x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000180)) clock_getres(0x0, &(0x7f00000001c0)) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000200)=0xffffffffffffffff, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000280)=0xc) getsockname$packet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x1d, r1}, 0x10, &(0x7f0000000400)={&(0x7f00000003c0)=@can={{0x0, 0xffffffffffffffc1, 0xe8c, 0x6c}, 0x0, 0x3, 0x0, 0x0, "1e7f39697377492c"}, 0x10}, 0x1, 0x0, 0x0, 0x4004080}, 0x8001) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000480)={0x7, [0x80, 0x5, 0xfff, 0xff, 0x2, 0x2, 0x3]}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000004c0)={0xbf, 0x9, 0x204, 0x3ff, 0x3, 0xac00000000000000, 0x40, 0x10001, 0x0}, &(0x7f0000000500)=0x20) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000540)={r2, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000600)={r2, 0xe6, "0c4be6bee02b89fa251a331d0a0a75eccb5289be9f4ac1b2500032f1d098fc000ca93410f4b7f1f144c15b19a244ba69dc3dfaf5040de50e131a3c53bcf64f214ee1a5161dd6ae37b27b2a160a10309635e411f61262c37287f1b11d2ca5e8f5fa4f13117b587b59ca02680baaf9f6c001d0e139ff54f5f6593237db6b79e48e2440650c2ac13cb7b9e051ac5ffcbc9ad0311cada9291a3283104501c8360ddb513e31782bdd65647a3e9766f77715e11a15bf517b15bab1650a3dec3dcd7c262d62ba9a2269aa34eb538919b8755603c0a051234c9b7b2eeecfb0f74350e724fd0d19164dcd"}, &(0x7f0000000700)=0xee) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000780)={0xffffffff}, 0x1, 0xffffffff, 0x3c, 0x1, @in6={0xa, 0x4e20, 0xba60, @mcast2={0xff, 0x2, [], 0x1}, 0x9}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000880)={0x11, 0x10, 0xfa00, {&(0x7f0000000740), r3}}, 0x18) keyctl$set_reqkey_keyring(0xe, 0x7) accept4$inet(r0, &(0x7f00000008c0)={0x0, 0x0, @broadcast}, &(0x7f0000000900)=0x10, 0x80000) r4 = add_key(&(0x7f0000000940)='ceph\x00', &(0x7f0000000980)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000009c0)="a46efffbfe9411648d0a2ce8680709a25a73b6cc599c39a9cc5caa8efb879b658923bc3e474378c070d7dc45d9196ef99b2c48bbd4e3354c572a8472befd1875300cd0b6334229e5d712efdbae01bdfbe05082f97800d96ec1414b6617a64f07985ebadf98760065c07a309282b9957a1bf9f92bd6810f076ce0b7103813094f95eca7b5771feffc426bd643e85add000971929ee66a6f992d4b191a4b8dd73bbd6a4e3d49a8cf8f88ae4ec9536b413ce1c6a8d08cd7bef630be0d881210308a51fb5ae943891155", 0xc8, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000ac0)='blacklist\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000b40)="d5999cbe504527c7956510f2b43c86103cde042d05d1f84aabb5146d88af98fc3dd8ed06dead7c2c7bf56f31edce2d0e6499", 0x32, 0xfffffffffffffffb) keyctl$negate(0xd, r4, 0x8, r5) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000b80)={0x5, 0x2, 0x6, 0x101, 0x3d25}, 0x14) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f0000000bc0)={{0xfffffffffffffff7, 0x80000000}, 'port0\x00', 0x6, 0x8, 0x1000, 0x7, 0x0, 0xd3f, 0x7, 0x0, 0x5, 0x9}) keyctl$set_reqkey_keyring(0xe, 0x2) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000c80)) unlinkat(r0, &(0x7f0000000cc0)='./file0\x00', 0x200) syz_open_pts(r0, 0x0) eventfd(0x5) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000d00)) 02:40:08 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f00000002c0)={0x0, 0x5, 0x5, 0xb76, 'syz1\x00', 0xffff}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@empty, @mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x100000001, 0x6, 0x3f, 0x400, 0x800, 0x2000000, r2}) accept4(r0, &(0x7f0000000140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000000)=0x80, 0x80800) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x1) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000600)={"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"}) 02:40:08 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) unshare(0x40000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x100000000, 0xcd, 0x1, 0x3, 0x3, 0x7, 0x4, 0x24c, 0x40, 0x4b, 0x80000000, 0x7fff, 0x38, 0x1, 0x5, 0x2, 0xd0a8}, [{0x6474e555, 0x9, 0xd8, 0x6, 0x874, 0x7fffffff, 0x9}], "fb7aea8c48811eade26a31d8be0d53a2304b6f88a772b706515aff4ad42b035c5dcce2aa916d9f812f0828be5b2885e0e6878699e8377716464242449f6edf3bcb8d89ba20ca9c9c8bf20e9f282b92ff46485f578e3487437be54318dd39dac8d286cc264fbed37398954bed381dea1e4e89a846c876de1688ed913aa47665fe5967ef1d0e28ea2b37bd32f394", [[], [], [], [], [], [], [], [], []]}, 0xa05) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xb0, r1, 0x70c, 0x70bd28, 0x25dfdbfb, {0x11}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xb915}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x5}, 0x4008081) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) mmap(&(0x7f00000e0000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x1f) 02:40:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40406300, r1}], 0x0, 0x0, &(0x7f0000000480)}) [ 684.612582] binder: BINDER_SET_CONTEXT_MGR already set [ 684.624600] binder: 12227:12228 ioctl 40046207 0 returned -16 [ 684.633705] binder_alloc: 12222: binder_alloc_buf, no vma [ 684.636040] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 684.639412] binder: 12227:12228 transaction failed 29189/-3, size 24-8 line 2967 [ 684.652636] IPVS: ftp: loaded support on port[0] = 21 02:40:08 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x600, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="0c1d3e4b60e6c84f96b67ecf5202dc291532e43a") r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x30, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x10, 0x16, [{0xc, 0x1, [@typed={0x8, 0x0, @uid}]}]}]}, 0x30}, 0x1}, 0x0) [ 684.675762] binder: 12227:12228 got transaction to invalid handle [ 684.682182] binder: 12227:12228 transaction failed 29201/-22, size 0-0 line 2852 02:40:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x10080) openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x3a, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0xfe56) [ 684.717199] binder: undelivered TRANSACTION_ERROR: 29189 [ 684.724665] binder: 12227:12228 BC_FREE_BUFFER u0000000020ffc000 no match [ 684.731732] binder: 12227:12228 got transaction to invalid handle [ 684.738137] binder: 12227:12228 transaction failed 29201/-22, size 0-0 line 2852 02:40:08 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f00000002c0)={0x0, 0x5, 0x5, 0xb76, 'syz1\x00', 0xffff}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@empty, @mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x100000001, 0x6, 0x3f, 0x400, 0x800, 0x2000000, r2}) accept4(r0, &(0x7f0000000140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000000)=0x80, 0x80800) ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x1) [ 684.784852] binder: BINDER_SET_CONTEXT_MGR already set [ 684.813939] binder_alloc: 12222: binder_alloc_buf, no vma [ 684.818712] binder: 12227:12247 ioctl 40046207 0 returned -16 [ 684.819692] binder: 12227:12228 transaction failed 29189/-3, size 24-8 line 2967 [ 684.836760] binder: 12227:12251 got transaction to invalid handle [ 684.843099] binder: 12227:12251 transaction failed 29201/-22, size 0-0 line 2852 [ 684.873203] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 684.890936] binder: undelivered TRANSACTION_ERROR: 29189 [ 684.894216] IPVS: ftp: loaded support on port[0] = 21 [ 684.919098] binder: 12227:12258 BC_FREE_BUFFER u0000000020ffc000 no match [ 684.926269] binder: 12227:12258 got transaction to invalid handle [ 684.932776] binder: 12227:12258 transaction failed 29201/-22, size 0-0 line 2852 [ 684.988182] binder: undelivered TRANSACTION_ERROR: 29201 [ 684.995219] binder: undelivered TRANSACTION_ERROR: 29201 [ 685.004332] binder: undelivered TRANSACTION_ERROR: 29201 [ 685.010381] binder: undelivered TRANSACTION_ERROR: 29201 02:40:08 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x200, 0x202) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x2, 0xf}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fchdir(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x6671c3326a6459ae, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffff}, 0x113}}, 0x20) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x24000, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x4dba}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={r4, @in6={{0xa, 0x4e22, 0x1, @empty, 0xc79d}}, 0x0, 0x505, 0x7f, 0xfffffffffffffffc, 0x80}, 0x98) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r2, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000440)={0xb, 0xffffffffffffffdb, 0xfa00, {&(0x7f0000000240), r2}}, 0x14) 02:40:08 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x100003, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'ip6_vti0\x00'}}) 02:40:08 executing program 5: r0 = socket(0x1e, 0x4, 0x0) io_setup(0x2, &(0x7f0000000000)) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0xfffffffffffffffe, 0x0, 0x1, 0xb773, 0x7fffffff}, 0x97fb0f5abb3fcd67) sendmmsg(r0, &(0x7f0000000080), 0xcb, 0xfffffffffffffffe) 02:40:08 executing program 6: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f00000002c0)=""/140, 0xfffffde1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373df1}) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7fff, 0x4000c0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="d90000000101000004000000efde354dd046bc277f144c191b0a800358913ab1be78c8dcd2ab11c2b3a909dc374ad851e0aff5fe67e4654fd83c79abb75346f1674bcaba0fcdb43c20d3afd27f4856c9bc182d3675812840b45bbd7385a6aec5d9cad6868593c8cdf04204f60a07262fec5e43c9bf61e2aea071682eb931e7d54234e99e35989958d18d0979a6afabe0bd175b8b832b885a52b557ed9d86a4bd1ccc9c4f93e0c98a14433cb7aa00a772e4157330b9a990a0476da3b71dd673af609192631e42c81d2b36161195c1738610b5d5e327adc5ad5fccbdc58aa1a5f4d1d5478ec7d9db0a0097a1deac73eda0d3708b6136d312b8df41393498a571c084dde12ec4ac781f84889a636f19a14ebdb932985b9ce181f27e8c1b957f1ed4393272ef"]) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc0605345, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000140)) 02:40:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086310, r1}], 0x0, 0x0, &(0x7f0000000480)}) 02:40:08 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f00000002c0)={0x0, 0x5, 0x5, 0xb76, 'syz1\x00', 0xffff}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@empty, @mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x100000001, 0x6, 0x3f, 0x400, 0x800, 0x2000000, r2}) accept4(r0, &(0x7f0000000140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000000)=0x80, 0x80800) [ 685.292661] binder: 12222:12273 got reply transaction with no transaction stack [ 685.300409] binder: 12222:12273 transaction failed 29201/-71, size 80-8 line 2759 [ 685.304886] binder: BINDER_SET_CONTEXT_MGR already set [ 685.316723] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 685.333210] binder: 12268:12274 ioctl 40046207 0 returned -16 [ 685.351878] binder_alloc: 12222: binder_alloc_buf, no vma [ 685.357819] binder: 12268:12274 transaction failed 29189/-3, size 24-8 line 2967 [ 685.359403] binder: 12222:12279 BC_ACQUIRE_DONE node 1390 has no pending acquire request [ 685.373834] binder: 12222:12279 ERROR: BC_REGISTER_LOOPER called without request [ 685.373849] binder: 12222:12279 ERROR: BC_REGISTER_LOOPER called without request [ 685.388999] binder: 12279 RLIMIT_NICE not set [ 685.418852] binder: 12268:12274 got transaction to invalid handle [ 685.425234] binder: 12268:12274 transaction failed 29201/-22, size 0-0 line 2852 [ 685.457687] binder: undelivered TRANSACTION_ERROR: 29189 [ 685.474559] binder: 12268:12274 BC_FREE_BUFFER u0000000020ffc000 no match [ 685.481717] binder: 12268:12274 BC_DEAD_BINDER_DONE 0000000020ffc000 not found [ 685.531856] binder: BINDER_SET_CONTEXT_MGR already set [ 685.540200] binder: 12268:12294 ioctl 40046207 0 returned -16 [ 685.559800] binder: BINDER_SET_CONTEXT_MGR already set [ 685.572417] binder_alloc: 12222: binder_alloc_buf, no vma 02:40:09 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10182, 0x0) r4 = syz_open_procfs(r1, &(0x7f00000001c0)='fd/4\x00') r5 = perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x200, 0x9, 0x5, 0x0, 0x7000000000000000, 0x2, 0x7, 0x8, 0x9, 0x9b, 0x7, 0x61, 0x1ff, 0xeca, 0x4, 0x10001, 0x1, 0x3, 0x6, 0x9, 0x1, 0x40, 0x8, 0xfff, 0x9, 0x7b2b, 0xe607, 0x69b0, 0x9, 0xeb, 0x200, 0x8, 0x400, 0xf03, 0x7, 0x0, 0x2700000, 0x7, @perf_bp={&(0x7f0000000040)}, 0x8, 0xc952, 0x2c, 0x4, 0x7, 0x5, 0x4}, r3, 0xa, r4, 0xb) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000013000)) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000001540)=""/202) vmsplice(r5, &(0x7f0000002700)=[{&(0x7f0000000240)="bebf75f14640e07623b06ff913a9e0682e601c0e27fef35b31166147f2b3e7233990e8da2da65b7b0fafad379e00b28b87a9c0a110780dafc1964a2cbe30195a5514e9cd41a1928becf3aa196a7d428ad637b9e822279ee7e032f70cd8a67d48cb18b9ac4124ce5b89a4c5db1dfa63cfaed435b01db656c4ffee832f7ef327fd7636270b1fc97e5be536ea10", 0x8c}, {&(0x7f0000001340)="f57ca4a61d050957eaf5730dc5f274032d7fd1cfc66e547f09c35c7f1413b0e07162c51965860f13a545f4a88afa198ca360f778ab59747295e138daf8c2bd9de99345e352ae62187d28d887fa", 0x4d}, {&(0x7f00000013c0)="78e5b1244a395e4c265543a0688d4153e9579473de25bc442865bb3992e70a105cc904af5a6ae59fa547f79df2ef1a094fa9f4c97ce2c1760a8f70c61b55273ce769fe08aadf15713284c8ac6f5178fa622f2f232f86d97dc1f61c2c5e6f8660", 0x60}, {&(0x7f0000001440)="b04db4be47abdd936f55c21a0c8dec01a9775f5119612a7af6896ba4eb6026002ed718a70aba69e5805fc5052633287bb2c9a520a4af03d94989ed34d9d8c9b858620e781293bb16123d97477cb6eab7d5d430b8ce06c1d7", 0x58}, {&(0x7f0000001640)="8ef75dda28d849f5e5b7c8c140ee202798fff92236ab591f1f64d419c67cf9cf8b8d7dd9b3ce98b41fa18da162543a5e9f043bb6aab3acbda30e32f53b1ca80328964e19d5e1559990b4d10fcb64ba9e4aa9c6bbffc426b5c052959fb6bfec3d543495f74fff38f972fc0add5ad4de15ec673343bc885501bebf9eadddd5e78c8a6118d8c60518de2841ca16716ee62bef36a4b63684135550ba4f5d5a7345d342bab642fb", 0xa5}, {&(0x7f0000000300)="3c1e2ea942cf33be12dcd86f2de81aff9bff3239f4c8c2b4d853371d5d2179bf68ec50975a41a19e", 0x28}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f00000014c0)="a562ceccaa867efdaf19a55c690b4fa0b755694733456b4a3123c84a3b1c991bf8efa965d461f44eea33616b4de2b83061fad1d20180763afe7c9b04fc9dda592bbc7f2e1d223eb871796595632d7d86765c9d141229f39b764f7909ab603eca0fe68ce8d6946b735f7c607fa310eb2e6bdcd6", 0x73}], 0x8, 0x2) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000340)=""/4096) close(r0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002780)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000028c0)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002880)={&(0x7f00000027c0)={0xa8, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {0xc}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x717}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x1) [ 685.578190] binder: 12268:12274 transaction failed 29189/-3, size 24-8 line 2967 [ 685.586196] binder: 12222:12273 ioctl 40046207 0 returned -16 [ 685.586571] binder: 12268:12294 got transaction to invalid handle [ 685.598603] binder: 12268:12294 transaction failed 29201/-22, size 0-0 line 2852 [ 685.608238] binder: 12222:12279 transaction failed 29189/-22, size 0-0 line 2852 [ 685.623603] binder: undelivered TRANSACTION_ERROR: 29189 [ 685.631609] binder: 12222:12279 got reply transaction with no transaction stack [ 685.633976] binder: 12268:12294 BC_FREE_BUFFER u0000000020ffc000 no match [ 685.639176] binder: 12222:12279 transaction failed 29201/-71, size 80-8 line 2759 [ 685.646133] binder: 12268:12294 BC_DEAD_BINDER_DONE 0000000020ffc000 not found [ 685.678600] binder: undelivered TRANSACTION_ERROR: 29201 [ 685.684688] binder: undelivered TRANSACTION_ERROR: 29201 [ 685.701231] binder: 12222:12273 ERROR: BC_REGISTER_LOOPER called without request [ 685.709006] binder: 12273 RLIMIT_NICE not set [ 685.716163] binder: 12222:12288 BC_ACQUIRE_DONE u0000000000000000 no match [ 685.723311] binder: 12222:12288 ERROR: BC_REGISTER_LOOPER called without request [ 685.731104] binder: 12222:12288 ERROR: BC_REGISTER_LOOPER called without request [ 685.738691] binder: 12288 RLIMIT_NICE not set [ 685.766062] binder: undelivered TRANSACTION_ERROR: 29201 [ 685.772483] binder: undelivered TRANSACTION_ERROR: 29189 [ 685.778445] binder: undelivered TRANSACTION_ERROR: 29189 [ 685.784737] binder: undelivered TRANSACTION_ERROR: 29201 02:40:09 executing program 7: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x3) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/166, 0xa6, 0x0, &(0x7f0000000140)={0x0, 0x989680}) 02:40:09 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getegid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) mprotect(&(0x7f0000023000/0x1000)=nil, 0x1000, 0x0) r2 = syz_fuse_mount(&(0x7f0000000040)='./file1\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) getpid() r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x2, 0x2, 0x1000, 0x1000, &(0x7f0000023000/0x1000)=nil}) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000140)={r4, r2, 0x9, 0x100, &(0x7f00000000c0)="73fbd18b6f52f40a97e347f56350d63d9b8673dbd7dde1893dcbdaa8c2c69687d46357779e7e0cbd7ac971e9cc70bcad6fcbba545ce6adcd5043b1c3582d837650410bc6f93a2d21c4a1b76a73b8a5a03a8dd27b76d616f313de569c137f87e5a753", 0x100000000, 0x3, 0xff, 0x5, 0x10001, 0xde0e, 0xfffffffffffff59c, "70b109525bc38e521e72cfa398b8e2737ab43f320bb2b83e06e0b7077131c30aff11e3c2d8e786e0b00e7caa1209e1070083bc89e465d4aaa7ec38218b9f8189f329abe6aad2efab8421e36dad98f78bba75c6731f871760d693a1b51e2d9f667f64129140224f7e979840c216e15831584bcd3cd1a3ee0a2ae2a22d3b142d62339305be0a4b0e3478840d"}) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000000)=r2) 02:40:09 executing program 5: pipe(&(0x7f00000004c0)={0xffffffffffffffff}) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000500)={[], 0xd9, 0x100000000, 0x5, 0x0, 0x39, 0x5000, 0xd000, [], 0x6}) pipe(&(0x7f0000bbc000)={0xffffffffffffffff, 0xffffffffffffffff}) getitimer(0x0, &(0x7f00000002c0)) r3 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xfffffffffffffffb, 0x4000) socket$can_raw(0x1d, 0x3, 0x1) listen(r3, 0x8) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000180)) recvfrom$unix(r3, &(0x7f0000000300)=""/125, 0x7d, 0x10120, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x5) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) fcntl$setown(r1, 0x8, r4) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000480)=0x1c) rt_sigprocmask(0x0, &(0x7f0000072ff8)={0x7fffffff}, &(0x7f00000c1000), 0x8) dup2(r2, r1) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)='n', 0x1}]) 02:40:09 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f00000002c0)={0x0, 0x5, 0x5, 0xb76, 'syz1\x00', 0xffff}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@empty, @mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x100000001, 0x6, 0x3f, 0x400, 0x800, 0x2000000, r2}) 02:40:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086334, r1}], 0x0, 0x0, &(0x7f0000000480)}) 02:40:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = fcntl$getown(r1, 0x9) getpgid(r2) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x42, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x4, 0xde8, [0x0, 0x20000080, 0x2000024c, 0x200003a0], 0x0, &(0x7f0000000040), &(0x7f0000001e80)=ANY=[@ANYBLOB="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"]}, 0xf75) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14}, 0x10}, 0x301}, 0x0) [ 685.972007] binder: release 12306:12310 transaction 1406 out, still active [ 685.979187] binder: unexpected work type, 4, not freed [ 685.984522] binder: undelivered TRANSACTION_COMPLETE [ 685.989873] netlink: 'syz-executor0': attribute type 16 has an invalid length. 02:40:09 executing program 7: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) mbind(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000100), 0x7, 0x0) [ 686.014953] binder: 12306:12310 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 686.023522] binder: 12306:12310 unknown command 1074291508 [ 686.045849] binder: 12306:12310 ioctl c0306201 20000180 returned -22 02:40:09 executing program 4: r0 = gettid() r1 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) timer_create(0x1, &(0x7f0000000140)={0x0, 0x12, 0x1, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) 02:40:09 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f00000002c0)={0x0, 0x5, 0x5, 0xb76, 'syz1\x00', 0xffff}) [ 686.064975] binder: BINDER_SET_CONTEXT_MGR already set [ 686.075956] binder: 12306:12318 ioctl 40046207 0 returned -16 [ 686.092231] binder_alloc: 12306: binder_alloc_buf, no vma [ 686.097946] binder: 12306:12310 transaction failed 29189/-3, size 24-8 line 2967 02:40:09 executing program 7: clock_getres(0x7, &(0x7f0000000000)) clock_getres(0x3, &(0x7f0000000100)) [ 686.139171] binder: 12306:12318 got transaction to invalid handle [ 686.145564] binder: 12306:12318 transaction failed 29201/-22, size 0-0 line 2852 [ 686.176134] binder: 12306:12333 BC_FREE_BUFFER u0000000020ffc000 no match [ 686.183212] binder: 12306:12333 unknown command 1074291508 02:40:09 executing program 7: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x2, &(0x7f0000000080)={0x325}, &(0x7f00000000c0), 0x8) setxattr(&(0x7f0000000380)='./file0\x00', &(0x7f0000000880)=@random={'trusted.', ':\x00'}, &(0x7f0000000900)='*\x00', 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="736500000000000000000000000000000000000000a70000002b9c15d80c61da29f112c874e2490a24c9ec6e54119c647bf2c659d6501b03f332c2e39dc6dbe3163928d6c48083bb3eb4d8c08ea31f96ea85570a7a496752362bd741fd9a566dd7ee658acb44ff15f9ba199fca43f3290ecf670104c8f00900e01e5ea96932df6fc57ed40e491800000000000000faa51f7554878ba02ad66487ed638b2174646206bb18a130b23f252dd4a29116f1ffff72c95c8263b265c2e6d2814b25ae7c"], &(0x7f00000002c0)=0xcb) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={r3, 0x3f, 0x4, [0xffffdfffffffffe0, 0x1, 0x100, 0x10000]}, &(0x7f00000008c0)=0x10) getpeername(r2, &(0x7f00000007c0)=@in={0x0, 0x0, @broadcast}, &(0x7f0000000840)=0x80) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipmr_delroute={0x2c, 0x19, 0x202, 0x70bd2c, 0x25dfdbff, {0x80, 0x94, 0x0, 0x7, 0xff, 0x2, 0xff, 0x5, 0x1000}, [@RTA_PREFSRC={0x8, 0x7, @multicast2=0xe0000002}, @RTA_SRC={0x8, 0x2, @multicast2=0xe0000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000600)={0x2, {{0xa, 0x4e23, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x10001}}}, 0x84) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f00000004c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) pwrite64(r1, &(0x7f0000000140)="3052cf302fe0252d0fc76e5809790f1793e77d282ade4da2c6c6ae777fbccd3bf0a7020d032aec36c7e74893c2f9f0f0e56af8f0b3f94bb9f5b2019871b5ae419860f5422ad1831d644f5a443ee2fe5caaf2b2f387aee48e32e16ae144550b106d2b665fdbb4cad9cb5e9e221b", 0x6d, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000006c0)) ppoll(&(0x7f0000000940)=[{r0, 0x1}, {r0}, {r0, 0x40}, {r1, 0x204}, {r2}, {r2, 0x200}, {r2}, {r4, 0x140}, {r4, 0x8}], 0x9, &(0x7f00000009c0), &(0x7f0000000a00)={0x2b152241}, 0x8) 02:40:09 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) [ 686.186782] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 686.215139] binder: 12306:12333 ioctl c0306201 20000180 returned -22 [ 686.301533] binder: undelivered TRANSACTION_ERROR: 29201 [ 686.309123] binder: send failed reply for transaction 1409 to 12306:12310 02:40:10 executing program 6: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x3, &(0x7f0000000600)={0x303, 0x33}, 0x4) 02:40:10 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x4008635d, r1}], 0x0, 0x0, &(0x7f0000000480)}) [ 686.350666] binder: undelivered TRANSACTION_COMPLETE [ 686.356057] binder: undelivered TRANSACTION_ERROR: 29189 [ 686.361583] binder: send failed reply for transaction 1406, target dead [ 686.404590] binder: undelivered TRANSACTION_ERROR: 29189 [ 686.428447] binder: release 12350:12353 transaction 1413 out, still active [ 686.435596] binder: unexpected work type, 4, not freed [ 686.441042] binder: undelivered TRANSACTION_COMPLETE [ 686.475899] binder: 12350:12353 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 686.484522] binder: 12350:12353 unknown command 1074291549 [ 686.490551] binder: 12350:12353 ioctl c0306201 20000180 returned -22 [ 686.501507] binder: BINDER_SET_CONTEXT_MGR already set [ 686.530736] binder_alloc: 12350: binder_alloc_buf, no vma [ 686.533081] binder: 12350:12361 ioctl 40046207 0 returned -16 [ 686.536525] binder: 12350:12353 transaction failed 29189/-3, size 24-8 line 2967 [ 686.554159] binder: 12350:12365 got transaction to invalid handle [ 686.560619] binder: 12350:12365 transaction failed 29201/-22, size 0-0 line 2852 [ 686.571170] binder: undelivered TRANSACTION_ERROR: 29189 [ 686.571863] binder: 12350:12361 BC_FREE_BUFFER u0000000020ffc000 no match [ 686.583697] binder: 12350:12361 unknown command 1074291549 [ 686.589476] binder: 12350:12361 ioctl c0306201 20000180 returned -22 02:40:10 executing program 1: syz_emit_ethernet(0xfffffd2a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffff, 0x4) syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x15a, 0x40800) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80800) r1 = dup(r0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) 02:40:10 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200000) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0xe817, &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x6f, &(0x7f0000000000), &(0x7f0000000040)=0xb) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000140)=0x7) [ 686.630848] binder: undelivered TRANSACTION_ERROR: 29201 [ 686.636922] binder: send failed reply for transaction 1416 to 12350:12353 [ 686.646758] binder: undelivered TRANSACTION_COMPLETE [ 686.652009] binder: undelivered TRANSACTION_ERROR: 29189 [ 686.657684] binder: send failed reply for transaction 1413, target dead 02:40:11 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) r4 = dup3(r3, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f00000000c0)={{0x0, 0x7}, {0x2, 0x4a000000000000}, 0x4, 0x3, 0x3ff}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$TCXONC(r2, 0x540a, 0x2) write$cgroup_pid(r4, &(0x7f0000000000)=ANY=[], 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080)) tkill(r0, 0x1000000000016) 02:40:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40046304, r1}], 0x0, 0x0, &(0x7f0000000480)}) 02:40:11 executing program 0: socket(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:11 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(khazad-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a11cdf8311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000180)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="2321202e2f66696c6530206d6903655f747970652e240a21"], 0x18) socket$inet6(0xa, 0x5, 0x1) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/222, 0xde}], 0x1, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) 02:40:11 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7fff, 0x400000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x200, @mcast2={0xff, 0x2, [], 0x1}, 0xfff}}, 0x5, 0x5, 0x6, 0x8000}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x2, 0x4}, &(0x7f00000001c0)=0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x80000002) read(r0, &(0x7f0000000000)=""/177, 0x10) close(r0) creat(&(0x7f0000000340)='./file0\x00', 0x0) 02:40:11 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{0x2400000000000000}, {0x0, 0x1c9c380}}, &(0x7f000000ffe0)) read(r1, &(0x7f0000a16000)=""/71, 0x47) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xba89, 0x40a00) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080), 0x4) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 02:40:11 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101400, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x7}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x71d}, &(0x7f0000000200)=0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000000c0)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001300)={0x0}, &(0x7f0000001340)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000001380)={r4, 0x5}, &(0x7f00000013c0)=0x8) 02:40:11 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x7) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000008c0)={{0x3c, @multicast1=0xe0000001, 0x4e21, 0x4, 'rr\x00', 0x10, 0x9, 0x33}, {@empty, 0x4e22, 0x3, 0x80000000, 0xff, 0x7}}, 0x44) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000)=0x7f, 0x1c502d971ce164e4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa}}, 0x4, 0x0, 0x1}, &(0x7f0000000040)=0x98) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000001c0)={'broute\x00'}, &(0x7f0000000240)=0x50) close(r1) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) r4 = gettid() getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)={0x320, 0x14, 0x400, 0x70bd25, 0x25dfdbfb, "", [@typed={0x4, 0x57}, @generic="370080d78bf557982c382f15d17a7206853763ccdb00f25ceb547ceb743e3287ce8b1b1e04de", @nested={0xf8, 0x13, [@generic="098161a6ef29bba7bf52ee1dab4b5060e1d3407191d0c8d31247c8a021df4c4892942543965552c94dc0a0756fc6dd41af62e999e653cd43bf2860b5dc8fc5e1cadd61497bb5ee6a836b9809bd332006aba7b418f38404c8991417d2d7e7506c929a46746d7562a15d333482eefe70a30f6ba0a66827e7c9e2aee26bb825a71aa419359c8bf9f6bd2fe8667a7c60ed50b44a02fb535384deb4e2d8bf892b1137adf4caadf8eaa79c8f253874ee4b4026f67f3ee7a7831f0d64680d2205", @typed={0x8, 0x31, @pid=r4}, @generic="cbfed88f52cd", @typed={0x8, 0x44, @uid=r5}, @generic="c40555fd0a7dc86fd3086fc9f295fcc39e80a75a6bf2ee43a9cecc497485d6d7"]}, @generic="8e71813c9d50450c62b13c388383e2609df1656518ca82d81f2771f475e583e3d1cb8f569654d93d3300ec5cb1b1523d84a8f7cc2bc0c5a65c7254b30b71148029bc75", @nested={0x194, 0x89, [@typed={0x8, 0x40, @ipv4=@multicast1=0xe0000001}, @typed={0x8, 0x8c, @uid=r6}, @generic="d1ce7435772183cb82292acb675bb6e901de7cc0e43eb6e5b1f299529f102a434862fc462ef635461215f6ecb3aac72a0b14ddae770430b65599cf893ed2d0bd5e87d102e48e11df15e30ea6f621a80cbf583965f1a1c1265bbb7d194932bce345af3b7dd2c5a31edd4076d558d1c0", @generic="f0f632d5862fd85eb404da0c7ca1fded1d0664743f308123a7c4dc0d58a81238a55140db1b1a4cf2817506ae6340bddcbbaa", @typed={0x14, 0x3, @ipv6=@loopback={0x0, 0x1}}, @typed={0x8, 0x3f, @u32=0x2}, @generic, @generic="13d060763f95a5b92aaa653313f92dae649e8c7dafe251a7c3b495dfb28611fa8549cdd26f90165e561ddfeb7614958460280b7485196e54d881d1bfc33f71e33dec07d74e62455888a281ccfeb94d83639ffb8d1bd53f5d4bd212026b01f46281897e52cdb888dae9bf32ab70b7b5d75ee88c296ac900146790c21667d1733bc57859b213220dbf76a3e2eb065ae981c7c01477775a9244fbf7ab6bab0812abbe44a68399e6e5e68f50f72687913d9ae31961ebdb93cb8bb6fc4f51fedd3db6"]}, @typed={0x14, 0x33, @str='(trustedvmnet0\x00'}]}, 0x320}], 0x1, &(0x7f0000000800)=[@rights={0x1c, 0x1, 0x1, [r3, r0, r1, r3]}, @rights={0x20, 0x1, 0x1, [r1, r2, r2, r0, r2]}, @rights={0x14, 0x1, 0x1, [r2, r1]}], 0x50, 0x1}, 0x4004000) [ 687.830297] validate_nla: 2 callbacks suppressed [ 687.830307] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 687.840399] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 687.858920] binder: release 12393:12397 transaction 1420 out, still active [ 687.866128] binder: unexpected work type, 4, not freed [ 687.871942] binder: undelivered TRANSACTION_COMPLETE [ 687.886707] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 687.923054] binder: 12393:12397 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer 02:40:11 executing program 0: socket(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:11 executing program 1: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) r1 = fcntl$dupfd(r0, 0x4, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0x3, 0x6, 0x10009, 0xb, r1, 0x0, [0x7]}, 0x2c) r2 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x30, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={r2}) 02:40:11 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x204080) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x1}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x5}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x4001}}]}, 0x2c}, 0x1}, 0x0) 02:40:11 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)="1c837466061bdce5ce76643f51bdd4cf1ef8e843dffaa1855dab57ad946c8985d390fcfa8b358c7f38869f7a3a6ee98d83c9d94fa8fdf18ab73f61c37a5c12bb", 0x40, 0xfffffffffffffffd) keyctl$describe(0x6, r1, &(0x7f0000000180)=""/45, 0x2d) mmap$binder(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x8012, r0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r2}) [ 687.931709] binder: 12393:12397 IncRefs 0 refcount change on invalid ref 553631744 ret -22 [ 687.940237] binder: 12393:12397 unknown command 0 [ 687.990348] binder: 12393:12397 ioctl c0306201 20000180 returned -22 [ 688.004207] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 688.025977] binder: BINDER_SET_CONTEXT_MGR already set [ 688.048290] binder: 12393:12416 ioctl 40046207 0 returned -16 [ 688.055301] netlink: 'syz-executor6': attribute type 21 has an invalid length. [ 688.075805] binder_alloc: 12393: binder_alloc_buf, no vma [ 688.081941] binder: 12393:12397 transaction failed 29189/-3, size 24-8 line 2967 02:40:11 executing program 7: r0 = socket$inet(0x2, 0x5000000000000005, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @rand_addr}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000480)={0x1d}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000001fc8)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}, 0x1}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000100)={&(0x7f00000001c0)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000002c0)=@canfd={{0x2}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}, 0x1}, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0x102df, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @loopback=0x7f000001}}}, 0x84) 02:40:11 executing program 0: socket(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 688.091310] binder: 12393:12416 got transaction to invalid handle [ 688.099450] binder: 12393:12416 transaction failed 29201/-22, size 0-0 line 2852 [ 688.129829] binder: undelivered TRANSACTION_ERROR: 29189 02:40:11 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x100, 0x157d, 0x2}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r1, 0x7, 0x1, 0x100}, &(0x7f0000000240)=0x10) fadvise64(r0, 0x0, 0x401, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x534efde5d2bae475) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd0209004031a8c31155e5bf233f8d40c9116efcdb50ae161d9049b8e1d78557f76aff14f2f77d726f360fb9d2b1388887a744369af30365eb4a9697266ee358fb", 