ce551dd6892b500b02b3a04bb11dc9db12ae5a42d3691911dfefa03e007f350ccd60f946351dbfd9faa574fa0cf145f4a5333328f0a0ce97e3010d83508889b44df0077fbef5220d8cd48d8cf450de5c1b82ee24f746d9e3edc42074c2d4f93f20d31b927675e0f7ac55355b9f427c0563b01e2f73b50b60ae7", 0xbb}, {&(0x7f0000000880)="109c99e2d3632204f3f1cb2fe1b1cb7dcf11a732bb872ddea301cf5ac63ba592409593ef55dbc6", 0x27}, {&(0x7f00000008c0)="d861bb97ed91a39d9879518ad0e44cff300b7ddcc14fca0dc179505965fabaa63cc796ac74929d886621ea130ccc55a404bad1f3f7d86567e51e5c2720a959fb0cd720184596e8a455", 0x49}, {&(0x7f0000000940)="686c86e834f88fabeb9e90b23dc0d5a763d70a4c9ddac1cedb7acf829d897cc3f3bc56062a2277a9c3b2545b513ae7edc278b44a130b2e51954887a2ed20c576296cca", 0x43}, {&(0x7f00000009c0)="a02a21bdae629e95c519fd04c1ac4e5210f7dd9837414777c9355e0247dea4324179f39ab00d173d76ad08e5b8", 0x2d}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="5c2abd04657a2eaf1efccfdf1fb97079c938fb31e029a348eec7240d23b506b239e58a0232c556c99e6d80da39852fa045981826d38357f1c78aba2414e3107d2fb5f190a3bdeca764d63a2ad8aab1333f060417c1d7ee122dd7ab6e6fcb749428ac19d2c0a9e24ef03788d6c75620da0f3a397f89824cc4d7322dd464afedb924f3813a521837286b5a05eade69249b827a7b366c04c664edcabeb6d019417accd59840f59d396cddba77fafb7f8e8144b2ebbf786b32b96784445b89b2", 0xbe}, {&(0x7f0000001ac0)="b4479a831d8533791656a8f29661e3e255ad5b2e02006dbdf03b032c954fb827b17c3a7f6a72032f0a0df25f1172cd0271e8f4eb260a8c8120b2e71e177a7266a39415c721b0e829146d89e60e4097c818550ce0aea904bd05600e6679eea94bf1f5d2941886a24fbc85849fd9a9e5a9dc4115813549022844f8c4fd82113f2a7741ee498d87681ec40cd793c9f22dd7c0686b0e7c58fd3e622d7c35667aa71c134208feae799ae8206b6993a5de7c523b81471c8a77a0de74b4362e4277434a0b32c4e5", 0xc4}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="82f0b1879e4cea787ab73a5c84a59f080580ae583361156c7270c828e1783b820f883ab905a923645b513fe4c643557a4703f34de408469d4cb85ee3bac871a76066c150c9b8778cafbeff812374475006fc1cc908f8ec25d4ff7ad0af2963a4fcc9633c59ee24e5ebc1e1928147a525e3add01348c9ae158c56e335ef2db3aa2342822b859980ca7629aa3c0e3a6a43abbf5d3de09b5ba70ec99e0c88565a191d3f706a0aebab537ba174567f0edf7d1854cbecd6dac63c38e1542322045666db3c441e50b772edeb19abce14dd466f2277f5e2a03b559dcd6799aae4781c107fbc553dadd519b53b", 0xe9}], 0xa, r0) r2 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x1, 0x101000) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000300)) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="4b4bfe2c1d5aaeb98430d1077325e27789f00b047002c44ad788fcb72b85da3d496d05a35f1289e25ade4ba24fe34db7f25127fd668ac11bfefc16", 0x3b, 0xfffffffffffffffb) r4 = add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="bca680a773ac633b88bc1d1b7cd9438383283032c28339198bcc777887d2fb62e7679dc514c4e721d5295fc9cd4fdc14939775c8bca86b6551376c346b47eb377cb6d3017a466023ba370b290502aa6ff4c6f5180bac8a72242be12507a4acfea662ef651bc71be38dbda029fcd412d8d96467d41d7e0f818aae06d6da4baa0d7c40c526971b6b6045f3c1de7cecb4527072ada979f56ea75b409109363e0c30106f8089e148d584eb36b0d0e7c8cf9deaef1be0230ce173e8b2f0864797fefb134a3e0be75c513a65694ef3ef74c6f8953ea5759973c52528e1c156329da36b1eac92c7a900ce24ee0038595a551af355de72282c8564f90e4e04df", 0xfc, 0xfffffffffffffffa) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) keyctl$search(0xa, r3, &(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x1}, r4) 08:14:20 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1da0000000000000, 0x20}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={r2, 0xd1, "a265e8e48e730ca8334cc62c0cf4c5d6167168178331497168f12957d451766ef942c63bc40264753036b00e533fb7ac53a5441786e5f46fe3385806f8ac4e054147d0fe2b8608181a1d547a207d139b677c0b31c9a252ea640516ea826106263d376b04b5d6d165b118a8b45aca11d3a0a58583fa8a2db653044cda9f26c006c7b9500b49d964b000ed00e2fe3edf7d9d6ba03897cc3f2f44176dd61bfb0499360d0a747c2ae2ad869fda55fad6ace2ab67cd6dc613de60c374dbaa1ce857247be74d1d6a76794ddc0471aea224bea200"}, &(0x7f00000001c0)=0xd9) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) faccessat(r1, &(0x7f0000000200)='./file0\x00', 0x2, 0x800) 08:14:20 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/160, 0xa0}, {&(0x7f0000000000)=""/8, 0x8}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001500)=""/240, 0xf0}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_getroute={0x1c}, 0x1c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xc00000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000012c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x84, r1, 0x700, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x61a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x58743852}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd679}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 08:14:20 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x5, 0x1ce2ff}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x6c4, &(0x7f000000cf3d)=""/195}, 0x48) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000003c0)=0x5) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000080)="4b478727c718820982d68822b08111742a4f45db9a", &(0x7f00000000c0)=""/153}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000002c0)="59b3beb0971bdba03544f863095ec60c9aa6a66de69e34eca3f71812ab19e6d07eff3efdf99773714812def6e39561448a709a2dddb8702369d79361a77177bf4f724ac5141860ff116cb62030619af251b4772bbfc5f89c284a0a3babbd09932a400006768ed324ae34dd98666dfbb8dd6fee2079c749008b07ade2e2537104b4a9a9ae673b86242dcecca93f7fb8a87af047d97f153e2d51258eef9e933db3d0a59fad7490f54b330c19a2aeeddeff9904b1d8349e8fa67e"}, 0x10) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000001c0)=""/252) prctl$PR_SET_DUMPABLE(0x4, 0x3) [ 270.451475] QAT: Invalid ioctl [ 270.465217] QAT: Invalid ioctl 08:14:20 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x5, 0x1ce2ff}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x6c4, &(0x7f000000cf3d)=""/195}, 0x48) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000003c0)=0x5) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000080)="4b478727c718820982d68822b08111742a4f45db9a", &(0x7f00000000c0)=""/153}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000002c0)="59b3beb0971bdba03544f863095ec60c9aa6a66de69e34eca3f71812ab19e6d07eff3efdf99773714812def6e39561448a709a2dddb8702369d79361a77177bf4f724ac5141860ff116cb62030619af251b4772bbfc5f89c284a0a3babbd09932a400006768ed324ae34dd98666dfbb8dd6fee2079c749008b07ade2e2537104b4a9a9ae673b86242dcecca93f7fb8a87af047d97f153e2d51258eef9e933db3d0a59fad7490f54b330c19a2aeeddeff9904b1d8349e8fa67e"}, 0x10) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000001c0)=""/252) prctl$PR_SET_DUMPABLE(0x4, 0x3) 08:14:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x23) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x1, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000007c0)={0x1d4, r4, 0x927, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfbe7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x293}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38129377}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x48894) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) [ 270.539992] binder: release 10715:10718 transaction 28 out, still active [ 270.547073] binder: unexpected work type, 4, not freed [ 270.552466] binder: undelivered TRANSACTION_COMPLETE [ 270.557653] binder: send failed reply for transaction 31 to 10715:10722 [ 270.620824] QAT: Invalid ioctl [ 270.624584] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.630188] binder: send failed reply for transaction 28, target dead 08:14:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r4 = gettid() sched_setscheduler(r4, 0x5, &(0x7f0000000100)=0x3f) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendfile(r2, r1, 0x0, 0x5) bind$isdn(r3, &(0x7f0000000140)={0x22, 0x3, 0xffffffff, 0xc6, 0x10001}, 0x6) [ 270.762372] binder: 10750:10753 got transaction to context manager from process owning it [ 270.770770] binder: 10750:10753 transaction failed 29201/-22, size 0-0 line 2825 08:14:20 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000000040), 0xc, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400080000f4ffffffbc7000ffffffff0000dffc0c00000000000000000000005b659a62290ffc380c2dbfdc5e9f13e1a04810d464fbc3f4c1b4e2bb501fb1bb949869c2984d914d9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x3f, 0x0, "099d4229519f6e4fec9a4a13251551c57def2567646053845cc9d4aaf6f7c12652e366ad84d000312581134a4c0a9a88e9db29cefd2046a14b81cd655220c89c2f0419a4785594ccf842df9cb66245f3"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100), 0x1c) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)) 08:14:20 executing program 0: r0 = dup(0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000200)="2e12fa6d3c3f07d5f683895884851f119a560e10e644ac31a18a14639be0a779e064e7195eceb0921866146e97e3d467cb085e50f33b327fd752ba40ef7b339200ba656ca891df09e5af02e0a22d95247d13c8063e0cf86a05e1682f3b5a0bee7296a961fc7e3a99caa6981ae9f0be2b37e8b62026981229e8fabb7a98440460a2e9", 0x82, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='illinois\x00\xb0\xbaU\xc3\xb7E\x86Y\x02\x85\xc9\xcf=\b\fx', 0x333) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000040)="a040dc894d1863a4e3fbd22f6c9eb72bfad7dd5595290155f79be33024de6978f3058a104688d137e0d7e3cad8917ee7f96a8de70ff8b00ca9606cf98b1863fcc097f909f0bfb61d600744e301d439f9b189d27489a3fae8827b31c09efeff9018df709af0d9049254b5005190", 0x6d, 0x40084, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="240000002400075e1dfffd726fa2830020200a0009000000030001a00d0000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e639700000100000000006cf055d90f15a3", 0x4c}], 0x1}, 0x0) 08:14:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x24f) r1 = syz_open_dev$usb(&(0x7f0000000480)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffff81, 0x0) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f00000004c0)=0x8, 0x4) getsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000400), &(0x7f0000000380)=0x125) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000680)=""/174) sendmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="732375c4405cfa7b91ed12b8d5b262a4a7f4f9fef96ccddc898f18362e487c68ff23132f8107b5d74b60e2bc7427913a2910fbc86636ceb986acc77d14d8676fa86dc7f04a0d21fa2058595488eb9d3c24be8f89fd29ad1b2d9c84b6f8461900298d70409580136109d04646f9c02365b8ad6202ef32f944b0a287552fc7cf58e1d666202d35ce5d4e5e5bcefcfcfc128c80f20b919c0622d85c34b973a62df89a64d81d3b32b5f0635ae6c1743014a34c7b7026668c4762c82d7cd266b5ae8e7c22ee2c9712dda999", 0xc9}], 0x1}}], 0x1, 0x20000090) recvmmsg(r0, &(0x7f000000bc80)=[{{0x0, 0x0, &(0x7f0000005ec0)=[{&(0x7f0000003d80)=""/4096, 0x1000}], 0x1}}], 0x4000138, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x400000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f00000003c0)={'icmp\x00'}, &(0x7f0000000440)=0x1e) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000500)=[@in6={0xa, 0x4e21, 0x1, @remote, 0xff}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e24, 0x58, @ipv4={[], [], @remote}, 0x7ff}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x9, @local, 0x9}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e23, @multicast1}], 0xa4) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000005c0)=0xe00, 0x4) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000002c0)) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) shutdown(r0, 0x1) 08:14:21 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020400000a0000000000000000000000030006000000000002000000e0000001000000000000000002000100000000000000000000000000030005000000000002000010e00000010000000000000000"], 0x50}}, 0x0) 08:14:21 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200000, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101040, 0x0) readahead(r1, 0x3, 0x800) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x11a) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x10, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x8000, @dev={0xfe, 0x80, [], 0x16}, 0x101}}, 0x8, 0x4, 0xe2, 0x7f, 0x8}, &(0x7f0000000300)=0x98) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={r4, 0x5, 0x6d, 0xc7}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000440)={r4, 0x48, &(0x7f00000003c0)=[@in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x18}, 0xfff}, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in={0x2, 0x4e21, @rand_addr=0x9}]}, &(0x7f0000000480)=0x10) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00000005c0)) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000600)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r5, 0x4040ae72, &(0x7f0000000640)={0x41, 0x6, 0x77fe, 0x1, 0xffffffff}) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000680)) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f00000006c0)) mknod$loop(&(0x7f0000000700)='./file1\x00', 0x8405, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000740)={0x8001, 0x6, 0x9, 0x8}) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000780)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)={0x204, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000000}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb7}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x525a31bb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffe0}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000b00)=0x100000000) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/vga_arbiter\x00', 0x400400, 0x0) connect$inet6(r1, &(0x7f0000000b80)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0xd}, 0x5}, 0x1c) setxattr$security_selinux(&(0x7f0000000bc0)='./file1\x00', &(0x7f0000000c00)='security.selinux\x00', &(0x7f0000000c40)='system_u:object_r:dbusd_exec_t:s0\x00', 0x22, 0x1) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000c80)=0x3) setsockopt$inet6_MRT6_DEL_MFC(r7, 0x29, 0xcd, &(0x7f0000000cc0)={{0xa, 0x4e21, 0x1ff, @empty, 0x6}, {0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, 0x1ff, [0x3, 0x0, 0x0, 0x8, 0x0, 0x100, 0xfffffffffffffff8, 0x8]}, 0x5c) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x118, r6, 0x110, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xcc, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3fd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x0) 08:14:21 executing program 0: utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x7530}, {0x0, 0x7530}}) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000100)) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000001c0)={0x13, @time={0x0, 0x989680}}) 08:14:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x23) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x1, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) [ 271.522545] binder: release 10750:10751 transaction 34 out, still active [ 271.529518] binder: unexpected work type, 4, not freed [ 271.535011] binder: undelivered TRANSACTION_COMPLETE [ 271.602061] binder: send failed reply for transaction 34, target dead [ 271.744230] binder: 10776:10779 got transaction to context manager from process owning it [ 271.752842] binder: 10776:10779 transaction failed 29201/-22, size 0-0 line 2825 [ 271.834248] IPVS: ftp: loaded support on port[0] = 21 [ 271.979119] chnl_net:caif_netlink_parms(): no params data found [ 272.050806] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.057802] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.066009] device bridge_slave_0 entered promiscuous mode [ 272.094419] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.100913] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.109109] device bridge_slave_1 entered promiscuous mode [ 272.178051] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 272.189376] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 272.242978] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 272.251350] team0: Port device team_slave_0 added [ 272.272611] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 272.281114] team0: Port device team_slave_1 added [ 272.303662] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 272.311964] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 08:14:22 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x15, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x7}]}, 0x18}}, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x940) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000080)={{0x3f, @empty, 0x4e23, 0x1, 'lblc\x00', 0x6, 0xfffffffffffffff9, 0x36}, {@remote, 0x4e21, 0x12001, 0x4, 0x80000000, 0x3}}, 0x44) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x0, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xfff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1ff}, r3}}, 0x30) prctl$PR_GET_DUMPABLE(0x3) [ 272.405871] device hsr_slave_0 entered promiscuous mode [ 272.442202] device hsr_slave_1 entered promiscuous mode 08:14:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x23) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x1, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) [ 272.475096] binder: release 10776:10778 transaction 39 out, still active [ 272.482159] binder: unexpected work type, 4, not freed [ 272.482868] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 272.487476] binder: undelivered TRANSACTION_COMPLETE [ 272.513684] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 272.580216] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.586797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.593932] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.600472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.635174] binder: send failed reply for transaction 39, target dead [ 272.654095] binder: 10790:10794 got transaction to context manager from process owning it [ 272.662709] binder: 10790:10794 transaction failed 29201/-22, size 0-0 line 2825 [ 272.796622] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 272.803392] 8021q: adding VLAN 0 to HW filter on device bond0 08:14:22 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffc, 0x400) ioctl$NBD_CLEAR_QUE(r0, 0xab05) unshare(0x240203fd) r1 = socket(0x1e, 0x4, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) prctl$PR_SET_THP_DISABLE(0x29, 0x0) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.upper\x00', &(0x7f0000000140)=""/210, 0xd2) [ 272.837255] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 272.869968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.881062] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.908329] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.924580] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 272.949222] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 272.955854] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.994765] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 273.001992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.010471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.018744] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.025334] bridge0: port 1(bridge_slave_0) entered forwarding state 08:14:23 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100), 0x5e0, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2000, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000080)=[0x6d4, 0x10001]) [ 273.064686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 273.084086] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 273.103855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 273.118822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.127468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.135764] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.142369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.150929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.159930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.194155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 273.217711] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 273.231258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 273.261836] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 273.270890] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.280701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.292071] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 273.299464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.308637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.317280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.326057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.334580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.342760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.351092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.359471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.375467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.383490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.409276] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 08:14:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x23) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) [ 273.447235] binder: release 10790:10792 transaction 44 out, still active [ 273.455193] binder: unexpected work type, 4, not freed [ 273.457075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.460518] binder: undelivered TRANSACTION_COMPLETE [ 273.513485] binder: send failed reply for transaction 44, target dead 08:14:23 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) pread64(r0, &(0x7f0000002180)=""/4096, 0xfffffeec, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 273.723533] binder: 10805:10811 got transaction to context manager from process owning it [ 273.732135] binder: 10805:10811 transaction failed 29201/-22, size 0-0 line 2825 08:14:23 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c) uname(&(0x7f00000000c0)=""/147) r1 = socket$inet6(0xa, 0x4000806, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) [ 274.404561] binder: release 10805:10806 transaction 49 out, still active [ 274.411638] binder: unexpected work type, 4, not freed [ 274.416941] binder: undelivered TRANSACTION_COMPLETE [ 274.471752] binder: send failed reply for transaction 49, target dead 08:14:25 executing program 2: unshare(0x2000400) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) fgetxattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000100)=""/4096, 0x1000) write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x4a, 0x1, 0x4}}, 0x14) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x80044100, &(0x7f0000000000)) 08:14:25 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) pread64(r0, &(0x7f0000002180)=""/4096, 0xfffffeec, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 08:14:25 executing program 3: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x10d9c0, 0x100) r1 = dup(r0) r2 = dup(0xffffffffffffff9c) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc3b86ede371738c8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x110, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}}, 0x8800) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)=0x0) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000300)=[0xee00, 0x0, 0xee01, 0xee00]) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={r5, r6, r7}, 0xc) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000140)={0x0, 0x0, 0x1}) 08:14:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) 08:14:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/88, 0x58}], 0x1) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x1, 0x2800) pwritev(r0, &(0x7f0000000080), 0x30b, 0x0) r1 = request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="d9474dcaee0235ba2bc6d1aeb353cb65f6200bf3f10452ce8743f138b520e00e17eda022467ae42d91703f4138b7660e103173fee5a288745fed908489eec9996944b7623884bf51ba2d378471484c5b9ef6b069bf5a9dde80469eb41e598bdda533b54e576818940ac7b93620f85f7b23931d871cab51c64979fbec0a1b7f46b1363b867dccaecc70ee1f8079f00276a428", 0x92, 0xfffffffffffffffe) keyctl$instantiate(0xc, r1, 0x0, 0x0, r2) [ 275.975157] binder: 10829:10838 got transaction to context manager from process owning it [ 275.983640] binder: 10829:10838 transaction failed 29201/-22, size 0-0 line 2825 08:14:26 executing program 3: unshare(0x40600) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x78, 0x80000000, {"0ba4a1f8a85bfd0bf3919cd89020b3767851183aa196a10d82ed08951ddc4fa688f5344c16632a756f0d59d4143646397c6b6894e33244adae9d1998ebcef7600526e5eb3dba7eb2d519ea375d329cb58e7be8f8e220b481b7fa7c388376f2a0"}}, {0x0, "69d4842410af60d1f409148166391ed73322c84a6a7714105f1db38d3b4dbabfd438ef935effb9fe06abd619248aaa27b80e93e1edddb13df715f8b1a21821410f144552f73ac4fe158aee6afd5f28ec7e5bbb0ac6837c5370eaec54e153f3fd"}}, &(0x7f0000000240)=""/99, 0xda, 0x63}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 08:14:26 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(0x0, 0x0, &(0x7f0000000480)="9605550835d6548b5ad5805000b57a8ecc72933d061e1ca9a29afab626959bf2b0ab3cc1017b2e8728ec524154079361e8", 0x31, 0xfffffffffffffff8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000580)=0x2fff) uname(&(0x7f0000000000)=""/112) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x401, 0x418140) 08:14:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/88, 0x58}], 0x1) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x1, 0x2800) pwritev(r0, &(0x7f0000000080), 0x30b, 0x0) r1 = request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="d9474dcaee0235ba2bc6d1aeb353cb65f6200bf3f10452ce8743f138b520e00e17eda022467ae42d91703f4138b7660e103173fee5a288745fed908489eec9996944b7623884bf51ba2d378471484c5b9ef6b069bf5a9dde80469eb41e598bdda533b54e576818940ac7b93620f85f7b23931d871cab51c64979fbec0a1b7f46b1363b867dccaecc70ee1f8079f00276a428", 0x92, 0xfffffffffffffffe) keyctl$instantiate(0xc, r1, 0x0, 0x0, r2) 08:14:26 executing program 3: unshare(0x40600) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x78, 0x80000000, {"0ba4a1f8a85bfd0bf3919cd89020b3767851183aa196a10d82ed08951ddc4fa688f5344c16632a756f0d59d4143646397c6b6894e33244adae9d1998ebcef7600526e5eb3dba7eb2d519ea375d329cb58e7be8f8e220b481b7fa7c388376f2a0"}}, {0x0, "69d4842410af60d1f409148166391ed73322c84a6a7714105f1db38d3b4dbabfd438ef935effb9fe06abd619248aaa27b80e93e1edddb13df715f8b1a21821410f144552f73ac4fe158aee6afd5f28ec7e5bbb0ac6837c5370eaec54e153f3fd"}}, &(0x7f0000000240)=""/99, 0xda, 0x63}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 08:14:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x19) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x200) tkill(r1, 0x1000000000016) 08:14:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x10000001, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="2f6465762f6c6f6f70300077fe0139b2da0250479c4344970665f6bc1129d9000d7753f24ca2e5824f0000000000007e5ffcecf05c457f14a1b1b2829e25e24486e52bc4be34cddbf177f95bb0333ad95d39e6658c76b02c089ea6de49bcdcbba2385ee938f8adeda38e8a69459ecac7c841e10f835fd6ba4cff871e3a040e76d50f1fb2456ed0252e742ca5c716f96b29fff236b6e1da82a44d792ab09ed219e754a947a26d673352a58faa51b6dcfcc4e9d9bccaba7030c3a206018700000000000000000000000000000000"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x1100000, &(0x7f0000000180)='-\x00') ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = gettid() syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) tkill(r3, 0x7) 08:14:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f0000000000)="e0cd710c4fb1c341cfecf662f39e9f3d5213aa5bd4aa5afa2cc9c564ce27ebe53fad1fcfd749d1c1396b1736848eb6b39c95aa49fe3326970791"}, 0x10) ioctl$KVM_SET_IRQCHIP(r1, 0x8010aebc, 0x0) 08:14:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x8000, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="1e20c28bc2bfabed6823ea8f35cc140a5757d31e6c8c225487637fed9cdb9d00", @ANYRES16=r1, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') r4 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x20000) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000300)) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000400)=""/223) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x8) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r3, 0xf2b}, 0x14}}, 0x0) 08:14:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) 08:14:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000000)=[{0x7, 0x0, 0x4000000000401}, {0x1, 0x0, 0x0, 0x8}, {0x6, 0x10000}]}, 0x10) 08:14:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010002504000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000250000008000144aa06f99f76e2d17ad8507476654fdc8000004000200"], 0x3c}}, 0x0) [ 276.785996] binder: release 10829:10832 transaction 54 out, still active [ 276.793014] binder: unexpected work type, 4, not freed [ 276.798313] binder: undelivered TRANSACTION_COMPLETE [ 276.894495] binder: send failed reply for transaction 54, target dead [ 276.938221] netlink: 28 bytes leftover after parsing attributes in process `syz-executor0'. [ 276.974853] binder: 10879:10881 transaction failed 29189/-22, size 24-8 line 2834 08:14:27 executing program 2: r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @remote, 0x200}, 0x80, 0x0}, 0x20000800) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000180)=0x8, 0x4) sendmsg$xdp(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff017c1bc83696724a728589d7d170eb36ff42a194c766b14d2c690c0603410352904edd5dda64fee6b8ee8cdda9cbd0ab061034b7cbf10f92796bb5bc0421e08d7f9c4ba97cdba38919c1801e95e4fe82f2e182830d18294a28a10dd41998e45213a7734328ead777120098faedf8cc0bad60a26a16568198828da1d0ad9405d0e3fefb1bd6986523b2d05a11f86902a9a5c11643d36bc62cfc2166e15b22e4c871a802df6d514cc98dada0e30216a9d5e0a1a801e457dee3e30890ba3fea529c1c6c28a4aa21aa7e48a5cf67f5525a3915944d911b5993363872", 0xdb}, {&(0x7f00000002c0)="22596c7ad414e5a243ad48ff97b4d7e9029830d23a85a8ff41139efc7b4b55f49ab025d49b2c31eef24f302735425c", 0x2f}, {&(0x7f0000000300)="9ddc68d406a4aaef9e50c795b1ffe630", 0x10}, {&(0x7f0000000380)="c01618301b3096a599334a26db2c6f69ae72f503e80a6c1168946a9801b6a58edcfce12f37892c3e62ecb97fa95a0fcbaa7e6e1e6634adfd1488b7cfec41e92fbd2386278bf05948114dfbc64b9cf214f98f2fc11f3feeb428ad8f5328c67366c24abad21e3227c657823ef464aff5e9d90c4eeae3837792e239eeb0de57b4896ad6fe9e03ee283fb4bb6dc785dc1c57ec6d1edd5ddab356ac866f286fd8790cdfa39e1e9ba7b7fe55", 0xa9}], 0x4, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@ax25={{0x3, @default, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, 0x0, 0x1c2}, 0x20004040) 08:14:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) r2 = epoll_create1(0x80004) r3 = socket(0x1d, 0x0, 0x1116) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000300)={0x80000001, 0x1710, 0x2, 0x2, 0xfffffffffffffffd}) setsockopt$inet_udp_int(r3, 0x11, 0x6f, &(0x7f00000005c0)=0x7, 0xfffffffffffffd08) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3b}, {0xffff}, {0x0, 0x0, 0x10000000000}, 0xcb37, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0x2b}, 0x0, @in6=@dev, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff}}, 0xe8) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f00000006c0)=0x7) recvfrom$inet(r3, &(0x7f0000000500)=""/33, 0x21, 0x2100, &(0x7f0000000540)={0x2, 0x4e20, @remote}, 0x10) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f00000008c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000009400000052aade4b8ca31ded2d45769451bc83cea426718b6b13f45430f3d708000000462dbcfe48cff5ca3b3862ee9cbae82dbb8bcbd9575e0994c81854bf8297e204a1a28a584787e6ba453428968126bb467a88292d50ade53324478462c3ad81414d29b9421c33a988119a00578952e8cc9db2f9103762de4a92fea948f80b8296cd6a6c485477fa883c5ff214f40cc97076a7e0bce0"], &(0x7f0000000580)=0xb8) sendmmsg(r6, &(0x7f0000002000)=[{{&(0x7f0000000740)=@caif=@dbg={0x25, 0x0, 0xf2c}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000480)=0xdea) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f00000001c0)) fcntl$getown(r7, 0x9) r8 = mq_open(&(0x7f0000000a80)='e\x1f]lv\xa3F|[\xf9\xad(\x97\xdf\xa4\xe0f\x00F\xe7T\xd8hG\xd5\xed\x8a\x9e/W\xa3\xd6\x1dC\xb0\xe6%\xc9i\xd7e\xe0e~\xee`n\r54Z\xc1j\xd9\xef\x1d@\xe4\x82\xcd\xf5\x16}6Z\xec\xb1\x94\x87<\xa00\al\xce\xe6!\xbc\xbb\x11p\xbbueE\x80\x91\x8f\xb5\xe0\fT~b\x91\xfc\x8a\xab?\xa8\x9f?