0x42}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000080)) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000280)={0x3, 0x0, 0x53c0ae1, 0x200}) 02:40:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) recvmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000100)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000022c0), 0x0, 0x0, 0x10000030c}}], 0x1, 0xea225aec34b1dd1e, 0x0) [ 688.151835] binder: 12393:12416 BC_FREE_BUFFER u0000000020ffc000 no match [ 688.158994] binder: 12393:12416 IncRefs 0 refcount change on invalid ref 553631744 ret -22 [ 688.167582] binder: 12393:12416 unknown command 0 [ 688.182238] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 688.185573] binder: 12393:12416 ioctl c0306201 20000180 returned -22 [ 688.271683] binder: undelivered TRANSACTION_ERROR: 29201 [ 688.277748] binder: release 12393:12397 transaction 1423 out, still active [ 688.284952] binder: undelivered TRANSACTION_COMPLETE [ 688.290181] binder: send failed reply for transaction 1420, target dead [ 688.306226] binder: send failed reply for transaction 1423, target dead 02:40:12 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x82a, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='net\x00') setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000540)={0x303, 0x33}, 0x4) r2 = userfaultfd(0x80000) close(r2) clone(0x0, &(0x7f0000000280), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f00000002c0)) read(r0, &(0x7f0000000400)=""/100, 0x64) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) 02:40:12 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000080)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/32, 0x20) creat(&(0x7f0000000000)='./file0\x00', 0x48) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) 02:40:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x200840d, &(0x7f00000007c0)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=@gettaction={0xac, 0x32, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0xde6c, 0x3f}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0x10, 0xe, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xd, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x20, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x14, 0xb, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x14, 0x1e, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x1) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 02:40:12 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x630b, r1}], 0x0, 0x0, &(0x7f0000000480)}) 02:40:12 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0xb, 0x3ff, 0x10000000000001}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f00000002c0), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000180), 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x5, 0x3, 0x22, 0x1, r0, 0x40}, 0x2c) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={r0, 0x6, 0x1, 0x5be5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000280)="bd4df417fc35ddc2b79cab0542b39588f7154b49ffe09fc2d21c4a6122ffe706732221d0fa727beeba6cb796cf1a1e96ef2de6e4d4a0736c9dab4657e09dffe89a6f59fe67b2a7ee02e5aa", 0x4b}, {&(0x7f0000000300)="bbbdd215c76ece58c60cbb594b71478779538b099a61c53a846018f035dbb558e97e191844f15a85c03ac1b666fa002e0169f483daf75695a132676a6e242e1d81a98c629cb072687423e6fc40ceb153db1a7e5a1244b1d21ad6b887ecb8", 0x5e}, {&(0x7f0000000380)="582d9db90d3eb63c5e5364e672f6385cce9e027e3c2e56f2de0e9470f2db91e6614bbaaa1f3ed66a2d578c6cd9fd4892cc6a20bd2e05ab13e9616fef513e3a94763ea456a5fcaae6c078346924287b7674684bedba6101ea0a15d4ddf7bd7e96dea18f4c54efd2c36f237e9528270d3c15c54e68384f80e1a4515f47affd7926cf77068bfbbc843f1314caab739e4ff26cfc9f896dba017a54be48a6cf1d3561d9a51530ddb5ae8ff72904a859fbbe440dc3f4e911f608b0f21913b9a05366ad8b93", 0xc2}, {&(0x7f0000000480)="28d65b784d6c21bec4524cc912a26127ab39e1d9f3f601a2be6e5b866be4850690da5e33c9944a5dddab0c3c1e1627a566385d52ee58ee2f0313eb476c5f0e315b74fd3a648579cb6e545f50e5666b30d0c93e8f1c6618ee7e723e71697c36c4ea339af0c0f0ab2b9596b68ac7e32a53c1fc", 0x72}], 0x5, 0x0, 0x0, 0x4}, 0x1) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000100)={0x7, 0xff}) 02:40:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x0, r1}) r2 = dup3(r1, r0, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000180)={0x8, 0x1000, "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"}) 02:40:12 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) 02:40:12 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000001c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x25, 0xe4ffffff}, [], {0x95}}, &(0x7f0000000180)='GPL\x00', 0x0, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x1}, 0x48) [ 689.266696] binder: release 12458:12459 transaction 1427 out, still active [ 689.273902] binder: unexpected work type, 4, not freed [ 689.279238] binder: undelivered TRANSACTION_COMPLETE 02:40:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:13 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) personality(0xc000000) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0x8000000000000002, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2000011, &(0x7f0000000080)=0x2000000, 0x0) 02:40:13 executing program 4: r0 = socket(0x10, 0x80002, 0x6) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x98, r1, 0x100, 0x70bd26, 0x25dfdbff, {0x4}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x700000}]}, 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x44) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 02:40:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x7}) recvmsg(r3, &(0x7f0000000540)={&(0x7f0000000000)=@hci, 0xffffffffffffffd0, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/105, 0x2d8}, 0x80000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:40:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x20000, 0x0) getsockopt$packet_int(r2, 0x107, 0x1b, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = dup(r1) r4 = socket(0x1000100000010, 0x9, 0x4) write(r4, &(0x7f00000000c0)="1f0000001e0007f1ffffffe60802007702000600536b8d3d6c39080001454a", 0x1f) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x117}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18) [ 689.351345] binder: 12458:12459 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 689.360061] binder: 12458:12459 ERROR: BC_REGISTER_LOOPER called without request [ 689.367755] binder: 12458:12459 unknown command 553631744 [ 689.383690] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 689.390470] binder: 12458:12459 ioctl c0306201 20000180 returned -22 02:40:13 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) listen(r0, 0x0) connect(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x2, 0x3, 0x3, {0xa, 0x4e22, 0x100000001, @mcast2={0xff, 0x2, [], 0x1}, 0x8000}}}, 0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0x100000000, 0x3}, 0x2}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="20270320b888f5d80cfc19bd01f69cd4832c6da3db244f915c6b578cb259a1f5dfdf892048e50af6161e91889aa0ea5d33e8cf0f9b1fbb06e5898b2345bb801990d8172c5dc50b8834f37af35540242aec34735b61e24d7742cf53e3f35b5834d65836c535bed6501910d2248a173ee3e2458a5fe6eaacb1fd92bae941bb7ddd9f98fe13356a6a559435", 0x8a) [ 689.425367] QAT: Invalid ioctl [ 689.436424] binder: BINDER_SET_CONTEXT_MGR already set [ 689.464009] QAT: Invalid ioctl [ 689.470922] binder: 12458:12492 ioctl 40046207 0 returned -16 02:40:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 689.496454] binder_alloc: 12458: binder_alloc_buf, no vma [ 689.502212] binder: 12458:12459 transaction failed 29189/-3, size 24-8 line 2967 [ 689.544162] binder: 12458:12503 got transaction to invalid handle [ 689.550524] binder: 12458:12503 transaction failed 29201/-22, size 0-0 line 2852 [ 689.576253] binder: undelivered TRANSACTION_ERROR: 29189 [ 689.592177] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 689.640722] binder: 12458:12492 BC_FREE_BUFFER u0000000020ffc000 no match [ 689.648408] binder: 12458:12492 ERROR: BC_REGISTER_LOOPER called without request [ 689.656288] binder: 12458:12492 unknown command 553631744 [ 689.662495] binder: 12458:12492 ioctl c0306201 20000180 returned -22 [ 689.690437] binder: undelivered TRANSACTION_ERROR: 29201 [ 689.696431] binder: send failed reply for transaction 1430 to 12458:12459 [ 689.707528] binder: undelivered TRANSACTION_COMPLETE [ 689.712844] binder: undelivered TRANSACTION_ERROR: 29189 [ 689.718375] binder: send failed reply for transaction 1427, target dead 02:40:13 executing program 7: poll(&(0x7f0000000040)=[{}, {}, {}, {0xffffffffffffffff, 0x8}], 0x2324, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x101, 0x105000) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000680)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000008000)={&(0x7f000000c000)={0x10, 0x34003}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000040)={0x24, 0x28, 0x821, 0x0, 0x0, {0x3}, [@nested={0x10, 0x0, [@typed={0xc, 0x1, @uid}]}]}, 0xff97}, 0x1}, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000640)={0x0, 0xfffffffffffffffd, 0x9d, 0x7fff, @scatter={0x5, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/170, 0xaa}, {&(0x7f0000000180)=""/170, 0xaa}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/141, 0x8d}]}, &(0x7f0000000480)="a1e0e2f48a18d97060a3ff1d14e407229ec63c8a11f75ccca39396df221925d42efcdc542ad7b4ad97ef98234c4118e9ef4178f9df5e439228c5fb6edbd74fb4d8ec5ab6443c5675e850cc9fa9ca5f3a9ae842db5964ac5806c4a13d373ff21aabebf84ad5a81905d6da9ac7dc86813ecfc927d3de507ea92b7d39ca5b4a9b025fa3942fabd69b0e986508a6f91c75e1af39094fcded4b0960e6b48382", &(0x7f0000000540)=""/168, 0x6, 0x0, 0x0, &(0x7f0000000600)}) 02:40:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000000)={'tunl0\x00', @ifru_ivalue=0x51}) 02:40:13 executing program 6: socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={r1, 0x0, 0x0, 0x3d}, 0x419) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) 02:40:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'veth0_to_team\x00', 0x3}) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0xfffffdd7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, &(0x7f0000000040)=""/45, 0x2d}}], 0x1, 0x0, &(0x7f0000001f80)={0x77359400}) write$eventfd(r1, &(0x7f0000000080)=0x1, 0x8) sendmmsg$unix(r0, &(0x7f0000000340), 0x492492492492a59, 0x0) 02:40:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086302, r1}], 0x0, 0x0, &(0x7f0000000480)}) 02:40:13 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = request_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)='\x00', 0x0) keyctl$get_persistent(0x16, r0, r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_fuseblk_mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:40:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x300, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0xc00, 0x70bd26, 0x25dfdbfb, {0x6}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCFLSH(r3, 0x540b, 0x2) 02:40:14 executing program 6: socketpair$inet6(0xa, 0x6, 0x0, &(0x7f0000000040)) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x6) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) rt_sigsuspend(&(0x7f00000000c0), 0x8) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)="83", 0x1}], 0x1, 0x1081806) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="94003f00accf57224523d3179a76ac6989353f8379d05b69e57aff5a45eca724af93dfe6fd3352eca7373ecca3cbb5f31fc6859d3a3ca8fc361a43918b84005daf71b753f7b82107eb4f09c8619a6d3628fff35ab53b993aaffc9b2d7d2845dd9b1d02c31838e3e2bee79a2dc44e8e638633ff4a0e0a623f950562c91d77279e9b835daad2188aeeda3de51ce6833d7264538d07f826f87f6a917fee9afceebd3b3a01f3edc0ea302640e9030442f5cb", @ANYRES16=r2, @ANYBLOB="190628bd7000fedbdf25100000002c00020008000900ff0f0000080002004e200000080003000000000008000300030000000800050006000000080006005a00000008000600060000000800060065c400003c00030014000600fe80000000000000000000000000002114000600fe80000000000000000000000000002008000100010000000800080093000000"], 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x810) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000240)=0x3200, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) 02:40:14 executing program 7: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000400)=0x400000000000001, 0x4) fcntl$setstatus(r0, 0x4, 0x400) io_setup(0x2, &(0x7f00000000c0)=0x0) r2 = memfd_create(&(0x7f0000000000)='-eth0-{%\x00', 0x3) readahead(r2, 0x1, 0x18a0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffff}, 0x113, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000003c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r3, 0x2}}, 0x18) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="d9", 0x1}]) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x84, "175e85d150342a14339aa3967fcd048cee29b5323a4ebbe590defb1809d970b48506c71f8e454a3840afe5d6be481a23aec083edc76b5e7190dbed976937ef5e333b0261a76a42342bc551e18bbf0d7621da89523bf03914e295ef0848f38707dc79c6e4a4b301e00aff20970a6eb78db4b92d05ff31e4feac0802e1f671d36998571d0a"}, &(0x7f0000000500)=0x8c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000540)={r4, 0x7ff}, 0x8) [ 690.305330] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 690.314467] binder: release 12529:12536 transaction 1434 out, still active [ 690.321703] binder: unexpected work type, 4, not freed [ 690.327080] binder: undelivered TRANSACTION_COMPLETE 02:40:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000001c40)=@sco, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x1a}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x1, 0x0, &(0x7f00000067c0)) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffcbe, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4}]}]}, 0x30}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 02:40:14 executing program 0: r0 = socket(0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 690.392596] binder: 12529:12536 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 690.401231] binder: 12529:12536 unknown command 1074291458 02:40:14 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = dup2(r0, r0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000040)=0x4) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x3, r1}) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {0xc}}, 0x14}, 0x1}, 0x0) 02:40:14 executing program 1: r0 = socket$inet(0x10, 0x4, 0xb30) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001400ff09fffefd956fa283b763a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 690.486492] binder: 12529:12536 ioctl c0306201 20000180 returned -22 [ 690.520840] binder: BINDER_SET_CONTEXT_MGR already set 02:40:14 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x1e}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0xffffffffffffffff, 0x2, 0x1, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x20) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x200000000000002, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x30, &(0x7f0000000800)={{{@in=@multicast2, @in6=@remote}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000900)=0xe8) close(r1) 02:40:14 executing program 7: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) splice(r1, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x16, 0x100000000, 0x9) lseek(r0, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0145401, &(0x7f0000000080)) 02:40:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x223) sendfile(r0, r1, &(0x7f0000000040), 0x8010) [ 690.534428] binder: 12529:12562 ioctl 40046207 0 returned -16 [ 690.549616] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 690.572772] binder_alloc: 12529: binder_alloc_buf, no vma [ 690.578546] binder: 12529:12536 transaction failed 29189/-3, size 24-8 line 2967 02:40:14 executing program 0: r0 = socket(0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 690.618061] binder: 12529:12562 got transaction to invalid handle [ 690.624531] binder: 12529:12562 transaction failed 29201/-22, size 0-0 line 2852 02:40:14 executing program 7: syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)="6e732f7573657200d1f6e5074b516a93e34959475341b91417fe99aeaba2d168eb16f9d61838fd1b5b3b2831517acab798e85b676b0b806c6bb86c8c77b8584cc9f38e28168a01f068162ed8111b5be52cf8700f21edcc3b559a23f6ad02e6388a553b9e643a8af7c87ee4902f7a223686a3276ae7c07744ee8b1dd0238c7600fb3e06e461") fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x200) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000040)={{0x0, @empty, 0x4e22, 0x3, 'lc\x00', 0x10, 0x0, 0x5c}, {@multicast2=0xe0000002, 0x4e23, 0x3, 0x20, 0x3, 0x7}}, 0x44) [ 690.666343] binder: 12529:12581 BC_FREE_BUFFER u0000000020ffc000 no match [ 690.673754] binder: 12529:12581 unknown command 1074291458 [ 690.706503] binder: 12529:12581 ioctl c0306201 20000180 returned -22 [ 690.750771] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 690.783780] binder: undelivered TRANSACTION_ERROR: 29201 [ 690.795074] binder: send failed reply for transaction 1437 to 12529:12536 [ 690.828261] binder: undelivered TRANSACTION_COMPLETE [ 690.833791] binder: undelivered TRANSACTION_ERROR: 29189 [ 690.839322] binder: send failed reply for transaction 1434, target dead [ 690.854209] binder: undelivered TRANSACTION_ERROR: 29189 02:40:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'team_slave_1\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000000000001effdf46dd03afde45f6f2720000000000000000020000000000000000000000000000000000000000000000000000000000000000461bb2cd0a3b6bd2fe5f959469f214ac6e864e81fe6baf928f0a587acefb93674e44d414554057e58150718977b3a78b0097c2985d4c25aa2c671828ced50eeb79bab390236f423465b84a71f91b169141b77299b11714fd56522cd676a2b50f8c1672c9e97aed6a8fbac6e4529dedf178bd1174ff990c70e44207f174975fc9ef692824768ee01ca37680af9662c71e3e01f299c13706410930d37d5fae06dfddaf5ebd51d988389f50ec5b8317486d3f701ef88f4e39a468c2299e3a184d464e7eaab45f0d62eb83b5daa70ae31b3bd94ceaa1ebd1"]}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x4000, 0x0) socket$pptp(0x18, 0x1, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000600)=[@in={0x2, 0x4e24}, @in6={0xa, 0x4e22, 0x80000000, @mcast1={0xff, 0x1, [], 0x1}, 0x1000}, @in6={0xa, 0x4e20, 0x10000, @mcast1={0xff, 0x1, [], 0x1}, 0xffffffff}], 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x322, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r3, 0xa613}}, 0x10) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in=@local, @in=@local}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0xfffffffffffffffc, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x6e22, @multicast2=0xe0000002}, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)="6c6f0000ef00", 0xffffffffffffff1d}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@loopback, @in=@multicast2}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) 02:40:14 executing program 1: keyctl$set_reqkey_keyring(0x5, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r0) set_thread_area(&(0x7f0000000080)={0x4, 0x20000800, 0x0, 0x0, 0x166, 0x0, 0x101, 0x43, 0x4, 0x7fffffff}) 02:40:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4102, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f0000000040)={{0x401, 0x1}, 'port1\x00', 0xa0, 0x20000, 0x5, 0x9, 0x9, 0xffffffffffff7fff, 0x5, 0x0, 0x2, 0x1}) setsockopt$inet6_int(r0, 0x29, 0x4000000040, &(0x7f0000001fde), 0x4) 02:40:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086304, r1}], 0x0, 0x0, &(0x7f0000000480)}) 02:40:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) iopl(0x7) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x0, 0x0, [0x4b564d01, 0xfffffffffffffffd]}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x7, 0x2, 0x80}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) [ 691.244306] binder: release 12610:12612 transaction 1441 out, still active [ 691.251467] binder: unexpected work type, 4, not freed [ 691.256841] binder: undelivered TRANSACTION_COMPLETE [ 691.272301] binder: 12610:12612 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 691.282382] binder: 12610:12612 unknown command 1074291460 [ 691.315966] binder: 12610:12612 ioctl c0306201 20000180 returned -22 [ 691.357793] binder: BINDER_SET_CONTEXT_MGR already set [ 691.378115] binder: 12610:12623 ioctl 40046207 0 returned -16 [ 691.391725] binder_alloc: 12610: binder_alloc_buf, no vma [ 691.397439] binder: 12610:12612 transaction failed 29189/-3, size 24-8 line 2967 [ 691.401125] binder: 12610:12623 got transaction to invalid handle [ 691.411444] binder: 12610:12623 transaction failed 29201/-22, size 0-0 line 2852 [ 691.428141] binder: undelivered TRANSACTION_ERROR: 29189 [ 691.428631] binder: 12610:12627 BC_FREE_BUFFER u0000000020ffc000 no match [ 691.440829] binder: 12610:12627 unknown command 1074291460 [ 691.458409] binder: 12610:12627 ioctl c0306201 20000180 returned -22 02:40:15 executing program 6: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x7}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000000)={0x5, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}]}) 02:40:15 executing program 0: r0 = socket(0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:15 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x9, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000013000)) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000001540)=""/202) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000340)=""/4096) close(r0) epoll_create(0x6f7) pwritev(r2, &(0x7f0000001640)=[{&(0x7f0000000180)="749b7a3516c14f584ab8c21bab67daac719870adf4383e0348368e71c9115b11bd9a9ee0b48d19fdd065a5d67d1773c069ef672868df8d98f00cde8e03f5426a3be95770570b7711b40e0b3130b127ee728e442592410fff08ab54172014c25796989c32e174501d456a70c7cfebba87a7d42b8e27475fdda9c23f5864c2d691283c6a388f92803e1a0f0137399004a68101fc2edce4fb1bdfec80200749c5a062ac4c86b55a5a2d7b202b596b11", 0xae}, {&(0x7f0000000240)="a6bc781ca7fdd6ca65e45fe71c808dae5e39e74a91ad1beb3d95cf17ddde9aad50894e7af61e7592168890719391e00f297719b6b16d5acd4ee11fbe753602f934131cd770b29adbc47280d17927e465fe1af0cdc656d9791ebe557bdcdb002976bf059e531c7ba05e8252d454c497b47aa3edb717426be99723baf3df2a626afeffeea7bafd2f8a1f6e9c48b1c702744443845cd26abbe65b6fae5b25ffc5420f5d014dd86786e05bf64cb605fd516aed", 0xb1}, {&(0x7f0000001340)="c26d2977969ff366bf1802d441080149da88da342e87cf5e6a71e91d538557b0cba955d6ba665d8bc23cdddd6da1e38edf1c599cb78bda86c7b2e3e8bc6b5f64c657c3c32decd5d1886b58b35984ac0693d9f6136e457ab9da040ee3399cbdb54f35e0faf225a10c9139964a444746944fb69c2d8856f5015b8e9536e77744187690812065fb2db66983aeecc63c22e728d89f399623e904166b781d3b84894fba3caa3c91a442571100f34a1beca1", 0xaf}, {&(0x7f0000001400)="b486ce1d67a9dc269f68510124b5c6eaff039d142887215bad877449e98ca15932da912c704b2a396924a44881d63ebc43e9b9a029fa75f0c37e6eff5a10fde773eba5281dd2aa188c6fad39de8a92170e28bfd1991e12f81ddfaa", 0x5b}, {&(0x7f0000000300)="5dcca4", 0x3}, {&(0x7f0000001480)="2cbfcc2d6530d1741492dba7e1fd67a1d804942da5dc81e4a98743ed7f18aa37eec6c645eb8fb87f481956f853e6ea936b51c5970bb778d9d25b4ab085f60767c2cbd941edf19c2db049f120dfe7082a1458d9b54189c6be968b0dc74bdd9794bea4b465fa715310287381b17f23e236db4797582c3bec933cb8e97372f55b8c9c00517b4dbdb2494e4f7388a89d8232cdb5b64e4270273c29c3f7fda6f7b81274a276042a73918da2a854", 0xab}], 0x6, 0x0) 02:40:15 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x2000000010000000, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) flock(r0, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001200)='/dev/snapshot\x00', 0x0, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0xda, 0x4, 0xf7c9, 0x4, 0x0}, &(0x7f00000000c0)=0x10) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x1b0) syz_open_pts(r1, 0x842c3) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r2, 0x1, 0x4, [0x8, 0xfffffffffffffffe, 0x5, 0x3, 0x0, 0x6, 0x40, 0x4, 0xfffffffffffffffd]}, 0x1a) 02:40:15 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind(r0, &(0x7f0000000000)=@rc={0x1f}, 0x80) clock_gettime(0x0, &(0x7f0000005f00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005e00)=[{{&(0x7f0000000180)=@ipx, 0x80, &(0x7f0000002680)=[{&(0x7f0000000200)=""/69, 0x45}, {&(0x7f0000000280)=""/142, 0x8e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/174, 0xae}, {&(0x7f0000002400)=""/141, 0x8d}, {&(0x7f00000024c0)=""/213, 0xd5}, {&(0x7f00000025c0)=""/173, 0xad}], 0x8, &(0x7f00000026c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000036c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003740)=""/121, 0x79}, {&(0x7f00000037c0)=""/124, 0x7c}, {&(0x7f0000003840)=""/66, 0x42}, {&(0x7f00000038c0)=""/177, 0xb1}, {&(0x7f0000003980)=""/74, 0x4a}, {&(0x7f0000003a00)=""/15, 0xf}], 0x6, 0x0, 0x0, 0xdb}, 0xfffffffffffffffb}, {{&(0x7f0000003a80)=@generic, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003b00)=""/37, 0x25}, {&(0x7f0000003b40)=""/228, 0xe4}], 0x2, &(0x7f0000003c80)=""/140, 0x8c, 0x5}, 0x7}, {{&(0x7f0000003d40)=@sco, 0x80, &(0x7f0000004080)=[{&(0x7f0000003dc0)=""/25, 0x19}, {&(0x7f0000003e00)=""/236, 0xec}, {&(0x7f0000003f00)=""/37, 0x25}, {&(0x7f0000003f40)=""/205, 0xcd}, {&(0x7f0000004040)=""/51, 0x33}], 0x5, &(0x7f00000040c0)=""/211, 0xd3, 0x77a}, 0xfffffffffffffffb}, {{&(0x7f00000041c0)=@nfc_llcp, 0x80, &(0x7f0000004700)=[{&(0x7f0000004240)=""/187, 0xbb}, {&(0x7f0000004300)=""/111, 0x6f}, {&(0x7f0000004380)=""/182, 0xb6}, {&(0x7f0000004440)=""/238, 0xee}, {&(0x7f0000004540)=""/5, 0x5}, {&(0x7f0000004580)=""/72, 0x48}, {&(0x7f0000004600)=""/74, 0x4a}, {&(0x7f0000004680)=""/45, 0x2d}, {&(0x7f00000046c0)=""/51, 0x33}], 0x9}, 0x1}, {{&(0x7f0000004780)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004800)=""/242, 0xf2}, {&(0x7f0000004900)=""/168, 0xa8}, {&(0x7f00000049c0)=""/35, 0x23}, {&(0x7f0000004a00)=""/25, 0x19}, {&(0x7f0000004a40)=""/60, 0x3c}], 0x5, 0x0, 0x0, 0x9}, 0x2}, {{&(0x7f0000004ac0)=@ax25, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)}, {&(0x7f0000005b80)=""/145, 0x91}, {&(0x7f0000005c40)=""/148, 0x94}, {&(0x7f0000005d00)}, {&(0x7f0000005d40)=""/83, 0x53}], 0x6, 0x0, 0x0, 0x1}, 0x2}], 0x7, 0x12042, &(0x7f0000005f40)={r1, r2+30000000}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000006100)={0x0, 0x4b, "269ec2b238a4e02a341d642f35f0c76e8d70bc2ba28502a771c05449a3c69a6beb884c69fe4ff6e660ca7c845609c15c0e6a0a5f7c9aa019ffc1ede265444a308348295011a879e33d3811"}, &(0x7f0000006180)=0x53) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000061c0)={r5, 0x7fff}, 0x8) setitimer(0x1, &(0x7f0000005b40)={{0x77359400}}, &(0x7f0000005d00)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000005f80)={0x0, @in6={{0xa, 0x4e20, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0x8}}, 0x9, 0x9}, &(0x7f0000006040)=0x88) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000006080)={r6, 0x1}, &(0x7f00000060c0)=0x8) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000006200)={r5, 0x69, "4340eeebf99af2a9c91c2c32214da2af9fb98602917866d1472755eaeb67cd5fa93a06325e2053cb3272124f1033f678dbcbdc348a0835bfb60a013afec462992e4a571cf41f716673f5b3daf9e9fcf2cd590d9850c17e564148f19ab12bd8761c154b79585f8ad42e"}, &(0x7f0000006280)=0x71) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000062c0)=0x3, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000000c0)={0x100000000, 0x0, 0x401000, 'queue1\x00', 0x1000}) 02:40:15 executing program 5: r0 = memfd_create(&(0x7f0000000480)='icmp6\x00', 0x2) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000004c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) ioctl$FICLONE(r1, 0x40049409, r1) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000140)=0x3) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r2, &(0x7f0000000280)="c1a3d03dddad49ea00d1b50c3dda8b5508d1cba48e095fc440963ec1ed5313ca960313deac5cd36c5546ca2d230087090c7b7ff988aced72be771f6a92fc38297401f4248c8aaaa386c0d90088b6be2ec168b1453aee1efd30f743b1c00542d6e4c686dda3a8a167394b653817d7e40604702c3f2eeb19a8209c5e42ab3fbd74621d460f9a420bcf90a4d3a0d78475695cbf4bce380202a1c13fea73a8c7c43e529a1ce7f10c3982b932eb146180778f07830af8ac5a526070c0e5128d1b646fc5d81a9fb9a3046e636bf45a99f091f9de21799b9796cbbcea3b1e235ac0b011c331", &(0x7f0000000380)=""/179}, 0x18) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f00000001c0)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) sendto$inet(r3, &(0x7f0000000000)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r3, &(0x7f0000000240)="c6", 0x32a, 0x0, &(0x7f0000033ff0)={0x2, 0xfffffffffffffffe, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0xfffffffffffffe57) shutdown(r3, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2}}}, 0xfffffca1) 02:40:15 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) setsockopt$packet_buf(r0, 0x107, 0x17, &(0x7f0000000040)="9e5373762272eaab8fb1a655a70fbddf76f0abd5f1276ee6470058a7802953abe17a734ef56c33c6c6c878c941bbc458dc4d1fab193e3e470115b7615e449f196213c2498aa2b073265498327d84edb31a104e4f304f82354a6a6433b37e", 0x5e) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffff08004500001c0300000000029078ac14ffbbe000000100b548075c6c09b4"], 0x0) 02:40:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086307, r1}], 0x0, 0x0, &(0x7f0000000480)}) [ 691.484504] binder: undelivered TRANSACTION_ERROR: 29201 [ 691.492487] binder: send failed reply for transaction 1444 to 12610:12612 [ 691.504785] binder: undelivered TRANSACTION_COMPLETE [ 691.509976] binder: undelivered TRANSACTION_ERROR: 29189 [ 691.515586] binder: send failed reply for transaction 1441, target dead [ 691.579593] binder: release 12635:12647 transaction 1448 out, still active [ 691.586727] binder: unexpected work type, 4, not freed [ 691.592091] binder: undelivered TRANSACTION_COMPLETE 02:40:15 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x208000, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) request_key(&(0x7f0000001180)='asymmetric\x00', &(0x7f00000011c0)={0x69, 0x79, 0x7a}, &(0x7f0000001200)='/dev/cuse\x00', 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 02:40:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[]]], 0x8) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xa9, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000e9ff000000000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000000200000bb5c217f75aeae7b600000000000000000000000000"], 0x58) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x1, &(0x7f0000002b80)=""/62, 0x3e}}], 0x1, 0x0, 0x0) 02:40:15 executing program 7: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdffffffffffe, 0x0, 0x0, 0x1f, 0x0, 0x401, 0x0, 0x8, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xfffffffffffffffc, 0x3ff}, 0x0, 0x0, r0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000040)=""/112, &(0x7f00000000c0)=0x70) r2 = dup(r1) fcntl$addseals(r2, 0x2, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) 02:40:15 executing program 6: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200044) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x80, 0x24400) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') getpeername$packet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x14) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_team\x00', 0x0}) set_thread_area(&(0x7f0000000640)={0x2, 0x1000, 0x400, 0x64, 0x3, 0xff, 0x0, 0xe3a, 0x10001, 0xe00000000000000}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000840)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast1}}, &(0x7f0000000940)=0xe8) getpeername$packet(r2, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000009c0)=0x14) getpeername(r2, &(0x7f0000000a00)=@hci={0x0, 0x0}, &(0x7f0000000a80)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4}}, &(0x7f0000000bc0)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000cc0)={'sit0\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000d00)={0x0, @broadcast, @loopback}, &(0x7f0000000d40)=0xc) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000680)={0x33, @multicast2=0xe0000002, 0x4e20, 0x4, 'wlc\x00', 0x4, 0x9, 0x18}, 0x2c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000ec0)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000fc0)=0xe8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ppp\x00', 0x40, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x611004}, 0xc, &(0x7f0000001340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c030000", @ANYRES16=r3, @ANYBLOB="000427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="fc000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ff03000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000080080004000800000040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e0000080001007be91e", @ANYRES32=r8, @ANYBLOB="7400020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000300000008000100", @ANYRES32=r9, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000100000008000100", @ANYRES32=r10, @ANYBLOB="780002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000008000100", @ANYRES32=r12, @ANYBLOB="bc0002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c000400080008200300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400ffffffff08000600", @ANYRES32=r14], 0x31c}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000000) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) [ 691.640969] netlink: 'syz-executor0': attribute type 16 has an invalid length. 