\xa7d\xebV\xe7T\xab0\xfa:\xa3\xe5> \x02,\x17\v\x1cU\x1c\xa8-8\x94jM1\xa5\xf4 \v\xe5\xea\x02\xae%`\xfc\xf8j\xcc\xe5r\xeb\xdb\x0f\xcb(\xe2\rwl\x15\xd2H}', 0x42, 0x3, &(0x7f0000000a40)={0x3f, 0x6, 0x4, 0x100000000, 0x0, 0x0, 0x2, 0xf7}) semctl$IPC_RMID(0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uinput\x00', 0x200000, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000600)={'icmp\x00'}, &(0x7f0000000640)=0x1e) mq_notify(r8, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000040)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bfc8e1793749ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x101000, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f00000007c0)=[{r7, 0x401}, {r2, 0x84}, {r8, 0x2080}, {r2, 0x8042}, {r7, 0x8}], 0x5, &(0x7f0000000840)={r9, r10+30000000}, &(0x7f0000000880), 0x8) mq_timedsend(r8, &(0x7f00000e6000), 0x0, 0xe7, &(0x7f0000000440)) ioctl$RTC_WIE_ON(r11, 0x700f) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f00000004c0)={0x0, 0x0, {0x16, 0x28, 0xf, 0x18, 0x8, 0x100, 0x3, 0xf4}}) [ 277.017142] binder: undelivered TRANSACTION_ERROR: 29189 08:14:27 executing program 3: sysfs$2(0x2, 0x0, &(0x7f0000000500)=""/247) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x7ffff) ioctl$RTC_AIE_ON(r0, 0x7001) 08:14:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) 08:14:27 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000140)=@in6={0xa, 0x4e20, 0x4, @empty, 0x100000000}, 0x80, &(0x7f0000004180)=[{&(0x7f0000000280)="f89c378b000051a2f62978ab2ff93cc3bf475ac95e715960890a6c0657f855947faad62a94e115e169", 0x13}]}, 0x8004) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000200)=""/78) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000300)) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)='.\x00', 0x2}], 0xe7}, 0x0) 08:14:27 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000680)=""/4096) add_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000000180)={'\xff\xff\xff'}, &(0x7f0000000340)="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", 0xfffffffffffffcc7, 0xfffffffffffffffb) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000002c0)=r0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x10000, 0xfffffffffffffffb, 0x2b, 'queue0\x00', 0x7f}) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001680)='/dev/null\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000280)=0x8000, 0x4) keyctl$read(0x3, r1, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80000, 0x0) fstatfs(r3, &(0x7f00000016c0)=""/146) write$P9_RREMOVE(r4, &(0x7f0000000140)={0x7, 0x7b, 0x1}, 0x7) fsync(r0) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000300)={0x9, 0x8, 0x7}) [ 277.289597] binder: 10904:10905 got transaction to context manager from process owning it [ 277.298152] binder: 10904:10905 transaction failed 29201/-22, size 0-0 line 2825 [ 277.344157] raw_sendmsg: syz-executor2 forgot to set AF_INET. Fix it! 08:14:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) [ 277.427054] binder: release 10904:10905 transaction 60 out, still active [ 277.434221] binder: unexpected work type, 4, not freed [ 277.439521] binder: undelivered TRANSACTION_COMPLETE 08:14:27 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000140)=@in6={0xa, 0x4e20, 0x4, @empty, 0x100000000}, 0x80, &(0x7f0000004180)=[{&(0x7f0000000280)="f89c378b000051a2f62978ab2ff93cc3bf475ac95e715960890a6c0657f855947faad62a94e115e169", 0x13}]}, 0x8004) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000200)=""/78) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000300)) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)='.\x00', 0x2}], 0xe7}, 0x0) 08:14:27 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x10000}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r2, 0x2}, 0x8) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40}, 0x10) bind$tipc(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x30, r4, 0x101, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) [ 277.496649] binder: send failed reply for transaction 60, target dead [ 277.592115] binder: 10915:10917 got transaction to context manager from process owning it [ 277.600496] binder: 10915:10917 transaction failed 29201/-22, size 0-0 line 2825 08:14:27 executing program 2: unshare(0x28020400) r0 = socket$pptp(0x18, 0x1, 0x2) connect$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000040)=""/4, 0x4) 08:14:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) [ 277.733337] binder: release 10915:10917 transaction 65 out, still active [ 277.740337] binder: unexpected work type, 4, not freed [ 277.745770] binder: undelivered TRANSACTION_COMPLETE 08:14:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x80) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100)={0xffffffff, 0x1, 0x401, 0x8}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0xf000}, 0x59, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x2, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x226}}, 0x0) [ 277.811969] binder: send failed reply for transaction 65, target dead 08:14:27 executing program 3: getpgrp(0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='mountstats\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r1, 0x0) add_key(&(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = socket$inet_dccp(0x2, 0x6, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') getsockopt$inet_int(r2, 0x10d, 0xe0, 0x0, &(0x7f0000000000)) [ 277.990982] binder: 10928:10937 got transaction to context manager from process owning it [ 277.999551] binder: 10928:10937 transaction failed 29201/-22, size 0-0 line 2825 08:14:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) r2 = epoll_create1(0x80004) r3 = socket(0x1d, 0x0, 0x1116) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000300)={0x80000001, 0x1710, 0x2, 0x2, 0xfffffffffffffffd}) setsockopt$inet_udp_int(r3, 0x11, 0x6f, &(0x7f00000005c0)=0x7, 0xfffffffffffffd08) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3b}, {0xffff}, {0x0, 0x0, 0x10000000000}, 0xcb37, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0x2b}, 0x0, @in6=@dev, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff}}, 0xe8) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f00000006c0)=0x7) recvfrom$inet(r3, &(0x7f0000000500)=""/33, 0x21, 0x2100, &(0x7f0000000540)={0x2, 0x4e20, @remote}, 0x10) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f00000008c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000009400000052aade4b8ca31ded2d45769451bc83cea426718b6b13f45430f3d708000000462dbcfe48cff5ca3b3862ee9cbae82dbb8bcbd9575e0994c81854bf8297e204a1a28a584787e6ba453428968126bb467a88292d50ade53324478462c3ad81414d29b9421c33a988119a00578952e8cc9db2f9103762de4a92fea948f80b8296cd6a6c485477fa883c5ff214f40cc97076a7e0bce0"], &(0x7f0000000580)=0xb8) sendmmsg(r6, &(0x7f0000002000)=[{{&(0x7f0000000740)=@caif=@dbg={0x25, 0x0, 0xf2c}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000480)=0xdea) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f00000001c0)) fcntl$getown(r7, 0x9) r8 = mq_open(&(0x7f0000000a80)='e\x1f]lv\xa3F|[\xf9\xad(\x97\xdf\xa4\xe0f\x00F\xe7T\xd8hG\xd5\xed\x8a\x9e/W\xa3\xd6\x1dC\xb0\xe6%\xc9i\xd7e\xe0e~\xee`n\r54Z\xc1j\xd9\xef\x1d@\xe4\x82\xcd\xf5\x16}6Z\xec\xb1\x94\x87<\xa00\al\xce\xe6!\xbc\xbb\x11p\xbbueE\x80\x91\x8f\xb5\xe0\fT~b\x91\xfc\x8a\xab?\xa8\x9f?\xa7d\xebV\xe7T\xab0\xfa:\xa3\xe5> \x02,\x17\v\x1cU\x1c\xa8-8\x94jM1\xa5\xf4 \v\xe5\xea\x02\xae%`\xfc\xf8j\xcc\xe5r\xeb\xdb\x0f\xcb(\xe2\rwl\x15\xd2H}', 0x42, 0x3, &(0x7f0000000a40)={0x3f, 0x6, 0x4, 0x100000000, 0x0, 0x0, 0x2, 0xf7}) semctl$IPC_RMID(0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uinput\x00', 0x200000, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000600)={'icmp\x00'}, &(0x7f0000000640)=0x1e) mq_notify(r8, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000040)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bfc8e1793749ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x101000, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f00000007c0)=[{r7, 0x401}, {r2, 0x84}, {r8, 0x2080}, {r2, 0x8042}, {r7, 0x8}], 0x5, &(0x7f0000000840)={r9, r10+30000000}, &(0x7f0000000880), 0x8) mq_timedsend(r8, &(0x7f00000e6000), 0x0, 0xe7, &(0x7f0000000440)) ioctl$RTC_WIE_ON(r11, 0x700f) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f00000004c0)={0x0, 0x0, {0x16, 0x28, 0xf, 0x18, 0x8, 0x100, 0x3, 0xf4}}) 08:14:28 executing program 4: r0 = socket$caif_seqpacket(0x25, 0x5, 0x4) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f00000000c0)="49f207cfdc77f6575e313f200ab51f3aee727cc7ddc78f9eb829c4ae189f83ba7ecfc28c25e76ec18cdb17dd3fe2cc4980420fa9952958cf0f8bde10e9cb55bfdcce5c5031a17b5521c4cf84eb1953d5f0389514860e121f6f4f15a9fb64c6620891864ad8d1613e07614ab6a30991f366778a65ec26cda907e2529916d64ae77b0595002c201167b0fd585652c85246d2d2983ec03a878624ee2ed7b1f4a9f81032d2e6870491d763b557c03b22dc6ae246e081f1119bf287c99abf9ead5fee7f910af417a2b0510acdabdc981b53abbba51d3c0e8230fbc0") r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x6, 0x2000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000200)={'mangle\x00', 0x2, [{}, {}]}, 0x48) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000001300)={{0x9, 0x7, 0xcee, 0x100, 0x80000000, 0x6}, 0x8}) fcntl$setlease(r1, 0x400, 0x1) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000001340)={0x5, 0x0, [{0xa26}, {0x2ac, 0x0, 0x401}, {0xc0000ad7, 0x0, 0xd4000000000}, {0x913, 0x0, 0x9af3}, {0xacb, 0x0, 0x5}]}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000013c0)={0x1, 0x4}, 0x8) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001400)='/dev/udmabuf\x00', 0x2) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000001440)={0x9, 0xfffffffffffffffb, 0x8, @remote, 'bond0\x00'}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000001480)=0x5) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) getsockname$inet(r1, &(0x7f00000014c0)={0x2, 0x0, @multicast1}, &(0x7f0000001500)=0x10) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000001540)={0x80000000, 0x8, 0xfffffffffffffffe, 0xd2, 0x19, 0x1, 0x982, 0xff, 0x2, 0x7, 0x9, 0x100000001}) r3 = getuid() r4 = getgid() fchownat(r1, &(0x7f0000001580)='./file0\x00', r3, r4, 0x1000) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xffffffffffff734a, 0x4) r5 = accept4$packet(r0, 0x0, &(0x7f00000015c0), 0x80000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000001600)={0x0, 0x9, 0x2, [0xffffffff, 0x9]}, &(0x7f0000001640)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000001680)={r6, 0xfffffffffffffffe}, 0x8) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000016c0)={r5}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000001700)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000001800), &(0x7f0000001840)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001880)={r6, @in={{0x2, 0x4e21, @broadcast}}, 0x6, 0x9}, &(0x7f0000001940)=0x90) setsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f0000001980)=0x8, 0x4) 08:14:28 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x200) ioctl$TIOCSTI(r1, 0x5412, 0x7ff) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000000000000100004002000000030000000000000001000000020e000000000000000000000000000000000000000000009d00000003000000040000000200000004000000ffff0000000000000000000000000000010000c0010001000100000007000000dc0800000004000000000100000000000000000000000000040000000900000002000000008000006951000006000000080000000000000000000000000000000b000000000000050000000800000002000000040000000000000000000000000000000000000000"]) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000001540)=0x7f05, 0x20, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x108003, &(0x7f00000001c0)=0xfffffffffffffffd, 0xfffffffffffffffe, 0x0) 08:14:28 executing program 2: r0 = socket$tipc(0x1e, 0x803, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x40) write$eventfd(r1, &(0x7f0000000080)=0x7, 0x8) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) 08:14:28 executing program 2: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) sendmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0xffffffffffffff04, 0x0, 0xffffffffffffff89}}, {{&(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @remote}, 0x3, 0x1, 0x2, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x288}}], 0x2, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) 08:14:28 executing program 3: mmap(&(0x7f0000b4b000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0) mremap(&(0x7f000083c000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000f1c000/0x3000)=nil) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x100, 0x880) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x20000000, 0x80000001, 0x10001}) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) 08:14:28 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) exit_group(0xffffffffffffffff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000400)='cpuset.effective_mems\x00', 0x0, 0x0) mount(&(0x7f00000002c0)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2010000, &(0x7f000000a000)) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000000c0)=""/89, 0x59) r2 = syz_open_dev$adsp(&(0x7f0000000380)='/dev/adsp#\x00', 0x1, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000180)={{0x5, 0x8}, 0x20}, 0x10) r3 = getpgrp(0x0) fcntl$lock(r1, 0x27, &(0x7f0000000340)={0x1, 0x3, 0x10001, 0x8, r3}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000280)={{0xffffffffffffff17, 0x100000001}, 'port1\x00', 0x8, 0x401, 0x7, 0x7, 0x4, 0x41, 0x7, 0x0, 0x1, 0xb9}) 08:14:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @empty, 0x3}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 08:14:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) [ 278.704466] binder: release 10928:10929 transaction 70 out, still active [ 278.711502] binder: unexpected work type, 4, not freed [ 278.716927] binder: undelivered TRANSACTION_COMPLETE [ 278.782295] binder: send failed reply for transaction 70, target dead 08:14:28 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {0x0, r1, 0x4}}, 0x18) [ 278.875835] binder: 10969:10970 got transaction to context manager from process owning it [ 278.884493] binder: 10969:10970 transaction failed 29201/-22, size 0-0 line 2825 [ 278.958987] IPVS: ftp: loaded support on port[0] = 21 08:14:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) 08:14:29 executing program 0: r0 = socket$inet(0x10, 0x7, 0x7) recvmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x7ff}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e22, 0x1, @loopback, 0xe59}}, 0x1, 0x8, 0xec, 0x8, 0x2a}, 0x98) [ 279.041012] binder: release 10969:10970 transaction 75 out, still active [ 279.047959] binder: unexpected work type, 4, not freed [ 279.053815] binder: undelivered TRANSACTION_COMPLETE [ 279.122223] binder: send failed reply for transaction 75, target dead 08:14:29 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) socketpair(0x9, 0x5, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x11000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008800}, 0x4080) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)='+', 0x1}], 0x1}, 0xc100) writev(r0, &(0x7f0000000200)=[{&(0x7f0000001440)="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", 0x551}], 0x1) [ 279.222365] binder: 10983:10985 got transaction to context manager from process owning it [ 279.230889] binder: 10983:10985 transaction failed 29201/-22, size 0-0 line 2825 [ 279.326058] chnl_net:caif_netlink_parms(): no params data found [ 279.388140] binder: release 10983:10985 transaction 80 out, still active [ 279.395140] binder: unexpected work type, 4, not freed [ 279.400434] binder: undelivered TRANSACTION_COMPLETE [ 279.461695] binder: send failed reply for transaction 80, target dead [ 279.513867] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.520347] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.528612] device bridge_slave_0 entered promiscuous mode [ 279.539345] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.546029] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.553953] device bridge_slave_1 entered promiscuous mode [ 279.646312] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 279.660185] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 279.691229] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 279.699949] team0: Port device team_slave_0 added [ 279.706757] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 279.715462] team0: Port device team_slave_1 added [ 279.721711] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 279.731761] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 279.825773] device hsr_slave_0 entered promiscuous mode [ 279.952381] device hsr_slave_1 entered promiscuous mode [ 280.032725] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 280.040132] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 280.069467] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.076046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.083218] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.089737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.177715] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 280.184406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.199259] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 280.214449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.224407] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.232155] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.290915] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 280.383529] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 280.389660] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.406784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 280.416614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.426547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.435002] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.441450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.456564] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 280.463862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.474404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.482638] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.489101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.503614] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 280.517696] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 280.532378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 280.540530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.549629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.559256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.568577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.580958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.593147] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 280.600156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.608977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.623131] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 280.637677] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 280.648535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.658500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.669956] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 280.679798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.688400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.697121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.705535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.730943] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 280.740591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.765591] 8021q: adding VLAN 0 to HW filter on device batadv0 08:14:31 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x0, 0x3) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000340)={0x19, 0x0, &(0x7f0000000300)="02326603e1dcfa9a2cac2293e766fe452d4824c6f4d0accadde8c02656e6f3f4d1", {0x48, 0x8, 0x7f7e575f, 0x4, 0x7, 0x4, 0xb, 0x4}}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000180)={0x2, 0x9, 0x6b, &(0x7f0000000100)="a5b55e228155de3d39ecbceaa6f7cd5fe49fe3d6c38b54afd889ae573b9ab47ceb65a308cbb02163cba1c3ac4cff895893d8c6f6e43510f49ebb5489ce0f7c5337c0c991aad8cdd006a1030f405ad600111a9f0a5b3a87a4d2ea4cf0ad9d353714f44996430aaa0de51bfe"}) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f00000001c0)={0x4, "b4cf5e06083eb40563f1a80cb8c2af11a238eaf2640372e00007e86d2a870e19", 0x4, 0xe00, 0x9, 0xfffffffffffffff8, 0x4, 0x2, 0x400}) sendto$unix(r0, &(0x7f0000000000), 0x30, 0x0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x5f) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000240)) 08:14:31 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f000047efe8)) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0xfffffffffffffff9, 0x1, 0x4, &(0x7f0000ffd000/0x1000)=nil, 0x1}) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'lapb0\x00', 0x0}) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x280840, 0x0) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000140)=0x7fffffff) 08:14:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000002000), 0x46d) lgetxattr(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)=@known='security.apparmor\x00', &(0x7f00000001c0)=""/75, 0x4b) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") write$FUSE_DIRENTPLUS(r0, &(0x7f0000000580)={0x10, 0x0, 0x4}, 0x10) 08:14:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) 08:14:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x400000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x100, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x6, r2, 0x1}) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@ipv4_getaddr={0x18, 0x16, 0x301}, 0xfd77}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f00000003c0)={0x3, 0x1000, "ec5a3101ac572b08885330337a1ba0588908bc6574f3d9c7ec0299949fe922a978b678b8534325ccd036bf2aabeab1bd0a4fb4f5d73f98d2930240cb5f6be601b97db94f0ada5f22a059e4b3cfc8ef1af5c8fdf4212096211ae1e84e15ba1f93507afd872796a368b5c715ab005577d4159ea372118b614eb9a6fdab6e310d2d6f1d43da8a5751ed45f18a065a95ad7e1519b0d9e543be9aea17b610aee6ea73dc9a4a3002686d7974ef03de5839693b8a48806924c57e3ac43874171433352db562e134ed251fb111fae5306a2e891fb304fc35356999b044571f66973a16c55467b5eefe689e6bf422d82775c8534cd9ca9bb06b6e8aa15f04cdcac4a62d7927c2b028b29024d72a3bbda10d76a5e1797a43a414cd09fd179163d87926662a425c4c29f0a3f70cd49bd3baac74962c9e9ccc277c014bd355c3c76bd8a41da86e5d4fece8aa03a7f89463fc74caa1a3916a43cac03add306140c44974877ee79068147d5f0f2a1aaeb9866be1aec352ab618814709dcb40c686a546bcdfdb969e04c780b6856c2508c5d28b2b502c09319dd99eaee6c89e3ab79ecc6b4d61f571013318cdb025d3b3be2b83664f2b07e5a91e58c7d78846c7096761320250293a9ad5cdeb6b20f5421b69ff415eb4b45299a7582d8b4eb687dd85b1301322d6a28aa27ebf4d9d6aea11ca50a82e22b0d7797098f5b7dd271501799a47812270abef4e93f2881b4dcaf89597edcba5445a464cb8aa235ed77eba1758d6a066bec15a6031ad5bb00f7b5bc5849d57cedc94b2b002adf66313f70f10300ea54529a60f42a64eb457d842af803a4e1706ada62d6301356bf69c7966a9af5529548dfdc36bef22eb42658492743f6514df07ef4cce897038d7171c484d265404573c092419dc5795699b7686b051306e9ce6e653fa9fbf4e58ff28499032f71251e686ebede3790d0868f71f6b6e955a6857bd6ff6543963d140b49c0d403d85e27b82e23045ee6a3f3e0dddb468b7a9d666c8dd0ce7594dbada9c40c6d8314e8b24d1957432af7e7993a711e3e046dd9138f0536388c27de78781a021793692a2fe4b22aa72006330521719dfd1d4b0bdadb82b58735870c2df863e10aacb23f85aa63b7b3addc9d470d164eb828760c019c2be90959b470bf5669ac25dbfb31d23434aa1ae6b4c625736d03785f962f21ef341bfae14d855b6dc107945e17c912d70565615915a4220d83608b725fb0bce0841687fbd2ce95af7e76bed66cc3e21643c76bf2d6845abb3ef03f99aeb30f6d8d54b96dea369bf5f3ef189f54e170a443640e249c2f550948b4604fc98b5e350cab5ad1e563e6aa9bc69dff61342f8c0d2ed5564647d80f93b07efee01d88edc0bf7a1e3baab06c4b32371479340756b905dc36cc572c29f6fccf2285d57bcc1aa342218781db44b46de4f2ea8d2033a236b3038e7509b46ad2488c8629a87a86a7a714988aaf75b7f7a11d325daf7478ef944de796605faef3e52087fd74af44e94a8c62b7f5c4d57151b95a93763a3653c4fe238b1f50631eb6a8ce164f59cb3e2966548747758af6b7e071bd29d0d42d4b1372f2520af72a8671086c0eb74bd0f0038ef31c1dbef8fde588cb9cc29687315db6e3b65b5bd6c084435a9d3d4143e23b5907c3dbbc320119fdf14d6051b7b994a357bac6ee07840a1fcfcbe38a737754d3f5f6eb73e3b9c2e5126b3a7bbbad89961bcc2fd1dfccef3d51b32448f5b5e8e3b7b99c946615cf3463ee1b2f6e74e374c55228c750454dfe37927c9652f1c11c4c59a0c30a1c3047a44dea7ae8ead3021e115d3b7b473aa96ff90733078a5940a27053854ed620eabdd1d6ad9b069dc88c6b7d50fe731bbaa8ca2d45475529198540346c1c76fa094a3a8e0688043273fbf276d31375cf827e227b607edfecdcac0339628ab22fd2ee0af174726e3fa969a8b913881402fc4c98bc965b52d22fa0fab5fc01c738a09e16727eff7ecc90c600325c671163f19a57c8ab9fd0e5ce663a200781b2bbb6258ec1d75c3a97017e8b20df249197391fe0817c4c99071a0eb58bce8255abc322a6c158ebcc9d0906037a5c0f560973a1f2ef40f3b770483bbb4aa680a629b32f77f6ebb4e89c6d4e72e89cc40fb47233c16b6fe8cc5f1a10cb5617dfffaa3f7eebd5d094878df07155a2652349e5bba5e94a85d5cac036f8c8ad13d96aa86ec8ec0626086dc09118b20404043dc63e63aba28617a9323888f8b6bf9812ec4fb1ff7323217e118035bf37212b3f0cdf7506553148b99bb44f30b6d4b806505cb2b1c4a223826e61e6607e0bab1748498b6891a92b86f6ca48ef60a0c49546509bc1119c3aa93a78900099b9e1225f26154d6b5bb97bd184969ad5a3be107c0767c49e1c709e0470edc69d4ece2a70d2057f5a0000c29f1e48f416278715035452f0b4bec7601bf97c19bca644f36e07d1e9e29248ff5b802513b27359e4dec50064996672517e53fe9717216704f974405cc94acdf041a4211a2f2a9dde0db5cfa41313298d7fa6d4d7a95dabea0f79fb52765957f96b83f76cd9861ee63f0826d05506236f60ec03289a8cd0c8a80a11ed34fbebe141885ab5467a29c3722a1c8ecb110b0b1e079aa1b01704d61123e23e95d624f29a6de9e682314d6b76b11d6f814e1c1bbbb9c59c7c222bf2afc055b9e4dc2c7cd310d239e5bce1cbf2062b52062cafb95f8335c6306f23d04fef1ac91668e163b2cfb8c46ca630db2b9960a353e36ffbffdd871d6de9297da2fa29d3251cfc5d6aa084172927f0ee0d5eed06e3cc7e407bf8c6f2179e3b8a015fed1f971001a98fbce43215be7d8d93fc2e5468e2010590218057601994bde6692cc9102947682fe48e2eae98d422cb1f031234158564f1b02f51e953bc35072da651206fbc20a77e6c50a63ba347bd3210bcab6215e4f2619771b8d8dc2859d0fb062158cda3a79ca74dcf1b230a7bd78218c8f9d4885e8ffb43420a89ee45b5fb87feb3dd5a152ec2e0b99016bf15801fc81f2a5db2e30bc38c4ba58b33171c9a67e56708ec52a47272b0459cd45168bc5beffd39fd1debc2e64de9faa80a65a1dde82dc5e1e1d87bec85c872102001ee9dfc37e702f3f87eeff597d53dbaa0afb5e49c9cfbb04f0e3de225ef89ca55abfe8548af6acf4110f222d43f493788c77ea00f53650ab4d827a2dc3371eaad110eabc1c94c122fbd8debf6d0dca3b93989b0126de29a26bc660b1e3a10c54e3dcae580c74bd90dab2b6d6cc344f4c09e5d2244e814833ab445797068bf896a1e6b0fe7cfc82a13981906fb2f015f9f2c034ef4517175177549e502cdbafd6a45947c93aa3bf7a623be7f36202c8ebc244b6396ea162c7faa2a6defd88794155a1e9b18314d00fa067c3e557a162900d286116713b946da68ad125a9bca3b3dfcef6e18c669d865dd0cff911e44de7355e147cbee8b8578a1095067bd6cd226e47ceee328d3e97c8a3c038aae833412307464212a7170dddf012142f35beec800310400b858a575eb8a601e289f4a200f90cab1c5727b918af6bf0490314f62dacd9b5fc8a2f8308b0886d6bc8361057627679d357c1bcae42a341cd20c66146c8d7d101e5dc011342a4f349bdd0aff2162e7d1ee21fc6d24d4536e5ad0a3d1d772299085540d4a3ccbd3a50a7a1f7679a57b11815f751e55add77478c30d7de384e55009e193057ee56389c0a4241a3365bdb40bda1085d4c2574358fb4b81ce6860e8fbdbd64bc1837e2a24efa53a667a7e4748e8cb7d4aaca7e1ad375849bd8df8375c161ade5c2185ee72f5ab36442e482bbc7e067fb39c28229b8a2c609c2eeb1c443d1b70bbe303ea45f312ddaed320cc3d3e02bc6d33cc1a39b40343da5faeb1d41d8d446a1aa6bc761a78893fe5980cfd1b0d27f89bc00ce28a07f67bef9e04aed36e3e77d8e0a9bcaa96f130c2eb6131aa8b742d00c108e6ec855f93726f4e9029749abae9b2195a8cad15da412a1a1bce9cde5f26403ebe6622b6eda6ab973cad730d5f57a892b782596b5077817d058018d571efa80726e51720752577345da37f329c3194a8412c7c46f7a3a7534294184f6b8a03ad9a95f251e518e684ffe4d7cbb1323f2a885dcbd9eef0ad58fd7f069a814b03d6e9ae59c39576624e0f630c53864197d6f2fcc6744d0c7259a8d13d9028413443a9605fe0cab0c1e267b4143a3e22d2585f2a4640bbffb5c53270bcb59b29d2ec71ea186cec49fb62194e2809389b99463052b4e5d9ebb6c27b1af7e5e17c754276a15875789dfe5e76c570da24f83cee51c0fd5de7b3bb7c80245c0f47d830ae068ec17b6e1fa614352b2705b0308b6f8c2afec5d4079399c01107439bec2cb5654954ad46de41e262c1447858cf3478ddf8863247b8587109b84f0e040e5c48c3f6f53438ebc74a2ffdc093de08b6549a97fa9d57ecb2bcb0696e635cd05e76b4b730d8d474b3b5a102b55c69babe9f7aa58523b4dcfad4b6fc420c9014a089fb3c3f935c088122acfac9435664f00e40f924d3791087f39d848152015dc600a9f06aba09325c7c4b3bd6ac859bcb04f7cd8a83468864cdbc7849e90c95663b439aac14b91cd8b19108cc8e491953f7dc27248ee76a81345ad4bb72a5e08d367d989c7263d21312d895f94417676af83811e79c93b0c9bacc7d4524765d1ac8687e21897cc2d00fb9aba507f25bc28691196c705e9eebe34247d784397c4ac5238f7ec92572b967a74d55616e429892cfedc28492eeeb3f0d7fe93d1428dc16f2d5eef211d5cd075477e6c6d6e4a818e35ae825f7244d08f4ab71eda4af019d312fe78e0fb73b52d624f4194d1ee9a8f351cd1b2a0e8edf844dd10482b9f96cf5ad5c72ca6064378229f9915448a7581c54a7901add7586b2c5d04b230e7c26f36829a9f8f054e5971cc72d939606072d1637625da095af10537b42368939659afa1f7f9c3d0d64a294440b2b3bbffe990f648b055665c630a7935dc94ce03da625eac9f559a890a7573841c43db77033440ce97ee62bbbe4162611854bbb04689802a25d55a3216ee0a7735748a569e2becedd793288027076514031c5383470b98648ba4a00f5217a41002fd2b28b17d86548b4dc3534829f3346dde3851f4418533b22913d52048e4a1e2541072de7e033d6b5dd525d3ba0773e9f1782be97b4d656459d3882242ba1222e301e8dc82fe5cb959340fb73dd789ff579d45ef257ff13e96be0e190c8c629d3c722c7658bdf943b22d17defc137fdafb0817b5f0198d07bd227a5847369be43e95306beedf57186bbad155f057023fde20cbace6dff0bd7116636a1c5bfd50ce518a41b101dd45c9711b460e4a0d41fcbb5bb2ad892b093867912c109eaf9b2c95b3126caf953ea7d4d362528b9399f8a4e61609dfe162bdb5266e7cac2abad5040b2c1f31b593ac2236fa9b8d9b408bd73f9049ec377fa51e4290b3cf49a5985bd045b95386da34b7e5bc9ecfcf6f0ad193013b44ad91ac7ff1dca7bd34abe48dbcd313bb4f6ebec4c09df49b2c07b40196fac0979b09985ed0bf8d0b8698a519e23d8043524e521708ada0bbfeaae78f5321d36f90b3e5f0af838c94ed6d29e1c944cb4dc81f2c4aafe618a05da52afde15ad547df179f83a35e5d6880ee257c974c637278004c8eb2c4106610e5d55868426a67bf538b21e833a432ecd32e79b001c9b79290a55e0ea8482da429ef6421e516792e834b0ce93ee5a86051cb723d21fd268ad9e191d3bd891451df83ee04e994074f2543f6"}) [ 281.139947] capability: warning: `syz-executor0' uses 32-bit capabilities (legacy support in use) [ 281.162630] binder: 11002:11004 got transaction to context manager from process owning it [ 281.171096] binder: 11002:11004 transaction failed 29201/-22, size 0-0 line 2825 08:14:31 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000003c0)={{0xb, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa, 'syz1\x00', &(0x7f0000000080)}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x40000, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x20010, r0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000100)={{0x3, 0x5, 0xfffffffffffffffa, 0x1f, 'syz1\x00', 0x73c1}, 0x3, 0x30, 0x8, r2, 0x5, 0x4, 'syz1\x00', &(0x7f0000000080)=['vmnet0userbdev@)\\nodevsystem\x00', '/dev/snd/controlC#\x00', 'vboxnet1vboxnet1])\x00', 'md5sumeth0vmnet1$\x00', '\x00'], 0x56, [], [0x3, 0x6, 0x6, 0x9]}) 08:14:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x8003, 0x20011, r0, 0x0) clone(0x0, &(0x7f0000000100), &(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000340)) 08:14:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x30, r0, 0x400) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f00000000c0)=@ethtool_eeprom={0x5}}) close(r2) close(r1) 08:14:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) [ 281.354957] binder: release 11002:11004 transaction 85 out, still active [ 281.362595] binder: unexpected work type, 4, not freed [ 281.367891] binder: undelivered TRANSACTION_COMPLETE [ 281.471948] binder: send failed reply for transaction 85, target dead 08:14:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@local, 0x4000000000056, r3}) listen(r2, 0x101) splice(r2, 0x0, r2, 0x0, 0x10001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, &(0x7f0000000000)) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x24) pipe(&(0x7f0000000140)) 08:14:31 executing program 4: unshare(0x20400) r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x400000) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f00000001c0)={"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"}) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000600)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x117, 0x6}}, 0x20) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000005c0)=0x101, 0x4) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r3}}, 0xc) [ 281.535717] binder: 11030:11031 got transaction to context manager from process owning it [ 281.544219] binder: 11030:11031 transaction failed 29201/-22, size 0-0 line 2825 08:14:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0}) [ 281.679328] binder: 11039 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 281.679361] binder: 11039:11043 ioctl c018620c 20000000 returned -22 08:14:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="6bae12ae00b880008ec8f30f2353660f6fea670f0fcfb6ba4200ec64f40f06ba420066b8df1301dc66efbad10466b8ca00000066ef", 0x35}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000007000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000240)={0x1, 0x10005}, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000180)=""/130) 08:14:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) [ 281.781923] binder: 11039 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 281.781945] binder: 11039:11048 ioctl c018620c 20000000 returned -22 [ 281.793365] binder: release 11030:11031 transaction 90 out, still active [ 