02:40:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x4) setsockopt$inet_buf(r1, 0x0, 0x23, &(0x7f0000000140)="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", 0x1000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000001140)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000001180)={r2, 0x8, 0x0, 0x0, 0x7}, &(0x7f00000011c0)=0x18) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)) 02:40:15 executing program 0: r0 = socket(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 691.689406] binder: 12635:12647 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 691.698060] binder: 12635:12647 unknown command 1074291463 [ 691.773234] binder: 12635:12647 ioctl c0306201 20000180 returned -22 [ 691.791916] binder: BINDER_SET_CONTEXT_MGR already set 02:40:15 executing program 1: rt_sigreturn() r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206020200a84309c026236925000b0000c90200f0ff56039848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000480)="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", 0x2a7) 02:40:15 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(cast5))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cd", 0x5) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4a02, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r3, 0x7c}}, 0x10) sendmsg$alg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa100b0000a656a78f", 0x9}], 0x1, &(0x7f0000000480)}, 0x8011) io_setup(0x7ff, &(0x7f0000000f40)=0x0) sendmmsg$alg(r1, &(0x7f0000003540)=[{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000440)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340), 0x87}]) 02:40:15 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r0, &(0x7f0000000040), 0x8) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x3ff, 0x40000) [ 691.823478] binder: 12635:12679 ioctl 40046207 0 returned -16 02:40:15 executing program 6: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000e8000)='/dev/cuse\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x37, "0ed6899933cf94e05a1bb4d1461cc2ced5e1e35b0b064747a07eaf5c832bd5b3204a560e1899486e94782b5ed9c13e98a7f77591f1fb1c"}, &(0x7f00000001c0)=0x3f) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r2, 0xfff}, 0x8) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={"6d616e676c6500000000000000000000000000000200"}, &(0x7f0000000100)=0x2d1) fremovexattr(r0, &(0x7f0000000140)=@random={'system.', '\x00'}) ioctl$PERF_EVENT_IOC_ID(r0, 0x80042407, &(0x7f0000000000)) write$fuse(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3000000006000000000000000000000000000000c60000003fccebbba876beb300000000000000000007000000000000000000000000000000"], 0x30) 02:40:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000300)=0x4) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="eb08f79474e05970076dd406b4b30958a3ce6b1261aa843df68fd3a433548daa514ad22869b293830b3389b5576e4b68ff8bacecf29933ba6fb5042447e920106bf7f81b8fbbcfad8377aa693e4e5431f2", @ANYRES16=r2, @ANYBLOB="00042cbd7000fedbdf25020000000800040000000000080002000a000000080001004e200000080002000a000000080001004e230000080002000a0000000800040001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) fremovexattr(r0, &(0x7f0000000080)=@known='user.syz\x00') ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000000)={0x9, 0x100, 0x2, 0x3104, 0x5, 0xdbd}) [ 691.870698] binder: 12635:12679 got transaction to invalid handle [ 691.870704] binder_alloc: 12635: binder_alloc_buf, no vma [ 691.870732] binder: 12635:12647 transaction failed 29189/-3, size 24-8 line 2967 [ 691.877207] binder: 12635:12679 transaction failed 29201/-22, size 0-0 line 2852 02:40:15 executing program 0: r0 = socket(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:15 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x74000000, 0x25}, [], {0x95}}, &(0x7f0000003ff6)="c7c23e93", 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x400000000}, 0xffffffffffffffe4) [ 691.953296] binder: 12635:12700 BC_FREE_BUFFER u0000000020ffc000 no match [ 691.960396] binder: 12635:12700 unknown command 1074291463 [ 692.024521] binder: 12635:12700 ioctl c0306201 20000180 returned -22 [ 692.135342] binder: undelivered TRANSACTION_ERROR: 29201 [ 692.141304] binder: send failed reply for transaction 1451 to 12635:12647 [ 692.150145] binder: undelivered TRANSACTION_COMPLETE [ 692.155423] binder: undelivered TRANSACTION_ERROR: 29189 [ 692.160981] binder: send failed reply for transaction 1448, target dead [ 692.167969] binder: undelivered TRANSACTION_ERROR: 29189 02:40:16 executing program 3: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@dev={0xfe, 0x80, [], 0x19}, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback={0x0, 0x1}, 0x100, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x8}, 0x20) 02:40:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f00000000c0), &(0x7f0000000080)=0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2c02, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x80000000, 0x0, 0x30}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0x732}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 02:40:16 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = memfd_create(&(0x7f0000000040)='^!mime_typeem0\\:wlan0+keyringcpuset\x00', 0x2) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x10e, 0xb, &(0x7f000077d000)={{{@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}, {{@in6=@remote={0xfe, 0x80, [], 0xbb}}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000dd7fc8)={&(0x7f0000d9d000)={0x10}, 0xc, &(0x7f0000f22000)={&(0x7f0000000000)=@flushsa={0x14, 0x1c, 0x14}, 0x14}, 0x1}, 0x0) 02:40:16 executing program 1: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1, 0x1ff}, 0x20) accept4$alg(r0, 0x0, 0x0, 0x80000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x5, &(0x7f0000000080), 0x0) 02:40:16 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1f, 0x10000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ifb0\x00', 0xb000}) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000700), 0x4) 02:40:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x4008635c, r1}], 0x0, 0x0, &(0x7f0000000480)}) 02:40:16 executing program 5: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x0, &(0x7f0000000080)=@raw, &(0x7f0000000100)='GPL\x00', 0xfffffffffffff4ad, 0x0, 0x0, 0x41100, 0x1, [], r2, 0x3}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000000016e000e0010000010000b003a42c0000bbe83c85a9d1ebdfcf900a4fd2d2000000000000000000"], 0x26) 02:40:16 executing program 0: r0 = socket(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:16 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @loopback, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x0, 0x8, 0xed, 0x400, 0xffff, 0x100000, r1}) mkdir(&(0x7f0000000100)='./file0\x00', 0x20) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002000000e00000010000000000000000001a0000000000000000000000000000b038d8ba63a89d630000000000000000000000002d74002101ac1414bb000000000000000000000000030005000000000002000000e0000001000000000000000000000000000000"], 0x80}, 0x1}, 0x0) [ 692.482568] binder: release 12727:12731 transaction 1455 out, still active [ 692.489945] binder: unexpected work type, 4, not freed [ 692.495281] binder: undelivered TRANSACTION_COMPLETE 02:40:16 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x60) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000280)={'vlan0\x00', {0x2, 0x4e23, @multicast1=0xe0000001}}) sendmsg$nl_route(r2, &(0x7f0000003b80)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000003b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800000010001100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00f0ff00000000000800100004000200"], 0x28}, 0x1}, 0x0) r3 = add_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r3, &(0x7f00000001c0)="8908790cf0b31df990f19e9a2e19a887ca5cd071178510b8cda47b7ea9678c8c408bfd6ba81ea47a0ce9424cfe1a2bdbd771a35dc15d08d0f26c3c09f5c43bc1f1f35347a5654d3dd3ccfa755cb1c951e11064d594025b04ccc6bea05fc02535508896ad6056b6a2379704ffcaefae9cbeaa060fb35e4e2af46dbb80a5285e84593d94c129a063a4c841115b3ec7a2b8c2", 0x91) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x0, 0x4) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f00000002c0)) 02:40:16 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000000)=""/153, 0x9}) sched_getaffinity(0x0, 0x1, &(0x7f0000000200)) 02:40:16 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:40:16 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r4 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000780)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001b40)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001b80)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000001c80)=0x10) r8 = getgid() r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/sequencer\x00', 0x53b000, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/null\x00', 0x101000, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = signalfd4(0xffffffffffffffff, &(0x7f0000001d40)={0x200}, 0x8, 0x800) r13 = syz_open_dev$admmidi(&(0x7f0000001d80)='/dev/admmidi#\x00', 0x9, 0x4000) r14 = openat$null(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/null\x00', 0x40, 0x0) r15 = fanotify_init(0x8, 0x800) ioctl$sock_inet_SIOCGIFNETMASK(r10, 0x891b, &(0x7f0000002080)={'veth0_to_team\x00', {0x2, 0x4e20, @multicast1=0xe0000001}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = syz_open_dev$dspn(&(0x7f0000001e40)='/dev/dsp#\x00', 0x80, 0x80) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000001e80)=0x0) fstat(0xffffffffffffff9c, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000002040)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x8000000}, 0xc, &(0x7f0000001b00)=[{&(0x7f0000000240)={0x4f0, 0x40, 0x8, 0x70bd26, 0x25dfdbfd, "", [@generic="9a41eec9cd15a1971d", @nested={0x198, 0x5d, [@typed={0x10, 0x70, @str='GPL/{#@eth0\x00'}, @generic="c7af94f4db6023ada8ef7bc771faee051596828dcd8be46f9657b9003ef4e8743250539a6e0c06d74b7eef212cf07fe38bf30b015999454ddb292c0c2f10d3c5b229c75b6946ae4dbfb6da190c83cdb043509f9e08a310fcce4ee66eebdd4d5a840a17a5f82eaf63bd171d042e7c9e2805e81a30097dd79d7f853ba99d2a342e85cebf81f25c11d66559a19418ae2ff686d8d9fd967ff5704b324a00bed638e1bb7d9efcdd8ded0aa2ed75ae696781bb1760b1840befa3df1d2a95f8d8c1c6208583f437332986d232102250b16acb065a1b9514aec934f93591b31f3f25b825ef0b351d53b55a", @generic="698a0bfd5d5e77efc02b08d744eba2af18c54c3e8a62fbb1a995ca9063c02fddaad2ccc908125680facfef422360064417b4e7246dd21731794021c2be52beba59f928744319f1fba7632b0a8985c5b2a00d410b105333330b583b2451630765ff5010e9273968852540", @typed={0xc, 0x96, @u64=0x1ff}, @typed={0x8, 0x4e, @uid=r1}, @typed={0x14, 0xb, @str='/dev/net/tun\x00'}, @typed={0x8, 0x4e, @uid=r2}]}, @generic="598f68ac0d4f12f93023b43a8dc8bc9e273a855580d9a1e0b5f2b4bc8ab99aa58c8bfaa36fd8fa746f5b38475756c84ad439715333d9747e0ece0b3f78b0f71f0334fd827be7fe65371f30113cd3ca83ba04659b404ee8318c849c4079fbcaa9a109fdcd11f3833386864a18387c991618d1ca9b5e2c512daf9473d0b72eeaf042ceef", @nested={0x2b4, 0x21, [@typed={0x8, 0x1, @uid=r3}, @typed={0xc, 0x76, @u64=0x100}, @generic="46c9092ada63c5bd525aa539715579b0cde3d9c30283cd8ba99c7c56cc4e9930c264b1d0", @generic="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", @generic="2d635639003d86a9f86cfc8b6dc4276ee2cc6943c4fb9fc64a1e817bb2037049e8e9b861962112cd74b49144a106b51521e334729655379c04b9e94fd36a958bd9add04ea9c31efd2af42d80c6d746c65d8b2ce489a049e1ae1e8c833ae16415de8ab127a5297d11812f272d7a3310ac9dbdfb1dc8388e1b29630b0881c0c9f080241e0dab2c496861488185c3822a8f55483133a8a54b7c7bba07c5a7fcd281dde30e1abe32914f0d3049cc2c130043d34242", @generic="8f05cce27c4708623e68333af01093b3bd584acee7e5e48ef8b7a1e2fc7d00b96e99e0515b5b0ed92a582f1052d03f257c0ed3f154c6064c574d9f7056a084f437c1d03a7668c0c07eba9bee8c2556f0bf8cb6e10fb43a582d01821d978c68b03c7f16c8b09ccf7dd9c84f0ad5ba8f829d94d42fe709363c41dd84c4ff175175a8e6f1ba7d9b6f7c697ad3743dd9ac08abb14dd19cc212d5ee631782494ca47511b82ded59df51b4bf433f5d2dc77d0bd3b47b0563", @typed={0x14, 0x3a, @ipv6}]}, @typed={0x8, 0x1a, @uid=r4}]}, 0x4f0}, {&(0x7f00000007c0)={0x1340, 0x18, 0x4, 0x70bd26, 0x25dfdbfe, "", [@typed={0xc, 0x4b, @u64=0xfffffffffffffffb}, @nested={0x94, 0x24, [@typed={0x14, 0x10, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @generic="569763c76513a36d76291be1ecad770fb6045b8d1a54d73cc83b90cf4d11746618319c8f687c8711caf5e381d940f79b1664ce21bd959feb86fb11bb1a65e0f5c0ec105c54b9465778a8ca63a06c83342215a68deec6127c84365296ca705eca3503be426da9847fdefa120611d1f2a8213969b7e1d2b36714"]}, @typed={0xa8, 0x88, @binary="0211468d6b9a9edb6b89291af04add0bffd1891bc66dbc498a2b1f0a252a79c6a37822a20fa8a1f2c21dd21ed2fc8016c14e9b38f666def8a28e84b8ec0d962d19a6aacf73e9776021c74ea0f3acbdfa8c006567cb56f82541434181e2b279adf7aaca17017032812dd8981c3e522f2cf168c9e799f848b39d1478a38699193e87c216557b717533ccb714ef84845f1923905593c78c83d5472a550fbf913bc7deb7a9a9"}, @generic="e3361bc98c2f6eddd89961ea596b1fe5b41512284d28e4e290e1210069e12ddc5ec64b1f31c37108f4729bbdec8047893c7d21f9b6511c08fa3585a568f47901370b046451af259111986cc6d995d1ae3a37821fa4e4fde73fb60f2f7124bdb4d965524e8fd3bb8abe6481cbe27bf7c0f4cb2a15dffb00ff18632cd30b395efa25fac6aa35d3d5c648447d4171ade46331745fb2a64dba06b652022b1ffcf67e2f6e4a7476736aa805aa83207d43b1c32468cd799b72906fcfd07a637ce915a39d9b52fc6e6f3c92cb61b7ee0a752e37b08d008c1321a20f0c7e41757764fc79c46be24cf3f413ad0ad23453cb5a453d05e569f1d75daaa5caf2b2ae", @generic="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", @nested={0xe4, 0x36, [@typed={0x8, 0x29, @pid=r5}, @typed={0x8, 0x57, @u32=0x7445fa66}, @generic="543d213692da3a0f388b7b74a475471d0b45bc6239ac934abc066abafc7a7d84ab9bf74120f9748337b4fb431cf1edb4d9bdfd3e65179b600ebc3770bc081a38fcd8d673683351c708d73a5ebdb7cbceeddab85c0807c055051d2c42056f5aa5762ff717a0da014edd700510a9b397b83e69b6d97ab9700ebcc2573a01a53a8e68f7593c4447248b247d631d71affbcf51af3243a0491a54b0416efdf73f5f8934793766b415fcad71cb06d579aa72a99da03f01c4fbe24781f1f7323440", @typed={0xc, 0x70, @u64=0x8}, @typed={0x4}]}, @typed={0x8, 0xe, @u32=0x2}]}, 0x1340}], 0x2, &(0x7f0000001fc0)=[@cred={0x18, 0x1, 0x2, r6, r7, r8}, @rights={0x30, 0x1, 0x1, [r9, r10, r11, r12, r13, r14, r15, r16, r17]}, @cred={0x18, 0x1, 0x2, r18, r19, r20}], 0x60, 0x4044000}, 0x0) unshare(0x40000000) r21 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) exit(0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) dup3(r22, r21, 0x0) [ 692.557328] binder: 12727:12731 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 692.565918] binder: 12727:12731 unknown command 1074291548 02:40:16 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:16 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffd}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000, 0xb) setsockopt$inet_dccp_buf(r1, 0x21, 0x8cd974bfb3bf0d97, &(0x7f0000000180)="da514383f19de1f422e20e734248267aed17b77ee9297f90ed249d5dde1bf728e1fe60864405df57eae01440ada7614e49ce71c3cce1c29ac01853f5a8169693bf6bf7fa89c2a37b310b461a2d9996691ab0c38a5d90273ff7f56cd709e21afdd1ed5dbcc17d32c9004f95b1dcfcb3916524201d26b2eeedfd16862b66", 0x7d) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) [ 692.646132] binder: 12727:12731 ioctl c0306201 20000180 returned -22 02:40:16 executing program 3: prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) prctl$seccomp(0x16, 0x1, &(0x7f0000000040)) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x2, 0x200340) sendmmsg$alg(r0, &(0x7f0000001ec0)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="636e1480c244c674424b36192687af18162ab37ca55fdf4aca3d515961032bbe20e27e86aec7dba0be7e99ef312b5dc4c6f8e191a48ef6813dc9f4ed08509519b35404855aab6a9a0ea76b41e353012b07655e844f9ca46241af07b074aaf619465b083122d39aaf3b042ffff0fb8a4c146f5a38ba3aeadf9e4d6446f9cbc230cdce67cc36427895122e0fadd0a9485a602ffbd6c72b270f924dc9e4bd51ad64a61253e8fdd1657ddd7b076d4b0c1b9fc817ad4815a61570573e19f6aa92cdc07c8d5ff6ef9a3b1dfd40bf88322abf9d43ae9776", 0xd4}, {&(0x7f0000000280)="eb7a845de13ce009399462a28deb3b81799e81e4c988c5d2f53c29577b9d0ce355a0e8540ca073218227eefb314771270b6b5961339e56e8dd3294be6682300bea6169745893c401f303596b7e90fca851db0fff4a5ff6df119b2d78569e102d5d5cde12305364f35e338fb40a361da19af6aa55e21d44f4588ccf95c3d4d4ac7bca26981c4c9b545b6fff0e1a118da73f72cd5310b234b2a185eceb8f5cbfcd24e581636de2927307bdd5c9c6c9842339758b8a40fd79b33a781af01551ed46ad6f8e2ebe", 0xc5}, {&(0x7f0000000380)="7e2cbf05ca6e492bf91d55e1f8570fa72319dac62560bb5540d434d15c0c84e901c81b98ce42059511c2edb209c5d849d8471c33366c353af48c4d66e0a6551a34092d92556ad4e3a4c41455002b921a4e1d09929c0c870a75d6183e11c139b13f7e78a2b7267379cfead6c50d9c8c50ccb7ddad36265fd2a6623f77e6", 0x7d}, {&(0x7f0000000100)="121dc0b0486f1f4079", 0x9}, {&(0x7f0000000400)="d55130d6430cddb597b5c0751a73d8164d8cf96169658d758eb8ff79a07276bcc9c9a45541b991217dd9eed47c6d1b2579d0c2f6e4a49ac8bcfae41586189b20be155cb242d34a6c729ab28bbf706cf10aaf1ead71b55f70c1686b713d249b6de3641b529f0def38ceb5b65b6b577ba5773f7f78494e0fcdeecd1f7670fd57e1bb17f96fa11d7fa93424634ebde6cf5b5f04e9a9ccba9e3c6036ce56828eefef0f39015bfc80734ddc8bf207fd3f7ff0613b164fbea40c0815ea9b03", 0xbc}, {&(0x7f00000004c0)="b3899e7c768e77ff628f6a5d8e2b32000bb357611ee5e9e4c8b2c41be5840a5970f3b494467e0d46ccdf479050ff3c198f404215de03471f1e8d346b0c2d16fa0ec3607f376ff534d1ba035fdfe5840665ec4132326db64d4671183a43abb09ced7698315581263b5ac99ee5349c8583c816a51ed545c9", 0x77}, {&(0x7f0000000540)}, {&(0x7f0000000580)="790b3546a378877fda03614dcc82cc", 0xf}], 0x8, &(0x7f0000000600)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, {0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000640)="c6dd19428768c2480009fa7ea451c7fb9e3abe0a826b82f84cf5946eb7936b23c783c0ed790cf1714fcd219dbd3da79b9c8390f34b1c7822075433460bf678efa8433e74dc65254129b2159bdd7e", 0x4e}, {&(0x7f00000006c0)="294bc62b154fb3d57173a7e3ee70873023a651bb8b2079f57cec7b14c972de842306ffec", 0x24}, {&(0x7f0000000700)="252217cc3a400bf52c219434cbd7572b1e60954fb82e8c0cfea378ea7ba1d94b2da5c410a0cb670e0fe87716d355954ddc7cf24bdab74d1f673ac16ad741670a865b2a41258c8a2a3dff4d58c9b4c928ca7941415dc488046a4f03b446cbb6257305b5a9f38f3365bad36b560ba716556e9fdbb2ba6295951a196646a06a08ec05b7fe669e0c736a8d3315cc9aa1e0b84dd84eba08b1fc54f95e04865234b6607f0fd4fa6b63e431c755b49db35e7df8274cc1f04bd62848b4e9fcb6573c5a94316b4111c40642570663958198160ce63d36376406751a5563eb8a5bcefee548562ff1485f87513def", 0xe9}, {&(0x7f0000000800)="94bd044fb0bd96398cc646f0dea855e6da01bc1306c5f034fc65c563d840cc52427c6fea48cae039113cdb5e8b9e6046f78389bd26877d657ef885e92b495ed94740fe2fc93b3cdec56b9d4bdb5cec736a1dd095153e3eb7099b995b5a287c245c6d79b91a9325d7a0cf9c8becb9a75cdb84fbb4d4dc21da602747a950b72f6ae939512426182799fb2800d6", 0x8c}, {&(0x7f00000008c0)="0263bc5547c1a595b1b4bab60282b4234e847273b66417af663736d5944045259092f4b11ea746a58f0a8027befe42c51198473202d0a3d617412a7b919f3ffa663be93a", 0x44}, {&(0x7f0000000940)="450fcc6a973514396401c46308ec9edfd31bb046457211d3c42463ddf6e8dea80fe3c769a6547db9e1a429c8a39d5666a8915739ebc703d919398e574b9e3f6fd1a8098ccefb7ed95c0170d8a6c87bc9057814be569922020a73dd50e336c78c626ad1356d5747d2d77a46a4846c5feee368b12f7b1ad604454f72aa9f73564ee39facb085a95a0dd20c8093c526a8f00e0abb2a331e640c3adf4c8224495e62de3dabf211e1db91b70e4ddc28b2db27d3357170938fb454a7f33019e68b139c51ccdd383ac6900ee6e8bc183711eb959d2187fc8f720421e9efe4b85bb4dbc1eb72", 0xe2}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="aa429c4713ccba43e86735dbe3b9d5c366656e423d2a6e7a2c7d672a4359700367eaa7fb6263791682f6dc32ce15243aae384258c33dda0a3d7d3330e79be8fe62953c271b2d57d694ee81039f06aee2a2910243e5ddde9e29fc98e930ab878893fa9b7137963adc41e20011766faeb3406e7151caec3477c39f4816fd390b51", 0x80}, {&(0x7f0000001ac0)="9254dd2f51287c1a9fefb4b0beee61b536a0a22abdd4cea93814eba91f54d421e98d23cba5bf783fed9acf05cc1b89733b0ee4a322c00bb3456c78cb49d494f367c30db2d0bc96f64843d4e99dceb95bc2aa8e3f9252e99e471368c3eecc4d07493010ef70b93b9d626f646754dadde8139fe1e29cb035da9c821010aa43d9c281ae3ec5023e99581b796f33a6897d1785bd34f65826bbb3f6", 0x99}, {&(0x7f0000001b80)="79c06abc5e11b70a021b62a67fc7b72bf65b0d83ca719f019dcbac5d5d9936f97004b5c3813fcbafb19e9660ee6010eb88d3bec8af803b9d7b76592fd300c53d5019cca615d20414f06311", 0x4b}], 0xa}, {0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001c80)="1d6fb2db83e08d5ba73b1adc75c11607169b012ef04cfe3037368ae62b5bb926b18d5f016567288920c72057e2165a28fd2f104fac81b27dbd0ff884381c3f91a9600f998759069526734a4ec7e11513934016a59f9f91350447d7d7b5cdadb75b59a99e5dc7919dbc29b9ad94dbe0db07f5d7a29b04756da196ecffb717a0d962badfe3b5cd0e2029ceb0a7e5a65ca73bac7754f9663793e2e341bc248ccbd6dde0884a4b0cf56aea39c50bd723b5c346aadc5f952bf0efc47512df", 0xbc}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="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"], 0x104, 0x4010}], 0x3, 0x10) syslog(0xb, &(0x7f0000000540)=""/9, 0x9) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00') 02:40:16 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x1000000, &(0x7f00000000c0)="9a7997cbaf3a41355e133df036f97be4c4b703b637df0589730a9e15ac04d545fa") remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0x1, 0x900) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='/dev/ashmem\x00') [ 692.731460] IPVS: ftp: loaded support on port[0] = 21 [ 692.739444] binder: BINDER_SET_CONTEXT_MGR already set [ 692.749424] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 692.749424] program syz-executor6 not setting count and/or reply_len properly [ 692.773435] binder: 12727:12769 ioctl 40046207 0 returned -16 [ 692.797487] binder: 12727:12774 got transaction to invalid handle [ 692.797963] binder_alloc: 12727: binder_alloc_buf, no vma [ 692.803945] binder: 12727:12774 transaction failed 29201/-22, size 0-0 line 2852 [ 692.818052] binder: 12727:12731 transaction failed 29189/-3, size 24-8 line 2967 [ 692.819383] binder: 12727:12774 BC_FREE_BUFFER u0000000020ffc000 no match [ 692.825861] audit: type=1326 audit(1530067216.456:19): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12775 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7faacb9 code=0x0 [ 692.832696] binder: 12727:12774 unknown command 1074291548 [ 692.841504] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 692.841504] program syz-executor6 not setting count and/or reply_len properly 02:40:16 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x20002) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="080000000000ff0700eb013f00000090480300ff00"], &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000200)={0x9, 0x800, 0x3, 0xb3e, 0x2}) fstat(r1, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) [ 692.896622] binder: 12727:12774 ioctl c0306201 20000180 returned -22 02:40:16 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x24, &(0x7f0000000000), 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)={0x303, 0x33}, 0x4) 02:40:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x630c, r1}], 0x0, 0x0, &(0x7f0000000480)}) [ 692.995377] binder: undelivered TRANSACTION_ERROR: 29201 [ 693.001546] binder: send failed reply for transaction 1458 to 12727:12731 [ 693.026923] binder: undelivered TRANSACTION_COMPLETE [ 693.032306] binder: undelivered TRANSACTION_ERROR: 29189 [ 693.037853] binder: send failed reply for transaction 1455, target dead [ 693.057579] binder: undelivered TRANSACTION_ERROR: 29189 [ 693.062968] binder: release 12789:12790 transaction 1462 out, still active [ 693.070592] binder: unexpected work type, 4, not freed [ 693.075917] binder: undelivered TRANSACTION_COMPLETE 02:40:16 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001f00)={{{@in=@multicast1, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000002000)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'vcan0\x00', r2}) connect$can_bcm(r1, &(0x7f0000002ff0)={0x1d}, 0x10) sendmsg$key(r1, &(0x7f0000cbe000)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0500000011000000000000000000007d9b74a1038546021c9c575e1b0004000000000000000000000000fe5c00000000000000000000000000000000000400000004000000000000000000000000000000000000000000000000000000000000000000000005001a00fe80000000000000000000000000000000000000000000ff0000000020000000000000008830a232428283999ec54ea46949052bca1ea3fd96e6dd8d37ef686c4bfe0cce0000000000000000"], 0x88}, 0x1}, 0x0) dup2(r0, r1) [ 693.107884] binder: 12789:12790 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 693.116452] binder: 12789:12790 unknown command 553631744 [ 693.122074] validate_nla: 4 callbacks suppressed [ 693.122082] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 693.127892] binder: 12789:12790 ioctl c0306201 20000180 returned -22 [ 693.143177] netlink: 'syz-executor4': attribute type 16 has an invalid length. 02:40:16 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 693.183521] binder: BINDER_SET_CONTEXT_MGR already set [ 693.203509] binder: 12789:12793 ioctl 40046207 0 returned -16 [ 693.219358] binder_alloc: 12789: binder_alloc_buf, no vma [ 693.225132] binder: 12789:12790 transaction failed 29189/-3, size 24-8 line 2967 [ 693.247152] binder: 12789:12793 got transaction to invalid handle [ 693.253535] binder: 12789:12793 transaction failed 29201/-22, size 0-0 line 2852 [ 693.262712] binder: undelivered TRANSACTION_ERROR: 29189 [ 693.268763] binder: 12789:12793 BC_FREE_BUFFER u0000000020ffc000 no match [ 693.276212] binder: 12789:12793 unknown command 553631744 [ 693.282737] binder: 12789:12793 ioctl c0306201 20000180 returned -22 [ 693.330661] binder: send failed reply for transaction 1465 to 12789:12790 [ 693.338236] binder: undelivered TRANSACTION_COMPLETE [ 693.343535] binder: undelivered TRANSACTION_ERROR: 29189 [ 693.349138] binder: send failed reply for transaction 1462, target dead [ 693.356152] binder: undelivered TRANSACTION_ERROR: 29201 02:40:17 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000d00)={0x14, 0x3, 0x2, 0x3}, 0x14}, 0x1}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x50242, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000080)) 02:40:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40106309, r1}], 0x0, 0x0, &(0x7f0000000480)}) 02:40:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xfffffffffffffffc) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x8001}, 0x7c) listen(r0, 0x10000000000ec9f) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40, 0x0) sendto$inet6(r1, &(0x7f0000000040)="4e3a409272182521c041e7162bb8568e3ba5718aaaa991dd535537de295a000440430461aed5fb52bfba78687a7e0458bba8ae005c6157eea30705b0d9dba79f01892d1b1997abf9b5efb37c04d1eea1b8b815bf6252eab00fd67d0354f77bb65cc62a50e639f5bed06360850527cf9ce110d82485757b9379be9b27bff608aabd2b1b45457dd4c3d839b94c45f0d9b223276d15063253887044d78b9c99c5a78123c14a53", 0xa5, 0x4000010, &(0x7f0000000100)={0xa, 0x4e23, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0xfffffffffffffffa}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x6, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={r3, 0x1000}, 0x8) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f00000001c0)=0x1e) sendto$inet6(r2, &(0x7f0000000140)="d9", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) [ 693.555011] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 693.588771] binder: release 12803:12804 transaction 1469 out, still active [ 693.596052] binder: unexpected work type, 4, not freed 02:40:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 693.601401] binder: undelivered TRANSACTION_COMPLETE 02:40:17 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de0ee9a90f798018439ed554fa07424adee901d2da75af1f01f7f5ab26d7a071fb35331ce39c5a") ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000080)={0x8001, 0x8}) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000000)={[0x100000, 0x0, 0x3000, 0x2000], 0x9, 0x4, 0x7}) lseek(r0, 0x8000000, 0x4) [ 693.646531] binder: 12803:12804 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 693.655117] binder: 12803:12804 BC_ACQUIRE_DONE u0000000020ffc000 no match [ 693.684064] binder: BINDER_SET_CONTEXT_MGR already set [ 693.698374] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 693.718134] audit: type=1326 audit(1530067217.369:20): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12775 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7faacb9 code=0x0 [ 693.732857] IPVS: ftp: loaded support on port[0] = 21 [ 693.743102] binder: 12803:12814 ioctl 40046207 0 returned -16 02:40:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x14) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x40345410) [ 693.755705] binder_alloc: 12803: binder_alloc_buf, no vma [ 693.761445] binder: 12803:12804 transaction failed 29189/-3, size 24-8 line 2967 [ 693.856278] binder: 12803:12838 got transaction to invalid handle [ 693.862674] binder: 12803:12838 transaction failed 29201/-22, size 0-0 line 2852 [ 693.892202] binder: 12803:12814 BC_FREE_BUFFER u0000000020ffc000 no match [ 693.899462] binder: 12803:12814 BC_ACQUIRE_DONE u0000000020ffc000 no match [ 693.901246] binder: undelivered TRANSACTION_ERROR: 29189 02:40:17 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) shutdown(r0, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x697b}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r2, 0x8001, 0x3, 0x7fffffff}, 0x65) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00001ee000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) 02:40:17 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003c40)=[{{&(0x7f0000001480)=@l2, 0x80, &(0x7f0000002940)}}, {{&(0x7f0000002980)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000002cc0), 0x0, &(0x7f0000002d00)=""/234, 0xea}}, {{0x0, 0x0, &(0x7f00000030c0)}}, {{&(0x7f0000003100)=@ipx, 0x80, &(0x7f0000003200), 0x0, &(0x7f0000003240)=""/198, 0xc6}}, {{&(0x7f0000003340)=@in6={0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003840), 0x0, &(0x7f0000003880)=""/39, 0x27}}, {{&(0x7f00000038c0)=@vsock={0x0, 0x0, 0x0, @reserved}, 0xffffff4d, &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)=""/112, 0x70}}], 0x6, 0x0, &(0x7f0000005440)={0x77359400}) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x40, 0x0) faccessat(r2, &(0x7f00000000c0)='./file0\x00', 0x90, 0x100) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 02:40:17 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002440)=[{{&(0x7f0000002200)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002300), 0x0, &(0x7f0000002340)=""/200, 0xc8}}], 0x1, 0x0, &(0x7f0000002540)) unshare(0x28020400) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00008deff8)='/\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)="6e66730039ad695ab91f0928267795ce2b07ba848ecc6b7c69", 0x2007a01, &(0x7f0000000540)) rmdir(&(0x7f0000000400)='./file0\x00') r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) statx(r1, &(0x7f0000000180)='./file0\x00', 0x6000, 0x2, &(0x7f0000000540)) 02:40:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:17 executing program 5: r0 = socket(0x2000000011, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100), 0xfcf6, 0x0, &(0x7f0000000080)={0xa, 0x4305, 0x1, @loopback={0x0, 0x1}}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000008bec0002000000000000000600000000000000"]) 02:40:17 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x9b, @empty, 0x1ff}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) 02:40:17 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x84) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000500)=""/4096) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000180)) r2 = fcntl$getown(r0, 0x9) setpriority(0x2, r2, 0x1) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb7", 0xc}], 0x1}, 0x8000) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000480)="0ef8a9bb", 0x4}], 0x1, &(0x7f00000004c0)=[{0xc, 0x10d}], 0xc}, 0x0) 02:40:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40046307, r1}], 0x0, 0x0, &(0x7f0000000480)}) [ 693.950356] binder: undelivered TRANSACTION_ERROR: 29201 [ 693.969375] binder: send failed reply for transaction 1472 to 12803:12804 [ 693.995314] binder: undelivered TRANSACTION_COMPLETE 02:40:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 694.000518] binder: undelivered TRANSACTION_ERROR: 29189 [ 694.006082] binder: send failed reply for transaction 1469, target dead 02:40:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @empty, 0xffffffffffffffff}, 0x185) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080)=0xfff, 0x1) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xfffffffffffffe96, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) dup2(r1, r0) 02:40:17 executing program 7: 02:40:17 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x2e0a80) accept4$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001800)=0x14, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000001940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2c00000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)=@deltclass={0xb0, 0x29, 0x20, 0x70bd2b, 0x25dfdbfd, {0x0, r3, {0xfffb, 0x1}, {0xb, 0x5}, {0xfff1, 0xffed}}, [@tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x5c, 0x2, [@TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x20, 0x3, "c3316b28d06127012563c6139d71984337b1742d29f9b3393d"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0xffe0}}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x10, 0x3, "9826c8301549a6a826b984b9"}, @TCA_ATM_FD={0x8, 0x1, r0}]}}, @TCA_RATE={0x8, 0x5, {0x59, 0xfffffffffffffff7}}, @TCA_RATE={0x8, 0x5, {0x7ff, 0x1}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_MASK={0x8, 0x4, 0x4}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x4040040) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180), 0xfffffffffffffd5e) sendto$unix(r1, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) close(r0) 02:40:17 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x103000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bpq0\x00', {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}) [ 694.080697] binder: release 12860:12863 transaction 1476 out, still active [ 694.088044] binder: unexpected work type, 4, not freed [ 694.093371] binder: undelivered TRANSACTION_COMPLETE [ 694.102231] binder: 12860:12863 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 694.110816] binder: 12860:12863 DecRefs 0 refcount change on invalid ref 553631744 ret -22 [ 694.119327] binder: 12860:12863 unknown command 0 02:40:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='?w\x00\x00\x00\x00{') getdents(r0, &(0x7f0000000100)=""/69, 0xffffffff00000018) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000180)=""/244, &(0x7f0000000040)=0xf4) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @broadcast=0xffffffff}}, 0x1e) [ 694.192113] binder: 12860:12863 ioctl c0306201 20000180 returned -22 [ 694.230531] binder: BINDER_SET_CONTEXT_MGR already set 02:40:17 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x1cef61c0df3a9699, 0x0) setns(r0, 0x24020000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r1, 0x3}}, 0x18) unlink(&(0x7f0000000040)='./file0\x00') syz_open_dev$dspn(&(0x7f0000000440)='/dev/dsp#\x00', 0x100, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x8, 0x840) unshare(0x0) 02:40:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000000), 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x80000) 02:40:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 694.270856] binder: 12860:12880 ioctl 40046207 0 returned -16 [ 694.286492] binder_alloc: 12860: binder_alloc_buf, no vma [ 694.292289] binder: 12860:12863 transaction failed 29189/-3, size 24-8 line 2967 [ 694.351936] binder: 12860:12886 got transaction to invalid handle [ 694.358348] binder: 12860:12886 transaction failed 29201/-22, size 0-0 line 2852 [ 694.393496] binder: 12860:12900 BC_FREE_BUFFER u0000000020ffc000 no match [ 694.400689] binder: 12860:12900 DecRefs 0 refcount change on invalid ref 553631744 ret -22 [ 694.409177] binder: 12860:12900 unknown command 0 [ 694.415155] binder: 12860:12900 ioctl c0306201 20000180 returned -22 [ 694.493616] binder: undelivered TRANSACTION_ERROR: 29201 [ 694.499682] binder: send failed reply for transaction 1479 to 12860:12863 [ 694.513377] binder: undelivered TRANSACTION_COMPLETE [ 694.518589] binder: undelivered TRANSACTION_ERROR: 29189 [ 694.524202] binder: send failed reply for transaction 1476, target dead [ 694.536117] binder: undelivered TRANSACTION_ERROR: 29189 02:40:18 executing program 6: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) migrate_pages(r0, 0x80, &(0x7f0000000080)=0x800, &(0x7f00000000c0)=0xffff) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x3, 0x1) write(r1, &(0x7f0000000780)="240000005a001f00ff03f4f9002304000a04f5110800010002010002080003800100d653", 0xfffffee7) 02:40:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x4000000000006, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000040)=0x20000) 02:40:18 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:18 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR64, @ANYRES32], @ANYPTR64, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYPTR, @ANYRES64, @ANYRES64, @ANYPTR64, @ANYBLOB="b82263e0cd284dcea06d215810c950e65cf29499a40068e993109ec89862be3e50c046b2e03af3fa166345164206691d54f08b2e1c2afdc4fc3cfb1e6bba3283fe6d0acc4ab6ac0d423f4ab0"]]], &(0x7f0000000400)={0x0, 0x4, [0x0, 0x0, 0x0, 0x400000000]}) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)={0x6}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@loopback, @local, 0x0}, &(0x7f00000000c0)=0xc) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) setns(r0, 0xe020000) 02:40:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x630d, r1}], 0x0, 0x0, &(0x7f0000000480)}) 02:40:18 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000100)=@ioapic) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={r1, 0x2, 0x4, 0x8, 0x6, 0x1}, &(0x7f0000000340)=0x14) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x84, 0x14000000000000, 0xfffffffffffffff9, 0x8, 0x4}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r2, 0x8}, 0x8) mkdir(&(0x7f00000000c0)='./file0\x00', 0x1) 02:40:18 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @random="42795ee6cbe1", 'ip_vti0\x00'}}, 0xfffffffffffffe83) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000100)) 02:40:18 executing program 5: r0 = socket(0x1b, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 695.240485] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 695.262185] binder: release 12923:12924 transaction 1483 out, still active [ 695.269377] binder: unexpected work type, 4, not freed [ 695.274795] binder: undelivered TRANSACTION_COMPLETE 02:40:18 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000140)=""/185) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x800, 0x84005) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7ff, "7da63c39ca8cee9a0300000000d96f9787471abeb29452e61e6da86cbd459909"}) 02:40:19 executing program 3: accept4(0xffffffffffffff9c, &(0x7f0000000180)=@xdp={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0xfffffffffffffccb, 0x0, 0x41000, 0x1, [], r0}, 0x169) [ 695.314338] binder: 12923:12924 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 695.322925] binder: 12923:12924 unknown command 553631744 02:40:19 executing program 7: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0xdd) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000040)) 02:40:19 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4000, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0xf9, 0x0, [0x0, 0x8, 0x9, 0x3]}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/netstat\x00') read(r1, &(0x7f00000007c0)=""/240, 0x128) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f00000000c0)={0xf000, 0x1000}) 02:40:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 695.370126] binder: 12923:12924 ioctl c0306201 20000180 returned -22 [ 695.429975] binder: BINDER_SET_CONTEXT_MGR already set [ 695.461989] netlink: 'syz-executor0': attribute type 16 has an invalid length. 02:40:19 executing program 4: setpriority(0x0, 0x0, 0x101) unshare(0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f0000000180)=""/112, 0x70, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x200080) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000380)) sendmsg$nl_netfilter(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x30}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x1, 0x2, 0x10, 0x70bd2a, 0x25dfdbff, {0xf, 0x0, 0x6}, [@nested={0x4, 0x59}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x3acc3bed56ab851a) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="00000d00bdf3010020000300"], 0xc) setsockopt$inet_int(r1, 0x0, 0x3f, &(0x7f0000000200), 0x4) mq_timedreceive(r0, &(0x7f0000000080)=""/200, 0xc8, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000040)=""/40, 0x28, 0x0, &(0x7f0000b6bff0)) 02:40:19 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x3, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x40000108]}) [ 695.476387] binder: 12923:12949 ioctl 40046207 0 returned -16 02:40:19 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80200, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x1f, 0x38, 0x0, 0x1ff, 0x2, 0x2, 0x8, 0x400, 0x70, 0xc19, 0x8, 0xfffffffffffffffa}) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/146, 0x92}], 0x1) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x21, &(0x7f0000000240)) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000140)) [ 695.519345] binder: 12923:12961 got transaction to invalid handle [ 695.519364] binder_alloc: 12923: binder_alloc_buf, no vma [ 695.526091] binder: 12923:12961 transaction failed 29201/-22, size 0-0 line 2852 [ 695.539493] binder: 12923:12924 transaction failed 29189/-3, size 24-8 line 2967 02:40:19 executing program 6: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8000, 0x84200) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) write$binfmt_elf32(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffe, 0xea3, 0xf80, 0x6ce, 0x1ff, 0x2, 0x3e, 0x9, 0x2a, 0x38, 0x27, 0x2, 0x7ff, 0x20, 0x2, 0x2, 0x9, 0x7}, [{0x6474e555, 0x6, 0x3, 0x3, 0x101, 0x6, 0x6, 0x2}], "80ddc13f48", [[], [], [], [], [], []]}, 0x65d) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x80045105, &(0x7f0000000140)) 02:40:19 executing program 5: r0 = memfd_create(&(0x7f0000000000)='}/uservboxnet1em0posix_acl_access\x00', 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x8}, @in={0x2, 0x4e22}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in6={0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, @in6={0xa, 0x4e21, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x9}], 0xa4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x80) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x28) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x6, 0x9}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x6, 0x81, 0x8207, 0x5, 0x4b69, 0x3, 0x10001, 0x59a, r3}, 0x20) setsockopt$inet_opts(r1, 0x0, 0x3, &(0x7f0000000100), 0x148) 02:40:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000140070000000"], 0x1}, 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 695.714565] binder: 12923:12949 BC_FREE_BUFFER u0000000020ffc000 no match [ 695.721643] binder: 12923:12949 unknown command 553631744 [ 695.750618] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 695.758433] binder: undelivered TRANSACTION_ERROR: 29189 [ 695.819882] *** Guest State *** [ 695.823365] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 695.828221] binder: 12923:12949 ioctl c0306201 20000180 returned -22 [ 695.832273] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 695.847706] CR3 = 0x0000000000000000 [ 695.852183] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 695.858206] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 02:40:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x400c630f, r1}], 0x0, 0x0, &(0x7f0000000480)}) 02:40:19 executing program 7: mq_open(&(0x7f0000000040)='lo\\selinux\x00', 0x0, 0x9, &(0x7f0000000080)={0x7, 0x7f, 0x3, 0x3c44e803, 0x8000, 0x200000, 0x848, 0x9}) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "521a9b83c08d88daf1994726aa929e09"}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20000, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000240)) 02:40:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000040)="9d39fd9964817951612f58f303b777e90a4c6a8589cd7b6df114839e7bcc5e9c749e3e97bb9828935e05dd1c64388e8a06f531bf39b17ecc544101b6323d5bf24be0f39177a66d6b716d15a2f523e2c8a33c728501acae3ef1ff9ec9af8e148761b30b647ea2ef22dd79e1fce5bcf338eff4", 0x72) modify_ldt$write(0x1, &(0x7f00000000c0)={0xfff, 0xffffffff, 0xffffffff, 0xfffffffffffffffb, 0x6, 0xaaa3, 0x3, 0x484, 0x4, 0x9}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000280001000082006c216a2bc7e4deb6297b6c6e661b000000"], 0x1c}, 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x5, 0x4) 02:40:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x20, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1}, 0x0) 02:40:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0xe) ioctl$FIONREAD(r1, 0x80047456, &(0x7f0000000040)) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000000)={0x5, 0x1, 0x7, 0x2, 0x4}) 02:40:19 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/bnep\x00') sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x4) setrlimit(0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffff}) [ 695.864244] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 695.870972] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 695.875452] binder: undelivered TRANSACTION_ERROR: 29201 [ 695.879042] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 695.885269] binder: send failed reply for transaction 1486 to 12923:12924 [ 695.892597] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 695.892612] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 695.892628] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 695.892644] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 695.892657] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 695.892674] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 695.892691] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 695.956436] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 695.964659] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 695.971134] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 695.978664] Interruptibility = 00000000 ActivityState = 00000000 [ 695.984966] *** Host State *** [ 695.988219] RIP = 0xffffffff811f45f4 RSP = 0xffff88019605f3d0 [ 695.988974] binder: BINDER_SET_CONTEXT_MGR already set [ 695.994511] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 695.994524] FSBase=0000000000000000 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 695.994535] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 695.994549] CR0=0000000080050033 CR3=00000001d953f000 CR4=00000000001426e0 [ 695.994562] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87a01380 [ 695.994572] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 695.994576] *** Control State *** [ 695.994584] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 695.994597] EntryControls=0000d1ff ExitControls=0023efff [ 696.006472] binder: undelivered TRANSACTION_COMPLETE [ 696.014367] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 696.014377] VMEntry: intr_info=8000009d errcode=00000000 ilen=00000000 [ 696.014387] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 696.014394] reason=80000021 qualification=0000000000000000 [ 696.014401] IDTVectoring: info=00000000 errcode=00000000 [ 696.014407] TSC Offset = 0xfffffe87bb965323 [ 696.014412] TPR Threshold = 0x00 [ 696.014420] EPT pointer = 0x00000001d91fc01e [ 696.095595] binder: 12998:13000 ioctl 40046207 0 returned -16 [ 696.097432] binder: undelivered TRANSACTION_ERROR: 29189 02:40:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x20, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1}, 0x0) 02:40:19 executing program 4: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(r1, 0x6, 0x1, &(0x7f0000000100)="e4661f75474f82778442ee505dbd6a969154998aabffd60c547c191d7379d9da7685f9bed4a24db3ff5679bfe26f00aeefed0bc24fc10b2faf55d8a55736a8d542089c1f43a0593db0bd9116f08b1572729cf81a2d09d1891db2cb59ddb7b2644df802b9b27d3bcc8e9c0a97", 0x6c) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000a00000)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="01", 0x1, r2) r4 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001940)="b3", 0x1, r2) keyctl$update(0x2, r4, &(0x7f0000000240)="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", 0xfffffe3d) keyctl$dh_compute(0x17, &(0x7f00000019c0)={r3, r4, r4}, &(0x7f0000001a00)=""/157, 0x9d, &(0x7f0000001b40)={&(0x7f0000001ac0)={'tgr128\x00'}, &(0x7f0000001b00)}) open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x10) 02:40:19 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) syz_open_procfs(r2, &(0x7f0000000080)='fd/3\x00') read(r1, &(0x7f0000001140)=""/20, 0xfffffcc3) [ 696.116903] binder: send failed reply for transaction 1483, target dead [ 696.154244] binder: 12998:13000 transaction failed 29189/-22, size 24-8 line 2852 [ 696.187653] binder: 12998:13000 got transaction to invalid handle [ 696.194304] binder: 12998:13000 transaction failed 29201/-22, size 0-0 line 2852 02:40:19 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_cache\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000301ff8)=0xd6, 0x27) fanotify_init(0x1b, 0x101000) 02:40:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x20, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1}, 0x0) [ 696.258143] binder: undelivered TRANSACTION_ERROR: 29189 [ 696.308718] binder: 12998:13000 BC_FREE_BUFFER u0000000020ffc000 no match [ 696.315798] binder: 12998:13000 BC_CLEAR_DEATH_NOTIFICATION invalid ref 553631744 [ 696.386142] binder: release 12998:13000 transaction 1492 out, still active [ 696.393415] binder: unexpected work type, 4, not freed [ 696.398758] binder: undelivered TRANSACTION_COMPLETE [ 696.402664] binder: 12998:13036 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 696.412408] binder: 12998:13036 BC_CLEAR_DEATH_NOTIFICATION invalid ref 553631744 [ 696.447262] binder: release 12998:13036 transaction 1495 out, still active [ 696.454453] binder: undelivered TRANSACTION_COMPLETE [ 696.459652] binder: send failed reply for transaction 1492, target dead [ 696.470146] binder: undelivered TRANSACTION_ERROR: 29201 [ 696.476797] binder: send failed reply for transaction 1495, target dead 02:40:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004e40)=[{{&(0x7f00000002c0)=@sco, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/80, 0x50}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffff}, 0x117, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000600), r4, 0x1}}, 0x18) 02:40:20 executing program 5: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) r0 = socket(0x10, 0x80002, 0x9) sendmmsg$alg(r0, &(0x7f0000000080)=[{0xf0ffffff, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)}], 0x1, 0x0) 02:40:20 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x10000, 0x0) ioctl$PIO_FONTRESET(r0, 0x40046103, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) clock_getres(0x1, &(0x7f0000000200)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0x1, 0x8}, 0x8) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000000c0)=""/191) 02:40:20 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 'syz0\x00'}) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9, 0x100) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000000c0)) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000001140)=0x1024) 02:40:20 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000540)=""/246) write$vnet(r0, &(0x7f0000000080)={0x1, {&(0x7f0000000040)=""/38, 0x26, &(0x7f0000000280)=""/197, 0x3, 0x3}}, 0x68) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x405, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000100)={0x3}, 0x1) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000940)=""/246) r2 = dup3(r1, r0, 0x0) write$vnet(r2, &(0x7f0000000200)={0x1, {&(0x7f0000000140)=""/26, 0x1a, &(0x7f0000000180)=""/89}}, 0x68) 02:40:20 executing program 1: r0 = socket(0x10, 0x2000000000000002, 0x3) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000000c0)={0x1, 0x3, 0xfffffffffffff557, 'queue1\x00', 0x4}) sendfile(r0, r1, &(0x7f0000000240), 0x80000003) open(&(0x7f0000000080)='./file0\x00', 0x5cdd59aa2609921, 0x125) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) syz_open_procfs(r2, &(0x7f0000000040)='net/sockstat\x00') 02:40:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10}]}, 0x28}, 0x1}, 0x0) 02:40:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x20000000, 0x0, &(0x7f0000000480)}) [ 696.844645] QAT: failed to copy from user. [ 696.861782] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 696.863791] binder: release 13047:13050 transaction 1497 out, still active [ 696.876581] binder: unexpected work type, 4, not freed [ 696.881928] binder: undelivered TRANSACTION_COMPLETE [ 696.898390] QAT: Invalid ioctl [ 696.915695] QAT: failed to copy from user. [ 696.946161] QAT: Invalid ioctl 02:40:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008002c5b638f69f59e004800000000000000"]) ioctl$TIOCSBRK(r0, 0x5427) 02:40:20 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x10) socket$vsock_dgram(0x28, 0x2, 0x0) 02:40:20 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00008deff8)='/\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)="6e66730039ad695ab91f0928267795ce2b07ba848ecc6b7c69", 0x2007a00, &(0x7f0000000140)) r0 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$peekuser(0x3, r0, 0x7fffffff) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0x200000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000004c0)={r2, 0xfa7, 0x6, [0x181e, 0xa9, 0x9, 0x100000000, 0x7, 0x2]}, &(0x7f0000000500)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x3e, "168eaca0ea3c3db9c680bc026f0d3e4a04031793154c9137db509afe8ef32fa39423e3b85429c98faa07cd752fb33405b48abb4e509b2d5b7642c5b4e1f8"}, &(0x7f0000000200)=0x46) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYBLOB="230000000fe353dd2dee7593e81f0c16f6942a8b268d587990e140761c231f7cd4d270b78a7badd4a036cc014693341da2e8b0e7965e621dfee148dc404615593983014cb7191808a3"], &(0x7f00000003c0)=0x2b) mount(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='hfs\x00', 0x24000, &(0x7f0000000380)) 02:40:20 executing program 4: r0 = socket$inet6(0x10, 0x8000000000000003, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000140)=@nl=@kern={0x10}, 0xfffffffffffffeb2, &(0x7f0000000000)=[{&(0x7f0000014f79)="5500000018007fcdb72d1cb2a4a280a80a06050000a84302910523692500080008000c40010000001400a3070d000000030000dc1338d54400009b84226eb75afb83de448daa7227c43ab8220000060cec4f8b91d4", 0xfffffffffffffd0b}], 0x1, &(0x7f0000000000)}, 0x0) 02:40:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10}]}, 0x28}, 0x1}, 0x0) 02:40:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x200800) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x3, @loopback=0x7f000001}}, 0x1e) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB='\b\x00[fV'], 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 696.995977] binder: 13047:13050 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer 02:40:20 executing program 1: unshare(0x80000000010000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x31, 0x4}, &(0x7f0000000100)=0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hfsplus\x00', 0x400, 0x0) timer_gettime(r0, &(0x7f0000000140)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x90, 0x4) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x6, 0x101000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f00000000c0)=0x54) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001740)={'vcan0\x00', 0x0}) bind$xdp(r2, &(0x7f0000001780)={0x2c, 0x4, r4, 0x2a, r2}, 0x10) [ 697.073199] binder_alloc: 13047:13050 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 697.081856] binder: 13047:13050 BC_FREE_BUFFER u0000000020ffc000 no match [ 697.109241] netlink: 'syz-executor0': attribute type 16 has an invalid length. 02:40:20 executing program 4: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, @in6={0xa, 0x4e20, 0x3f, @mcast1={0xff, 0x1, [], 0x1}, 0x7fff}], 0x38) ioctl$void(r0, 0xc0045c77) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)="62696305", 0x4) [ 697.152100] binder: BINDER_SET_CONTEXT_MGR already set [ 697.172394] binder: 13047:13089 ioctl 40046207 0 returned -16 [ 697.210556] binder_alloc: 13047: binder_alloc_buf, no vma 02:40:20 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe169, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) [ 697.216275] binder: 13047:13050 transaction failed 29189/-3, size 24-8 line 2967 [ 697.224407] binder: 13047:13089 got transaction to invalid handle [ 697.230728] binder: 13047:13089 transaction failed 29201/-22, size 0-0 line 2852 [ 697.250918] binder: undelivered TRANSACTION_ERROR: 29189 02:40:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10}]}, 0x28}, 0x1}, 0x0) 02:40:20 executing program 7: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000c97ff8)) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x1, 0x101001) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) 02:40:21 executing program 3: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000055000)={0x0, 0x0, 0x3}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x109000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040)=0xfffffffffffff1c5, 0x4) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000080)) rt_sigtimedwait(&(0x7f0000001ff8)={0x3ffff}, &(0x7f0000f0aff0), &(0x7f0000fbcff0)={0xffffd, 0x989680}, 0x8) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000000c0)=[0x80000001, 0x81]) [ 697.276383] binder: 13047:13096 BC_FREE_BUFFER u0000000020ffc000 no match [ 697.305478] binder: 13047:13096 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:21 executing program 5: r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000055000)={0x0, 0x0, 0x4}) rt_sigtimedwait(&(0x7f0000001ff8)={0x3ffff}, &(0x7f0000f0aff0), &(0x7f0000fbcff0)={0xffffd, 0x989680}, 0x8) rt_tgsigqueueinfo(r1, r1, 0x3b, &(0x7f0000000080)={0x7, 0x5, 0x1400000000000000, 0x8}) capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0x9, 0x6, 0x8001, 0x6, 0x80000000, 0x200}) 02:40:21 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x43}) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r2, 0x4, 0x2800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x0) 02:40:21 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10000, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x8012, r1, 0x0) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, r2) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) [ 697.393542] netlink: 'syz-executor0': attribute type 16 has an invalid length. 02:40:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x7a000000, 0x0, &(0x7f0000000480)}) 02:40:21 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4006, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x4e24, @multicast1=0xe0000001}}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x21, 0x13, r0, 0x0) [ 697.462435] binder: undelivered TRANSACTION_ERROR: 29201 [ 697.468739] binder: send failed reply for transaction 1500 to 13047:13050 [ 697.518355] binder: undelivered TRANSACTION_COMPLETE [ 697.523599] binder: undelivered TRANSACTION_ERROR: 29189 [ 697.529158] binder: send failed reply for transaction 1497, target dead 02:40:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2, 0x0) r1 = getpid() ptrace$pokeuser(0x6, r1, 0x80000000, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000640)={0x0, 0x0, 0x1b}) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x6, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000100)="760376b59850b9972c12cad37bfebbec4d0eada930c27663754831693918ea23ef21c244302051a7145c921fcf") 02:40:21 executing program 0 (fault-call:3 fault-nth:0): r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 697.562770] binder: release 13128:13130 transaction 1504 out, still active [ 697.569937] binder: unexpected work type, 4, not freed [ 697.575291] binder: undelivered TRANSACTION_COMPLETE 02:40:21 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x3dc) getpeername$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) r1 = geteuid() fchownat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', r1, 0xffffffffffffffff, 0x100) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000040)='-\\security%\x00', &(0x7f0000000140)='.]posix_acl_access(\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='system&\x00', &(0x7f0000000200)='.\x00', &(0x7f0000000240)='}\x00'], &(0x7f00000004c0)=[&(0x7f00000002c0)='selinuxuser@Oem1\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='&)nodev^\x00', &(0x7f0000000380)=']\x00', &(0x7f00000003c0)=',security(\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='(:%\x00', &(0x7f0000000480)='bdevvmnet1}:ppp0\x00']) [ 697.647954] FAULT_INJECTION: forcing a failure. [ 697.647954] name failslab, interval 1, probability 0, space 0, times 0 [ 697.659308] CPU: 0 PID: 13136 Comm: syz-executor0 Not tainted 4.18.0-rc2+ #21 [ 697.666596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.675966] Call Trace: [ 697.678583] dump_stack+0x1c9/0x2b4 [ 697.682242] ? dump_stack_print_info.cold.2+0x52/0x52 [ 697.687459] ? lock_downgrade+0x8f0/0x8f0 [ 697.691634] should_fail.cold.4+0xa/0x1a 02:40:21 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) select(0x40, &(0x7f0000002000)={0x0, 0x200000000000}, &(0x7f0000000040), &(0x7f0000000fc0)={0x20007ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710}) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000000)="616d3bc2b797c065f225ba540c2cf212c6ceef182b2aa1d0", 0x18) 02:40:21 executing program 1: r0 = socket$inet6(0xa, 0x80807, 0x3) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0), 0x3) [ 697.695730] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 697.700846] ? __local_bh_enable_ip+0x161/0x230 [ 697.705534] ? _raw_spin_unlock_bh+0x30/0x40 [ 697.710047] ? release_sock+0x1ec/0x2c0 [ 697.714042] ? rcu_is_watching+0x8c/0x150 [ 697.718207] ? __release_sock+0x3a0/0x3a0 [ 697.722383] ? find_held_lock+0x36/0x1c0 [ 697.726502] ? check_same_owner+0x340/0x340 [ 697.730852] ? rcu_note_context_switch+0x730/0x730 [ 697.735810] __should_failslab+0x124/0x180 [ 697.740055] should_failslab+0x9/0x14 [ 697.744027] kmem_cache_alloc_node+0x272/0x780 [ 697.748600] ? find_held_lock+0x36/0x1c0 [ 697.752654] __alloc_skb+0x119/0x790 [ 697.756359] ? skb_scrub_packet+0x580/0x580 [ 697.760680] ? rcu_is_watching+0x8c/0x150 [ 697.764816] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 697.769229] ? compat_rw_copy_check_uvector+0x34d/0x440 [ 697.774591] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 697.780208] ? netlink_autobind.isra.34+0x240/0x330 [ 697.785228] netlink_sendmsg+0xb29/0xfd0 [ 697.789279] ? move_addr_to_kernel.part.20+0xc6/0x100 [ 697.794471] ? netlink_unicast+0x760/0x760 [ 697.798708] ? compat_mc_getsockopt+0xb20/0xb20 [ 697.803381] ? security_socket_sendmsg+0x94/0xc0 [ 697.808135] ? netlink_unicast+0x760/0x760 [ 697.812363] sock_sendmsg+0xd5/0x120 [ 697.816068] ___sys_sendmsg+0x7fd/0x930 [ 697.820037] ? copy_msghdr_from_user+0x580/0x580 [ 697.824795] ? lock_downgrade+0x8f0/0x8f0 [ 697.828935] ? proc_fail_nth_write+0x9e/0x210 [ 697.833419] ? __fget_light+0x2f7/0x440 [ 697.837470] ? fget_raw+0x20/0x20 [ 697.840908] ? find_held_lock+0x36/0x1c0 [ 697.844958] ? kasan_check_write+0x14/0x20 [ 697.849193] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 697.854112] ? wait_for_completion+0x8d0/0x8d0 [ 697.858687] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 697.864214] ? sockfd_lookup_light+0xc5/0x160 [ 697.868700] __sys_sendmsg+0x11d/0x290 [ 697.872577] ? __ia32_sys_shutdown+0x80/0x80 [ 697.877069] ? __sb_end_write+0xac/0xe0 [ 697.881122] ? fput+0x130/0x1a0 [ 697.884395] ? ksys_write+0x1ae/0x260 [ 697.888189] ? mm_fault_error+0x380/0x380 [ 697.892330] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 697.897077] do_fast_syscall_32+0x34d/0xfb2 [ 697.901413] ? do_int80_syscall_32+0x890/0x890 [ 697.905995] ? _raw_spin_unlock_irq+0x27/0x70 [ 697.910486] ? finish_task_switch+0x1d3/0x890 [ 697.914974] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 697.920514] ? syscall_return_slowpath+0x31d/0x5e0 [ 697.925446] ? sysret32_from_system_call+0x5/0x46 [ 697.930277] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 697.935121] entry_SYSENTER_compat+0x70/0x7f [ 697.939519] RIP: 0023:0xf7f49cb9 [ 697.942966] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 697.962235] RSP: 002b:00000000f5f450ac EFLAGS: 00000282 ORIG_RAX: 0000000000000172 [ 697.970031] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000020000100 [ 697.977297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 697.984565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 697.991820] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 02:40:21 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x80184132, &(0x7f0000000040)) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xde1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) [ 697.999074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 698.013156] binder: 13128:13130 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer 02:40:21 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0xe, 0xffffffffffffffd5, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x17, 0x4e20}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xfe2a}, 0x1}, 0x0) [ 698.090613] binder_alloc: 13128:13130 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 698.099890] binder: 13128:13130 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x100, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000080)=0xff, 0x4) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x48000) sendfile(r2, r1, &(0x7f000025d000), 0x734) getsockname$packet(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', r4}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) 02:40:21 executing program 6: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='//control/file0\x00', 0x40, 0x24) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) rename(&(0x7f0000000040)='./control\x00', &(0x7f0000000300)='//control\x00') [ 698.219775] binder: BINDER_SET_CONTEXT_MGR already set [ 698.262179] binder: 13128:13162 ioctl 40046207 0 returned -16 02:40:22 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xffffffff80000000) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x80000) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f00000000c0)) dup3(r0, r1, 0x0) 02:40:22 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x106}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'syzkaller1\x00', 0x100000000000400}) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x1000, 0x9}) dup2(r1, r0) 02:40:22 executing program 0 (fault-call:3 fault-nth:1): r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x46}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f000053e000/0x3000)=nil, 0x3000}, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00009ad000)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) close(r0) 02:40:22 executing program 6: syz_emit_ethernet(0x6e, &(0x7f0000000140)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @local={0xac, 0x14, 0x14, 0xaa}, {[@timestamp={0x44, 0x4, 0xfffffffffffffff8}, @timestamp={0x44, 0x4}]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x1a) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000015c0)={0x303, 0x33}, 0x4) [ 698.304871] binder_alloc: 13128: binder_alloc_buf, no vma [ 698.310667] binder: 13128:13130 transaction failed 29189/-3, size 24-8 line 2967 [ 698.411308] binder: 13128:13175 got transaction to invalid handle [ 698.417794] binder: 13128:13175 transaction failed 29201/-22, size 0-0 line 2852 [ 698.491701] binder: 13128:13193 BC_FREE_BUFFER u0000000020ffc000 no match [ 698.523177] binder: 13128:13193 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:22 executing program 1: futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000985000)={{}, {0x77359400}}) sigaltstack(&(0x7f0000985000/0x1000)=nil, &(0x7f0000000ff8)) sigaltstack(&(0x7f0000985000/0x1000)=nil, 0x0) 02:40:22 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'bpq0\x00', {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}) setsockopt(r0, 0x65, 0x6, &(0x7f0000000000), 0x0) 02:40:22 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000040)={{0x0, 0x0, 0xfffff000}}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x12000, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000001c0)=0xfffffffffffffc00) 02:40:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x7a00, 0x0, &(0x7f0000000480)}) 02:40:22 executing program 6: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x20, 0x18040) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000001c0)=@ioapic={0x1000, 0x5, 0x5000000000000000, 0x6, 0x0, [{0x6, 0x6, 0xa77, [], 0xfff}, {0x7fffffff, 0xc2d0, 0x200, [], 0xfc16}, {0x10001, 0x7a5e, 0x75b, [], 0x6}, {0xfff, 0x3, 0x101, [], 0x9}, {0x3ff, 0x3, 0x7ff, [], 0x3}, {0x2, 0xfffffffffffffffc, 0x5859, [], 0x9}, {0x9, 0x7fffffff, 0x8, [], 0x4}, {0x3ff, 0xbb2b, 0x861, [], 0x6}, {0x0, 0xffff, 0x9, [], 0x10000}, {0xfaa8, 0x3ff, 0x6, [], 0x7}, {0x9, 0x9b, 0x2, [], 0x3}, {0x9, 0x3, 0x5, [], 0x6}, {0x5, 0x9, 0xf5f, [], 0x8}, {0x3, 0x2c, 0x1, [], 0x7054}, {0x100000000, 0x1, 0xfffffffffffffffb, [], 0xfffffffffffffff7}, {0x3ff, 0x5, 0x288, [], 0x1000}, {0x7, 0x0, 0x2, [], 0x8000}, {0x6, 0x800, 0x6, [], 0xc6c}, {0x3, 0x100000000, 0x4, [], 0x10000}, {0x6, 0x1, 0x9, [], 0xfffffffffffffff7}, {0x1, 0x6, 0x1, [], 0x400}, {0x80000000, 0x5, 0x3, [], 0x2}, {0x8, 0x100000000, 0x100000000, [], 0x4}, {0x3ff, 0x4, 0x6, [], 0x8}]}) r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)='A', 0x1, 0xffffffffffffffff) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) keyctl$read(0xb, r1, &(0x7f0000000280), 0x0) 02:40:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffffffffffc}, 