281.803392] binder: unexpected work type, 4, not freed [ 281.809208] binder: undelivered TRANSACTION_COMPLETE 08:14:31 executing program 2: mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x3e, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@ng={0x4, 0x2, "67cf00b50fbd1372e7738e74"}, 0xe, 0x2) setsockopt$RDS_RECVERR(r0, 0x114, 0x8, &(0x7f0000000080), 0x4) 08:14:32 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2f) sendto$inet(r0, &(0x7f0000000000)='c', 0x1, 0x8000, &(0x7f00005b5ff0), 0x10) r1 = dup3(r0, r0, 0x80000) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000140)="60364f7a0ca21f3f63fd776b464ae556c01b4b5a17a420a62df6090970382832e6ea37827c9f85fb526daf9d063c150a1187c2c40e9890d0100c7b6e947bc5a18f0cd1a8b55e7e5616e90bef8dcd1fa7282da50f343cfe64cf94ff662b215b56c83cb0ddba4e33f78b25b0c3931bb23a5727c52a51000e6bee9cd008d8ac24d1c9d07131d0abc3ec7fa2a787527cad8f59a1d60b6dd9f83db65dfc212e1aa50786912c730e5a742fa7087062b37ec12ffb0dbc81161fb5f4b8fce8b0bf954c3dcaac7c17a3d65ca617fe0bcc1e3d9953febb5bd814844866c0eeea5b") socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000100)="d13005be0869f0", 0x7, 0x0, &(0x7f0000000040), 0x10) 08:14:32 executing program 4: r0 = socket$inet6(0xa, 0x100800000000002, 0x100000000) getsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x2b9) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x2e1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') sendfile(r0, r1, 0x0, 0x88001) [ 281.974193] binder: send failed reply for transaction 90, target dead [ 282.048244] binder: 11054:11055 got transaction to context manager from process owning it [ 282.056818] binder: 11054:11055 transaction failed 29201/-22, size 0-0 line 2825 08:14:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x100000001, 0x2000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x0, 0x20}, &(0x7f0000000400)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000500)={r2, 0x88, &(0x7f0000000440)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0x8, @loopback, 0x6}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @rand_addr=0x935}, @in6={0xa, 0x4e20, 0x3a2a, @mcast2, 0x4}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000540)=0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000190001010000000000006a2051b1bdfbd60f41d0a827fade7b00000a000000000000000000000008"], 0xfcd1}}, 0x0) prctl$PR_GET_DUMPABLE(0x3) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000000)=0x1) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f00000000c0)={@empty, @dev, 0x0}, &(0x7f0000000180)=0xc) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e23, 0x1e8, 0x4e20, 0x5, 0x2, 0x1f, 0x10a0, 0x62, r4, r5}, {0x0, 0x3, 0x81, 0x6, 0x9, 0x2, 0xc9, 0x2}, {0x7ff, 0x3, 0x2, 0x6}, 0x9, 0x6e6bb2, 0x2, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x4d2}, 0xa, @in=@remote, 0x0, 0x2, 0x3, 0x3, 0x3ff, 0x9, 0xfffffffffffffffe}}, 0xe8) 08:14:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) 08:14:32 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000000, 0x13, r0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x114, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000756000/0x4000)=nil, &(0x7f00001cc000/0x3000)=nil, 0x4000, 0x1}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x7, 0x4) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$VT_ACTIVATE(r3, 0x5606, 0x7) madvise(&(0x7f0000836000/0x400000)=nil, 0x400000, 0x9) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000200)={0x1, 0x0, {0x8, 0x3, 0x4001, 0x9, 0x6, 0xf, 0x1, 0x2}}) 08:14:32 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x101, 0x8001, 0x20, 0x5ba43796}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x100000001) lseek(r0, 0x0, 0x3) [ 282.285300] binder: release 11054:11055 transaction 95 out, still active [ 282.292336] binder: unexpected work type, 4, not freed [ 282.297709] binder: undelivered TRANSACTION_COMPLETE 08:14:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newae={0x48, 0x1e, 0x301, 0x0, 0x0, {{@in6=@ipv4={[], [], @local}}, @in6=@remote}, [@replay_thresh={0x8}]}, 0x48}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="34a5b0cf29b3bdb007a47b455a542e9c7c6acfef30132f9054106c0d1bad32ad0ff3114fec42ca90d09d838a1a835967a926ce6316ec25428eb44c6b42e321fdb4674a9fa83b48c7002fa9307d15a83fcc6e2eeea9d14d745015c337c283406f4e92c04c0dec7389dafdc5b7a47b64c4eede342546e413a8171c25016c63c1f5236bd3cdb2736d38d43704024ec332f8ea918cd032996866f0d31ca17e58d32149480ab87fed62a77fbd97bf2246577ff1", 0xb1) [ 282.424650] binder: send failed reply for transaction 95, target dead [ 282.467988] binder: 11077:11079 got transaction to context manager from process owning it [ 282.476602] binder: 11077:11079 transaction failed 29201/-22, size 0-0 line 2825 08:14:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0x4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000380)={0x200}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {0x0}]}) r2 = getpgid(0x0) syz_open_procfs(r2, &(0x7f0000000180)='net/unix\x00') ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={r1, 0x2}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x1, 0x40, 0xffffffff, 0x6, 0x7d4270dd}) 08:14:32 executing program 4: r0 = syz_open_dev$dspn(0x0, 0xb9, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x5, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd]}}}) openat$cgroup_ro(r0, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f00000000c0)={0x7, 0x1ff}) tkill(r2, 0x1104400000016) 08:14:32 executing program 2: recvmmsg(0xffffffffffffff9c, &(0x7f0000007640)=[{{&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000240)=""/243, 0xf3}], 0x3, &(0x7f0000000380)=""/78, 0x4e}, 0x80000000}, {{&(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/38, 0x26}], 0x1}, 0x7}, {{&(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000580)=""/158, 0x9e}, {&(0x7f0000000640)=""/86, 0x56}, {&(0x7f00000006c0)=""/106, 0x6a}, {&(0x7f0000000740)=""/207, 0xcf}, {&(0x7f0000000840)=""/147, 0x93}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/228, 0xe4}, {&(0x7f0000001a00)=""/75, 0x4b}, {&(0x7f0000001a80)=""/175, 0xaf}, {&(0x7f0000001b40)=""/172, 0xac}], 0xa, &(0x7f0000001cc0)=""/140, 0x8c}, 0x401}, {{&(0x7f0000001d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001e00)=""/91, 0x5b}, {&(0x7f0000001e80)=""/58, 0x3a}], 0x2, &(0x7f0000001f00)=""/76, 0x4c}, 0x8}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001f80)=""/105, 0x69}], 0x1, &(0x7f0000002040)=""/94, 0x5e}, 0x7fffffff}, {{&(0x7f00000020c0)=@can, 0x80, &(0x7f0000003400)=[{&(0x7f0000002140)=""/58, 0x3a}, {&(0x7f0000002180)=""/43, 0x2b}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/86, 0x56}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000003240)=""/76, 0x4c}, {&(0x7f00000032c0)}, {&(0x7f0000003300)=""/203, 0xcb}], 0x8, &(0x7f0000003480)=""/47, 0x2f}, 0x1}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000034c0)=""/189, 0xbd}, {&(0x7f0000003580)=""/77, 0x4d}, {&(0x7f0000003600)=""/61, 0x3d}, {&(0x7f0000003640)=""/36, 0x24}, {&(0x7f0000003680)=""/195, 0xc3}, {&(0x7f0000003780)=""/120, 0x78}, {&(0x7f0000004a00)=""/4096, 0x1000}, {&(0x7f0000003800)=""/133, 0x85}], 0x8, &(0x7f0000003940)=""/43, 0x2b}, 0x3}, {{&(0x7f0000005a00)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000005a80)=""/249, 0xf9}, {&(0x7f0000005b80)=""/194, 0xc2}, {&(0x7f0000005c80)=""/142, 0x8e}, {&(0x7f0000003980)=""/37, 0x25}, {&(0x7f0000005d40)=""/192, 0xc0}, {&(0x7f0000005e00)=""/218, 0xda}], 0x6, &(0x7f0000005f80)=""/54, 0x36}, 0xb0}, {{&(0x7f0000005fc0)=@nl=@proc, 0x80, &(0x7f0000006240)=[{&(0x7f0000006040)=""/42, 0x2a}, {&(0x7f0000006080)=""/120, 0x78}, {&(0x7f0000006100)=""/76, 0x4c}, {&(0x7f0000006180)=""/133, 0x85}], 0x4, &(0x7f0000006280)=""/101, 0x65}, 0x9}, {{0x0, 0x0, &(0x7f0000007540)=[{&(0x7f0000006300)=""/64, 0x40}, {&(0x7f0000006340)=""/100, 0x64}, {&(0x7f00000063c0)=""/206, 0xce}, {&(0x7f00000064c0)=""/91, 0x5b}, {&(0x7f0000006540)=""/4096, 0x1000}], 0x5, &(0x7f00000075c0)=""/66, 0x42}, 0x1}], 0xa, 0x40012023, &(0x7f00000078c0)={0x0, 0x989680}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000007940)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000007a00)={&(0x7f0000007900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000079c0)={&(0x7f0000007980)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x20004005) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000039c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x60, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x24, 0x4, {{0x20, 0x1, @in6={0x2, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3f00]}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) 08:14:32 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xfb, "7ba43a5e4b604fd4ed551e5b7ea06657c4ae0c1123aa56fce80d8eddf214566d8537eb08fe1b4f17737a214ecdf2895707bcbae65d8aac9c8570d62f1d03199eb1883938ccbf98b7314c5e2a01b1751ed98f0c64b8297182e3e3d32524f7c3e6109bb85e8e494d2207003c6bc672797ffc207c7a2121a8b845000758aac0dc095d827acc659f101770386568a1eaee9ff4b61aceace15fa7abca6b166eeb74962b03b86b3f5b5456cac632b31b92ad60a84a3751ae4713feaff20a56fad7e3825058c5bb1bd0e8ea1ee78d353bc211436a627c65c2cf614485b2b07b86db9341a0ad06bb2e4258adcfef9b687e08894b69b2112aa8ca5a972c3a65"}, &(0x7f0000000280)=0x103) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e22, @broadcast}}, [0x5, 0x4, 0x5, 0x4, 0x9, 0xfffffffffffffffd, 0x3, 0x1, 0x401, 0x400, 0xc376, 0x3, 0x400, 0x1, 0x7]}, &(0x7f00000003c0)=0x100) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f000002aff0)=[{&(0x7f00000000c0)="5500000020007fafb72d13b2a4a2809302000000030343026c26236925000400fd7f0003bd2dca8a9848a3c728f1c46b7b31afdc1338d544000000006826f75ae583de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) 08:14:32 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast2, @ipv4={[], [], @empty}, @ipv4={[], [], @remote}, 0x0, 0x0, 0x800000000000, 0x100, 0x803, 0x20, r1}) 08:14:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) [ 282.765137] binder: release 11077:11079 transaction 100 out, still active [ 282.772174] binder: unexpected work type, 4, not freed [ 282.777472] binder: undelivered TRANSACTION_COMPLETE [ 282.784376] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 282.793133] Invalid UDP bearer configuration [ 282.793164] Enabling of bearer rejected, failed to enable media [ 282.832160] netlink: 'syz-executor0': attribute type 4 has an invalid length. [ 282.839491] netlink: 17 bytes leftover after parsing attributes in process `syz-executor0'. [ 282.901777] binder: send failed reply for transaction 100, target dead [ 282.960180] netlink: 'syz-executor0': attribute type 4 has an invalid length. [ 282.967643] netlink: 17 bytes leftover after parsing attributes in process `syz-executor0'. 08:14:33 executing program 2: r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000140)={0xffffffffffffff91}) symlink(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='./bus\x00') mknod(&(0x7f0000000040)='./bus\x00', 0x2000000000001000, 0x0) r1 = geteuid() setuid(r1) r2 = epoll_create(0x2000000000004002) r3 = open(&(0x7f0000000080)='./bus\x00', 0x10b886, 0x0) r4 = dup2(r2, r3) openat(r4, &(0x7f0000000000)='./bus\x00', 0x2, 0x2) 08:14:33 executing program 3: unshare(0x600) setpriority(0x0, 0x0, 0x0) getpid() fcntl$getown(0xffffffffffffffff, 0x9) r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x2801ffff, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000480)={0x4, 0x20, 0x1, 0x1a, &(0x7f00000002c0)=""/26, 0xb8, &(0x7f0000000300)=""/184, 0xb0, &(0x7f00000003c0)=""/176}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0xd0, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x7ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xb599}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x24}, 0x1}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e21, 0x9, @empty, 0x10001}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0x5, @ipv4={[], [], @broadcast}, 0xcdd}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e24, 0x0, @local, 0xef}}, 0x5, 0x1, 0x4, 0x3f}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) 08:14:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10401, 0x80) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x40140, 0x43) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0xffffffffbfffbfb6, 0x0) [ 283.167527] binder: 11106:11117 got transaction to context manager from process owning it [ 283.176122] binder: 11106:11117 transaction failed 29201/-22, size 0-0 line 2825 08:14:33 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb5, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f00000000c0)=0x4) fstat(r0, &(0x7f00000003c0)) r1 = semget$private(0x0, 0x1, 0x84) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000140)=""/100) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) 08:14:33 executing program 0: unshare(0x8000400) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='\x7fuma\x9cU\x87\xd7,\xf3\x92Mm\xcbD\x1c\x81@\x13ps\x00\x00\x00\x00') ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 08:14:33 executing program 3: socketpair$unix(0x1, 0x802, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x7fff, 0xa, 0x8001, 0x40a, 0x0, 0x5, 0x24e, 0x2, 0x0, 0x1, 0x8, 0x5, 0x3ff, 0x20, 0x0, 0x1000, 0x8, 0x6, 0x209, 0x3, 0xfa1e, 0x6, 0x4, 0x6, 0x401, 0x6, 0x6, 0x5, 0x5, 0x2, 0x200, 0x9, 0x9, 0x7, 0x8, 0x7ee0, 0x0, 0x4, 0x2, @perf_config_ext={0x81, 0x9}, 0x20008, 0x4, 0x8, 0x7, 0xfffffffffffffff7, 0xaa, 0xfffffffffffffff9}, r2, 0xd, 0xffffffffffffffff, 0x3) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 08:14:33 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x4) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="6d50dd013b"], &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='s\x14,v\x8e\x91\xe6\x8f\xacs\xcf\x8f\xea\xf1;\xa3\x00', 0x0, &(0x7f0000000180)='P\xf0selinuxcgroup\x00') r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x240000) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x6, 0x0, 0x3, 0x2, 0xfffffffffffff17a, 0x6, 0x11}) 08:14:34 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/16) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000580)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1\xbdr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x0e\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x6, 0xfffffffffffffffe, "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", 0x7d, 0xfe, 0x2, 0xfffffffffffff955, 0x9, 0x0, 0x80000001}, r2}}, 0x120) write$UHID_CREATE2(r1, &(0x7f0000000480)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0x0, 0x1, 0x2, 0x80000000, 0xf4e, "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"}, 0x1118) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 284.384985] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 284.531913] binder: BINDER_SET_CONTEXT_MGR already set [ 284.537376] binder: 11156:11157 ioctl 40046207 0 returned -16 08:14:34 executing program 3: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x7) 08:14:34 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@v2={0x5, 0x1, 0xd, 0x5, 0x4e, "cc3a7fe5f40820b18dc6955b575c78920dc4a274f4f7b6f2dbb4d379c2ac52515b5ef14144291917fca40e82199984898f70d17af005bfa8cce874dd3e95b843f17ea03b846417a663213746080c"}, 0x58, 0x0) getdents(r2, &(0x7f0000000040)=""/148, 0x94) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x2b9) getsockopt$sock_cred(r0, 0x1, 0x14, &(0x7f0000caaffb)={0x0}, &(0x7f0000000440)=0xfe8f) syz_open_procfs(r3, &(0x7f0000000000)='limits\x00') [ 284.669575] binder: 11150:11162 got transaction to context manager from process owning it [ 284.678173] binder: 11150:11162 transaction failed 29201/-22, size 0-0 line 2825 08:14:34 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) unshare(0x100) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x6, 0xfffffffffffffffe, "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", 0x7d, 0xfe, 0x2, 0xfffffffffffff955, 0x9, 0x0, 0x80000001}, r2}}, 0x120) write$UHID_CREATE2(r1, &(0x7f0000000480)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0x0, 0x1, 0x2, 0x80000000, 0xf4e, "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"}, 0x1118) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 08:14:34 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/4096) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000001040)) write$P9_RCLUNK(r0, &(0x7f0000001080)={0x7, 0x79, 0x1}, 0x7) clock_gettime(0x0, &(0x7f0000001100)={0x0, 0x0}) ppoll(&(0x7f00000010c0)=[{r0, 0x400}, {r0}, {r0, 0x4010}, {r0, 0x8}, {r0, 0x2}, {r0, 0x1001}], 0x6, &(0x7f0000001140)={r1, r2+30000000}, &(0x7f0000001180)={0x266}, 0x8) pselect6(0x40, &(0x7f00000011c0)={0x8, 0x0, 0x2234, 0x1, 0x9, 0xfff, 0x2, 0xa7ef}, &(0x7f0000001200)={0x406, 0x7, 0x7ff, 0x7, 0x3, 0xfb, 0x10000, 0x200}, &(0x7f0000001240)={0x0, 0x0, 0x7f, 0x2, 0x0, 0x6, 0x401, 0x654}, &(0x7f0000001280), &(0x7f0000001300)={&(0x7f00000012c0), 0x8}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001340)={0x9, {0xffff, 0x7f, 0x9, 0x80000000, 0x80000001, 0x2}}) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f00000013c0)={0x0, 0x3, 0xffff, [], &(0x7f0000001380)=0x8000000000000}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001400)={0x0, 0xf1, "142cf31439d803da48be181ed26abe2fae0d1d0e7fc9559addfa89f68123c3d16adadb8b60fe1db0ccd6e4388d5941ad99a130b11593b227d5089661f3b56de98b109459dd8bd7d51eac6754c3d863f39743ddecd53bd10429c01ce8297c9b47409f898e0b558c3552bdf3454d092ff47dd16d6cad85903fbcd0d9f2312b3168764afc5d7a00e62a5c9f2a68c2781065dfcaa287fd87c95a827b1cdfd7d26e3ccce6b5db83d7111992161a6b97115f70be58b6fa82dac9d412542cda856e767e9d50a1b8a99bda3dc6949b0893f4c644c5e2f698c207be2feb6a7f1d97f4cb76109d0a86d6677b32ffdd283a8bb8363066"}, &(0x7f0000001500)=0xf9) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001540)={r3, 0x4}, &(0x7f0000001580)=0x8) write$P9_RSYMLINK(r0, &(0x7f00000015c0)={0x14, 0x11, 0x1, {0x2, 0x0, 0x2}}, 0x14) sendmsg(r0, &(0x7f0000004e40)={&(0x7f0000001600)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x1, 0x4, {0xa, 0x4e23, 0x8, @loopback, 0x81}}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001680)="984d2a9f4e61e3f7d71cc5d940b50f74c9a5253ac26180710a2aaa4eda82cd54a36eccd7f85b4ee645fe8f951780ab8b98921adc43f16340928483c3f597480842ced27f863428eefb04068757a86108827f20f041de4ee64f4cd6cf9d8213c120183afda71abad4b2b6d67f6422e7524ac385eee10db44bfc1ad4050584e676a2e36c7b16b87b8615428a07186060c7bad5d6c91bf62d6550f7c47d49d80f09bdcb45acf103574c54a6dd566bfea2f9de9febce717af5eb7f2a43c8c60938a7d85964dd04f6499c0c33e9d5611cc5ac3a5a2c6541c58ce22fab22148d421f25fe0aa9fb5b4f1427", 0xe8}, {&(0x7f0000001780)="85dd6dbf0fea67a25f3cc958c904454d0d543ed85b1d845f88835dbc594c807d59edd700", 0x24}, {&(0x7f00000017c0)="6bfd090c919105f52b45a2954fec6e529ca65e8632eb4ce5b60a4cf8329a2a87a75a303909e88875afa529c9a881942ef30e92b1dbef5127de604fcd6d66b4aa229657e927c032d8f0dcc229ac8ac99f684a6ddc258e86d9dbe1252ab7667e145d8806d60e37a61f228305f462a42223b5b61a13752b95f8784f06ecae4316cd4b2ef3271d5a50b8ca888fe2bae343d6b5ae9c8932f94b06d247555af1a120d737dcbe517316a50ba0603035d2b54d0b79", 0xb1}, {&(0x7f0000001880)="f8923c20e3ed63a147fe3b7461f7d2ca3a0e7f03ccacdc1f4cb117b978c4590d3b9c803932f87b09741e02264535b391807ae57e63d796390c52fe362ac900a846e913496977c724d15db9e658c7516d8871412e653533e3e73fa2496d90e0e23bada78564f460be1b6cb8319f0e4fa4c6358d7d1d2670e942887d1f2b61b0edaee27bfe4973f6ec914d82555b50d9d7d16758703cb1873fb605b4df4971f73be1feddf7b13091d19e7630eed92aacee4e2fb93027b564f27e5ad44bec55e455bd533536b53904b080fa363d00f9a87d5308b018bc6ee64ff4f111e84cd2621c15195e57402231f0", 0xe8}, {&(0x7f0000001980)="64c7f68cea6f824621d570ca691b12b95bd5dff7782525cc7b8b048218881c78d3f95b7ff133f5ad1126e8714a18e9e1a7ef77b04d514f50090be40c3de60687ee8394ba87728c9344b77bd08b1332ea48d236390aded421c3d4ced63832ebf1ea05", 0x62}], 0x5, &(0x7f0000001a80)=[{0xd8, 0x10e, 0xd3, "5cbd9a0a95a42a04c652f990219acfaeaf566cc46a58c99af2367fe31977622dfa5d64cbe2c4b202fb9330f82def207f682b09b7b328c80b9db2cf47aed1e1dedeae95301de8d6ca298888785eb720dc537d88cce7f4083c53c6e1be0cc8cc9538b0dfd99a146f3b74ae978da9e27ba61d8fed3d45c8e4dbde03ad3215292a4b93aa836ca52f8e790c3c53b5a89b347ea4bc89dc47f14f33024bde7bb3dccbae34d3b179f65b2102fa9b81cf9a2717e3dbb605afcc45eeff90f9e4bcab402e8a136ff51c"}, {0x40, 0x10b, 0x8001, "d6e29fcea7a1081a929bc6c7202add3c9c1f1ded80be92668c0cd6c22d330a21259188ac2084e0c2230504a8ee"}, {0x108, 0x10e, 0xc4, "4576d1c7fe071d18159627f7a9899870d7e0e69eaba8db139308bd920844a48ac116fbaa9ee63fbc97e08cdddeb060278a9834a082f6641ae97f1071f2cbfc913fd2c1832d01952aa8304c3606714c4d0bfe0d6fc71ba824b0bd35b935736d58fc9d12e14d773e68dbe5dc761467173296ac5ef01f0bc90edd560b3dcfb8441158d1ca95fab46a847b256a7bebc5166b3f014bf2596987e5a576df9e88b93fa280c4d4ea54aca2b6f55b2221e1322683d766ed19dca3e6146cc7307358e502fa2704417adff3e841283290c3fdcce2aa94477cc9119f17020038feb4e706f8483cc38bb105838ea433290a8d70c7df68d75675f2d5e6"}, {0xb8, 0x102, 0xe74, "1e8cc46753efc7db34b83135e20cdfb6c0e9b0e0ae0c90c6e37847f993a455e31ecda532965ea74e8f2f1e9c895b0592a10edc892e12f3d1eb6ab2007435f660d1668b74e169b62d75a43705220fc1c0d38d2de41f598765cb56cbab9c50145ef79e9162ea56d40729f9248e3d084b331df5fac4d96b623849a759d91a1a2d2adc561d0f2b4976095fc3f0f7814faf0aa11244cc96496229ba9b99d39be095c889c451108964"}, {0x1010, 0x13f, 0x8, "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"}, {0x38, 0x116, 0x0, "d19639bbeb16d89bb4f767fa1d3ca5ab70b9a194bd47e01cf25ddbb1808f1dc622ae0ad7f042dd2b"}, {0x1010, 0x10a, 0x187a, "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"}, {0x1010, 0x3a, 0x1, "428bb43d4d8e1488799ae6495bf2c72f70f71fc0df25f5514f32844480aa6c6392c6b5436b1897630ed05d93230aeeea90ce7019393a9a3e23f982d14b3e1266266b11d45754bdd772ee1179def6e0cebf9d3966fd0a54ed1bba8b064a1488c26b3754fb085aefb766a2a9d75168207d9727f1896fd6ef473c68759466a03e6be6c1f72bff67f34365764cdc44f062e1eba581c888463b26d6e6361c4dfbadb89ef094471d1dfa12ae342e80820b55136998c7aa5418244c95cbe634dc1e2b9c2a0bd4469c85cfce351c4b703204751bc7c92baf2a7b1ba1053db47f1d71106e6606591d0d6ad2f3a2a5df1e06ac3a6fd8d4546616f4516547cd63cd94dae511e575cdceef16e6a23785c8193171789316189ee3107dfae1333e4f739720304c873409ad828d9a75445ca91ea2e44d2a767450e92f6da60dee64c7b75674c3a2d9e5c966493891a5e9463b6da94fcf3bf115a35d09eb59dde209ba665663a326abae733f73305dbb75f5dccb93904fc61891e4ccfb40aea6cbd627d9ec073ad9d9057f56cb238cae5049347c743744de50d4d6bb6e776a763689f0028ee2e99b10dc085b15c376e672248b509eaf0b6d3dc1c26b71f3f7b098890993929020f8d47b639b32e9088535fb0499278d4f97829e1b71876fbc30bd3bdc31fbb7d90559f575f9c9a06be27936ed496a4f6cd068e83d2cfeed879a21ca05e9764fc8fd2f677e558f2700b33c2e57d66ea6af472c7d28bf93c0534c6b585137f1076a634c34258755e46913407b006ce916e097361555d0ede85939c4969e68a4b1f83f881e915c983282c45203c96e74104aa7c0c2bdf533c9625c93400d2adb803211c6a552f0eb1d73d278c95215591e93131eca6f53646882acedf9395d76fff3e18cced450e493a4bd7629694be4daf1caa74a1fb8906661afa8d21a80bb869e6a4962a82e0f2b4fdd644802cff96fb0a938494306666ab091a0fe2ad664267276a492bdcac560ab5d5242605afbb30db81fc604d272213044eeaa906a3a66f836587ac91ad97bb221a70a1720225d99c4aadabdfe3f05c641c9b0523a4418080ac1fc2f5a49f9ff35cf504b87f4cb623295f611d26eb473967f226333f59a43d95201c4c444638e8969b6c9833c6622312c77e3500270856e51f4fb1ddef984469d9033633abfdcfbdfa4b5a414de21d113dc84a851ea98c992b5d05d4859222f1c8d90ac0b1a6b9ae25b593f9b5314482a6589636ee6ffa711c73cea35896a1a482778f1e0ffdec6089718dc42c42a6a56dcb703bd8ba092213ee0c0bfa77dcab070b068f1220b4bf6e440c4cf8ac18f80ecbfb119680932e61eaf59339d955c58ac89b637c42625867dcabe66b3ed8a07895fb80a730777347a1b4d61368ce7be9e1cd0f5fed0818e232705a27e45490a2f35389244f2e9aa970da5030cf8a9a1b336d3c1b6eb39655500f1ea508545cb8368a14e41a998bed8e4de1814c336adf99244bb763aa89284bc8ac04431c6786d734b3401934cc445e8c43b166c7b27a270adf16d53ffa53e3e666d4acaec2edabc3150c159fec6e48d2bf4dddb5038913214cf529ed4f7e98c3f04f7a04fac444d246c5f66d6f233934a4605b6607d50ecde47d8fa3f22113426001520a1309df765da3a38a35ca7ffbc8d3a03b288e83950363f4ff396eaac54d0094e3e8d6d65e431537f9f8b040e1b45019c8835d3ddabcf8d3a82fb39330877c6b1b327c7ffee1fb971131fc0da40be5a957a59dcd9434baf317ea09ec5ff2752003331dd57ad3657ae7854a9a3e28c40e98eabb35d4564e2215631ac660614b3b631f3e4ba9d3e72478b37902b65185dc62ad7884e2d02f99efcda1f32e09126cde2fcb2cc0465ecbb285322eef6f1b97a894042874cc7e7223a56dc660b21d5da1656e4a0b0b3b7af1cb0f879837e75558ce95e35062b50f7284e126c81f6571071464a63a0c843e81ef65a1d81d947d1f25071099287fbe8cf8dbbb7d0b16937e3d861a0ee4fcd474b331d2f1220845bbe3263013225b6361747124c149aae0c168f0d908a3ace09e1a86747f5aef3396bcb1e1a71fe9ded62fbe443a96e5a4ac7edbe364c91ce354b4a38236891e2e0f9db9fb9e0edfd7f7aaa379c1d04e8c4eb5711e097cfec4152bd805e85a7a41db1a4e14549d042a2a45d946d736d4ed0697b6b6577ae6e150775e00699a4aa100edd7c9af1616497ce08024f921905e8ceb3364159a10970d376f66c93161d0d8b811982c103366d494c7a289075360285b9767b1a91b9d0cdd2638169171a7e7bca8db862669ef11571b0e964d303ba201051ff8347d4e9b60133f08496b98dbe6bd98e1f1703ec7ba2b2e5dec50a0d4960c4bc3e931a47ad15757ff3e61de55e85490e915ca2ccec8a72839c5deb718999ef9552f47eb5fcfcd43d40f276ff44a8c2215fdcd9a200cb35a64bec4e42e6b0194287d06473e0958e2e8aaf25bbc717da9d7d248b0e575d7e5f237db2841096d305941a26a0dc21aaf32957089b4cd3906116d71ee0d83c69d52f8ff5e3aa1e09c5779c4fe22da86bafb3750ad6063c59163505e8f01040a9e87d60555d37d6dd6abaabd278b68ee3430decae8041aa8c7a8d08d28810713bf594e617513e68d9c6b919b1afc1f3ef5cb4d15ec5ad3816bbdffcb20f027a396a961dce4b7160842af7d4ae2a29a69c1601c1992d92a95e7f017de6d1c4d5331381aa649b8a7037ddf40bd22b3f9d90a9d79740944e8be8118325b5559e897c80a1c8c0343c4326fac1490cbe7de404f50212b2775ae7cef5c0a3eca7030f6856349702e7468f0c62eaa3c4f7995be8b68093be419357baabc982b834009c4c5edff3e7089328b7c8ec4a6cd741758d917fa8d970b67398062a4a503ee8ee6dbe8dd8641f2a5a631a9ce5e000883f845e8322c861aec8387bc3148ab1dd11ec151d0dbfd1c4c572a5a8033a343b4964117a60404e39d790be58b82b4c23ed2a0047f5b19ad7528a24497a49254591d0c19d3903c8f520ae2296fcbb560c556063ca02a1c741189e8e694e11ba85e280d20e402ddd29eefb768c5c6b7c332bf52e2f07a968e1c8ebb7200bedb947ba42c6299fb8ef1da3f3f8e12a781c77b9c6211e0e99c54dc40602a23cf68328010be698bb463cfec9fc8861603a21302dce68c805ccd387ace7523d958ca2a836ffededed25c0531f1e2b7aed8f40994c41c67b8aa107a25714f83ee4ca664a761b3f44fdd8458edc3749258f175961b3f92aee6a19620aa508eafaa9ff4d3abd2cadb004d7a9c7ec7bc3f67588e0ccbde5d04bd265af11c80bbf4b28886b476c4076c442c887e89e62efca34119192b9a8878f2ce451e50cdd24d87e59076dcde154585091fe6d67b4a1fb685a2261ae67ff50921caee6ffe625bee6dfe9ff770414d8d4d8a7039a2fd393523f22fa2ecbfe33639e65b30759b5225fd4220b176e021bde88eb126d4378bff393fe2b83b0d6ad40f1f758f669ac1292d93a0f67167af27dd447fd6480e6fe544cf8fd616ba1036606b89d83f4f45c0f8a63c7cc44d02a62335e7ce62be8cf24665077dc4a81985289af318afd12374c19cede29f5185ebc1fef938a68971ef43a68efc6f6bd0805311589b4d7f992314d943d65a9fb3ca1e1744ad89bc98de651035ca3146045b3ec1d38d44f6566bb6c213cb47466640914f806cb73d542045d890793ca2069ab4b5cb09f674f3a370b53071f4b2830689d9bc57d12076f29bc41f6db8b6f2cbd6fbb58d1825086db69e361e60dea2218f3cb771f7aaa3a4998bcfbeb8d222298a59c6c7640d7d6cd877a6c5e3f455e74b2d73d44c5b16d4dacf7103517b6f8cc785f3d9d928cf20918d890fb444d10b008e617061800a9cde9e68f70cae17c934415609cf2ea34100ed1db7e347ae1314330a798fa8150c88cbd8fbdfb73d7d4ca1527689e4cf4bdddad0bbaa373215141a7532483de3db0699088a44b1426f7816db49a8c0ad414776269faad8e784e4230df853d3859cc537ec20cce720108746921312bd85e1a88fa3a5b91014e6a743f3c57ffc953f6fb066e7d7bf0f00511b6501ac3b1b90c6aa8ff23d30f1e42f1d939e8e88cde52906d0700493a924acba740ce680db16f76f7fe22893c73046636a8d39478c60fbc35a147b758bc87c7059382dec6d3c2b4df283b615165eb208d3bcf660b0be85f193314e6cf7243c597e41a689e2fc6551ac5f28a700689cbe6c7f13e8df54d2b7a87f7fa94e02c5eefe6fe2cd7e688b6e85e9485a3b5543b48b0906f863d733209ffa77c67de8097f738004e1ce024eb97d5fdc016515fbfdd836ae05d3f87bb0830bb9150b412489a9dbdd0957117ea78f89f1e3d91fa3f7fd134818b5f210d75c4d59bb0f57f07dfb4d47a9a48e4301b4a07dcf9d43567f1504c1afafcc46a00d684dd2953d81aa5c9396a37166cc4d9306395d9ac10f4a440b8b2e1a6f4755a6ff5e0db154f577a8e10e17bbe2ce7ced2b0fb85db74be1580db97f6f30273d39a1283cef05f219f0bf739fb343330f8ea15ad1b62d080ced0065721ca304bbc73f35ccbfdb147d02da21ea142163b66397f3c16380fde8b15f622d8c7ec084bf55061b72d754523b84942c5685e308d6195e21dadd4f8d60e60a867207e45b2d4ebb7a73c5bf1a8bef0674653c5ed9f683fecdadb9057d43bfdb2bb698c1cfccdedb4b8e3cabffd7a15f7d36758604c047509a101bcf960a1b6bd7a635afd7ae9c3809ad1d510a01bc41fb69c6df3e9f3f8507de239afae78ae55ca63d4a2bfd8467ab4cd9f4a8e59ee980eb7da7275ba79f8fe7a957f6dc94c18a7e77ffd4d7d7b77bcd12d7da93fcdc387f61d57de541c84582a58803700cc493b4812aaaadaa122fc8e4fdee047abb4f6107cfcad2f2b14d138649e5ef60ac18cf130399f7565059e207387d0e993b8112d35d94adf46037a0dee8a80b8162ffdf3d284436683b9cf6003b71e5a7d03d3473ee3066d7e8dd4bb94aceef74dc208d42494d1d418ee9ea475d98c58ed267b2ad55d6ded353c1d925ce92d7725fc722eb2de21b34e0f5e1da1283befa49be282bea6e1ee585dba42aeb086eeb9a2ed2093d3e843fe09e9ce60acdf5ece8da4021a435b0e6e6736ef0c1ec0308a4a5d2acf76f3906f5f2efd7930e7afc6ca36ef4e6c77bd985dcc148d7dcdf93a4cd89673e3a3314bc9ac10c32f1d2b9ae289bfd1f8f5ec9cb808b710ac4fddc05922a804931bb4f0cd79d73138340b7a669120782df5b1b69af732f6402e2c61a6b1bb7b7dd2320c5568a9530968976042d7f9b60a69020b3eb2ae1518c7899c755e05a28f4840bf2219ca656919919a92ee29dba056f3620994431f1937faf274f7d5ba117e19f14c7d33dc33b7e63148f63b051d7ee68134506f2543a993b00ef1ac7591d1614a013aced92d17d096c63e896a1918a0f065486efb2d3d32117c62ce8a099c324f0f8b3088d268d0317e0a4b5020347e261bb6bdc636ba400735ae2247cc1846c616a492e1b4ddb097d09e22186edf327d493bbe554e6ce5618133c30c4b3a6471514097d38af7e2f10db331f7bfe7183aedcb690923d0d3e81445e4bc4be2b96d3689dec7b1c713fd76f5909cee8613046eafb287e0b0e36145ca66c238053b2c6a68967c849a1dc56f5d8c2df0374c2a0ad0fd29c0d2b5b0082956f60487e47ac70fdf2bbe57954d246c7c5c81e464c4184c714b9d6ae6dad5da00d4857bf8165f98e421ff60e3afe88474d16840aa2dc285e1d23a2ac2"}, {0x68, 0x117, 0x1, "c3f7f52d3d4bc13c2685c0701765c40f28595ae62e0093b9110dad809b5abfc64c251a87bb36e4c4a1b291771ac023ca20dd76cab59239522fdf22f54d6cc5c02b96538ea867825f8380b5ba4d83e3a8017b0e2c"}], 0x33a8}, 0x40000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000004e80)='/dev/vcs\x00', 0x101000, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000004f00)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r4, &(0x7f0000004fc0)={&(0x7f0000004ec0), 0xc, &(0x7f0000004f80)={&(0x7f0000004f40)={0x14, r5, 0xe00, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000005000)) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xa1a) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000005040), 0x4) write$P9_RMKDIR(r4, &(0x7f0000005080)={0x14, 0x49, 0x2, {0x8, 0x4, 0x5}}, 0x14) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000050c0), &(0x7f0000005100)=0x4) r6 = syz_open_dev$audion(&(0x7f0000005140)='/dev/audio#\x00', 0x1, 0x400) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000005180)={0xfffffffffbd766c7, 0xb, 0x1, "aac7dfb6ce01303a7e8e759173eb80c0eebd95b264a1e2a5ee03e5655d157a2f", 0x33375f4f}) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000005400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000053c0)={0xffffffffffffffff}, 0x111, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000005440)={0x13, 0x10, 0xfa00, {&(0x7f00000051c0), r7}}, 0x18) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000005480)={0x9, 0xf, 0x4, 0x8, {0x77359400}, {0x2, 0x1, 0x8, 0x6, 0x5, 0x1, "7923fc7c"}, 0x2, 0x1, @userptr=0x4, 0x4}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005540)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000005640)={&(0x7f0000005500)={0x10, 0x0, 0x0, 0x3a444200}, 0xc, &(0x7f0000005600)={&(0x7f0000005580)={0x74, r8, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f0000005680)={0x10001, 0x31364d59, 0x6, 0x1000, 0x1, @discrete={0x80, 0x800}}) 08:14:35 executing program 3: 08:14:35 executing program 2: 08:14:35 executing program 2: 08:14:35 executing program 3: [ 285.311900] binder: send failed reply for transaction 108 to 11156:11161 08:14:35 executing program 4: 08:14:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) 08:14:35 executing program 2: [ 285.422001] binder: undelivered TRANSACTION_ERROR: 29189 08:14:35 executing program 3: 08:14:35 executing program 2: [ 285.605182] binder: 11187:11192 got transaction to context manager from process owning it [ 285.613754] binder: 11187:11192 transaction failed 29201/-22, size 0-0 line 2825 [ 285.802895] IPVS: ftp: loaded support on port[0] = 21 [ 285.976869] chnl_net:caif_netlink_parms(): no params data found [ 286.038591] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.045137] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.053361] device bridge_slave_0 entered promiscuous mode [ 286.062316] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.068810] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.077110] device bridge_slave_1 entered promiscuous mode 08:14:36 executing