0x299) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) dup2(r0, r1) sendmsg$unix(r2, &(0x7f00000007c0)={&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000700)="85", 0x1}], 0x1}, 0x0) [ 698.588724] binder: undelivered TRANSACTION_ERROR: 29201 [ 698.594785] binder: send failed reply for transaction 1507 to 13128:13130 02:40:22 executing program 6: syz_emit_ethernet(0x15c, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [{[], {0x8100, 0xd7, 0x9, 0x2}}], {@ipv4={0x800, {{0x21, 0x4, 0x401, 0x7ff, 0x14a, 0x200, 0x1ff, 0x8, 0x5e, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}, {[@ra={0x94, 0x6, 0x6}, @rr={0x7, 0x13, 0x4, [@multicast1=0xe0000001, @multicast1=0xe0000001, @broadcast=0xffffffff, @multicast2=0xe0000002]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x10001, [{}, {[@broadcast=0xffffffff], 0x47d8}, {[], 0xff}]}, @generic={0x0, 0x9, "c51a324c2e28fb"}, @generic={0x8f, 0xd, "fa2817961195f249b3a8ca"}, @end, @lsrr={0x83, 0xf, 0x4, [@local={0xac, 0x14, 0x14, 0xaa}, @loopback=0x7f000001, @empty]}, @timestamp={0x44, 0x1c, 0x3, 0x3, 0x1e7, [{[], 0x81300000000}, {[@broadcast=0xffffffff], 0x4}, {[], 0x9}, {[@broadcast=0xffffffff], 0xffff}]}]}}, @igmp={0x1f, 0x2, 0x0, @multicast2=0xe0000002, "39cbd414a593f98985992e13078dccf8f7428a748ed0b07ebe5b8c4d379dd0721b72155098b121b37c916721845431fe7b85355f20f207ac472ead52a7e60f1bbee5d19284be5dfa5ed5b548f510a220bda06ef7c9a25f686026df7de4619a5455a2e4c6d5c385b81175fcf6888d0122d4b7ff5072a04e7e50f149eacb58689d9497a1255147753ee76fa05b480baf208729f94a26ce7e11d3e00fc67c595f591539c6417c7dd6dde1847600f19cefc28e5cbc8f2aa5ec6af792cea1aee3"}}}}}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200040, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{}, {0x80000001, 0x2}, 0x3f, 0x6, 0x2}) [ 698.664982] binder: undelivered TRANSACTION_COMPLETE [ 698.670256] binder: undelivered TRANSACTION_ERROR: 29189 [ 698.675811] binder: send failed reply for transaction 1504, target dead [ 698.722123] binder: release 13212:13213 transaction 1511 out, still active [ 698.729382] binder: unexpected work type, 4, not freed [ 698.734803] binder: undelivered TRANSACTION_COMPLETE [ 698.760157] binder: undelivered TRANSACTION_ERROR: 29189 [ 698.788148] FAULT_INJECTION: forcing a failure. [ 698.788148] name failslab, interval 1, probability 0, space 0, times 0 [ 698.799667] CPU: 1 PID: 13207 Comm: syz-executor0 Not tainted 4.18.0-rc2+ #21 [ 698.807213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 698.817178] Call Trace: [ 698.819777] dump_stack+0x1c9/0x2b4 [ 698.823423] ? dump_stack_print_info.cold.2+0x52/0x52 [ 698.828630] ? kernel_text_address+0x79/0xf0 [ 698.833051] should_fail.cold.4+0xa/0x1a [ 698.837126] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 698.842259] ? save_stack+0x43/0xd0 [ 698.845900] ? kasan_kmalloc+0xc4/0xe0 [ 698.849811] ? find_held_lock+0x36/0x1c0 [ 698.853923] ? check_same_owner+0x340/0x340 [ 698.858259] ? rcu_note_context_switch+0x730/0x730 [ 698.863208] __should_failslab+0x124/0x180 [ 698.867460] should_failslab+0x9/0x14 [ 698.871278] kmem_cache_alloc_node_trace+0x26f/0x770 [ 698.876404] __kmalloc_node_track_caller+0x33/0x70 [ 698.881345] __kmalloc_reserve.isra.40+0x3a/0xe0 [ 698.886115] __alloc_skb+0x155/0x790 [ 698.889853] ? skb_scrub_packet+0x580/0x580 [ 698.894657] ? rcu_is_watching+0x8c/0x150 [ 698.898817] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 698.903241] ? compat_rw_copy_check_uvector+0x34d/0x440 [ 698.908683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 698.914242] ? netlink_autobind.isra.34+0x240/0x330 [ 698.919276] netlink_sendmsg+0xb29/0xfd0 [ 698.923354] ? move_addr_to_kernel.part.20+0xc6/0x100 [ 698.928539] ? netlink_unicast+0x760/0x760 [ 698.932940] ? compat_mc_getsockopt+0xb20/0xb20 [ 698.937603] ? security_socket_sendmsg+0x94/0xc0 [ 698.942354] ? netlink_unicast+0x760/0x760 [ 698.946583] sock_sendmsg+0xd5/0x120 [ 698.950287] ___sys_sendmsg+0x7fd/0x930 [ 698.954254] ? copy_msghdr_from_user+0x580/0x580 [ 698.959031] ? lock_downgrade+0x8f0/0x8f0 [ 698.963173] ? proc_fail_nth_write+0x9e/0x210 [ 698.967661] ? __fget_light+0x2f7/0x440 [ 698.971627] ? fget_raw+0x20/0x20 [ 698.975080] ? find_held_lock+0x36/0x1c0 [ 698.979132] ? kasan_check_write+0x14/0x20 [ 698.983356] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 698.988291] ? wait_for_completion+0x8d0/0x8d0 [ 698.992874] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 698.998411] ? sockfd_lookup_light+0xc5/0x160 [ 699.002895] __sys_sendmsg+0x11d/0x290 [ 699.006772] ? __ia32_sys_shutdown+0x80/0x80 [ 699.011270] ? __sb_end_write+0xac/0xe0 [ 699.015247] ? fput+0x130/0x1a0 [ 699.018515] ? ksys_write+0x1ae/0x260 [ 699.022320] ? mm_fault_error+0x380/0x380 [ 699.026461] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 699.031294] do_fast_syscall_32+0x34d/0xfb2 [ 699.035621] ? do_int80_syscall_32+0x890/0x890 [ 699.040196] ? kasan_check_write+0x14/0x20 [ 699.044421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 699.049957] ? syscall_return_slowpath+0x31d/0x5e0 [ 699.054886] ? sysret32_from_system_call+0x5/0x46 [ 699.059721] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 699.064553] entry_SYSENTER_compat+0x70/0x7f [ 699.068955] RIP: 0023:0xf7f49cb9 02:40:22 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='@\x00') munlock(&(0x7f000037d000/0x6000)=nil, 0x6000) 02:40:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)={0x5, 0x0, [{}, {}, {}, {}, {}]}) [ 699.072305] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 699.091576] RSP: 002b:00000000f5f450ac EFLAGS: 00000282 ORIG_RAX: 0000000000000172 [ 699.099286] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000020000100 [ 699.106553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 699.113810] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 699.121068] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 699.128323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 02:40:22 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x8003, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'bridge_slave_0\x00', {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/33) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000200)=""/197) [ 699.139076] binder: 13212:13213 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer 02:40:22 executing program 4: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) sync_file_range(r0, 0x1, 0x4000000000000, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0xfde5, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x11, 0x0, @multicast1=0xe0000001}}}, 0xfdef) [ 699.185796] binder_alloc: 13212:13213 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 699.194543] binder: 13212:13213 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:22 executing program 6: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x109000, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000001c0)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000340)={[], 0xca8, 0x3, 0x7, 0x81, 0x7, r1}) recvmmsg(0xffffffffffffff9c, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@ll, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)=""/218, 0xda}], 0x1, &(0x7f0000000340)}}], 0x1, 0x0, &(0x7f0000000d40)) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200401) fchdir(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x2, 0x4, 0x1, 0x7}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000080), &(0x7f00000000c0)=""/40}, 0x18) 02:40:22 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40400, 0x2) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1b, &(0x7f00000000c0)=""/126, &(0x7f00000001c0)=0x7e) [ 699.253585] binder: BINDER_SET_CONTEXT_MGR already set [ 699.284283] binder: 13212:13232 ioctl 40046207 0 returned -16 [ 699.328771] binder_alloc: 13212: binder_alloc_buf, no vma [ 699.329086] binder: 13212:13239 got transaction to invalid handle [ 699.334505] binder: 13212:13213 transaction failed 29189/-3, size 24-8 line 2967 [ 699.340844] binder: 13212:13239 transaction failed 29201/-22, size 0-0 line 2852 [ 699.380843] Unknown ioctl -1069542797 02:40:23 executing program 0 (fault-call:3 fault-nth:2): r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:23 executing program 7: r0 = memfd_create(&(0x7f0000000000)='em0userproc%\x00', 0x0) r1 = getpgid(0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/ipx\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a0bcb98a3e1f46fd51b139d755efce9768b84ea75c2ff4b3c85caef374d126a56fa4743af7ef55c846bfe7dd16072d260ffddcc8a6d22e02f44d6a360524b86b51a4b58afca35f12201adb024bfb20fbd364e78a232fbef31595029f755740ab15e173dc73ba964a4189007c7c40db8fb4b64dd8ec4d366") sendfile(r0, r2, &(0x7f00000000c0), 0x80000002) 02:40:23 executing program 1: r0 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in=@broadcast}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000000)=0xe8) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000240)) sendfile(r2, r2, &(0x7f0000000100), 0x1) [ 699.405073] Unknown ioctl -1069542797 [ 699.416173] binder: 13212:13232 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:23 executing program 6: socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [{[], {0x8100, 0x4, 0x8, 0x2}}], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x200000003a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}}}}}, &(0x7f0000a95fe8)) [ 699.460564] binder: undelivered TRANSACTION_ERROR: 29189 [ 699.512763] binder: 13212:13232 BC_FREE_BUFFER u0000000020ffc000 no match [ 699.583731] binder: undelivered TRANSACTION_ERROR: 29201 [ 699.589992] binder: send failed reply for transaction 1514 to 13212:13213 [ 699.615456] binder: undelivered TRANSACTION_COMPLETE [ 699.620881] binder: undelivered TRANSACTION_ERROR: 29189 [ 699.627312] binder: send failed reply for transaction 1511, target dead [ 699.835682] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 699.843321] FAULT_INJECTION: forcing a failure. [ 699.843321] name failslab, interval 1, probability 0, space 0, times 0 [ 699.854808] CPU: 1 PID: 13258 Comm: syz-executor0 Not tainted 4.18.0-rc2+ #21 [ 699.862091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.871532] Call Trace: [ 699.874129] dump_stack+0x1c9/0x2b4 [ 699.877762] ? dump_stack_print_info.cold.2+0x52/0x52 [ 699.882958] ? kasan_check_write+0x14/0x20 [ 699.887209] ? finish_task_switch+0x2ca/0x890 [ 699.891717] should_fail.cold.4+0xa/0x1a [ 699.895802] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 699.900926] ? __schedule+0x884/0x1ed0 [ 699.904826] ? __sched_text_start+0x8/0x8 [ 699.908986] ? find_held_lock+0x36/0x1c0 [ 699.913098] ? check_same_owner+0x340/0x340 [ 699.917423] ? rtnl_setlink+0x2b2/0x400 [ 699.921413] __should_failslab+0x124/0x180 [ 699.925664] should_failslab+0x9/0x14 [ 699.929478] kmem_cache_alloc_node+0x272/0x780 [ 699.934082] __alloc_skb+0x119/0x790 [ 699.937809] ? skb_scrub_packet+0x580/0x580 [ 699.942152] ? m_show+0x5d0/0x5d0 [ 699.945623] ? rcu_is_watching+0x8c/0x150 [ 699.949771] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 699.954175] ? do_setlink+0x3e10/0x3e10 [ 699.958158] netlink_ack+0x2df/0xbe0 [ 699.961862] ? netlink_sendmsg+0xfd0/0xfd0 [ 699.966100] netlink_rcv_skb+0x35d/0x440 [ 699.970151] ? rtnetlink_put_metrics+0x690/0x690 [ 699.974895] ? netlink_ack+0xbe0/0xbe0 [ 699.978768] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 699.983174] rtnetlink_rcv+0x1c/0x20 [ 699.987600] netlink_unicast+0x5a0/0x760 [ 699.991769] ? netlink_attachskb+0x9a0/0x9a0 [ 699.996185] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 700.001718] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 700.006995] netlink_sendmsg+0xa18/0xfd0 [ 700.011058] ? move_addr_to_kernel.part.20+0xc6/0x100 [ 700.016242] ? netlink_unicast+0x760/0x760 [ 700.020466] ? compat_mc_getsockopt+0xb20/0xb20 [ 700.025138] ? security_socket_sendmsg+0x94/0xc0 [ 700.029899] ? netlink_unicast+0x760/0x760 [ 700.034123] sock_sendmsg+0xd5/0x120 [ 700.037832] ___sys_sendmsg+0x7fd/0x930 [ 700.041818] ? copy_msghdr_from_user+0x580/0x580 [ 700.046567] ? lock_downgrade+0x8f0/0x8f0 [ 700.050727] ? proc_fail_nth_write+0x9e/0x210 [ 700.055219] ? __fget_light+0x2f7/0x440 [ 700.059286] ? fget_raw+0x20/0x20 [ 700.062745] ? find_held_lock+0x36/0x1c0 [ 700.066801] ? kasan_check_write+0x14/0x20 [ 700.071139] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 700.076090] ? wait_for_completion+0x8d0/0x8d0 [ 700.080675] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 700.086462] ? sockfd_lookup_light+0xc5/0x160 [ 700.090949] __sys_sendmsg+0x11d/0x290 [ 700.094826] ? __ia32_sys_shutdown+0x80/0x80 [ 700.099231] ? __sb_end_write+0xac/0xe0 [ 700.103289] ? fput+0x130/0x1a0 [ 700.106558] ? ksys_write+0x1ae/0x260 [ 700.110370] ? mm_fault_error+0x380/0x380 [ 700.114540] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 700.119296] do_fast_syscall_32+0x34d/0xfb2 [ 700.123621] ? do_int80_syscall_32+0x890/0x890 [ 700.128203] ? syscall_slow_exit_work+0x500/0x500 [ 700.133044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 700.138580] ? syscall_return_slowpath+0x31d/0x5e0 [ 700.143519] ? sysret32_from_system_call+0x5/0x46 [ 700.148360] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 700.153198] entry_SYSENTER_compat+0x70/0x7f [ 700.157589] RIP: 0023:0xf7f49cb9 [ 700.160934] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 700.180139] RSP: 002b:00000000f5f450ac EFLAGS: 00000282 ORIG_RAX: 0000000000000172 [ 700.187968] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000020000100 [ 700.195233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 700.202594] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 700.209851] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 700.217115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 02:40:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) 02:40:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x6000, 0x0, &(0x7f0000000480)}) 02:40:24 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) 02:40:24 executing program 5: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x890c, &(0x7f00000000c0)={"696662300200", @ifru_settings={0x0, 0x2, @raw_hdlc=&(0x7f00000001c0)}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @loopback=0x7f000001}}, 0x7fff, 0x49}, &(0x7f0000000040)=0x88) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={r2, 0x80000000, 0x6, [0x7fffffff, 0x6, 0x7ff, 0x9, 0x1, 0x4]}, 0x14) 02:40:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x10000000000001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8ff7, 0x2, 0x0, 0x0, 0x1}) syz_open_pts(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000004c0)='\x00', 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0x1000, "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"}, &(0x7f0000000280)=0x1008) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e24, 0x4}}, [0x10001, 0x1, 0x6, 0x1ff, 0x2, 0x5, 0x808, 0x9, 0x5, 0xffffffffffffffff, 0x0, 0x7fffffff, 0xff, 0x4, 0x68]}, &(0x7f00000003c0)=0x100) write(r1, &(0x7f0000000180)="112f492c22ea92dce3ff65e5b0a9284535620ff15009f2f8e92442e8dca1177a6f63da6108fb15ec2a3b5217704c0df612f4930b26d5f1960bcc85b3bb14870f08644096bbf4414b6a0450078efa039ddb59e42f20bca42d8f3b0135f7841bc6b75001a4d66353bd34f87a312c61c15c934f422d6f86f816fb2baf877c03e5078bcd875f070aeff4cdd4a898da1516d20c88e443ba29c88cd57cef1b1116df93bf7dd593eada3ce14a7d0547ff07cb65262b9b8992889522e0f05eb0e12a2d2cf1caf05c8f9c73177bfade0337649704d9ea88ffce73f0781b4745c6d6b6342345cfb46d61e685168ba050a79a2b", 0xee) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e21, @loopback=0x7f000001}], 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/208) 02:40:24 executing program 6: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) 02:40:24 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xa}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x12, "e933dd76957063ba21545f60443ef5e4690d"}, &(0x7f0000000140)=0x1a) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000180)={r2, 0x10000}, 0x8) sendfile(r0, r1, &(0x7f0000000040), 0x8010) 02:40:24 executing program 0 (fault-call:3 fault-nth:3): r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 700.406421] binder: release 13275:13276 transaction 1518 out, still active [ 700.413587] binder: unexpected work type, 4, not freed [ 700.418939] binder: undelivered TRANSACTION_COMPLETE [ 700.425945] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 700.434089] IPVS: ftp: loaded support on port[0] = 21 02:40:24 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x100000000000001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x10001, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x20}}, 0x3}, @in6={0xa, 0x4e22, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x80}, @in6={0xa, 0x4e22, 0x8001, @loopback={0x0, 0x1}, 0x2}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x5}, @in6={0xa, 0x4e23, 0x9, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x10}, @in6={0xa, 0x4e21, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffffffc}, @in6={0xa, 0x4e23, 0x8000, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, @in6={0xa, 0x4e21, 0xa88, @dev={0xfe, 0x80, [], 0xb}, 0x5}, @in={0x2, 0x4e22, @loopback=0x7f000001}], 0x100) connect$rds(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0)}, 0x500}], 0x400000000000284, 0x20004bc0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x8, &(0x7f00000000c0)=@raw=[@map={0x18, 0x7, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0xd, 0x1, 0x0, r1}, @ldst={0x2, 0x3, 0x7, 0x3, 0x3, 0xffffffc3, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0xab, &(0x7f0000000140)=""/171, 0x41100, 0xb1b6c391242e9d22, [], r2, 0xf}, 0x48) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) 02:40:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) r2 = syz_open_pts(r0, 0x0) read(r2, &(0x7f0000000000)=""/107, 0x6b) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000939000)) pkey_alloc(0x0, 0x2) ioctl$TCFLSH(r0, 0x540b, 0x0) [ 700.463358] binder: 13275:13276 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 700.468459] FAULT_INJECTION: forcing a failure. [ 700.468459] name failslab, interval 1, probability 0, space 0, times 0 [ 700.483782] CPU: 0 PID: 13284 Comm: syz-executor0 Not tainted 4.18.0-rc2+ #21 [ 700.491064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.498123] binder_alloc: 13275:13276 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 700.500418] Call Trace: 02:40:24 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=""/195, &(0x7f0000000300)=""/60, &(0x7f0000000340)=""/173}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) close(r1) r2 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)) [ 700.500445] dump_stack+0x1c9/0x2b4 [ 700.500467] ? dump_stack_print_info.cold.2+0x52/0x52 [ 700.500486] ? kernel_text_address+0x79/0xf0 [ 700.500508] should_fail.cold.4+0xa/0x1a [ 700.509053] binder: 13275:13276 BC_FREE_BUFFER u0000000020ffc000 no match [ 700.511745] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 700.511769] ? save_stack+0xa9/0xd0 [ 700.544733] ? save_stack+0x43/0xd0 [ 700.548376] ? kasan_kmalloc+0xc4/0xe0 [ 700.552988] ? find_held_lock+0x36/0x1c0 [ 700.556578] binder: BINDER_SET_CONTEXT_MGR already set [ 700.557098] ? check_same_owner+0x340/0x340 [ 700.557118] ? rcu_note_context_switch+0x730/0x730 [ 700.563872] IPVS: ftp: loaded support on port[0] = 21 [ 700.566720] __should_failslab+0x124/0x180 [ 700.566741] should_failslab+0x9/0x14 [ 700.566756] kmem_cache_alloc_node_trace+0x26f/0x770 [ 700.566777] __kmalloc_node_track_caller+0x33/0x70 [ 700.571818] binder: 13275:13296 ioctl 40046207 0 returned -16 [ 700.576992] __kmalloc_reserve.isra.40+0x3a/0xe0 [ 700.577010] __alloc_skb+0x155/0x790 02:40:24 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000200)) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="06", 0x1, r1) r3 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000580)="b3", 0x1, r1) fallocate(0xffffffffffffffff, 0x20, 0x3f1, 0x9) keyctl$update(0x2, r3, &(0x7f0000000340)="df02754677212dfc3e2abcb244e22773e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd9", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r2}, &(0x7f0000a53ffb)=""/5, 0x4, &(0x7f00000001c0)={&(0x7f0000a3dffa)={'sha224-generic\x00'}}) [ 700.577027] ? skb_scrub_packet+0x580/0x580 [ 700.577046] ? m_show+0x5d0/0x5d0 [ 700.577066] ? rcu_is_watching+0x8c/0x150 [ 700.594950] binder_alloc: 13275: binder_alloc_buf, no vma [ 700.595737] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 700.595757] ? do_setlink+0x3e10/0x3e10 [ 700.601727] binder: 13275:13276 transaction failed 29189/-3, size 24-8 line 2967 [ 700.606501] netlink_ack+0x2df/0xbe0 [ 700.606524] ? netlink_sendmsg+0xfd0/0xfd0 [ 700.632144] binder: 13275:13296 got transaction to invalid handle [ 700.636091] netlink_rcv_skb+0x35d/0x440 02:40:24 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000bf4000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x100000, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback=0x7f000001}, 0x10) [ 700.636110] ? rtnetlink_put_metrics+0x690/0x690 [ 700.636124] ? netlink_ack+0xbe0/0xbe0 [ 700.636140] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 700.643825] binder: 13275:13296 transaction failed 29201/-22, size 0-0 line 2852 [ 700.647511] rtnetlink_rcv+0x1c/0x20 [ 700.647528] netlink_unicast+0x5a0/0x760 [ 700.666073] binder: 13275:13300 BC_FREE_BUFFER u0000000020ffc000 no match [ 700.666805] ? netlink_attachskb+0x9a0/0x9a0 [ 700.666827] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 700.671242] binder: 13275:13300 BC_FREE_BUFFER u0000000020ffc000 no match [ 700.675501] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 700.675521] netlink_sendmsg+0xa18/0xfd0 [ 700.675536] ? move_addr_to_kernel.part.20+0xc6/0x100 [ 700.675554] ? netlink_unicast+0x760/0x760 [ 700.733990] ? compat_mc_getsockopt+0xb20/0xb20 [ 700.738772] ? security_socket_sendmsg+0x94/0xc0 [ 700.743550] ? netlink_unicast+0x760/0x760 [ 700.747889] sock_sendmsg+0xd5/0x120 [ 700.751621] ___sys_sendmsg+0x7fd/0x930 [ 700.755793] ? copy_msghdr_from_user+0x580/0x580 [ 700.760820] ? lock_downgrade+0x8f0/0x8f0 02:40:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x20) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGETD(r1, 0x5452, &(0x7f0000000000)) [ 700.765164] ? proc_fail_nth_write+0x9e/0x210 [ 700.769086] RDS: rds_bind could not find a transport for 224.0.0.2, load rds_tcp or rds_rdma? [ 700.769677] ? __fget_light+0x2f7/0x440 [ 700.769693] ? fget_raw+0x20/0x20 [ 700.769706] ? find_held_lock+0x36/0x1c0 [ 700.769727] ? kasan_check_write+0x14/0x20 [ 700.794110] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 700.799058] ? wait_for_completion+0x8d0/0x8d0 [ 700.803662] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 700.809214] ? sockfd_lookup_light+0xc5/0x160 [ 700.813900] __sys_sendmsg+0x11d/0x290 [ 700.817801] ? __ia32_sys_shutdown+0x80/0x80 [ 700.822224] ? __sb_end_write+0xac/0xe0 [ 700.826246] ? fput+0x130/0x1a0 [ 700.829622] ? ksys_write+0x1ae/0x260 [ 700.833439] ? mm_fault_error+0x380/0x380 [ 700.836214] RDS: rds_bind could not find a transport for 224.0.0.2, load rds_tcp or rds_rdma? [ 700.837597] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 700.837619] do_fast_syscall_32+0x34d/0xfb2 [ 700.837638] ? do_int80_syscall_32+0x890/0x890 [ 700.837654] ? _raw_spin_unlock_irq+0x27/0x70 02:40:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x700000000000000, 0x0, &(0x7f0000000480)}) [ 700.837671] ? finish_task_switch+0x1d3/0x890 [ 700.868968] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 700.874519] ? syscall_return_slowpath+0x31d/0x5e0 [ 700.875488] binder: undelivered TRANSACTION_ERROR: 29201 [ 700.879483] ? sysret32_from_system_call+0x5/0x46 [ 700.879507] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 700.879527] entry_SYSENTER_compat+0x70/0x7f [ 700.879539] RIP: 0023:0xf7f49cb9 [ 700.879544] Code: 55 08 8b 88 64 cd ff [ 700.899101] binder: send failed reply for transaction 1521 to 13275:13276 [ 700.899229] ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 700.930642] RSP: 002b:00000000f5f450ac EFLAGS: 00000282 ORIG_RAX: 0000000000000172 [ 700.938347] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000020000100 [ 700.945689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 700.953031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 700.960285] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 700.967723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 02:40:24 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9984, 0x2) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) write(r0, &(0x7f00000001c0)="130000001000ffdde200f49ff60f050000230a009d0000001100c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af55e3129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000003400000000000000d5ba641663ac6847d35b8779", 0xc8) 02:40:24 executing program 0 (fault-call:3 fault-nth:4): r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:24 executing program 1: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00') setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x9, 0x4) write$cgroup_pid(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="37dd6dc39ae79bb4860ccf79ea96981a59180000009d003338363231e2f5"], 0xa) [ 701.045418] binder: undelivered TRANSACTION_COMPLETE [ 701.050740] binder: undelivered TRANSACTION_ERROR: 29189 [ 701.056282] binder: send failed reply for transaction 1518, target dead [ 701.061654] binder: release 13322:13323 transaction 1525 out, still active [ 701.070148] binder: unexpected work type, 4, not freed [ 701.070312] binder: undelivered TRANSACTION_ERROR: 29189 [ 701.075562] binder: undelivered TRANSACTION_COMPLETE 02:40:24 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9ed, 0x301000) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000600000/0x2000)=nil, 0x2000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) openat$cgroup_type(r1, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) r3 = fcntl$dupfd(r2, 0x406, r1) accept4$inet(r1, &(0x7f0000000080)={0x0, 0x0, @rand_addr}, &(0x7f00000000c0)=0x10, 0x800) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0xfffffffffffffffc) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000180)=0x4, 0x4) 02:40:24 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000001c0)=""/74, &(0x7f0000000080)) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x0, 0x183200) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000240)) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1ff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x2}, &(0x7f00000000c0)=0x8) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={r3, 0x1}, 0x8) 02:40:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 701.140492] binder: 13322:13323 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 701.149357] binder_alloc: 13322:13323 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 701.154496] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 701.157963] binder: 13322:13323 BC_FREE_BUFFER u0000000020ffc000 no match [ 701.165962] binder: BINDER_SET_CONTEXT_MGR already set 02:40:24 executing program 3: gettid() unshare(0x2000400) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0) [ 701.262140] binder: 13322:13331 ioctl 40046207 0 returned -16 [ 701.290756] binder_alloc: 13322: binder_alloc_buf, no vma [ 701.296671] binder: 13322:13323 transaction failed 29189/-3, size 24-8 line 2967 02:40:25 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000003c0)=""/190) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000240)=0xf0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r3 = getpid() rt_sigqueueinfo(r3, 0x1008, &(0x7f0000000080)={0x3b, 0x200000008, 0x2, 0x30}) close(r2) r4 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x8000) sched_rr_get_interval(r3, &(0x7f0000000100)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1e11) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x100402, 0x4) 02:40:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_newneigh={0x24, 0x1c, 0x0, 0x0, 0x0, {}, [@NDA_DST_IPV4={0x8, 0x1, @multicast2=0xe0000002}]}, 0x24}, 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000001fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000400), &(0x7f0000000440)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='statm\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000300)={r3, 0xaf, "f1ea422a80ddf9872ef01d37850fc4034e36db22922c23b2a8d552f5ee40f03537aae24c0b2a700c89e796a61ba39771e74766546ace01596f66e43ad6fac7111f1781056b626c422de733e48c75bf3586caa29e9d49e2f8e132c25f3b373250ad0f77539b6d3f54b45be6bf34bc436b1437a0fda1bccb6e7a4aca28a6b165e809854707bfbdfd1aafd21e75da2872688dcca1f24dd0363f9c85b3d8fbb9b6864156e45d941e9e7aa89757e131d531"}, &(0x7f00000003c0)=0xb7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r4 = dup2(r1, r0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000240)) [ 701.348461] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 701.349296] binder: 13322:13348 got transaction to invalid handle [ 701.362642] binder: 13322:13348 transaction failed 29201/-22, size 0-0 line 2852 [ 701.461577] binder: BINDER_SET_CONTEXT_MGR already set [ 701.472422] binder: 13322:13366 BC_FREE_BUFFER u0000000020ffc000 no match [ 701.475215] binder: 13356:13364 ioctl 40046207 0 returned -16 [ 701.482928] binder: 13322:13366 BC_FREE_BUFFER u0000000020ffc000 no match [ 701.501731] binder: 13356:13364 ERROR: BC_REGISTER_LOOPER called without request [ 701.510928] binder: BINDER_SET_CONTEXT_MGR already set [ 701.516909] binder: 13356:13364 ioctl 40046207 0 returned -16 [ 701.528320] binder: undelivered TRANSACTION_ERROR: 29201 [ 701.535535] binder: send failed reply for transaction 1528 to 13322:13323 [ 701.541620] binder: 13356:13367 ERROR: BC_REGISTER_LOOPER called without request [ 701.551753] binder: undelivered TRANSACTION_COMPLETE [ 701.553909] binder: 13356:13364 Acquire 1 refcount change on invalid ref 0 ret -22 [ 701.557318] binder: undelivered TRANSACTION_ERROR: 29189 [ 701.570654] binder: send failed reply for transaction 1525, target dead [ 701.578948] binder: undelivered TRANSACTION_ERROR: 29189 [ 701.585635] binder: 13356:13367 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:40:25 executing program 6: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e22, 0xfa3, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x1c9d}}}, 0x84) r2 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x11, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf}}) 02:40:25 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x40096102, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 02:40:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a11cdf8311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="f2ec0638d7899e891dcd824fc9e4e54cadcff7244bc8f5f213d715ab26e0a4e2deef87f05dfd5fba2f8b113d06e2fb0d2e85130a3d5450e22558f21c9ef7d6afe9e74beb926e195a74406c5b5c8a6d092f3f337ad31dd7e5a141ee7c3cdae1a59be404d27c6189bcc43fa286a96bdee4cba8bb8c8c5cccdfdefd35f6bbf157ea12b32cae78745c125988f0af5e5ef481", 0x90}], 0x1, &(0x7f0000000040)}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007a80)=""/57, 0x39}, {&(0x7f0000007ac0)=""/222, 0xde}], 0x2, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) 02:40:25 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x7}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:25 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x8, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0x2c) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x440500) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000140)=0x2, 0x4) 02:40:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x500000000000000, 0x0, &(0x7f0000000480)}) 02:40:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x9, 0x40000) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffffd, 0x101000) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) bind$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, {0xb, 0x0, 0x1, 0x8, 0x800}, 0x5}, 0xa) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10, 0xf00}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x7, 0x1000000000a, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x2, @ipv4=@broadcast=0xffffffff}]}, 0x1c}, 0x1}, 0x0) socket(0x5, 0xa, 0x3) 02:40:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='autogroup\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000080)={0x2, 0x7, 0x8000, 0x3f, '\x00', 0x5}) ioctl$KVM_SMI(r1, 0xaeb7) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x8, 0x80) sendmsg$nl_crypto(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="000100001200000828bd7000fddbdf25647262675f6e6f70725f686d61635f73686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000022000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000080001000600000008000100000000000800010004000000080001001f000000"], 0x100}, 0x1, 0x0, 0x0, 0x881}, 0x4000000) getsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffef6) [ 701.873482] QAT: failed to copy from user cfg_data. [ 701.881810] binder: release 13382:13384 transaction 1533 out, still active [ 701.888993] binder: unexpected work type, 4, not freed [ 701.894341] binder: undelivered TRANSACTION_COMPLETE [ 701.915043] QAT: failed to copy from user cfg_data. 02:40:25 executing program 4: r0 = timerfd_create(0x9, 0x0) r1 = dup(r0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 02:40:25 executing program 7: setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x2030}, 0xc) getpgrp(0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x37ef, 0x2}, &(0x7f0000000140)=0x88) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000440)={0x5, 0x20f, 0x435, 0xb4fe, r2}, &(0x7f0000000480)=0x10) sysinfo(&(0x7f00000004c0)=""/112) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x41) ioctl$SG_GET_NUM_WAITING(r1, 0xc0c0583b, &(0x7f0000000180)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000240)={0x800, 0x10001, 0x7fff, 0x0, 0x0, [], [], [], 0x8001, 0x8}) [ 701.962742] binder: 13382:13384 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 701.998970] binder_alloc: 13382:13384 FREE_BUFFER u0000000020ffc000 user freed buffer twice 02:40:25 executing program 1: unshare(0x8000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = eventfd(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x3fd, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1) 02:40:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000180)=""/243, &(0x7f0000000000)=0xf3) 02:40:25 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x800042c05) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) [ 702.007790] binder: 13382:13384 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x9, 0x200) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xffffffffffffff00, 0x0, 0x1, 0xffffffffffffffff, 0xffffffff, 0x7f, 0x8, 0x2, 0x2, 0x80000001, 0x3, 0x80000000}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x100000003}) [ 702.089924] binder: BINDER_SET_CONTEXT_MGR already set 02:40:25 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a0003000000000000000000020000000000000000000000"], 0x1c}, 0x1}, 0x0) 02:40:25 executing program 7: syslog(0x2, &(0x7f0000000000), 0xffffffffffffffd6) [ 702.127131] binder: 13382:13419 ioctl 40046207 0 returned -16 [ 702.157369] binder_alloc: 13382: binder_alloc_buf, no vma [ 702.163218] binder: 13382:13384 transaction failed 29189/-3, size 24-8 line 2967 02:40:25 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x11}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 702.218442] binder: 13382:13429 got transaction to invalid handle [ 702.224917] binder: 13382:13429 transaction failed 29201/-22, size 0-0 line 2852 02:40:25 executing program 3: timer_create(0x3, &(0x7f0000e08000)={0x0, 0x12}, &(0x7f0000e4dffc)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1, 0x200100) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x20) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0xb1, 0x6ee, 0x8, 0x80000000, 0x0, 0x7, 0x60000, 0xd, 0xfffffffffffffffb, 0x8001, 0x3e69, 0xbc18, 0x4, 0x0, 0x1, 0xb3, 0x8, 0x100000000, 0x0, 0x0, 0x4, 0x2937, 0x7fff, 0x7, 0x0, 0x101, 0x707, 0x4, 0x9, 0x3, 0x0, 0x80, 0x200, 0x1, 0xd0, 0x2000000, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x400}, 0x4, 0x1, 0xffff, 0x7, 0x9, 0x8, 0x9}, r2, 0x2, 0xffffffffffffffff, 0x2) timer_gettime(r0, &(0x7f0000000280)) r3 = getpid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) kcmp(r3, r4, 0x0, r1, r1) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000000)={0x6, 0xf, 0x1, 0xffffffffffffffff}) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x2, 0x0) r7 = dup3(r5, r6, 0x80000) setns(r7, 0x8000000) 02:40:25 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x140) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fcntl$getown(r1, 0x9) sendmsg$key(r0, &(0x7f0000f56000)={0x2, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc0000000000030006000000000002000000e0000054d81458186fe8b90002000100000000000000020700000000030005000000000002000000e00000010000000000fca0d9"], 0x60}, 0x1}, 0x0) 02:40:25 executing program 4: nanosleep(&(0x7f0000000000), &(0x7f0000000640)) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000280)=0x1f000000, 0x8000000000001f, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x14002) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'bridge0\x00'}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)="e38984fc840d7257ac99c6f5e5da8897e21dfa5878bf5af3b8a83bd65caa48ed9be1296f8307a55516412198186b7e794e244c61749c77e49ef98316d6633557e18c59f3fd3cc3d5ea1e035a68c82245c95a783e217dce6c6f38c2de64b08eecc6467901adf927e1a4cf7a084fe00fef2c6ea978", 0x74}, {&(0x7f00000002c0)="6c604b1fed01a2f48ee4c546a800d04a50798fba7332866f9faf83b36c84e51a7d773b900852766aae6714c35c455f1e2175f054f350a9733f956e3bb4aef706a0970c9d1c5db5ca52377cdd101e18da00317f0df8408fd122c9f990757d72de842d7a67aa5b3c376eaab4d3dfe7648a1e8e8ab8b40f443cd28756de4ae44c20c77cb97fceff35c1133bdb53a07b2ab201158a92", 0x94}, {&(0x7f00000003c0)="faf74983f177987bc99e32e828ef41e58cecc0ea80dd7f3f2205a8e0aec4b18378b36abed393abc563f49b64afcfb2401ccccd2f8dea34dbfea37113e98cce5b3db64be1600c59cadf837dd6e64c89b85becd1c3953c504e6f32ca2ffe164e8d1d50bbc4ef89a9705f2e99e63416f1ed6c46e7bc389cb4465f9cc1aa29ae8e42646631478c9f60f163932a7d87cb0f32626bb21015e085a7216f387913323f5780a1772f0bfb910eea9e0d60938438e225c3cc61bc2d77ed66aca01d8a883486973fac8050cc69b60f12cb717de51d69c1c5c290c949a1e8b430e23e942ee8309cc2890fc522b48037f47df10e4876651f9118", 0xf3}], 0x3, &(0x7f00000004c0)=[{0x3c, 0x115, 0x3ff, "c32ee15cced5110916f476080a4ab40a55ad4edc493faa58aff7dfed6b95eaaaf48e78e3b87f0e2ce71c1ffdda9c"}, {0x4c, 0x19d, 0x2, "88c0bd2cafdd08f867fb0e05db0df18b9c940afea396472b2f6be509ded752da2970ad426f92e384b3e19094c80ec92683d83aecab38653e57a618f82c780583"}, {0x44, 0x0, 0x5, "e085fd29e3d78160a3acc464a599bd13d3e6925e2d2668159b8a2578fa84b17b6b8e1ea625efdca7b2d511a3080f8d3d7684fd3e0812"}], 0xcc, 0x800}, 0x2}], 0x1, 0x8840) openat$cgroup(r0, &(0x7f0000000600)='syz0\x00', 0x200002, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 02:40:25 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x6}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 702.266339] binder: 13382:13439 BC_FREE_BUFFER u0000000020ffc000 no match [ 702.293157] binder: 13382:13439 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x2000000000000000, 0x0, &(0x7f0000000480)}) 02:40:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) readahead(r0, 0x40, 0x81f9) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000300)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000080)={{0x80}, 'port0\x00', 0xffffffffffffffff, 0x2}) r1 = socket(0x11, 0xa, 0x0) dup2(r1, r0) 02:40:26 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x4000000000000286) getrandom(&(0x7f0000000000)=""/161, 0xa1, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x400, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) fcntl$setown(r1, 0x8, r2) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x12, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={r3}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) io_setup(0x101, &(0x7f00000000c0)=0x0) io_submit(r4, 0x400000000000025e, &(0x7f0000356ff0)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000001ec0)="5ba81c8b", 0x4}]) 02:40:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)=0x0) prlimit64(r2, 0x6, &(0x7f00000003c0)={0xfffffffffffffeff, 0x8}, &(0x7f0000000400)) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, "99ee75555834ebdb9dfeb6b1d747fac0e786bc54633a84d75d70d8a098acebf19513ddb2229c444d365dc6b46889d7ad0879da1eb046a606488590990687533f4ec08aa13a4430ca173af1dd6c5204129bd151f2536777d5"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000280)="fc0f0096000081d70a0064360f77ba420066ed1d0000650f060f080f21c60fc79f5074", 0x23}], 0xe3e7c7a019c0acfa, 0x0, &(0x7f00000002c0), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000001c0)={{0x4e5, 0x0, 0x5, 0x3, 0x5, 0x85c}, 0x8, 0x7ff, 0xa8d, 0x0, 0x10001, "cd90a82230cc0c96907489e2aed9c9ee3f92c9e455e75a6797e04383d14cbca87357b0eac6d3b978856f5a3232c4b2b8c36d52e5e75678967c2a84fa6e573f6c20c6c790cbfbc32914a0a2e769a5a9881e2132286abf4d13bb0b0252817628e72061080a64e3d35f3a2efa53dea00b010a6ff71c039377086329161047ea705c"}) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000180)=0xffffffffffffffe1, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f3d0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34c7634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e9d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:40:26 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x309002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) [ 702.452882] binder: undelivered TRANSACTION_ERROR: 29201 [ 702.461715] binder: send failed reply for transaction 1536 to 13382:13384 02:40:26 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x63}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 702.502894] binder: undelivered TRANSACTION_COMPLETE [ 702.508280] binder: undelivered TRANSACTION_ERROR: 29189 [ 702.513859] binder: send failed reply for transaction 1533, target dead 02:40:26 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x9, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000140)={r2, r0, 0x715d3e5d}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/31, &(0x7f0000000040)=0x1f) [ 702.599452] binder: release 13475:13477 transaction 1540 out, still active [ 702.606732] binder: unexpected work type, 4, not freed [ 702.612247] binder: undelivered TRANSACTION_COMPLETE 02:40:26 executing program 6: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0x40045542, &(0x7f0000004000)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f00000000c0)=""/151) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x800) [ 702.653203] binder: undelivered TRANSACTION_ERROR: 29189 [ 702.683370] binder: 13475:13477 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer 02:40:26 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x5f5e0ff}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 702.703289] binder_alloc: 13475:13477 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 702.711964] binder: 13475:13477 BC_FREE_BUFFER u0000000020ffc000 no match [ 702.773317] Unknown ioctl -2122820351 02:40:26 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000280)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) 02:40:26 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/ppp\x00', 0x40040, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/null\x00', 0x0, 0x0) r2 = dup2(r1, r0) setsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000580)={@broadcast=0xffffffff}, 0xc) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000005c0), 0x4) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01000500aaaaaaaaaa18ffffffffffffffffffffffff0180c20000030000000000907b800d00"]) 02:40:26 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0x8000000000000101, 0x4, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x14) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000240), &(0x7f0000000300)=""/180}, 0x18) [ 702.794794] binder: BINDER_SET_CONTEXT_MGR already set [ 702.812533] Unknown ioctl -2122820351 [ 702.827506] binder: 13475:13500 ioctl 40046207 0 returned -16 02:40:26 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x9}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 702.857965] binder_alloc: 13475: binder_alloc_buf, no vma [ 702.863947] binder: 13475:13477 transaction failed 29189/-3, size 24-8 line 2967 02:40:26 executing program 1: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000040)={0x100, 0x1, 0x88d3, 'queue1\x00', 0x9}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f000001cff0)={0x2, 0x0, @rand_addr=0x4}, 0x10) sendmsg$rds(r1, &(0x7f000000dfc8)={&(0x7f0000014000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="30000000140100000300000000000000", @ANYPTR64=&(0x7f0000019000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="2e00000000000000d9c839d5ce255e4b0d67381649e578aa7b10914499c556ef033cc653bbd71904e3259b4a0f555fed1869e68776403205ce8006b1dc42115b6d", @ANYPTR=&(0x7f000001efff)=ANY=[@ANYBLOB='\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x30}, 0x0) [ 703.057485] RDS: rds_bind could not find a transport for 0.0.0.4, load rds_tcp or rds_rdma? [ 703.069408] binder: undelivered TRANSACTION_ERROR: 29189 [ 703.075463] binder: send failed reply for transaction 1543 to 13475:13477 [ 703.101236] binder: undelivered TRANSACTION_COMPLETE [ 703.106481] binder: undelivered TRANSACTION_ERROR: 29189 [ 703.112066] binder: send failed reply for transaction 1540, target dead [ 703.144662] RDS: rds_bind could not find a transport for 0.0.0.4, load rds_tcp or rds_rdma? 02:40:27 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x400000, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000200)={0x2, &(0x7f0000000140)=[{}, {}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffff}, 0x13f}}, 0x20) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001a00)={{{@in6=@dev, @in6}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000001b00)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001b40)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}}}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}}, 0x0, @in=@rand_addr}}, 0xe8) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, r3}}, 0x48) dup2(r0, r2) 02:40:27 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@dev, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) recvmmsg(0xffffffffffffffff, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001880), 0x0, &(0x7f00000018c0)=""/251, 0xfb}}], 0x1, 0x0, 0x0) 02:40:27 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0xa0000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x800, 0x5, [0x8001, 0x7, 0x4, 0x9, 0x97e8]}, &(0x7f00000000c0)=0x12) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0x7ff}, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000), 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/220, 0xdc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x10100) r4 = request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000200)='/dev/vcs#\x00', 0xfffffffffffffff9) r5 = add_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$negate(0xd, r4, 0x30b, r5) getpeername$packet(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000480)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000004c0)={r6, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) 02:40:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000040)=0x3) syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x10000007fffffff) 02:40:27 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x80000000}, 0x1c) 02:40:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x3000000, 0x0, &(0x7f0000000480)}) 02:40:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x12}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:27 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f00000002c0)) r3 = accept4$unix(0xffffffffffffff9c, &(0x7f0000001340), &(0x7f00000013c0)=0x6e, 0x80000) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="88400000", @ANYRES16=r5, @ANYBLOB="090a27bd7000fddbdf250c00000008000400f7ffffff0c0003000800040001000000080005000100008058000200080007000000040014000100fe8000000000000000000000000000aa08000500030000000800060026000000080006007f00000008000700871c000008000700030000000800080000000100080002004e230000"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8004) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000001400)='vlan0\x00') mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f00001c0000/0x4000)=nil, 0x4000) [ 703.410355] binder: release 13545:13546 transaction 1546 out, still active [ 703.417648] binder: unexpected work type, 4, not freed [ 703.422994] binder: undelivered TRANSACTION_COMPLETE 02:40:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:27 executing program 7: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0xffffffffffffffff) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback=0x7f000001, @broadcast=0xffffffff}, 0xc) ioctl$SG_GET_NUM_WAITING(r0, 0xc0c0583b, &(0x7f0000000180)) 02:40:27 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x11, &(0x7f0000000200)={0x101, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffff80}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x104) [ 703.592807] binder: 13545:13546 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer 02:40:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000240)={0x0, {{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x104) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) pipe2(&(0x7f0000000080), 0x80000) syz_open_procfs(r1, &(0x7f0000000040)='net/tcp\x00') 02:40:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x2}}) 02:40:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0xd}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:27 executing program 6: r0 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x3ff) r4 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)="7f", 0x1, r2) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x34b, r0) keyctl$dh_compute(0x17, &(0x7f0000000340)={r4, r6, r6}, &(0x7f0000000600)=""/132, 0xffffffffffffff98, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, [], 0x14}, 0x7ff, 0x2, 0x0, 0x1, 0x6, 0x7, 0x100000001}, &(0x7f0000000240)=0x20) [ 703.649945] binder_alloc: 13545:13546 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 703.658652] binder: 13545:13546 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:27 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x100) getsockname$packet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x14) writev(r1, &(0x7f0000000380)=[{&(0x7f0000001640)="9386fec396ec5f7ed76e65f31e1a410c21", 0x11}], 0x1) recvmmsg(r1, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f00000002c0)=@sco, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/80, 0x50}], 0x1}}], 0x2, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x402, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000240)={@remote, 0x0}, &(0x7f0000000280)=0x14) bind$packet(r4, &(0x7f0000000340)={0x11, 0x18, r5, 0x1, 0xbed, 0x6}, 0x14) socket$l2tp(0x18, 0x1, 0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000ad369a8f680000000000000000000300000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000f894380ad0893682decee5e11db80c38f20ea04cba4d50cd1ba7d30a2b764a8d567f72e2641c2344d6f166d64ed69d8e60cf33c4fd4580c49720b7953fe09acbeef985e46bc3456715298c8368ff9bf7a85d28b43ce98face7878a70466f62f8f86d78b0a1d08b0c5d41fb928f5aaee98dfeea4e04e337e566447e9c8e7f4e"], 0x58) 02:40:27 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x4, 0x0) mkdirat(r0, &(0x7f0000fc3ff6)='./control\x00', 0x0) getdents64(r0, &(0x7f0000fc4fbe)=""/80, 0x50) unlinkat(r0, &(0x7f0000000100)='./control\x00', 0x200) [ 703.796159] binder: BINDER_SET_CONTEXT_MGR already set 02:40:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x31}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 703.843896] binder: 13545:13588 ioctl 40046207 0 returned -16 [ 703.884685] binder_alloc: 13545: binder_alloc_buf, no vma [ 703.890403] binder: 13545:13546 transaction failed 29189/-3, size 24-8 line 2967 02:40:27 executing program 7: set_mempolicy(0x4003, &(0x7f0000000140), 0x80) [ 703.962570] binder: 13545:13601 got transaction to invalid handle [ 703.968953] binder: 13545:13601 transaction failed 29201/-22, size 0-0 line 2852 [ 704.031174] binder: 13545:13610 BC_FREE_BUFFER u0000000020ffc000 no match [ 704.128261] binder: 13545:13610 BC_FREE_BUFFER u0000000020ffc000 no match [ 704.194878] binder: undelivered TRANSACTION_ERROR: 29201 [ 704.201123] binder: send failed reply for transaction 1549 to 13545:13546 [ 704.220602] binder: undelivered TRANSACTION_COMPLETE [ 704.225808] binder: undelivered TRANSACTION_ERROR: 29189 [ 704.231323] binder: send failed reply for transaction 1546, target dead [ 704.249323] binder: undelivered TRANSACTION_ERROR: 29189 02:40:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0xc, 0x6, 0x2, 0x9, 0x1, 0x5, 0x5, 0x5, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0x7, 0x0, 0x9, 0xc4, 0x88}, 0x14) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x5, 0x6, 0x4, 0x4}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000500)="18", 0x1}], 0x1, &(0x7f0000000100)}, 0x20048845) 02:40:28 executing program 5: lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) 02:40:28 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x410001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='bond_slave_1\x00') sendto$inet6(r1, &(0x7f0000000040), 0x113, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) close(r0) getpeername$inet6(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 02:40:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0xa}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:28 executing program 6: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000440)="01", 0x1, r2) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x182, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'poly1305\x00'}}) 02:40:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) r2 = accept4(r1, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80, 0x80800) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r1}) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14}, 0x10}, 0x301}, 0x0) 02:40:28 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0xc2001, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)={0x400000000000015b}) 02:40:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x300000000000000, 0x0, &(0x7f0000000480)}) [ 704.428389] binder: release 13628:13629 transaction 1553 out, still active [ 704.435662] binder: unexpected work type, 4, not freed [ 704.440999] binder: undelivered TRANSACTION_COMPLETE 02:40:28 executing program 7: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4ac00, 0x0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) renameat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) capset(&(0x7f0000f4b000)={0x19980330}, &(0x7f0000000040)) 02:40:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x52}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:28 executing program 6: r0 = socket$inet_sctp(0x2, 0x402000000000005, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000040000000d74589c14f27dcc288f983618dc7ce0af7b2fba0000070781713b7df4"], &(0x7f0000000040)=0x28) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}, 0x5, 0x32b1}, &(0x7f0000000000)=0x88) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0x100000001, 0x4}, 0x88) 02:40:28 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x33, 0x0, @remote={0xac, 0x223, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@lsrr={0x83, 0x7, 0x5ef, [@multicast1=0xe0000001]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f00000002c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffc]}) [ 704.496609] binder: 13628:13629 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer 02:40:28 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="db00000004360000dd000000000000009500000000000000bb9b892f8e0e06c90360d27c093a0319b192cf5b53ce059160d0b7ceb7a9d4478abd655ea22312ea51de5c2013693380da96ccd5261b4c211560fb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x102) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r2, r0}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xee9, 0x200) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @remote}, &(0x7f0000000100)=0xc) 02:40:28 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x101, 0x70bd25, 0x25dfdbfd, {0xa, 0x14, 0x20, 0x9, 0xfc, 0x1, 0xff, 0x9, 0x100}, [@RTA_EXPIRES={0x8, 0x10, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) sync() rmdir(&(0x7f0000000080)='./file0\x00') ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000100)={0x800000000000000, 0x6000, 0x200, 0x3, 0x6}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'veth0_to_bridge\x00', 0x0}) connect$packet(r2, &(0x7f0000000500)={0x11, 0x1d, r3, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) ioctl$int_in(r2, 0x5473, &(0x7f0000000080)=0xff) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback=0x7f000001}}, 0xffffffffffffffff, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) sendto$inet(r2, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) close(r2) [ 704.539970] binder_alloc: 13628:13629 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 704.548612] binder: 13628:13629 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:28 executing program 7: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x4) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000040)="bf1961e6a8022d09217760827486ecc819bd1d59ce74c717170f5468e013a334244e0b45c42a54ae175e51db24399ff11c47a14d743130987c4ae9cd77729b7a98145803bce59278c9ed0a300bf31304897d8c5719665d8a4d690ae99c") perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x8, &(0x7f0000044000)={0x0, 0x25}, &(0x7f0000044000)) 02:40:28 executing program 6: socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)) r0 = socket(0x15, 0x80005, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x8002, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000140)=0x2) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f00000002c0)=""/1, &(0x7f0000000000)=0x1b4) getpeername$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14) 02:40:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x3}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 704.673266] binder: BINDER_SET_CONTEXT_MGR already set 02:40:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x40046103, &(0x7f0000000080)) 02:40:28 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2fe, 0x2800) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) setsockopt(r0, 0x100000000000065, 0x1, &(0x7f0000000080)="29e565b4b4cb7a9335a7a317e84f604c3214d3e3992f583352f340a45d37d55a405c7b79daf36674efc27bd365842b772a161c3ce9fa17f2", 0x38) close(r0) 02:40:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f00000007c0), 0x0, 0x4048000, &(0x7f0000000880)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) syncfs(r2) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x60) [ 704.702998] binder: 13628:13665 ioctl 40046207 0 returned -16 [ 704.717626] binder_alloc: 13628: binder_alloc_buf, no vma [ 704.724227] binder: 13628:13629 transaction failed 29189/-3, size 24-8 line 2967 [ 704.822387] binder: 13628:13683 got transaction to invalid handle [ 704.828813] binder: 13628:13683 transaction failed 29201/-22, size 0-0 line 2852 02:40:28 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) r1 = geteuid() setfsuid(r1) 02:40:28 executing program 7: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) syncfs(r0) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001240)=""/68, 0x44}], 0x1) 02:40:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000001c0)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f00000002c0)=0xe8) bind$packet(r0, &(0x7f0000000300)={0x11, 0x15, r1, 0x1, 0x7, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0xd33141ef9da5b2c3, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000640)={0x40798d, 0x7}) clone(0x0, &(0x7f0000000400)="13f3d2c626e5a596b62aa494033caf88a3db336c4c099e0840910ea8714d1a72b8883d468de82b71fe4f6c189e6734f7baf22cf4cb8be4fa6856774da7111c70352bf9bd8090524d11a9cca4a02405171061e3a753a5e9bb145c515c10ca5cf6a699035c875dd43686859f8cb8d4edb58471fc19b3212af54860bdee86f1619c2af0ac8974d4ce8d165a27f06eed58f17f75eb169e4a461fe704290b89c4bcd36dfca494d563e97f29d74d84eb57ff72f714aaab9b93331b7a96bf4b6d61f052200b772b54e48ce0d17092ae8fdcfda3305f87fac04003000000563640799d4cb31cffc107dd19446f02dfd3e45d9061b2fc118e4ff0b997a23864325de90b7f05a6f3969e90485ac5471bf7726e8b7da9414c09175eaff7de9563c80bb493f4d845ad7fe34c755f95aca3f4384155099ce0d81209451fb680b7f7d1a13cbc8c4ccd2ab26b694039b632bc9df689b84afb2d13ec2883ca1c3029d4186e9443efb54bbc8a2a3fe99601ee1dec1343be7f976b131df6e57a654d26b694ddacf5025ca4b9ad0efa6418a148b1e4567f7df46f201d74e3b17d1563c6eb64fc8893febfec1f8f73f02831ee1089a80452a201d4ba82d20f0a3eb74505cc741b6c81cb23d3faa143017affd902e6d18e7be4c7689093eb614b500318e06e481667c15485a29ee0cc18e84709bf98f6d2319bfeada25ef48fa7c0e60b1510aff30fda5de7250b0679d250e4813314f560418a982c0c3941dc31efb56fe7d01f0a0a15534f8ce84faf884f490b9cf15247a3a950093363b0cf94baa14b2f72ea9620", &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000280)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x14001, 0x0) [ 704.900803] binder: undelivered TRANSACTION_ERROR: 29189 [ 704.942364] binder: 13628:13665 BC_FREE_BUFFER u0000000020ffc000 no match [ 705.001359] binder: 13628:13665 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0xffffff7f, 0x0, &(0x7f0000000480)}) 02:40:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x2f}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a63a69900000000000000000000000000000000d717df0000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000240)=ANY=[], @ANYPTR64=&(0x7f00000002c0)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) 02:40:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x2, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x100000000, 0x8, 0xfffffffffffff8ca, 0x0, @tick=0x8, {0x7, 0x4}, {0x5}, @note={0x4, 0xfffffffffffffffb, 0x6, 0xffffffff, 0xee}}, {0x8, 0x0, 0x3, 0x8, @tick=0xff, {0x401, 0xe0}, {0x3, 0x7ff}, @addr={0x94}}, {0x1f, 0x7, 0x6, 0x8, @tick=0x4, {0x3, 0x7f}, {0x4, 0x1}, @raw8={"8899e5b4967850706df2cf4c"}}, {0x8, 0x100000001, 0x7, 0x1d837471, @tick=0x81, {0x1d6c, 0xa66}, {0x9, 0x5}, @addr={0x6, 0x5}}, {0xfffffffeffffffff, 0x4, 0x5, 0xc2, @tick=0xfffffffffffffffa, {0x47, 0x7fff}, {0x9, 0x8}, @connect={{0x1f}, {0x9, 0x8}}}, {0x7, 0x2, 0xffffffff, 0x7, @tick, {0x6, 0x200}, {0x3ff, 0xffffffffffffff7f}, @connect={{0x4447, 0x4}, {0x6, 0x1fc}}}, {0x1, 0xfffffffffffffa25, 0x3ff, 0x9, @time, {0x9, 0xfffffffffffeffff}, {0x3, 0x7}, @raw8={"12f31463b37e17bf8e4879d7"}}, {0x8001, 0x8, 0x8000, 0x5, @tick=0x7, {0x52484716, 0x10000}, {0x5d, 0x7}, @queue={0xdcc7, {0x6, 0x1}}}, {0x549, 0x332, 0x0, 0x1, @tick=0x3d8, {0x1, 0xe228}, {0x3, 0x1}, @note={0x9, 0x0, 0x9da, 0xd124, 0x81}}], 0xfc) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xb}, 0x7a) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 02:40:28 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x280d) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x8006, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x5f, 0xb, &(0x7f0000000080)="0778f96d713a50728920a154ac0c50f33611a5b6afce599601f8b6d1a93b225856dd5b28fb9527c78bb58eb550e6793f0d5bbd27019df609e376b48c3b251967000aa1e16f370ecd326f215cd3547351a285c5136c4e0189daa142d72cc1ac", &(0x7f0000000100)=""/11, 0xd1}, 0x28) setsockopt$inet_tcp_int(r0, 0x6, 0x800000000001e, &(0x7f0000000040)=0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000400)=""/4096, &(0x7f0000001400)=0x1000) connect$inet(r0, &(0x7f0000d9dff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) creat(&(0x7f0000000340)='./file0\x00', 0x1000000000000004) close(r0) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f00000003c0)=0xc9, 0x4) syz_open_dev$tun(&(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x200000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000180)={@local={0xfe, 0x80, [], 0xaa}, r3}, 0x14) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000300), 0x4) 02:40:28 executing program 6: r0 = socket$inet6(0x10, 0x8000000000000003, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x8200, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8000, 0x6, 0x40000012, 0x9, "08bc5de5a67c87c8b8747b3ea402460f867914167da8170100834bf933c4c8cda2f1e2ee616791c81d67ceef6de5b538745de8691ea20757678c102bf7f3eff4", "d57a8da77b15a41515fae4dcec8e05658a418a3d8bc73f6b2c9687a21f05f558", [0x7, 0x5]}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4188aea7, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000000100000000000037128af6fdb22711e213d27604ea6ab40b86d4000000000000000000000000000d0000000000000000000000000000000000000000000000f99717b336b9bc0dde6980af5dab"]) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000140)=@nl=@kern={0x10}, 0x80, &(0x7f0000000000)=[{&(0x7f0000014f79)="5500000018007fcdb72d1cb2a4a280a80a06050000a84302910523692500080008000840010000001400a3070d000000030000dc1338d54400009b84226eb75afb83de448daa7227c43ab8220000060cec4f8b91d4", 0x55}], 0x1, &(0x7f0000000000)}, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x400000) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f00000000c0)) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x11, 0x0, "26060480002c6021a9f5ca55b90e77728ebc2e31e2b8ff5a02f9b6c62effc770d8e93bdc5d6cc2b721189e99925d8a251231a7e61eda0070cb30d6fc0fe6692b", "08e1711107496db1a583f7f6549144b42950f39686d6c5bf7e52bbc1372815b3", [0x6, 0x5]}) [ 705.104918] binder: undelivered TRANSACTION_ERROR: 29201 [ 705.111085] binder: send failed reply for transaction 1556 to 13628:13629 [ 705.162907] binder: undelivered TRANSACTION_COMPLETE [ 705.168187] binder: undelivered TRANSACTION_ERROR: 29189 [ 705.173769] binder: send failed reply for transaction 1553, target dead [ 705.195983] netlink: 17 bytes leftover after parsing attributes in process `syz-executor6'. 02:40:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 705.212244] binder: release 13722:13723 transaction 1560 out, still active [ 705.219447] binder: unexpected work type, 4, not freed [ 705.224838] binder: undelivered TRANSACTION_COMPLETE 02:40:28 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffff9c, 0x6, 0x0, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) 02:40:28 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x181) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b01000100020009b30000000000001c68f86800000000000000000000000000"], 0x20) uselib(&(0x7f00000001c0)='./file0\x00') 02:40:28 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x41, 0x0) fcntl$setlease(r0, 0x400, 0xfffffffffffffffd) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 705.268778] binder: 13722:13723 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 705.281755] binder: 13712:13724 unknown command -1717148918 [ 705.289972] binder: 13712:13724 ioctl c0306201 200004c0 returned -22 [ 705.296282] binder_alloc: 13722:13723 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 705.305334] binder: 13722:13723 BC_FREE_BUFFER u0000000020ffc000 no match [ 705.314602] netlink: 17 bytes leftover after parsing attributes in process `syz-executor6'. 