program 0: 08:14:36 executing program 4: [ 286.108077] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 286.118825] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 286.160445] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 286.169161] team0: Port device team_slave_0 added [ 286.179379] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 286.187965] team0: Port device team_slave_1 added [ 286.194392] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 286.204367] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 286.318042] device hsr_slave_0 entered promiscuous mode [ 286.352564] device hsr_slave_1 entered promiscuous mode [ 286.382893] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 286.390171] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 286.408243] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.414676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.421451] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.427995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.475654] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 286.482449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.492184] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 286.503322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.512260] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.519285] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.527340] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 286.539938] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 286.546168] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.556335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.564377] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.570787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.583820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.591904] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.598337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.621064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.629989] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.643548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.663559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.671767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.683581] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 286.689602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.707112] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 286.720083] 8021q: adding VLAN 0 to HW filter on device batadv0 08:14:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x18<]\xb7H8V\xd1SP\xfa`\xd5)\x8d\xcbG\x0fH\\\x8d\x8awr\xc9\x91VB\x11\xd8\x9e~3\xf1\x87\xa3\xc6$V.\x0f\xbe\xcccbY\x10\x8f\x05\xfaH$_\xa6u\xc6\"\x16k\x16\xc3\x94]\xb3\xd63V\x1d\x19\x02H\xbc\xf2ic\x9d\xdd\bq\xf9\xc0\xf7\x9f\x8d\xf6\xfe\x1d\x9e+Kf\x06s\x19rJG\xa1d\xc6\xe1\x03\xf4m \xe6Re\x1c-\xf4\xdd\x98\xa4p2*u\xd1mW\xaa\xb8\xaa\x17\x1b\xea\xa9\nzF\xead\xdfov\xaa\x9fQ\xb4\xd3U\xd7\xd4\x88[\x1f-g\xbc\xf9\xb9\xd2\xf6\x12\x04\xdc3i\x8e~!\x99\xe4\xfb\xd2\xfb\xa7lgj\x87\xed\xcb\xdf\x91\xaf\x16xG3;\xb6lXN~\x83\xcb]\x1cIL\x91pH\r\x997\xde^\x9e\a\xc0L\x01\x93}c\xe84\xa4j\x00\x00\x00\xd8\xd0\x88R\x17\xcb+]\x1fe\x12\x8a2\xb1469\xa2\x19\x02\xd2\xc6\xe9\xe5\x006\\@\x96\x10C\xe5\xe697\xe4\x12\xb0\x9bi\x8aB\n\x7f\x7f\xb0\x9dL\x87\x8f') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setflags(r3, 0x2, 0x1) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001dc0)=0x8) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x20000000, 0x0, 0x0) 08:14:36 executing program 3: 08:14:36 executing program 2: 08:14:36 executing program 4: 08:14:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x18<]\xb7H8V\xd1SP\xfa`\xd5)\x8d\xcbG\x0fH\\\x8d\x8awr\xc9\x91VB\x11\xd8\x9e~3\xf1\x87\xa3\xc6$V.\x0f\xbe\xcccbY\x10\x8f\x05\xfaH$_\xa6u\xc6\"\x16k\x16\xc3\x94]\xb3\xd63V\x1d\x19\x02H\xbc\xf2ic\x9d\xdd\bq\xf9\xc0\xf7\x9f\x8d\xf6\xfe\x1d\x9e+Kf\x06s\x19rJG\xa1d\xc6\xe1\x03\xf4m \xe6Re\x1c-\xf4\xdd\x98\xa4p2*u\xd1mW\xaa\xb8\xaa\x17\x1b\xea\xa9\nzF\xead\xdfov\xaa\x9fQ\xb4\xd3U\xd7\xd4\x88[\x1f-g\xbc\xf9\xb9\xd2\xf6\x12\x04\xdc3i\x8e~!\x99\xe4\xfb\xd2\xfb\xa7lgj\x87\xed\xcb\xdf\x91\xaf\x16xG3;\xb6lXN~\x83\xcb]\x1cIL\x91pH\r\x997\xde^\x9e\a\xc0L\x01\x93}c\xe84\xa4j\x00\x00\x00\xd8\xd0\x88R\x17\xcb+]\x1fe\x12\x8a2\xb1469\xa2\x19\x02\xd2\xc6\xe9\xe5\x006\\@\x96\x10C\xe5\xe697\xe4\x12\xb0\x9bi\x8aB\n\x7f\x7f\xb0\x9dL\x87\x8f') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, 0x0, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) pwritev(r1, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001dc0)=0x8) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 08:14:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) 08:14:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 08:14:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0x1ff) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) readv(0xffffffffffffffff, 0x0, 0x0) 08:14:37 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) [ 287.016746] binder: 11216:11223 got transaction to context manager from process owning it [ 287.025198] binder: 11216:11223 transaction failed 29201/-22, size 0-0 line 2825 08:14:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x18<]\xb7H8V\xd1SP\xfa`\xd5)\x8d\xcbG\x0fH\\\x8d\x8awr\xc9\x91VB\x11\xd8\x9e~3\xf1\x87\xa3\xc6$V.\x0f\xbe\xcccbY\x10\x8f\x05\xfaH$_\xa6u\xc6\"\x16k\x16\xc3\x94]\xb3\xd63V\x1d\x19\x02H\xbc\xf2ic\x9d\xdd\bq\xf9\xc0\xf7\x9f\x8d\xf6\xfe\x1d\x9e+Kf\x06s\x19rJG\xa1d\xc6\xe1\x03\xf4m \xe6Re\x1c-\xf4\xdd\x98\xa4p2*u\xd1mW\xaa\xb8\xaa\x17\x1b\xea\xa9\nzF\xead\xdfov\xaa\x9fQ\xb4\xd3U\xd7\xd4\x88[\x1f-g\xbc\xf9\xb9\xd2\xf6\x12\x04\xdc3i\x8e~!\x99\xe4\xfb\xd2\xfb\xa7lgj\x87\xed\xcb\xdf\x91\xaf\x16xG3;\xb6lXN~\x83\xcb]\x1cIL\x91pH\r\x997\xde^\x9e\a\xc0L\x01\x93}c\xe84\xa4j\x00\x00\x00\xd8\xd0\x88R\x17\xcb+]\x1fe\x12\x8a2\xb1469\xa2\x19\x02\xd2\xc6\xe9\xe5\x006\\@\x96\x10C\xe5\xe697\xe4\x12\xb0\x9bi\x8aB\n\x7f\x7f\xb0\x9dL\x87\x8f') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, 0x0, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) pwritev(r1, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001dc0)=0x8) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 08:14:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x18<]\xb7H8V\xd1SP\xfa`\xd5)\x8d\xcbG\x0fH\\\x8d\x8awr\xc9\x91VB\x11\xd8\x9e~3\xf1\x87\xa3\xc6$V.\x0f\xbe\xcccbY\x10\x8f\x05\xfaH$_\xa6u\xc6\"\x16k\x16\xc3\x94]\xb3\xd63V\x1d\x19\x02H\xbc\xf2ic\x9d\xdd\bq\xf9\xc0\xf7\x9f\x8d\xf6\xfe\x1d\x9e+Kf\x06s\x19rJG\xa1d\xc6\xe1\x03\xf4m \xe6Re\x1c-\xf4\xdd\x98\xa4p2*u\xd1mW\xaa\xb8\xaa\x17\x1b\xea\xa9\nzF\xead\xdfov\xaa\x9fQ\xb4\xd3U\xd7\xd4\x88[\x1f-g\xbc\xf9\xb9\xd2\xf6\x12\x04\xdc3i\x8e~!\x99\xe4\xfb\xd2\xfb\xa7lgj\x87\xed\xcb\xdf\x91\xaf\x16xG3;\xb6lXN~\x83\xcb]\x1cIL\x91pH\r\x997\xde^\x9e\a\xc0L\x01\x93}c\xe84\xa4j\x00\x00\x00\xd8\xd0\x88R\x17\xcb+]\x1fe\x12\x8a2\xb1469\xa2\x19\x02\xd2\xc6\xe9\xe5\x006\\@\x96\x10C\xe5\xe697\xe4\x12\xb0\x9bi\x8aB\n\x7f\x7f\xb0\x9dL\x87\x8f') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setflags(r3, 0x2, 0x1) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001dc0)=0x8) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x20000000, 0x0, 0x0) 08:14:37 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="f7000000100000009500000100000000"], 0x0, 0x1, 0x99, &(0x7f0000000440)=""/153}, 0x48) 08:14:37 executing program 4: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 08:14:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x16) 08:14:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x18<]\xb7H8V\xd1SP\xfa`\xd5)\x8d\xcbG\x0fH\\\x8d\x8awr\xc9\x91VB\x11\xd8\x9e~3\xf1\x87\xa3\xc6$V.\x0f\xbe\xcccbY\x10\x8f\x05\xfaH$_\xa6u\xc6\"\x16k\x16\xc3\x94]\xb3\xd63V\x1d\x19\x02H\xbc\xf2ic\x9d\xdd\bq\xf9\xc0\xf7\x9f\x8d\xf6\xfe\x1d\x9e+Kf\x06s\x19rJG\xa1d\xc6\xe1\x03\xf4m \xe6Re\x1c-\xf4\xdd\x98\xa4p2*u\xd1mW\xaa\xb8\xaa\x17\x1b\xea\xa9\nzF\xead\xdfov\xaa\x9fQ\xb4\xd3U\xd7\xd4\x88[\x1f-g\xbc\xf9\xb9\xd2\xf6\x12\x04\xdc3i\x8e~!\x99\xe4\xfb\xd2\xfb\xa7lgj\x87\xed\xcb\xdf\x91\xaf\x16xG3;\xb6lXN~\x83\xcb]\x1cIL\x91pH\r\x997\xde^\x9e\a\xc0L\x01\x93}c\xe84\xa4j\x00\x00\x00\xd8\xd0\x88R\x17\xcb+]\x1fe\x12\x8a2\xb1469\xa2\x19\x02\xd2\xc6\xe9\xe5\x006\\@\x96\x10C\xe5\xe697\xe4\x12\xb0\x9bi\x8aB\n\x7f\x7f\xb0\x9dL\x87\x8f') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, 0x0, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) pwritev(r1, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001dc0)=0x8) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 08:14:37 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff}}) 08:14:37 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) 08:14:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) 08:14:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x18<]\xb7H8V\xd1SP\xfa`\xd5)\x8d\xcbG\x0fH\\\x8d\x8awr\xc9\x91VB\x11\xd8\x9e~3\xf1\x87\xa3\xc6$V.\x0f\xbe\xcccbY\x10\x8f\x05\xfaH$_\xa6u\xc6\"\x16k\x16\xc3\x94]\xb3\xd63V\x1d\x19\x02H\xbc\xf2ic\x9d\xdd\bq\xf9\xc0\xf7\x9f\x8d\xf6\xfe\x1d\x9e+Kf\x06s\x19rJG\xa1d\xc6\xe1\x03\xf4m \xe6Re\x1c-\xf4\xdd\x98\xa4p2*u\xd1mW\xaa\xb8\xaa\x17\x1b\xea\xa9\nzF\xead\xdfov\xaa\x9fQ\xb4\xd3U\xd7\xd4\x88[\x1f-g\xbc\xf9\xb9\xd2\xf6\x12\x04\xdc3i\x8e~!\x99\xe4\xfb\xd2\xfb\xa7lgj\x87\xed\xcb\xdf\x91\xaf\x16xG3;\xb6lXN~\x83\xcb]\x1cIL\x91pH\r\x997\xde^\x9e\a\xc0L\x01\x93}c\xe84\xa4j\x00\x00\x00\xd8\xd0\x88R\x17\xcb+]\x1fe\x12\x8a2\xb1469\xa2\x19\x02\xd2\xc6\xe9\xe5\x006\\@\x96\x10C\xe5\xe697\xe4\x12\xb0\x9bi\x8aB\n\x7f\x7f\xb0\x9dL\x87\x8f') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, 0x0, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) pwritev(r1, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001dc0)=0x8) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) [ 287.764624] binder: release 11216:11217 transaction 112 out, still active [ 287.774957] binder: unexpected work type, 4, not freed [ 287.780290] binder: undelivered TRANSACTION_COMPLETE [ 287.785628] binder: send failed reply for transaction 112, target dead [ 287.896792] binder: 11265:11268 got transaction to context manager from process owning it [ 287.905802] binder: 11265:11268 transaction failed 29201/-22, size 0-0 line 2825 08:14:38 executing program 3: r0 = syz_open_procfs(0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, 0x0, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setflags(r5, 0x2, 0x1) pwritev(r1, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001dc0)=0x8) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x20000000, 0x0, 0x0) 08:14:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4000010004002) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 08:14:38 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$P9_RSTATFS(r0, &(0x7f00000003c0)={0x43}, 0x43) write$evdev(r0, &(0x7f0000000080)=[{}, {}], 0xfcf2) 08:14:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) 08:14:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000440)={0x17, 0x1, &(0x7f00000003c0)="d9"}) 08:14:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x18<]\xb7H8V\xd1SP\xfa`\xd5)\x8d\xcbG\x0fH\\\x8d\x8awr\xc9\x91VB\x11\xd8\x9e~3\xf1\x87\xa3\xc6$V.\x0f\xbe\xcccbY\x10\x8f\x05\xfaH$_\xa6u\xc6\"\x16k\x16\xc3\x94]\xb3\xd63V\x1d\x19\x02H\xbc\xf2ic\x9d\xdd\bq\xf9\xc0\xf7\x9f\x8d\xf6\xfe\x1d\x9e+Kf\x06s\x19rJG\xa1d\xc6\xe1\x03\xf4m \xe6Re\x1c-\xf4\xdd\x98\xa4p2*u\xd1mW\xaa\xb8\xaa\x17\x1b\xea\xa9\nzF\xead\xdfov\xaa\x9fQ\xb4\xd3U\xd7\xd4\x88[\x1f-g\xbc\xf9\xb9\xd2\xf6\x12\x04\xdc3i\x8e~!\x99\xe4\xfb\xd2\xfb\xa7lgj\x87\xed\xcb\xdf\x91\xaf\x16xG3;\xb6lXN~\x83\xcb]\x1cIL\x91pH\r\x997\xde^\x9e\a\xc0L\x01\x93}c\xe84\xa4j\x00\x00\x00\xd8\xd0\x88R\x17\xcb+]\x1fe\x12\x8a2\xb1469\xa2\x19\x02\xd2\xc6\xe9\xe5\x006\\@\x96\x10C\xe5\xe697\xe4\x12\xb0\x9bi\x8aB\n\x7f\x7f\xb0\x9dL\x87\x8f') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, 0x0, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setflags(r5, 0x2, 0x1) pwritev(r1, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001dc0)=0x8) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x20000000, 0x0, 0x0) 08:14:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000240)=""/142) 08:14:38 executing program 5: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_names\x00') sendfile(r0, r1, 0x0, 0x200000000098) 08:14:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x18<]\xb7H8V\xd1SP\xfa`\xd5)\x8d\xcbG\x0fH\\\x8d\x8awr\xc9\x91VB\x11\xd8\x9e~3\xf1\x87\xa3\xc6$V.\x0f\xbe\xcccbY\x10\x8f\x05\xfaH$_\xa6u\xc6\"\x16k\x16\xc3\x94]\xb3\xd63V\x1d\x19\x02H\xbc\xf2ic\x9d\xdd\bq\xf9\xc0\xf7\x9f\x8d\xf6\xfe\x1d\x9e+Kf\x06s\x19rJG\xa1d\xc6\xe1\x03\xf4m \xe6Re\x1c-\xf4\xdd\x98\xa4p2*u\xd1mW\xaa\xb8\xaa\x17\x1b\xea\xa9\nzF\xead\xdfov\xaa\x9fQ\xb4\xd3U\xd7\xd4\x88[\x1f-g\xbc\xf9\xb9\xd2\xf6\x12\x04\xdc3i\x8e~!\x99\xe4\xfb\xd2\xfb\xa7lgj\x87\xed\xcb\xdf\x91\xaf\x16xG3;\xb6lXN~\x83\xcb]\x1cIL\x91pH\r\x997\xde^\x9e\a\xc0L\x01\x93}c\xe84\xa4j\x00\x00\x00\xd8\xd0\x88R\x17\xcb+]\x1fe\x12\x8a2\xb1469\xa2\x19\x02\xd2\xc6\xe9\xe5\x006\\@\x96\x10C\xe5\xe697\xe4\x12\xb0\x9bi\x8aB\n\x7f\x7f\xb0\x9dL\x87\x8f') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setflags(r2, 0x2, 0x1) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a", 0x76, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x20000000, 0x0, 0x0) 08:14:38 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000080), 0x0, 0x2}, 0x20) 08:14:38 executing program 4: add_key$keyring(0x0, &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) mremap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000006000/0x3000)=nil) 08:14:38 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 08:14:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x18<]\xb7H8V\xd1SP\xfa`\xd5)\x8d\xcbG\x0fH\\\x8d\x8awr\xc9\x91VB\x11\xd8\x9e~3\xf1\x87\xa3\xc6$V.\x0f\xbe\xcccbY\x10\x8f\x05\xfaH$_\xa6u\xc6\"\x16k\x16\xc3\x94]\xb3\xd63V\x1d\x19\x02H\xbc\xf2ic\x9d\xdd\bq\xf9\xc0\xf7\x9f\x8d\xf6\xfe\x1d\x9e+Kf\x06s\x19rJG\xa1d\xc6\xe1\x03\xf4m \xe6Re\x1c-\xf4\xdd\x98\xa4p2*u\xd1mW\xaa\xb8\xaa\x17\x1b\xea\xa9\nzF\xead\xdfov\xaa\x9fQ\xb4\xd3U\xd7\xd4\x88[\x1f-g\xbc\xf9\xb9\xd2\xf6\x12\x04\xdc3i\x8e~!\x99\xe4\xfb\xd2\xfb\xa7lgj\x87\xed\xcb\xdf\x91\xaf\x16xG3;\xb6lXN~\x83\xcb]\x1cIL\x91pH\r\x997\xde^\x9e\a\xc0L\x01\x93}c\xe84\xa4j\x00\x00\x00\xd8\xd0\x88R\x17\xcb+]\x1fe\x12\x8a2\xb1469\xa2\x19\x02\xd2\xc6\xe9\xe5\x006\\@\x96\x10C\xe5\xe697\xe4\x12\xb0\x9bi\x8aB\n\x7f\x7f\xb0\x9dL\x87\x8f') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, 0x0, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) pwritev(r1, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) add_key$user(0x0, &(0x7f0000001bc0)={'syz'}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f0000000280)="f50805f9e06ff933cd61ddbdf1e3714d29f349fc363c85f62ee103ba15abdc8b20faf9d21a763d034cb7ffec812ae6fcbc1f439ce5f60ac646a0097ef5217603af5c606f798328a5a79705f6e71d76f88d2fcca0975cbf04cea6e53e3543a8", 0x5f, 0x20000000, 0x0, 0x0) 08:14:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) userfaultfd(0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) 08:14:38 executing program 3: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) 08:14:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) mmap$binder(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 288.691923] binder: release 11265:11266 transaction 117 out, still active [ 288.698941] binder: unexpected work type, 4, not freed [ 288.704383] binder: undelivered TRANSACTION_COMPLETE [ 288.709621] binder: send failed reply for transaction 117, target dead [ 288.812123] binder_alloc: binder_alloc_mmap_handler: 11310 20010000-20014000 already mapped failed -16 08:14:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x18<]\xb7H8V\xd1SP\xfa`\xd5)\x8d\xcbG\x0fH\\\x8d\x8awr\xc9\x91VB\x11\xd8\x9e~3\xf1\x87\xa3\xc6$V.\x0f\xbe\xcccbY\x10\x8f\x05\xfaH$_\xa6u\xc6\"\x16k\x16\xc3\x94]\xb3\xd63V\x1d\x19\x02H\xbc\xf2ic\x9d\xdd\bq\xf9\xc0\xf7\x9f\x8d\xf6\xfe\x1d\x9e+Kf\x06s\x19rJG\xa1d\xc6\xe1\x03\xf4m \xe6Re\x1c-\xf4\xdd\x98\xa4p2*u\xd1mW\xaa\xb8\xaa\x17\x1b\xea\xa9\nzF\xead\xdfov\xaa\x9fQ\xb4\xd3U\xd7\xd4\x88[\x1f-g\xbc\xf9\xb9\xd2\xf6\x12\x04\xdc3i\x8e~!