02:40:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x200000) getpeername$packet(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000540)=0x14) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000005c0)={r3, @dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="9b0000003e2c224f7100000000000400736a13b513c1eeed5fd91de2060079171f3b06ae8552e37fddc7eb6a22cc2558550ce16b3a847e4df006bc2bdc2c7e614fb38b27f6a48c822e90a5568630b27e50d377304d2d7400002414c761a1fd2dabab1cd49a75fec50208c093ac9c80d4eb73c8179f00bf9052d74d9a7eb9c206b00217832cf8e0b469496648d97ed59200000000000000000000a29ec170e485985c24bde3479d22c500352d268c7f50cde66481d7298a44391f888147aeaf178a25c08a078b485132babb78c93c0cf77722fe8b9b102528872be3bf9f002ed84b675f29460048f8a62da74474445d2787b8f36c5e2672e15b63e9cb3a99aa18874cffee56d0428ba500f427c6e984520156d900fc4ed63571e007f48f9263ca0cbafe1247c9eb6f1dbdaef0a92d4ba099a7fea597674a9ca76bf3b58a6ed0b7d8a3c82f815e95f8fb6af7ef128aa992ef7f07cd574f6727391b501b25d595aaa78f06ec2e7536a9f959c11f67ede886ef229ac3c9a86dbb5d1c61eddb2932b4683b3a4ba6da8c5cf16cfd82a4e5a9265ae5c85dae39473f9cf1cc382eeae2084dd32e8408765fdcd857e0697e79f47a52a224f07eea702e193b"], &(0x7f0000000040)=0xa3) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x7, 0x7fff, 0x606ed2e4, 0x81, 0x2}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e21, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}, 0x9, 0x100000001, 0x401, 0x1, 0x80}, 0x98) syz_extract_tcp_res(&(0x7f00000000c0), 0x6, 0x1f) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x0, [0x40000071]}) [ 705.406900] binder_alloc: binder_alloc_mmap_handler: 13722 20001000-20004000 already mapped failed -16 [ 705.450655] binder: BINDER_SET_CONTEXT_MGR already set [ 705.508242] binder_alloc: 13722: binder_alloc_buf, no vma [ 705.513971] binder: 13722:13723 transaction failed 29189/-3, size 24-8 line 2967 [ 705.520966] binder: 13722:13743 ioctl 40046207 0 returned -16 [ 705.579284] binder: 13722:13735 got transaction to invalid handle [ 705.585716] binder: 13722:13735 transaction failed 29201/-22, size 0-0 line 2852 [ 705.594465] binder: 13722:13735 BC_FREE_BUFFER u0000000020ffc000 no match [ 705.597632] binder: undelivered TRANSACTION_ERROR: 29189 [ 705.601808] binder: 13722:13735 BC_FREE_BUFFER u0000000020ffc000 no match [ 705.658511] binder: undelivered TRANSACTION_ERROR: 29201 [ 705.664579] binder: send failed reply for transaction 1563 to 13722:13723 [ 705.674699] binder: undelivered TRANSACTION_COMPLETE [ 705.680051] binder: undelivered TRANSACTION_ERROR: 29189 [ 705.685692] binder: send failed reply for transaction 1560, target dead 02:40:29 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000001c0), 0x0) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000100), 0x3f000000}]) fcntl$notify(r0, 0x402, 0x8000001a) 02:40:29 executing program 6: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x404080) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000002400)={0x400000000000000, 0x2000, 0x5, 0x1, 0x14}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000023c0)=[{&(0x7f0000000100)="5bcdf70b9e5376372d848a6ae4075aa329d0284d8678ede3756115efdddc44d6d8138473bbac5877f46aa99965edf86173061945eaf35dceaf81c1660d7d508c6e6e0552045024da0625e11e676819a7449043bf3392c8363388e56a88ea172f425b105f5782107d09fdda6382c525a720dca5dd41a6efa1808ae8817e7dd97cab94da1db26778e94639e72e8a81798f09c007fe2a30ae9fe2f8f47459c05a70c56ddeefc7593771aa782f6fba2b3bd3fd98c697f6aff4325d3f3cf5bf50a7bb42ed77eb417ca860db282cb420fc0c6b963c75e804821cee", 0xd8}, {&(0x7f0000000040)="faee5d5816ecf6db287bc003a329cdbeca0f809ac38ab3f98d8847a822b4bb323d23be39de31403fb38721fc131b56166fd130f8ad1309ca4b8c50fd8bc4cf5cf91f61a3cec4583b18976880545c2fe5775490346a", 0x55}, {&(0x7f00000013c0)="8caae9a7a3daf1417f464c08b46a41a05ce9ac81eee30c6fb8c1991aaf6cfd67cdde6ecfd297dbe72a401df59022c2f8488a560dfc46c33df7e65f13082e8849a3625dd1a895d9549a19d627d129c6b543635904819c9a9211028b99890cfc644b18902475c1482e4202033115c94f5e696e5144fd99cd77908bbbb5affb45d2f08d9949571d807fff4bae22141063d87a230e397c8847fab04574e086b36a2b6a055e6da7fdc080c7d816fcca743b1f944982297d4c571406352bfb3442f7c21d8be25835ac21aa6401574780c8831b233e2cd4589c122bd3ee3050197c6189a28dff739075ce825c63934c4459749d2765fe897e0c4a7b5e5ae2817dadce3c89b649a819690316985e6ecf7727643facc76f762e6b8200860af3b53a401909c6be4413a1e2cda8cac9ca0a7988c7cb5fd87cc1460ac560719425254f334b93209511cffbdfbc2453e6c43b57de069cce161e0a29208943fe347ec41f339ccdcf894e4c62504c1b54770f09ea157a6a6a9e1de14950c86d0f606a6b4bbd0edfa228a2e40c33cc565dfa14a6cddf3ea0e250e41c59d4267e5a62cd7347bc30407e5864b5291d08d2e231c3f2ba025efe0688b7c5e59143f968f66398755a7efb279373b3d71d2f4f087b8fec55a40864a00d523b8fa65699d9d4bb838354c51ce2bb34dbc88afa5268c8ae81f7d4bf4f008ecf7b1bf150f6ae11848f58aff0b013106981a56ca4a0754db73b9769a3a96405764d4c4236c1e0a8de089302db5dcc340f1798e226b53daac92d936b8159bd4edf4026bc39e4179bfac3b88d919217eb28794c0ad9215991f6c8f3138c86acb8fe9223570fa19ca876f9a61d0b9247b7bec1e41a61088a4a3c332f61d3f9b67b0b3c2f6ebf04dded91be75e87c4749d86ef0792537f2ae2d56fa8e0eb6566af8369f2bcf71c33dbc0d1cd45628e10340228db13229c198318a9f9d0e7174a4d75de651c3b01ad46ecb4cfeb766aa1797ad2d872ebf86fc6b277961c5b9e76a78d7704ca494bfdbc4303fe79b76f8f13a56a958102656e487f7d094e62d403ff1f5b0641084aa97dda9343461002a555ffb7678db7118cec40d4f0494cf84f99539e7cdfd81aad5a149eb7d8f2cc035465dacf96dec9ac238ef5fd1161dfe9bf90867b3ab0ef9a36efae2a9f5f524e6bcc170b5f43f9548aae83e1c2c2bb9f81574a6869786387c3c127375c150163cf66017fb276da7ff0a78ee200a5db85ab62eec2d671be8137dff7774496a99b8fa8fac1ffd168acea7f80b473db4db20c69ab4fa3f85a987d352a52dd9a1d6ec7bc7317fe7f4c5aa01f865fbdbf2f6f8214a4bae3b7527f516f6a9d23adb41fef223bf369ddf0492e477b5627822d1483479f67d4f9bcee766d773366fa45b100d5ce4a419faf1b9f06afd1e253b5949d657b07e7f8f81b9b2fb3e8cc427ab99a3a71ecd6de267db5bcf6436935f07b20c25e107bcd5d90e315d82aa8290f6176c491005fc4c8a26658d9f9085f3cdce8782ed525007c56e7ebc72b4963200bad0d5d1f2adfd77c252eff1b66945f6b2b538dd6106eaeda7cc3a41ee0cdd3ec961971a132b37fc853377aadd186bb41bb343ad5a32e94e4fde130bf0fb682aec69cec7cf541c5893dcaa93e3f5a228e8983bb56958e12e25c96ab199d8cfcbc74940e6bfd361df3b7d9c45b9b9604e8eea0eeb888e88906e21fa9f82076e3aaeb6e32f6610430072324a260ba63392bd092f532ef6a2bcf124a3ec9edfc06ba9b624f31bb54249fc3d606581ecc60e5447ad87b416dd38aec70d3f5346063e996c6408e2a74027b24351984dfe39cc82f689f9e27d87b7d5a7a8cd1b9d3d779e5f3aac0fc643d24535aabe48646afb6eefdd95b59abb284e56a4743a067ee5082531dafe79a6ec4d664e5059e1d771f2b08139e1765895546b862453b7939a55ae2cb1b9d31eb9b2b41c3ed5be91d7d40349641794d60d9dcf1ff53909d9a1fb795f3c1a47ccab863f3ee4220efa0323f5d18272de4ec0c78ebe5488d81a88e5a908f1aaa8ee29d80e0887dec491c8e13cefc67e460bdd1b4df1120709cf9c44ef020913f636889be6101ba9dfbfc8f1dca2109681f8577d72a9be6f7640ec8d4cb54e5045807163ea2fea2952bbe031436b1e32a15fc91d4ee38e3f23c3b28a1c782c6fa9db8739a62c091b463dff60e4b7124458cf363ea9ed24d2293f37bea6b6c097c182199c4c5d0a453d6e86ab1856b8fcab952a381ca8e12eecbf7a09cbd481aeb08c7519b954c2997560c8bc5fd5b05a8dfa5f9e48a5da15818c70159acf4fa6c4de34f123cfbdb7b3be46a77a8f336e8ead2cea0f37c6c166b4a9431d144f61641efc722a6eaf7a2dd7a8287d66b28c220d3b2a43b1f27b550fb5d4f9c6c32f70551013b78075becdcecc3e1d8769f7959695f6134ff694bb025b29785703f1b542911093f8cf2b73beeb50879c5d3bfc448667aef201171209ac32bfa37265b3da8c3328058db3119e2884c8021fa73173a63acd9bc9c3f91d8229712a2af293809a47ba949c479f71529d980801bbf73a4aa93445af108980ebb543131e228858416988cff8ca06bbfc41eef9e5b63a7e733d3f39fbea06a8183dd00b726d3ef5916899822acdf5fb14c2b65389978ce83a3c26f8a809a0b4fa342068b7579ab5ada2f0e0f2d84f4d0f679f93b1cd2d7bb4db99f1ea5af52a5da6e1279efab160f26295ce7f2a2b61239920b2c9e91c8d6d52169fa8b6f913dfcd5a58642c330e5ba178930ad452c702655532a83a8805aa7c99dbd32c5167247a6acf403c154e4849135225b52592d75e73dc6f97c8c3e060308832d80414ba64b0c4b7a508a8cbc5a593141011162da203411650b374a21af27d8e65ce9983d18cb9acc7955b4cb44355798d55c1febf1938a970fd709be839cc9ca6173cb6429fa21bf7f27fd531b950ef8fd05171c85854aaa01bdfd5b413463e6e0af24949f73d492a36abe15e6d2a634ea5e6da5ca8ee3d13cd0812e04b28c14d91a785313ae3c232731322e1693014ee469f14deec32ac0f26d1f3568f15b31b18870cb51e5f2a734f47170038a43728c97cd675fc99234990dc990f0b77fd6beaa66aef6ea2617a7592a626a7d9391e16c1cf3ea20ab2f12692ada34653a98c61c3dd9c34a4d86c18bcf6cd4c569386eb980e9e099e3dcee942395881d9138b69cfd6f472c23dd4b6c4350bcedf0360b0ac3d38ca6251dab244d20e77980e6a20c7ea2668c77186a5c487599a673b5c349ad7a158f5b1415d2b52600339e93590b0eb77161c2a5eb38f812ee008f70f65028c3ddffddd173c79e78423ba6701987d84316ccaba5e7aa713febaa0fa4f0d3376114b16e47b9edce6affa36ee5c6b28104c87d2e1d193674fcc75e87060bfe3441e393c9fba6cbdbd562718409d6f315558f20a553568683b7c2688dfbad715c8faae031564f1c384573a348e3dd1e2b9a6816e07623e214433913544f267ff682142f739ee62b0cecd1f4fe2d9d210f5efa759624da7d4359e84392bf8d9702b7c30e67106e7cc9790bf37b189b1483ef0c5a898ef2fdca4cf2700043eed8c68f7a73cac5a6123174caa7796fc738f7998912e8f84e80ee64ba2826c6131222c3f581101f98b4f4021356e948dc4581542709832c690a67465b229ee0ec7670f5f5386b4f22293efb1b713e0fc241f663d0296a2e6c0073e8c1738cb7818c61f8772821a6dd21cc1057b4806c8e9900503cbf7de7ad6eb90290473c4431e6ae729843043de422f4f8899118f879c7525e4c05534913a42ee76a717a711efe0faadad9daa70143d1c4ec364f6eaac205ebf38f82d4c10d321f2829d823324ab3e6195be82d46b51028f5b5283d69aed30a304052aad02849138fd333d2979e7efe2225369891f9a2bc5b33854447fe52649dc5a5ac04dffcdd034f75f7a0687be3b8ae9f228cbc8ebb046246cefe4587bd69909b621ec084abe25e395acbe42ce1ca24320b51796b12d9e4b0ecd250ebf61e4317d1ab6821d8c77c9f47f25d3f71fe0ad671c09c9fff63fc5b558dd9e5c8221915a6ab6579ebe91ba7391a96158319f5370552a9215b62526a2eb3f02ec884ee408c0325a765c6db6a43a63c0315df97c383ca5294b9463eda955f30ae1fe46ae8ff66ec45e30909021f48a29b305e19e6c700a21c612310e19408f7312667767fb2518283cd6eebeb3031d2332a9d61c73cc28f6821b2970faed5c34f8c5347690163cba1d7778cbb342b9df0b69dfa3c0966bbfdbb9513ed0ac5bce3fe2ed7788d1f15a17514d93f22c5948e0d44cf1bf4b84d2560704c334305cbf2d3faa924c304a0ffc7ce68b17d3ee4d79becdd3f719d2bbd6690d08bd68bdb43275760591c78a4c343666ca44e73e518bef47553865e74d12ddc32953a5c864c3bcc7799c96f9ae9826f64404a2e5469503bfcdecbb8ecda4493527b6e72023f9e9602ed7596311ddb7389188d40d6c41459950de940f727babca024469927803a2f62b43c9e21a8ffdbe52fc70bd03693584faa1b1895e751544718c4513f166b59c83842c7749aede4afd873107aefa84e891d5ce42da2eb81ff5879d942226fda0b4974ab7b920878fedb31958435e7cf57755d2458b43b68807534fb8dfc3ccbe1435fad9593683d0f950bf8d557bed8098e89d0f0ea8dab6437d9f4cb70718cd7a3ecf1fa5c5d8a586f758dc9b21c3fe2c66b7814d9f57cf6961b2c11ef07ec4f781f99e64f3d39d4b32374fad9654c9df8eb162b611e86ebb0ec4cd649a6749a1168664b41e47d423a3592c879f4ea6b9a2685fe45ede4b6333e9fa611c2f0d75efd8c4d98cc92dcbd4742aef3f9c2d80e4eef0153f7b03475fade3cdcd2577166a94162dfff275bf81693c8997e34f5e484d92e210cfc373aada0e19868bc6df655708281c07d0b80236a76b2206080dd8afbf8dffd305ede8c733f4364969f0510728b8369b6ec42fea5dc680207ad9f03c73024e83753843a7233942a42b846dc396a4bcd447a9fbdd796be4a56a2b853f1b9f6c6891e939df339fbbf3557bbd01c54ce597986a479bc37e60dd35404767c6a2c1ee499f74538dd46055398f42a2729fc4182383ac1a91cc88cf22848eecb87a1d44126ef78d068f9083cc52b1800b7a075e7b61e7670cad39e75909ed9a59bbbc220a085300185ac749e0f3eaec785c61456a633622367420ea02048fc1949a4299d2ea3491285d64b5a1be486f3b254ba646472f9efe6fbc147bb07c51e2290ac21cc8644acd00465f5decf541fb2b080613c8159020a41d4559b39af425ac72522e879f2359a1558235e0663cc19c4538658dc2f633753ad0994784617aa464019db32dc2636168774bbea2d25602000cd571a900aa8c6fc79fcc36f7210cba0046d4ef0fcedf208029ef58fd89c97eb665181b418d2d24a3852b4a00dbf304058d1f07dbbeea7c0191cc8afe21e62951dcfcb8cc96eb5156cd8f61882eb6564d1f76d365fa559946e4577f6745eefded3e622e85e2817d101bb5efc18fb454bda2f900341f14c5066297d80d401e9462a90161309c3a1dc67646aa6c3a18b431aecb15f74026f2e4e283fe2d25876ee0e40422843fbfb12d953070ab254c0dba62540bfc0299d606b69236e1050070dfe6bf2191d16d4eed19ff5555265a0a546947b110f13cd32aba488b5fcdb1769f1e03fcca12983d82031acf575100184880c53aa5c3009bb1e703dc9b8f7997d9c01f1c6a4bfb44b8d6940b35b566d1c480804bb8193018", 0x1000}], 0x3) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x7}}) socket$kcm(0x29, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000002a80)={0x0, @in6={{0xa, 0x4e22, 0xfffffffffffffc01, @empty, 0x5}}, [0x2, 0x0, 0x8, 0x1, 0x8000, 0x3, 0x7, 0x7fff, 0x1, 0x819, 0x7, 0x8, 0x0, 0x3f, 0x498]}, &(0x7f0000002b80)=0x100) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000002bc0)={0x0, 0x6}, &(0x7f0000002c00)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000004140)={0x0, 0x506, 0x1}, &(0x7f0000004180)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004480)={0x10, 0x0, &(0x7f0000002780)=[@dead_binder_done={0x40086310, 0x1}, @exit_looper={0x630d}], 0x75, 0x0, &(0x7f0000004400)="caad06943e71dc7f88413925928bf0ec6976f0043e87cf3e5ab84ce639672757ad8d1d588394f10182d54757f8f71734ebb19c11244e95730b61893d906d32d2e3e0b505f11f8f84cc6859bd5ebefa619a49eb37338c992d1a07123bfd690c9c96b129cb64b012becd8d530cb562cd5d444dd4a1f1"}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000041c0)={0x0, 0x81}, &(0x7f0000004200)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000004240)={0x0, 0x7f}, &(0x7f0000004280)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000004380)=[{&(0x7f0000002440)=@in6={0xa, 0x4e22, 0x1db9, @local={0xfe, 0x80, [], 0xaa}, 0x7ff}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000002480)="b280f1fa46a9ff9faf010cdd021d54ef04fc8f5755b8e91c0bfe30d7b45be6a6c4c8f61569716fb6a843cc804fdc922813cf427e8047b07b252daa891b49bc18a93b812f0fa42d8f9dc2227be839c03aec99b72ee003eccdb1879f74b7a069e8841127d62e4a0a20f9104b498a52952527774ddf414c890a7c9ca65e90af6339147f1517616355bec49a3cb3a2256aea6a925aa1a5cbd50660bd6de58c95106c5d367571e941f94aeb92904212586d6337d0731b0af43e60b4cfc20210664312c36f94", 0xc3}, {&(0x7f0000002580)="1938ad171d132d26f77e6ec60ab756b57e545f00017c3f11331f4e6976a02f4911337404e6ebd172e62a232cf16023f3cb6721658568bca7f2b9cf8f4941fafdd6d991a9127ad90d2fc553ae2f8283c7d1a82085d953e8dabbeaebdb56535de6b64018d2624b4f4e87c0e0fb5d0fdb6de8d8b5a5a5300ae37d6174a991e05e336f083f307aeb4d821b7edb2c6e41e4c7e8b16dad3224cc7d4a6a5d75095f2d758a6f26e566b94e3fcc98aa0f77f6095a2c7830a768f02f4eacd6d4e4d9a5e30fb1f8af578a5608b39cab65d3eb85cca998445bbe35", 0xd5}, {&(0x7f0000002680)="73c4b63c57b88074a1fa21fc616a12d72d3ea602a8306030b975a0c6fb6232af450e", 0x22}], 0x3, &(0x7f0000002700)=[@dstaddrv6={0x1c, 0x84, 0x8, @ipv4={[], [0xff, 0xff], @rand_addr=0x9}}], 0x1c, 0x4000000}, {&(0x7f0000002740)=@in6={0xa, 0x4e22, 0x80000001, @mcast1={0xff, 0x1, [], 0x1}, 0x1000}, 0x1c, &(0x7f00000027c0)=[{&(0x7f0000002780)}], 0x1, 0x0, 0x0, 0x80}, {&(0x7f0000002800)=@in={0x2, 0x4e22, @broadcast=0xffffffff}, 0x10, &(0x7f0000002a40)=[{&(0x7f0000002840)="346e5053b31871a31a7d7ca614121bee2592e3f1aa02080d098641ee9406d7d6d1304a92a43885439618946793b8265d05d0cfa990ef78dd077d97f1c56bd32e9839ae6d025d00", 0x47}, {&(0x7f00000028c0)="a3d391c0f66182450483e067fc34088225de86121f636c38ea2516b47d68133618df315c1e69888ec787606fba0f26ead2396f5a0460b4e65ea77b24163d6da925735d73068d5f7acae3207374e8400ce0d4eaa42757252ac02d1ddc021372526fb454a1541b9470d627e1", 0x6b}, {&(0x7f0000002940)="b0615c34ffa2d50ee660778dc7d38300dec97897262a13d0068f7bc4959ad646acbc01da334af7495593c2bfe5c82c072ca8f12a842186297683de696f7962636299f8b72ccb5dc4ac6759c0c814c834b85293d1c9496ef5f295882db83ce6435a83fc87e1b476872d26e263f297c16c0519734d99045e2817acef09de61afb765ab3a14865a724a0edcdc5a2fd0ab0d2f891026cc0067669b1d40cbadb254ed2e732895c7ff822019554dac26e865d0b8dbfb3cf56ecf54196143127cce282e567542fc6c8e60dea2305936e70c39c2a2eae1d4bd14c5ad62466a27767add7066", 0xe1}], 0x3, &(0x7f0000002c40)=[@dstaddrv6={0x1c, 0x84, 0x8, @mcast1={0xff, 0x1, [], 0x1}}, @sndrcv={0x2c, 0x84, 0x1, {0x6, 0x0, 0x208, 0x8, 0x6, 0x1f, 0x7f, 0x539, r2}}, @dstaddrv6={0x1c, 0x84, 0x8, @loopback={0x0, 0x1}}, @sndrcv={0x2c, 0x84, 0x1, {0x0, 0x400, 0x1, 0x1, 0x8, 0x6191, 0x2d00, 0xfffffffffffffff9, r3}}], 0x90, 0x4000000}, {&(0x7f0000002d00)=@in={0x2, 0x4e22, @loopback=0x7f000001}, 0x10, &(0x7f0000004100)=[{&(0x7f0000002d40)="3ca80029e078fcb29fa96779c6838098dcfa7f199479d7deb3d130c8fbc6651d0526ffcc33e785faac02f19cf4689ddff1be75ba49b5da00da86ae6d01a7ff2c6bc6aa0482b38f23699700e535eb790ce821ba9261d8c377aaf843096eb53c2f69542b9f1367b1eb0782db3dc2533f7bc1572572d84a3f66f4614ef9f131ac27a166f64305e2", 0x86}, {&(0x7f0000002e00)="3de2095d52c8926b3dafdb294e40295da4847cb764e642805ea1719fc4cafb4bd5f47ac569fe277f5dc121e6f61f5a9182a0f7e9a1dbd6da028395ce1e3468734084691b673cb3129c32b965a42d2a5bc39dc1b046cd4075a936fd44cd06a425", 0x60}, {&(0x7f0000002e80)="d1d25ab2633fc4f1a2dac85f3df0885210fb4188b28c531af470ef54d86c59ad011331d64a5562180330f98b852c3cb0d0347a2de91bb51cc62dcce8670652dc67f7c87ee67f7252d325b599b83ed5a73ee60ac4bcb64134d1f18872e431761c831afc6286a15dc4fd9111bb76320e4b6cbefafa98db535348310d3f4829039f624a792a391e2ab2a7ab29d90b31", 0x8e}, {&(0x7f0000002f40)="f030bb3ed8c606568a26cf71118efc82329adab414e50a1e873a181925bd8ee9a89ad1fefdcec728968fd7877d787c3a95beed06f01be11b9465dcc79271463ecd2add8d9b54e4a27b8f2249a26a70c73d8841ade8ccf91ea75afccd11ee489e335d9fec19ec60fdad768f2307364153d79422c09d6622b35ff1f86c2097c5dbadd8af847b61a1c51f962e2d38edbdecd265a8a50856b8b1bfc67500fa631f474ae103960a224e00a868269cfc901c23ad2f7ffc4196eb41ade68e97aef94f4381a2d3da1c", 0xc5}, {&(0x7f0000003040)="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", 0x1000}, {&(0x7f0000004040)="7026fbae71e9bcd45b4c6403a23a0d13f6b52180cc2eb2323f5199c76172dd4bfd8e929e62d856cfa0067ed387ad0da410999739559f8258936339b3d2f4977819a6acf9583fbbc403c2829dc7bc69ad06416c6f10421ef4785cb903cd7ea6a3036924e009d1a85748c2dea56e4b44a1db7085095a854a7d15e38c43bd3197138e015decc7d4cb99f58887037312abe997ea3631fa48db2e61a6b1", 0x9b}], 0x6, &(0x7f00000044c0)=ANY=[@ANYBLOB="1c0000008400000002000000000408000900000001000080", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="100000008400000007000000e00000021c00000084000000020000001a0002000008000001800000", @ANYRES32=r6], 0xac, 0x20000000}], 0x4, 0x8001) write$binfmt_aout(r0, &(0x7f0000000380)={{0x1cf, 0x7, 0x5, 0x1e, 0x2d9, 0x3ff, 0x97, 0x7}, "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"}, 0x1020) 02:40:29 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x5}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:29 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x400000}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) mq_timedreceive(r2, &(0x7f0000000080)=""/127, 0x7f, 0x40, &(0x7f0000000100)) 02:40:29 executing program 4: r0 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)="94c2824633b530016770e10c1de1294865f6c24c0a9023dadb60a1d55c1c54002d7df29c", 0x24, 0xfffffffffffffff9) keyctl$get_keyring_id(0x0, r0, 0x4) 02:40:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)=ANY=[@ANYBLOB="14bc9b480000000046c20d18967db2af3d18221e83fd1121ce25eb8bcf0001927ded84f4e40425e2e84a4065"], 0x14}, 0x1}, 0x0) fallocate(r0, 0x20, 0x9, 0x200) socketpair$inet6_sctp(0xa, 0x9, 0x84, &(0x7f0000000140)) r1 = getpid() fcntl$setown(r0, 0x8, r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f00000001c0)=""/199) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000080)=""/30, &(0x7f00000000c0)=0x1e) socket$inet_udplite(0x2, 0x2, 0x88) 02:40:29 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) listen(r0, 0x2) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) write(r2, &(0x7f0000000840), 0xff98) sendmsg$unix(r2, &(0x7f0000000b00)={&(0x7f0000001480)=@file={0x0, "2e2f66696c65300000000000000000000000000000000000000500"}, 0x6e, &(0x7f0000001c80), 0x0, &(0x7f0000001e40)}, 0x0) 02:40:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x300, 0x0, &(0x7f0000000480)}) 02:40:29 executing program 4: r0 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000100), 0x3f000000}]) 02:40:29 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_ifreq(r0, 0x8979, &(0x7f0000002400)={'team_slave_0\x00', @ifru_flags}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x2000000011, 0x80003, 0x0) ioctl$sock_ifreq(r1, 0x1000000000008937, &(0x7f0000000240)={'bridge_slave_1\x00', @ifru_flags=0x1}) [ 705.801655] dccp_xmit_packet: Payload too large (65432) for featneg. [ 705.819494] binder: release 13759:13761 transaction 1567 out, still active [ 705.826668] binder: unexpected work type, 4, not freed [ 705.832005] binder: undelivered TRANSACTION_COMPLETE [ 705.838440] ALSA: seq fatal error: cannot create timer (-19) 02:40:29 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0xb}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 705.855536] binder: 13759:13761 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 705.867589] binder_alloc: 13759:13761 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 705.876231] binder: 13759:13761 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:29 executing program 7: exit_group(0x1) restart_syscall() r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x2}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000080)=0x1) [ 705.924521] ALSA: seq fatal error: cannot create timer (-19) 02:40:29 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000440)=""/4096, 0x1000}, 0x0) pipe(&(0x7f00000002c0)) r1 = openat$cgroup_int(r0, &(0x7f0000000280)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) pwritev(r1, &(0x7f00000000c0), 0x10000000000000b0, 0x0) 02:40:29 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000040)=0x7) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000080)={0xfffffffffffffff7, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r1, 0x3}}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r2, 0x6, 0x70bd2a, 0x25dfdbfd, {0xf}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xfd}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000081) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000380)={'syz_tun\x00', 0x7}) rt_sigtimedwait(&(0x7f00000003c0)={0x4}, &(0x7f0000000400), &(0x7f0000000440)={0x77359400}, 0x8) r3 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x100, 0x1) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f00000004c0)={0x3, 0xf829beb458fdc1f3}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000500), 0x2) fchmodat(r0, &(0x7f0000000540)='./file0\x00', 0x80) mq_timedsend(r0, &(0x7f0000000580)="678313b7c4a47e6508019e662a2ae232af77bbc23078ddd19d0fbb7c1e322aae5bfb229021c606af1be0d87fab3c4b4d16f3e0a73a4025da248c43e401bfef89f448ccfbe23c40da99d89f8a0f20cf14a5e1d538f9f3802e30eb217b822157c34b27d04921e08b35d271db13bee0d0e7504ea3906b29c578551cb3f3d0259084c20ad0f58cef2601b2890dc2b6570582ba86a7759c912313aec5fbdd86c13b0d97766fdabd5470f50691d36946617e9bab469a0e25d33e3960bb189d5da7a5c8cbeb8d50717759d070c529906ceb9d146f40794e4c20416bfb7a63b0da2742c989e566db144e43b32fcdc10278", 0xed, 0x3, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000680), &(0x7f00000006c0)=0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000700)={0x0, 0x9}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000780)={r4, 0x47, "d60cfc7fcb4e401789158553436b97fabfce80a0125477f69329df7219fadac4855a3d7b3585273a953558f00c71671c0a6ba061c888a528ed78376d5f233c31208ff85b3f98db"}, &(0x7f0000000800)=0x4f) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000840)={r4, 0x1}, 0x8) ioctl$TUNDETACHFILTER(r0, 0x400854d6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000880)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000008c0)={0xfffffffffffffe01}, 0x1) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000900)) open_by_handle_at(r3, &(0x7f0000000940)={0x94, 0x7, "90fa19d21cf3436ddc283d6e027ec679bff1fd37c1eb2f2028c0ccfb9ee0fd8cdbbad0aaa6b889c744312d802990b8c293962f3dbb49d466d9a74fa45e3205ee68a3420b2b1dd432798334468c251f75513a09695b83b12efc08cbc7bde50d4b7f75b45bc08f20980275e89095024d5817e3709c289769606eb62aa95713d91d70f2398684d19710074989b0"}, 0x620200) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000a00)) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000b40)=0x5, 0x4) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000b80)) [ 706.017475] binder: BINDER_SET_CONTEXT_MGR already set 02:40:29 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:29 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x80000000, 0x4000) [ 706.048202] binder_alloc: 13759: binder_alloc_buf, no vma [ 706.053936] binder: 13759:13761 transaction failed 29189/-3, size 24-8 line 2967 [ 706.073172] binder: 13759:13809 BC_FREE_BUFFER u0000000020ffc000 no match [ 706.133395] binder: 13759:13809 BC_FREE_BUFFER u0000000020ffc000 no match [ 706.153616] binder: 13759:13803 ioctl 40046207 0 returned -16 [ 706.176187] binder: 13759:13805 got transaction to invalid handle [ 706.182581] binder: 13759:13805 transaction failed 29201/-22, size 0-0 line 2852 [ 706.247168] binder: undelivered TRANSACTION_ERROR: 29201 [ 706.257936] binder: send failed reply for transaction 1570 to 13759:13761 [ 706.281272] binder: undelivered TRANSACTION_COMPLETE [ 706.286508] binder: undelivered TRANSACTION_ERROR: 29189 [ 706.292074] binder: send failed reply for transaction 1567, target dead [ 706.313322] binder: undelivered TRANSACTION_ERROR: 29189 02:40:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffa3b7baa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}, 0x153, 0x81}, &(0x7f00000002c0)=0x88) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0xd2}, 0x8) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0xffffffcb) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000200)=0x4) 02:40:30 executing program 3: r0 = socket(0x10, 0x80003, 0xc) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/226, 0xe2}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000700)="2f657865000000d400042a004bddd9de91be10eebf00f5e94aae22e89bb36cc7457accc3320c67a90f79805843e901d2da75af1f000000000000000045cc6158f031528844209c7ed05b160ef336721bf89686ff472f71dfca5353f6323ddf8006ffc1052d6a80985adc68017065648b35c7d321fc5c0466062fbfad5acbe7ff6cefe53c88c05ab970ceebdfa589098ad40d080deb2488f9e4069682b14483f113cb6979b2f390179a18e26b4088f1f31ed04a0a681f002e007436947475ab073711c98ae3b4259f1a1aff9b09aa66cb90ca43a1dbc6de15abb4ae739f9e8f047cd29ec76b9ef6beb7839f8071aaea4d247e6a9514748c93d0bb01a7c37ca6c856327af81f296d2c2c07c2d63b") lremovexattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@known='trusted.syz\x00') setsockopt$inet_dccp_int(r1, 0x21, 0x3, &(0x7f0000000180)=0x1c00000000, 0x4) io_setup(0x7, &(0x7f00000001c0)=0x0) io_submit(r2, 0x3, &(0x7f0000000440)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000200)="8a4f2f604eae92f01b9166ac21f8c99a6a0c59ddeb1ac76a56ce70254c2d1eb25caee9458f0bb17d4ba72fa79d157f5a7f22b42c191945261e5b3e5d8f1c806b1173fb0b06368076058eed681239eb817060fb75ff24fed55b30b761b5934e00c151ea080395f0e79351757fb218739ac5c03d8fabcc46accdc53a95e613eacce6", 0x81, 0xc8, 0x0, 0x0, r1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x80000000, r1, &(0x7f0000000300)="e7", 0x1, 0x2, 0x0, 0x0, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, r0, &(0x7f0000000380)="add02dd51f8a4d9c97342453f06d6f69c3f7233e7c80fc6e61149baba43b6728290dc5caffc12ac8c5ab306fb25849eb04be8def26935121497667020a720b99e88ae474c3be90098e39632c31a019d956716d13c3fedfb6a57e5a2137078f14467cacd9", 0x64, 0x1, 0x0, 0x0, r1}]) sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 02:40:30 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x33e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) mount(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchmod(r1, 0x42) ioctl$KDSKBLED(r3, 0x4b65, 0x2ebe) 02:40:30 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x80, 0x0, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x0, 0x0) 02:40:30 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0xc}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:30 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/62, 0x3e}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x200000) pwritev(r0, &(0x7f0000000040), 0x19d, 0x0) 02:40:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x4800, 0x0, &(0x7f0000000480)}) 02:40:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2800, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000080)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000300)={0x2, r2}) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000100)=0x44) fcntl$setlease(r0, 0x400, 0x1) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000e00000000000000000000000000000000"], 0x1}, 0x1}, 0x0) 02:40:30 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0xe}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 706.464626] binder: release 13835:13845 transaction 1574 out, still active [ 706.471815] binder: unexpected work type, 4, not freed [ 706.477184] binder: undelivered TRANSACTION_COMPLETE [ 706.522922] binder: 13835:13845 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer 02:40:30 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000020000002bbd70000000001e"], 0x10}, 0x1}, 0xfffffffffffffffc) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) 02:40:30 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x8100}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000006c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000088040000400100000000000040010000a4030000a4030000a403000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000"], @ANYBLOB="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"], 0x4d4) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0405519, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0485510, &(0x7f0000000640)={0xfffffffffffffffc, 0x2, 0x8, 0x37b3, &(0x7f0000000040)=[{}, {}]}) [ 706.592371] binder_alloc: 13835:13845 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 706.601210] binder: 13835:13845 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:30 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000080)={0x1836, 0x5}) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000)=0xfffffffffffffffe, 0x4) [ 706.640778] binder: BINDER_SET_CONTEXT_MGR already set [ 706.672677] binder_alloc: 13835: binder_alloc_buf, no vma [ 706.678395] binder: 13835:13845 transaction failed 29189/-3, size 24-8 line 2967 [ 706.692336] binder: 13835:13868 got transaction to invalid handle [ 706.698696] binder: 13835:13868 transaction failed 29201/-22, size 0-0 line 2852 [ 706.713856] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 706.756575] binder: 13835:13863 ioctl 40046207 0 returned -16 [ 706.768161] binder: undelivered TRANSACTION_ERROR: 29189 [ 706.794683] binder: 13835:13884 BC_FREE_BUFFER u0000000020ffc000 no match [ 706.827695] binder: 13835:13884 BC_FREE_BUFFER u0000000020ffc000 no match [ 706.845881] binder: undelivered TRANSACTION_ERROR: 29201 [ 706.851716] binder: send failed reply for transaction 1577 to 13835:13845 [ 706.859207] binder: undelivered TRANSACTION_COMPLETE [ 706.864387] binder: undelivered TRANSACTION_ERROR: 29189 [ 706.869970] binder: send failed reply for transaction 1574, target dead 02:40:30 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x6000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:30 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80601, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a45321, &(0x7f0000000180)={{0x1, 0x174fcae300000000}, 'port1\x00', 0x80, 0x20000, 0x1, 0x80000000, 0x1f, 0xccb, 0xbea, 0x0, 0x1, 0x7ff}) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x202) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f00000002c0)=0xc) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000140), 0x10) getpeername$netlink(r0, &(0x7f0000000080), &(0x7f0000000100)=0xc) epoll_wait(r1, &(0x7f0000000240)=[{}, {}, {}], 0x3, 0x1) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000280)=r1) 02:40:30 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003d80)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000003ec0)=@dellink={0x34, 0x11, 0x15, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bcsf0\x00'}]}, 0x34}, 0x1}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000100)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000000)="5500000018007f5300000000a4a280930a600000ffa84302910000003900090035002000030000001900050000000000000000dc1338d54400009bcdc622bb8dfbdefc2ab1b81138bf6ef75afb83de448daa721ec4", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) 02:40:30 executing program 5: r0 = socket$inet6(0xa, 0x805, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000eeff0000000000000000000000000000020205", 0x18) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000100)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sendto$inet6(r0, &(0x7f00000000c0)='E', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x8dffffff]}, 0x9}, 0x1c) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x1, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x2, @multicast1=0xe0000001, 0x4e21, 0x1, 'sed\x00', 0x8, 0x5, 0x14}, {@broadcast=0xffffffff, 0x4e24, 0x4, 0x2, 0x0, 0x8000}}, 0x44) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x10080, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000180)={0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x21}}) [ 707.154747] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 707.286698] netlink: 1018 bytes leftover after parsing attributes in process `syz-executor3'. 