\x99\xe4\xfb\xd2\xfb\xa7lgj\x87\xed\xcb\xdf\x91\xaf\x16xG3;\xb6lXN~\x83\xcb]\x1cIL\x91pH\r\x997\xde^\x9e\a\xc0L\x01\x93}c\xe84\xa4j\x00\x00\x00\xd8\xd0\x88R\x17\xcb+]\x1fe\x12\x8a2\xb1469\xa2\x19\x02\xd2\xc6\xe9\xe5\x006\\@\x96\x10C\xe5\xe697\xe4\x12\xb0\x9bi\x8aB\n\x7f\x7f\xb0\x9dL\x87\x8f') ioctl$FIBMAP(r0, 0x1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setflags(r3, 0x2, 0x1) pwritev(r1, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353", 0x7b, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001dc0)=0x8) mount(0x0, 0x0, &(0x7f0000000140)='configfs\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f0000000280)="f50805f9e06ff933cd61ddbdf1e3714d29f349fc363c85f62ee103ba15abdc8b20faf9d21a763d034cb7ffec812ae6fcbc1f439ce5f60ac646a0097ef5217603af5c606f798328a5a79705f6e71d76f88d2fcca0975cbf04cea6e53e3543a8", 0x5f, 0x20000000, 0x0, 0x0) 08:14:38 executing program 2: clone(0xc0c27fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 288.905967] binder: 11320:11325 got transaction to context manager from process owning it [ 288.914593] binder: 11320:11325 transaction failed 29201/-22, size 0-0 line 2825 08:14:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000400)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, r1) keyctl$search(0xa, r1, &(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={'syz'}, r2) 08:14:39 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x40, 0x0) 08:14:39 executing program 0: ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) fstat(0xffffffffffffffff, &(0x7f0000000300)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) arch_prctl$ARCH_SET_GS(0x1001, 0x0) wait4(0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) 08:14:39 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x0, 0x13, 0x6, 0xa9}}) 08:14:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000), 0x4) listen(0xffffffffffffffff, 0x0) listen(r0, 0x0) dup(r0) [ 289.089003] ptrace attach of "/root/syz-executor0"[11337] was attempted by "/root/syz-executor0"[11338] 08:14:39 executing program 5: r0 = syz_open_procfs(0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, 0x0, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setflags(r5, 0x2, 0x1) pwritev(r1, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001dc0)=0x8) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f0000000280)="f50805f9e06ff933cd61ddbdf1e3714d29f349fc363c85f62ee103ba15abdc8b20faf9d21a763d034cb7ffec812ae6fcbc1f439ce5f60ac646a0097ef5217603af5c606f798328a5a79705f6e71d76f88d2fcca0", 0x54, 0x20000000, 0x0, 0x0) 08:14:39 executing program 0: r0 = syz_open_procfs(0x0, 0x0) lsetxattr$security_smack_entry(0x0, &(0x7f0000000180)='security.SMACK64IPOUT\x00', &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1e, 0x1) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000440)=""/246) socketpair$unix(0x1, 0x4000001000000001, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 08:14:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) 08:14:39 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x37) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x8000000000003bf, 0x0, 0x0) 08:14:39 executing program 4: r0 = syz_open_procfs(0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, 0x0, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setflags(r5, 0x2, 0x1) pwritev(r1, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001dc0)=0x8) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f0000000280)="f50805f9e06ff933cd61ddbdf1e3714d29f349fc363c85f62ee103ba15abdc8b20faf9d21a763d034cb7ffec812ae6fcbc1f439ce5f60ac646a0097ef5217603af5c606f798328a5a79705f6e71d76f88d2fcca0", 0x54, 0x20000000, 0x0, 0x0) 08:14:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 08:14:39 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_0\x00', 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x80}, 0x10) [ 289.623757] binder: release 11320:11321 transaction 122 out, still active [ 289.630822] binder: unexpected work type, 4, not freed [ 289.636236] binder: undelivered TRANSACTION_COMPLETE [ 289.642477] binder: send failed reply for transaction 122, target dead 08:14:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8006000}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) [ 289.841463] binder: 11376:11381 got transaction to context manager from process owning it [ 289.850073] binder: 11376:11381 transaction failed 29201/-22, size 0-0 line 2825 08:14:40 executing program 4: r0 = syz_open_procfs(0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, 0x0, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setflags(r5, 0x2, 0x1) pwritev(r1, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001dc0)=0x8) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f0000000280)="f50805f9e06ff933cd61ddbdf1e3714d29f349fc363c85f62ee103ba15abdc8b20faf9d21a763d034cb7ffec812ae6fcbc1f439ce5f60ac646a0097ef5217603af5c606f798328a5a79705f6e71d76f88d2fcca0", 0x54, 0x20000000, 0x0, 0x0) 08:14:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 08:14:40 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000759000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 08:14:40 executing program 0: r0 = syz_open_procfs(0x0, 0x0) lsetxattr$security_smack_entry(0x0, &(0x7f0000000180)='security.SMACK64IPOUT\x00', &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1e, 0x1) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000440)=""/246) socketpair$unix(0x1, 0x4000001000000001, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 08:14:40 executing program 4: r0 = socket$unix(0x1, 0x4000000001, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) close(r1) 08:14:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x01\x01\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x84}, {0x16}]}) 08:14:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) 08:14:40 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) 08:14:40 executing program 4: pipe(0x0) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) fadvise64(r0, 0x0, 0x81, 0x4) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) 08:14:40 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = gettid() r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r1, r3) tkill(r2, 0x14) [ 290.629321] binder: release 11376:11379 transaction 127 out, still active [ 290.636422] binder: unexpected work type, 4, not freed [ 290.641794] binder: undelivered TRANSACTION_COMPLETE 08:14:40 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 290.742018] binder: send failed reply for transaction 127, target dead 08:14:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000400)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='veth1\x00', 0xb4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) [ 290.861498] binder: 11422:11429 transaction failed 29189/-22, size 24-8 line 2834 08:14:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc0045878, &(0x7f00000000c0)='%d') 08:14:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x20000000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000280), 0xcc) close(r1) 08:14:41 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x4, 0x1}, 0x10) openat$cgroup_type(r1, &(0x7f0000000280)='cgroup.type\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000140)=0x7) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000080)=0x7fdffe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0xf}, 0xfffffffffffffd13) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000100)=0x1) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) write$cgroup_int(r4, &(0x7f0000000000), 0x17b) close(0xffffffffffffffff) r5 = openat$cgroup_ro(r1, &(0x7f0000000600)='mgmory.eve\xe8\xc4\x00\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x40) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000200)) openat$cgroup_type(r1, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 291.145406] binder: 11422:11445 transaction failed 29189/-22, size 0-0 line 2834 08:14:41 executing program 0: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x400000032, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) syz_open_procfs(0x0, 0x0) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000008a80)=[{{&(0x7f0000008640)=@xdp, 0xf, &(0x7f0000008800), 0x2b, &(0x7f0000008840), 0xf00}}], 0x4000000000002e5, 0x0) 08:14:41 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f00000000c0)='%d') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 08:14:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x20000000000003, 0x11) close(r1) socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000280), 0xcc) close(r1) 08:14:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x1, 0x0, &(0x7f0000000400)="1c"}) 08:14:41 executing program 4: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000ec0)={&(0x7f0000000e80)='./file0\x00'}, 0x10) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x28, &(0x7f0000000340)}, 0x2e0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100000000, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x6, 0x2, 0x4, 0x75, 0x0, 0xba7c, 0x0, 0x0, 0x600000, 0x0, 0x6e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x2, 0x1000, 0x0, 0x0, 0xd, 0x7, @perf_bp={&(0x7f0000000280)}, 0x1, 0x7, 0x0, 0x6, 0x5, 0x2fd, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x04\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000002340), 0x4) r3 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, r0, 0x0, 0x14, &(0x7f0000000240)='keyring))/vmnet0:,[\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='ip6_vti0\x00', r5}, 0x30) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000140)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) close(r2) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0xfffffe38) r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x660c, 0x2933) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000000c0)='keyring))/vmnet0:,[\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) socketpair(0x0, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') 08:14:41 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0x5, 0x8f, 0x800, 0x5}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x40000002, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x18) 08:14:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x4400000010, 0x0, 0x0, 0x70a0}, 0xc) getsockopt$netlink(r0, 0x10e, 0x8000000009, &(0x7f00007e0000)=""/4, &(0x7f0000000040)=0x4) 08:14:41 executing program 5: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x400000032, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000008a80)=[{{&(0x7f0000008640)=@xdp, 0xf, &(0x7f0000008800), 0x2b, &(0x7f0000008840), 0xf00}}], 0x4000000000002e5, 0x0) 08:14:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x1b4, 0x40a) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x4, 0x4) recvmmsg(r0, &(0x7f0000001b00)=[{{&(0x7f0000000000)=@nl, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000002c0)=""/18, 0x12}}], 0x80001fc, 0x12000, &(0x7f00000009c0)={0x77359400}) [ 291.657594] binder: undelivered TRANSACTION_ERROR: 29189 [ 291.755857] binder: 11478:11480 transaction failed 29189/-22, size 24-8 line 2834 08:14:41 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 08:14:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r2, 0x400405, 0x0, 0x0, {{}, 0x0, 0x4101}}, 0x1c}}, 0x0) 08:14:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r2, 0x400405}, 0x1c}}, 0x0) 08:14:42 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="67f6aa"], 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0) pread64(r3, &(0x7f0000005000)=""/4096, 0x1000, 0x0) [ 291.986854] ================================================================== [ 291.994345] BUG: KMSAN: uninit-value in tipc_nl_compat_doit+0x5b3/0xaf0 [ 292.001119] CPU: 0 PID: 11491 Comm: syz-executor5 Not tainted 4.20.0-rc7+ #4 [ 292.008309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.017669] Call Trace: [ 292.020285] dump_stack+0x173/0x1d0 [ 292.023939] kmsan_report+0x12e/0x2a0 [ 292.027797] __msan_warning+0x82/0xf0 [ 292.031648] tipc_nl_compat_doit+0x5b3/0xaf0 [ 292.036105] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 292.041588] ? ns_capable+0x132/0x1d0 [ 292.045427] tipc_nl_compat_recv+0x14d7/0x2760 [ 292.050069] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 292.055468] ? tipc_nl_bearer_disable+0xb0/0xb0 [ 292.060170] ? tipc_nl_compat_dumpit+0x820/0x820 [ 292.064956] ? tipc_netlink_compat_stop+0x40/0x40 [ 292.069826] genl_rcv_msg+0x185f/0x1a60 [ 292.073860] ? __msan_poison_alloca+0x1f0/0x2a0 [ 292.075171] binder: 11478:11484 transaction failed 29189/-22, size 0-0 line 2834 [ 292.078589] netlink_rcv_skb+0x444/0x640 [ 292.078642] ? genl_unbind+0x390/0x390 [ 292.094148] genl_rcv+0x63/0x80 [ 292.097470] netlink_unicast+0xf40/0x1020 [ 292.101681] netlink_sendmsg+0x127f/0x1300 [ 292.105970] ___sys_sendmsg+0xdb9/0x11b0 [ 292.110059] ? netlink_getsockopt+0x1460/0x1460 [ 292.114784] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 292.120174] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 292.125574] ? __fget_light+0x6e1/0x750 [ 292.129585] __se_sys_sendmsg+0x305/0x460 [ 292.133812] __x64_sys_sendmsg+0x4a/0x70 [ 292.137919] do_syscall_64+0xbc/0xf0 [ 292.141689] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 292.146888] RIP: 0033:0x457ec9 [ 292.150084] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 292.168995] RSP: 002b:00007ff360b93c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.176716] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 292.183990] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 292.191268] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 292.198569] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff360b946d4 [ 292.205858] R13: 00000000004cb5a8 R14: 00000000004d89b0 R15: 00000000ffffffff [ 292.213158] [ 292.214781] Uninit was created at: [ 292.218326] kmsan_internal_poison_shadow+0x92/0x150 [ 292.223463] kmsan_kmalloc+0xa6/0x130 [ 292.227271] kmsan_slab_alloc+0xe/0x10 [ 292.231208] __kmalloc_node_track_caller+0xe18/0x1030 [ 292.236428] __alloc_skb+0x309/0xa20 [ 292.240164] netlink_sendmsg+0xb82/0x1300 [ 292.244319] ___sys_sendmsg+0xdb9/0x11b0 [ 292.248396] __se_sys_sendmsg+0x305/0x460 [ 292.252594] __x64_sys_sendmsg+0x4a/0x70 [ 292.256692] do_syscall_64+0xbc/0xf0 [ 292.260430] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 292.265638] ================================================================== [ 292.273047] Disabling lock debugging due to kernel taint [ 292.278492] Kernel panic - not syncing: panic_on_warn set ... [ 292.284404] CPU: 0 PID: 11491 Comm: syz-executor5 Tainted: G B 4.20.0-rc7+ #4 [ 292.292990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.302412] Call Trace: [ 292.305015] dump_stack+0x173/0x1d0 [ 292.308679] panic+0x3ce/0x961 [ 292.311954] kmsan_report+0x293/0x2a0 [ 292.315780] __msan_warning+0x82/0xf0 [ 292.319621] tipc_nl_compat_doit+0x5b3/0xaf0 [ 292.324054] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 292.329530] ? ns_capable+0x132/0x1d0 [ 292.333382] tipc_nl_compat_recv+0x14d7/0x2760 [ 292.337994] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 292.343385] ? tipc_nl_bearer_disable+0xb0/0xb0 [ 292.348067] ? tipc_nl_compat_dumpit+0x820/0x820 [ 292.352847] ? tipc_netlink_compat_stop+0x40/0x40 [ 292.357696] genl_rcv_msg+0x185f/0x1a60 [ 292.362301] ? __msan_poison_alloca+0x1f0/0x2a0 [ 292.367046] netlink_rcv_skb+0x444/0x640 [ 292.371138] ? genl_unbind+0x390/0x390 [ 292.375078] genl_rcv+0x63/0x80 [ 292.378424] netlink_unicast+0xf40/0x1020 [ 292.382630] netlink_sendmsg+0x127f/0x1300 [ 292.386954] ___sys_sendmsg+0xdb9/0x11b0 [ 292.391087] ? netlink_getsockopt+0x1460/0x1460 [ 292.395811] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 292.401217] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 292.406608] ? __fget_light+0x6e1/0x750 [ 292.410649] __se_sys_sendmsg+0x305/0x460 [ 292.414875] __x64_sys_sendmsg+0x4a/0x70 [ 292.418994] do_syscall_64+0xbc/0xf0 [ 292.422757] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 292.427974] RIP: 0033:0x457ec9 [ 292.431194] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 292.450377] RSP: 002b:00007ff360b93c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.458115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 292.465417] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 292.472837] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 292.480128] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff360b946d4 [ 292.487430] R13: 00000000004cb5a8 R14: 00000000004d89b0 R15: 00000000ffffffff [ 292.495710] Kernel Offset: disabled [ 292.499368] Rebooting in 86400 seconds..