02:40:31 executing program 3: 02:40:31 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0x80000001, 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:40:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x7a, 0x0, &(0x7f0000000480)}) 02:40:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0)) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x78) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c7d000000c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000080)="f9", 0x1, 0x40081, &(0x7f0000000200)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='q'], 0x1) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 02:40:31 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x68}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x29, &(0x7f0000000340)={@broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}, @broadcast=0xffffffff}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) getsockopt$inet_tcp_int(r0, 0x6, 0xf, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 02:40:31 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x80000000) r1 = socket$kcm(0x29, 0x4, 0x0) write$binfmt_script(r1, &(0x7f0000000c40)={'#! ', './file0', [], 0xa}, 0xb) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x88000) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) alarm(0x1) close(r2) r3 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x101000) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timerfd_settime(r3, 0x1, &(0x7f0000000380)={{}, {r4, r5+10000000}}, &(0x7f00000003c0)) r6 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x109e, 0x20000) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffe, 0x8, 0xd84, 0x7fff, 0x400, 0x9, {0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0xfffffffffffffffd, 0x3, 0x9}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000140)={r7, 0x4, 0x9, 0x1}, &(0x7f00000002c0)=0x10) 02:40:31 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x29, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0x0, 0x4, 0xffffffffffffffff, 0x4) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x2, 0x3}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000280)={r1, @in={{0x2, 0x4e23, @loopback=0x7f000001}}}, 0x84) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7fffffff, 0x800) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x7, 0xc400) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000100)={0x8000, 0x7ff, 0x1}) rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x1, 0x8001}, 0x2}, 0x20, 0x1, 0x0) [ 707.372523] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 707.382184] binder: release 13921:13924 transaction 1581 out, still active [ 707.389329] binder: unexpected work type, 4, not freed [ 707.394777] binder: undelivered TRANSACTION_COMPLETE [ 707.437448] *** Guest State *** [ 707.441179] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 707.446573] binder: 13921:13924 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 707.450097] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 707.467427] CR3 = 0x0000000000000000 [ 707.471212] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 707.477426] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 707.483604] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 707.488378] binder_alloc: 13921:13924 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 707.490764] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 707.490785] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 707.490803] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 707.499344] binder: 13921:13924 BC_FREE_BUFFER u0000000020ffc000 no match [ 707.530511] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 707.538541] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 707.546837] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 707.546929] binder: BINDER_SET_CONTEXT_MGR already set [ 707.554899] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 707.554918] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 707.554932] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 707.567597] binder: 13921:13942 ioctl 40046207 0 returned -16 [ 707.568303] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 707.598258] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 707.604758] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 707.611391] binder_alloc: 13921: binder_alloc_buf, no vma [ 707.612290] Interruptibility = 00000000 ActivityState = 00000000 [ 707.612296] *** Host State *** [ 707.612308] RIP = 0xffffffff811f45f4 RSP = 0xffff88019d50f3d0 02:40:31 executing program 4: 02:40:31 executing program 7: 02:40:31 executing program 3: 02:40:31 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0xee0e0000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:31 executing program 3: 02:40:31 executing program 4: [ 707.612330] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 707.612344] FSBase=0000000000000000 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 707.618072] binder: 13921:13924 transaction failed 29189/-3, size 24-8 line 2967 [ 707.624318] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 707.661426] CR0=0000000080050033 CR3=0000000196314000 CR4=00000000001426f0 [ 707.668704] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87a01380 [ 707.675457] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 707.681619] *** Control State *** [ 707.685131] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 707.687688] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 707.692042] EntryControls=0000d1ff ExitControls=0023efff [ 707.692058] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 707.692068] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 707.692077] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 707.692090] reason=80000021 qualification=0000000000000000 [ 707.731858] IDTVectoring: info=00000000 errcode=00000000 02:40:31 executing program 7: 02:40:31 executing program 5: [ 707.737365] TSC Offset = 0xfffffe8182396dae [ 707.741746] TPR Threshold = 0x00 [ 707.742353] binder: 13921:13942 got transaction to invalid handle [ 707.745219] EPT pointer = 0x00000001bc3b701e [ 707.756060] binder: 13921:13942 transaction failed 29201/-22, size 0-0 line 2852 02:40:31 executing program 4: [ 707.877785] *** Guest State *** [ 707.881209] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 707.890243] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 707.894633] binder: 13921:13959 BC_FREE_BUFFER u0000000020ffc000 no match [ 707.899159] CR3 = 0x0000000000000000 [ 707.899170] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 707.899180] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 707.899193] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 707.899206] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 707.899230] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 707.945168] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 707.953215] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 707.961331] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 707.969380] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 707.977409] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 707.985453] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 707.993472] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 708.002208] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 708.003145] binder: 13921:13959 BC_FREE_BUFFER u0000000020ffc000 no match [ 708.010578] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 708.010591] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 708.010607] Interruptibility = 00000000 ActivityState = 00000000 [ 708.038778] *** Host State *** [ 708.042139] RIP = 0xffffffff811f45f4 RSP = 0xffff88019b8df3d0 [ 708.048267] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 708.054732] FSBase=0000000000000000 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 708.062577] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 708.068520] CR0=0000000080050033 CR3=0000000196314000 CR4=00000000001426f0 [ 708.075593] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87a01380 [ 708.082322] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 708.084804] binder: undelivered TRANSACTION_ERROR: 29201 [ 708.088414] *** Control State *** [ 708.088426] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 708.088433] EntryControls=0000d1ff ExitControls=0023efff [ 708.088446] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 708.088453] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 02:40:31 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) syz_emit_ethernet(0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="4180c20000000180c200000000110000d167cef70000"], 0x0) read(r1, &(0x7f00000009c0)=""/35, 0x23) 02:40:31 executing program 3: [ 708.088465] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 708.101755] binder: send failed reply for transaction 1584 to 13921:13924 [ 708.104136] reason=80000021 qualification=0000000000000000 [ 708.104144] IDTVectoring: info=00000000 errcode=00000000 [ 708.104150] TSC Offset = 0xfffffe8182396dae [ 708.104154] TPR Threshold = 0x00 [ 708.104162] EPT pointer = 0x00000001bc3b701e 02:40:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f000000ad80)=[{{0x0, 0x0, &(0x7f000000acc0), 0x0, &(0x7f000000ad40)=""/61, 0x3d}}], 0x1, 0x40010001, &(0x7f000000af80)={0x0, 0x989680}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x5}, 0x8) r3 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="556a7f65f3a70aa3a294"]) keyctl$instantiate(0xc, r2, &(0x7f0000000100)="da48ab695977c0b4af20f65ca03a66ff19a975448c08e9464d98b0e033ce58cd380d936a2617c33c437052ef070434717aff1de50cdb3b12a4bfa530e406b041c522872fba951c85340cb176013ac5544463fc5511265420f2c1d8af9255a9a637d702a991a4865e643fa9b18058fcf5a1336ef2de4d79a653ace131530feb7658128d141dddeabfcf70523d14a74253", 0x90, r3) 02:40:31 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x5000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:31 executing program 7: 02:40:31 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xb39, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 02:40:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000180), 0x8) 02:40:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x5000000, 0x0, &(0x7f0000000480)}) 02:40:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r2 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000440)=ANY=[@ANYBLOB="cc0400001300080025bd7000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="000000000002000064042b003ff99e852c7941303deb8bd7df477035ace3c63a9b84e1a247b48fbdca609c27e40a6201de12956cb99f64fda222e0ada099920ec40644b2b1ab457e402b28592914d1366fc4c380c38b828f8359c0ef6dde3bbc436b039ba483ae253bc2967c51336cc48a7ada0f698f822698b24073625bec386805638c06d99ea37ac4ee0f5fc022f25aee9c7abfd8f719d6d526f19c2df406de27eb5b04a6c224720706aaa4846b3b25fe45cd7e851452d8f1d7c52c8dbeba7ce58f63cec452078d816e2d00369c877e192b83816be808009000ac1414aa14008200ff0100010000000000000000000000018b36d91275264e4fc59cec0a5c0e9efa83e66a8ca2b873109f9aa615643973601ce6aa25cf0cc35a9e58c70494bb264bc8dcbcfeadaeceb04b146ff33d7c59b18c75310c000400657468314000000008005b00", @ANYRES32=r0, @ANYBLOB="1403580014004a00000000000000000000000000000000011000900073656375726974792a00000008002800", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="00000400510008001e00", @ANYRES32=r3, @ANYBLOB="00002400190018003e00245e6370757365745c47504c2b2d75736572000008003e000000000008002e00018000001400140076657468315f746f5f626f6e640000000800100004000000"], 0x4cc}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 708.233856] binder: undelivered TRANSACTION_COMPLETE [ 708.239214] binder: undelivered TRANSACTION_ERROR: 29189 [ 708.244757] binder: send failed reply for transaction 1581, target dead [ 708.275120] sctp: [Deprecated]: syz-executor4 (pid 13983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 708.275120] Use struct sctp_sack_info instead [ 708.277760] binder: release 13976:13979 transaction 1588 out, still active [ 708.291637] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 708.297562] binder: unexpected work type, 4, not freed [ 708.310306] binder: undelivered TRANSACTION_COMPLETE [ 708.316405] binder: undelivered TRANSACTION_ERROR: 29189 02:40:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0xf000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:32 executing program 7: r0 = socket(0x200000000000011, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x4, 0x8000020, 0x100000001, 0x1}, &(0x7f0000000080)=0x18) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x240, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000380)='./file0\x00', r3, &(0x7f0000000400)='./file0\x00', 0x400) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r1, 0xffffffffffffff80, 0x3f}, &(0x7f0000000140)=0xc) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x6, &(0x7f00000002c0)=0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x5, 0x7, 0x1528, "e0e3f73e01f09336bb6d7baa2bbc699ac5eece94ae477790b36e3b23367c387b7b2f6af63a05ffa3a59d31d1a75652954d924497e3789c63aa3c11ff2c75cf5e42eca7a3de85210a3d44e96c9c84d24a"}, 0xd8) gettid() lookup_dcookie(0x1ff, &(0x7f0000000480)=""/21, 0x15) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000180)=0x2, 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000300)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 02:40:32 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x6, 0x40, 0x20}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700000000000000000000000000000009000000000000006b0b00000000000005ffffffffe5000009020000000300000000000000ffffffe7000000000900000000000000260b00000000e30001000000000000000000c50a0000000040000000000000001e0100000000000015020000000000003cd0b2b9932de874ceec5fc471d2bb5781f3d338c297ac0e0f639b3988b0a717a00e192cc4736ad74e918f6ddb735765d90059631b5774ffe243fcfd797f4b787eac81d167742d07db11aa86ce3622071b45a27492d64daeb99c0fa3642a24d7b63edb9c514ae9b9627564bcb7f070d6c71f6159dee0097c3694c4fa2bc9397e9e5205e385d4c959599c59596f23cce078915eaab43a9203aa5c9487818098fc4ce1b57e10070b19b97e8bff01ac64977234506f7f8c1f855eb5cc14d6f4c05512fe"]) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/144}, 0x18) mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x50) [ 708.347726] sctp: [Deprecated]: syz-executor4 (pid 13990) Use of struct sctp_assoc_value in delayed_ack socket option. [ 708.347726] Use struct sctp_sack_info instead 02:40:32 executing program 5: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) chroot(&(0x7f0000000140)='./file0\x00') mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0x2, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000002c0)='..', &(0x7f0000000300)='./file0\x00') open$dir(&(0x7f0000000040)='../file0\x00', 0x0, 0x0) 02:40:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x4) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e21, 0x408000, @dev={0xfe, 0x80, [], 0xd}, 0xa3d3}, {0xa, 0x4e21, 0x28000000000000, @remote={0xfe, 0x80, [], 0xbb}, 0x1c6f}, 0x6255a5ce, [0x3, 0x5, 0xff, 0x9, 0x1, 0x2, 0x9, 0x9]}, 0x5c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r1) shutdown(r0, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0x6ee8db244cb7edef, &(0x7f0000000140)="1c5a9dc9fd7ebd4bf7b275b5a7d4768ec686c8d894459026cf128481baba01f820dc9d7c9afbbe909934e99b573b8beb2117e24d799510ec5024c164a773fa312b1423998819000f62a077ce88823ac0a88b006a5b291c8e1a0036470487980b79d19f35ddeb55983c73f11a8ddff0c21f8f10f5ffa1b6982e524d35ea81d21db9527710960524d7b43e65513d279b6fe1ea670429e9e368b25c5e014fb4d3260cd7ec235498a0b3f576a9186d38334119", 0xb1) fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x15) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000240)=0x4) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000280)={{0x1, 0xe3db, 0x100000001, 0x0, 0x8, 0x2}, 0x2, 0x2, 0x1, 0x3, 0x400, "5b93ffd59cdbbf64d6cf8fdf04ce6bb55c432f1eb309f6a97b0d38267395d83c307e18d7772a248fd4e6c66c8ab3eb0e2a689a04f19ac39cb19ea7439617c49075938a6b9c9c4011294562a6581cffab329fce4584a893142af6cd96f53aba066acd81b83fd8ed86df24e956628a01ab42a80c89ad4ab939ee38cfa3280c4789"}) membarrier(0x8, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000340)={0x8, 0x7ff, 0x5, 0x10fa, 0x5, 0x40}) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000380)={{0x2, 0x4e21, @multicast1=0xe0000001}, {0x306, @link_local={0x1, 0x80, 0xc2}}, 0x4, {0x2, 0x4e23, @multicast2=0xe0000002}, 'ip6gretap0\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000400)=[@in={0x2, 0x4e22, @multicast1=0xe0000001}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in={0x2, 0x4e21, @multicast2=0xe0000002}, @in={0x2, 0x4e23, @broadcast=0xffffffff}, @in6={0xa, 0x4e20, 0x2, @loopback={0x0, 0x1}, 0x2}, @in6={0xa, 0x4e22, 0x1000000020000000, @dev={0xfe, 0x80, [], 0x1e}, 0x8001}, @in={0x2, 0x4e21, @rand_addr=0x3}], 0x88) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000500)={0x7, 0x3, 0x1, 'queue0\x00', 0x6}) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f00000005c0)={[], 0xca, 0xfffffffffffffff9, 0x4, 0x9, 0x3ff, r1}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000640)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000880)={0x1, 0x1, &(0x7f0000000680)=""/176, &(0x7f0000000740)=""/6, &(0x7f0000000780)=""/204, 0x1}) finit_module(r0, &(0x7f00000008c0)='ip6gretap0\x00', 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000900)={0x6, 0x0, 0xacfc, 'queue1\x00', 0x4}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000009c0)={0x7fff, {{0xa, 0x4e23, 0x7, @loopback={0x0, 0x1}, 0xb0e}}, {{0xa, 0x4e24, 0x98, @local={0xfe, 0x80, [], 0xaa}, 0x3}}}, 0x104) r2 = add_key$user(&(0x7f0000000b00)='user\x00', &(0x7f0000000b40)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000b80)="80ca7dd293382703b444813b2c9eea4998bc27013c73dec705d0effea1048464ac5c888a922966b309159d601ff05ac0165b459cec2b0a584a6e08b82b56b9045234619dac2b8a7e82d360b9bbfb1756b9338e2e71f0228e23c109d83dae9597259dba668baed776c0989c4a89b1e3ca75c3df30e8370aff7eaf6913be6150678e4d44cf79dfee4f6604d633db36e553936c1ef0fe4a07fb70241b88a263dda1a4e5c7e98914c867897c4546db0563d156eaf1701565e4", 0xb7, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000c40)='keyring\x00', &(0x7f0000000c80)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) keyctl$link(0x8, r2, r3) acct(&(0x7f0000000cc0)='./file1\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000d00)={0x2, 'vlan0\x00'}, 0x18) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/rfkill\x00', 0x200, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000dc0)={0x0, 0xfffffffffffffff7, 0x1f, &(0x7f0000000d80)=0xc83}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000e80)={0x9, &(0x7f0000000e00)=[{0x6e33, 0x26caaca5, 0x3, 0x7ff}, {0x5, 0x7, 0x4, 0x1000}, {0xd247, 0x8, 0x9, 0x401}, {0x400, 0x1, 0x80000000, 0x7}, {0x7, 0xc80c, 0x8000, 0x5}, {0x0, 0x896, 0x400, 0x10000}, {0x8000, 0xc6b0, 0x100, 0x50b1}, {0x1eb0, 0x8, 0xffffffff, 0x3ff}, {0x7ff, 0xfffffffffffffff8, 0x5, 0x8}]}, 0x8) 02:40:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x3) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) listen(r2, 0x0) listen(r1, 0x0) connect$netlink(r1, &(0x7f0000000680)=@unspec, 0xc) [ 708.449407] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 708.456983] binder: 13976:13979 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 708.485235] binder_alloc: 13976:13979 FREE_BUFFER u0000000020ffc000 user freed buffer twice 02:40:32 executing program 4: mkdir(&(0x7f0000001040)='./file0\x00', 0x4) getxattr(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)=@random={'trusted.', 'mqueue\x00'}, &(0x7f0000000080)=""/249, 0xf9) mount(&(0x7f0000900ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) modify_ldt$write2(0x11, &(0x7f0000001000)={0x3, 0x0, 0x1000, 0x8, 0x80000001, 0x1f, 0x4c, 0xa11f, 0x80000000, 0x6}, 0x10) r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x1, 0x8000) ioctl$KVM_NMI(r0, 0xae9a) r1 = creat(&(0x7f0000c5eff4)='./file0/bus\x00', 0x0) mq_timedsend(r1, &(0x7f0000001080)="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", 0xfd1, 0x0, 0x0) [ 708.493962] binder: 13976:13979 BC_FREE_BUFFER u0000000020ffc000 no match [ 708.579563] binder: BINDER_SET_CONTEXT_MGR already set [ 708.604218] binder: 13976:14018 ioctl 40046207 0 returned -16 [ 708.632551] binder_alloc: 13976: binder_alloc_buf, no vma [ 708.638257] binder: 13976:13979 transaction failed 29189/-3, size 24-8 line 2967 [ 708.671171] binder: 13976:14018 got transaction to invalid handle [ 708.677733] binder: 13976:14018 transaction failed 29201/-22, size 0-0 line 2852 [ 708.695190] binder: 13976:14018 BC_FREE_BUFFER u0000000020ffc000 no match [ 708.695195] binder: undelivered TRANSACTION_ERROR: 29189 [ 708.707909] binder: 13976:14018 BC_FREE_BUFFER u0000000020ffc000 no match [ 708.731804] binder: undelivered TRANSACTION_ERROR: 29201 [ 708.737474] binder: send failed reply for transaction 1591 to 13976:13979 [ 708.745679] binder: undelivered TRANSACTION_COMPLETE [ 708.750967] binder: undelivered TRANSACTION_ERROR: 29189 [ 708.756503] binder: send failed reply for transaction 1588, target dead 02:40:32 executing program 6: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x0, "06e93bb662a48cf8b6f5d4822147e0a6eae9829c53e38e59f0bf2544bcb59511685ce50b04a3f6fb2bdb42352d8445d654034abd49827c461c21464fd87ebc4910ef639d0bf0787e006aaeade22a2e90"}, 0xd8) pipe2(&(0x7f0000000000), 0x4000) syz_emit_ethernet(0x6a, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast=0xffffffff, {[@generic={0x89, 0x3, "e4"}]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, 0x0) 02:40:32 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82402) r1 = memfd_create(&(0x7f0000001240)="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", 0x0) rt_sigtimedwait(&(0x7f0000000040)={0x1}, &(0x7f0000000080), &(0x7f0000000100)={0x0, 0x1c9c380}, 0x8) sendfile(r0, r1, &(0x7f0000000000), 0x0) 02:40:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x4c}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x4000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x14}) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000500)={r2}) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000400)={0x1, 0x1ff, 0x3}) sendmmsg$alg(r2, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="bdda17542cbdfc083b3a313d978249b4a88e030d9decc3bf49aee9660bb2cd8e57bd8b205dad203856b5b7500914aa593b92435be5a27435ac78aca7", 0x3c}], 0x1, &(0x7f0000000200)=[@assoc={0x10, 0x117, 0x4, 0x4}], 0x10}], 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={r0}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x80, @loopback={0x0, 0x1}, 0x5}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000340)={r5, 0x6}, &(0x7f0000000380)=0x8) connect(r2, &(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @rand_addr=0x3c1064a8}, 0x2, 0x1, 0x0, 0x4}}, 0x80) recvmmsg(r2, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f00000002c0)=@sco, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/80, 0x50}], 0x1}}], 0x2, 0x0, 0x0) 02:40:32 executing program 1: socketpair(0x11, 0x1, 0xff, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") 02:40:32 executing program 4: io_pgetevents(0x0, 0x4, 0x15f, &(0x7f00000005c0), 0x0, &(0x7f0000000740)={&(0x7f0000000700), 0x8}) 02:40:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000200)) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffff9c, 0x3, 0x1, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x101, 0x4) 02:40:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x7000000, 0x0, &(0x7f0000000480)}) 02:40:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x242200) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000040)=0x4) [ 709.074853] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 709.085774] binder: release 14040:14041 transaction 1595 out, still active [ 709.092890] binder: unexpected work type, 4, not freed [ 709.098248] binder: undelivered TRANSACTION_COMPLETE 02:40:32 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0xfffffffffffffe00) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000)={0x100000000}, 0x1) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x1000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x121000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0xcc, 0x30, 0x200, 0x9}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r2, 0xe19}, 0x8) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 02:40:32 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x220100, 0x0) r1 = getpgid(0xffffffffffffffff) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000240)=r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x1, @empty, 0x7}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x2c) getpriority(0x3, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f00000025ff00000044ab92b827b30000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f0000000000)=""/195, 0x4, 0x1, [], 0x0, 0xfffffffffffffffc}, 0x48) 02:40:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x8f, "0a09b5a22a4d9577ea1039b1eb0fb75305bbf0e198e8da7663c1719a363155d05748c80a8836068f6ecb27d8fa796a7739fe7e05d153d650c94d9a378fbd05ca4d69ba690e1c2ce9904ff47948d3b776e4b2cfe6af096ddf3135c5a60e3e0393f64947617a44f3ad7ed8e49b6f926ee469abe63cd3386dee9d591a73c69a56f587ebcb57316b083b074109db0b3eb8"}, &(0x7f0000000100)=0x97) getpeername$packet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x14) r4 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, [], 0x13}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e22, 0x0, 0x4e24, 0x6, 0x0, 0x20, 0x20, 0x29, r3, r4}, {0x2, 0x400, 0x5, 0x1f, 0xd34, 0x0, 0x80000001, 0x4}, {0x7fff, 0x8, 0x8001, 0x9}, 0xfff, 0x6e6bb9, 0x2, 0x1, 0x1, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x4d6, 0x3c}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x3502, 0x3, 0x0, 0x3, 0x9, 0x394c, 0x5}}, 0xe8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r2, 0x4) r5 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) epoll_create1(0x80000) r6 = dup2(r0, r1) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000480)=""/36) getsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000440)=0x4) io_setup(0x4, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f00000004c0)=""/72) io_submit(r7, 0x0, &(0x7f0000001440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x1ffffffff7fffe, r6, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, r6}]) 02:40:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x380) listen(r0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {0x6}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6b1d261e}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) writev(r3, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) [ 709.149748] binder: 14040:14041 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 709.211269] binder_alloc: 14040:14041 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 709.219896] binder: 14040:14041 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:32 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="2e2fff7ca09575702e6e65742f73797a3100", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000014c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000001480)=[{&(0x7f00000000c0)='t', 0x1}], 0x1, 0x0) 02:40:32 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)={[0x2c, 0x30]}, 0x2) 02:40:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000080), 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x2, 0x7}) [ 709.275493] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 709.330423] binder: BINDER_SET_CONTEXT_MGR already set 02:40:33 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x1) write$binfmt_elf64(r0, &(0x7f0000000900)=ANY=[@ANYRES64], 0xffab) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) write$sndseq(r0, &(0x7f00000028ef), 0xffffff2f) 02:40:33 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:33 executing program 7: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="71019c1b187e7fd13b080000222a0bcc8ced820000000000000000008cdd35"], 0x0) fstat(r0, &(0x7f0000000100)) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)="afd69b198709de49c49e1dafed621d51ad78460a7a6dd4393765d84c47cfbc8790fe2096ea5e9b08f8094c04d5f549e855d880880362b8a220e281a224085a1dff101e52c25fb444cf5b99016b8fe0d0d5e138f902a0c23a824e4f") execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x1000) 02:40:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x400, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x82002, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000280)={@local, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000003c0)={r1, 0xfff, 0x6c, "954d4e9b88f27fe109f31d24857adc303603ce8091fd16acd737998bbb6953922fdf5f75b4f93dee27269c4b0f0cde58fe8b9fe557a4251a96e62280d814f4765b14ef9ce949bc15b6d6eb1fc9650ee522257f021bca516065a00b20f47cf77099fdf167a877e0bf8205d6b1"}, 0x74) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000300)={@loopback, 0x0}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @rand_addr, @multicast1}, &(0x7f0000000480)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000004c0)={@mcast1, 0x0}, &(0x7f0000000500)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000540)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000580)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000a00)={@mcast1, 0x0}, &(0x7f0000000a40)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000ac0)={@remote, 0x0}, &(0x7f0000000b00)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000001a00)={@dev, @broadcast, 0x0}, &(0x7f0000001a40)=0xc) recvmmsg(r0, &(0x7f00000026c0)=[{{&(0x7f0000001a80)=@in={0x0, 0x0, @multicast2}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001b00)=""/6, 0x6}, {&(0x7f0000001b40)=""/244, 0xf4}, {&(0x7f0000001c40)=""/9, 0x9}, {&(0x7f0000001c80)=""/211, 0xd3}, {&(0x7f0000001d80)=""/140, 0x8c}, {&(0x7f0000001e40)=""/3, 0x3}, {&(0x7f0000001e80)=""/137, 0x89}], 0x7, 0x0, 0x0, 0xfa7b}, 0x8001}, {{&(0x7f0000001f80)=@generic, 0x80, &(0x7f0000002340)=[{&(0x7f0000002000)=""/195, 0xc3}, {&(0x7f0000002100)=""/177, 0xb1}, {&(0x7f00000021c0)=""/34, 0x22}, {&(0x7f0000002200)=""/16, 0x10}, {&(0x7f0000002240)=""/235, 0xeb}], 0x5, &(0x7f0000002380)=""/228, 0xe4, 0x4039}}, {{&(0x7f0000002480)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002500)=""/99, 0x63}, {&(0x7f0000002580)=""/73, 0x49}], 0x2, &(0x7f0000002640)=""/67, 0x43}, 0x3ff}], 0x3, 0x40012001, &(0x7f0000002740)={0x77359400}) accept4$packet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000027c0)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002800)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000002900)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000002980)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000002bc0)={@dev, 0x0}, &(0x7f0000002c00)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000002d00)={@local, 0x0}, &(0x7f0000002d40)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000003280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003240)={&(0x7f0000002d80)={0x4b4, r3, 0x100, 0x70bd26, 0x25dfdbfb, {0x2}, [{{0x8, 0x1, r4}, {0xd4, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7fff}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x2c, 0x4, [{0x401, 0x4, 0x9, 0x7}, {0x100000001, 0x7e, 0x3, 0x7}, {0x3, 0x1000, 0x6, 0x10000}, {0x546e, 0x9, 0x7ff, 0x5}, {0x7, 0x7, 0x2, 0x7}]}}}]}}, {{0x8, 0x1, r6}, {0x140, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0xf4, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x100000000}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r12}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r14}, {0xb4, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r15}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r16}, {0xbc, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x719}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r17}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1637}}, {0x8, 0x6, r18}}}]}}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x2404c814}, 0x1) [ 709.374212] binder: 14040:14079 ioctl 40046207 0 returned -16 [ 709.406685] binder_alloc: 14040: binder_alloc_buf, no vma [ 709.412661] binder: 14040:14041 transaction failed 29189/-3, size 24-8 line 2967 02:40:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f691c0264192f42be07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x40}}, 0xfffffffffffffffe, 0x3f, 0x7, 0x3, 0x8}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e23, @multicast2=0xe0000002}}, 0x7fff, 0x401, 0x400, 0x1, 0x4}, 0x98) fsetxattr(r0, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000040)="cfbb15c59d84e365d72cb0cd835c91473f83dd3ceaf1cbd9390a5359179406f1d4a3002256501be19a6b21a4799ad90053f3880aa9cb6d01de5eba7ba0b8df2ba15a", 0x42, 0x0) [ 709.469776] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 709.504561] binder: 14040:14094 got transaction to invalid handle [ 709.511018] binder: 14040:14094 transaction failed 29201/-22, size 0-0 line 2852 02:40:33 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x3a7, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000340)=r0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x4) [ 709.581736] binder: 14040:14116 BC_FREE_BUFFER u0000000020ffc000 no match [ 709.619203] binder: 14040:14116 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x4000000, 0x0, &(0x7f0000000480)}) 02:40:33 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_bond\x00', 0x10) mmap$xdp(&(0x7f0000979000/0x3000)=nil, 0x3000, 0x0, 0x811, r0, 0x80000000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x2000, 0x0) 02:40:33 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000001030000000000000000000f000000ac14ffaa4df5c44be65c278af5ab095c11dbb109a2278ad37760130471d578bf9e8b9a413479ae6b7356"], 0x24}, 0x1}, 0x0) 02:40:33 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x200, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/hci\x00') poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) kcmp(r1, r1, 0x4, r0, r2) ioctl$int_in(r0, 0x5452, &(0x7f0000000400)=0x800000007fff) accept4(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80, 0x800) 02:40:33 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{}, {r3, r4+30000000}}, &(0x7f0000000140)) sendfile(r2, r1, &(0x7f00000000c0), 0x7ff) 02:40:33 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:33 executing program 3: pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000040)="ae", 0x1) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000000)='H', 0x1}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000001700)={0x1314, 0x37, 0x11, 0x70bd29, 0x25dfdbfb, {0x1a}, [@typed={0xc, 0x4f, @u64=0x3}, @nested={0x1198, 0x43, [@generic="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", @typed={0x30, 0x59, @binary="244a9515a92a898e65925d5f79564e6433b3aa146350a6f57ec2ed5c0338db7c92c46b02868ae9c5ea"}, @generic="438a97bea5e1548b49a1a93f6d6a12c697fa80909bdb1ed6190e068ee1707c798bafeef83cda20ea4eca8c816c41c74c1d1049ec0b508921639d62efea53a71c6e93081b50648fa3c494e2d569a410434f717a45a1a5fcd8ca19b46606ac577c1382b96c045f43254deea808232d787203930c2c827a2b7ad51f0c9f52a46ff95dbf5345cdc17af00d8840b7536c0871854ebf5e156f3fe1c284112292b356aff179384cad28b17c72a37054a2d55cb0dc5f5eeaeacf9004e729589d060a6c52063e8b37af1689ffd794a67af2a7a73912c2aee295ef9bd74335daa7bc64bf0ae5f6", @generic="e11dbdd8f54e860a1a9ae308ace76e1c773ba1bd40bb6026f4a7e748c2ec3007291cb842cfa8564ae3133c7b718e9d1c40dcd884e96d6e5d9a688f5ee8922f80681ca698b010ba7c84a8057c5eebdf03d14394bcb0a75dd47d80e95855097bb6ef04f9445cf7b45a4585cdc2dfb98010c78a9538f97d4a74014b5111c5f611"]}, @nested={0x15c, 0x4e, [@typed={0x8, 0x87, @fd=r0}, @typed={0xc, 0x90, @u64=0x6}, @typed={0x8, 0xf, @pid=r2}, @generic="37fd665bc9fc1f2446208c27c2ca956b8a548daf3f7b283fcc6aea2f5971a1eb998b2dc65a67addbfba90b28aa505b61064850b629d176f5e9d7e3a78fe1ac0a84957532e3567e3f9cb82c540b0fd8d61c4a06aff2192a14e20ec94bc59e9a490680b30d91315824217dcb207ba82c0648c14bfd7ce4b88ae784270ca316a44272ae7a6eb5aef4ccfd73c96ebd6154b74e47173c5bd9b512b679167dc5d1213f754cd9e3225ccbc21e92ade5a7e562a62520c2da832234d19b4021f28a842e22e241e327c957599e5e616453d336e138eab586c7e34b915592edb2ceda519b5533", @typed={0x8, 0x7, @str='\x00'}, @generic="02d8f7e530a1578d98844fd419cec30b950e334061869c3cac0530afc54bdc0ea9ab3a7765c6eb1c64f2dc7ffb7237ab0ac3c23495432cad107d4819aa0ec6039fcaed74d95d75d485fec95cfab3", @typed={0x4, 0x1f}]}]}, 0x1314}, 0x1, 0x0, 0x0, 0x8041}, 0x4040000) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000080)={0x5, 0x1000}) vmsplice(r0, &(0x7f00000016c0)=[{&(0x7f0000001640)="efd1", 0x2}], 0x1, 0xa) [ 709.712093] binder: undelivered TRANSACTION_ERROR: 29201 [ 709.718073] binder: send failed reply for transaction 1598 to 14040:14041 02:40:33 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x3) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$kcm(r2, &(0x7f0000001840)={&(0x7f0000000040)=@ax25={0x3, {"6bf950f2ba14b5"}, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="81357ffe5ff23ea73b3f7142f5345595fe793b5e9f6cd13ceb64230e33ac2aa4f4d5911a27d7b499df09ebc0b0fac7054850855b62685e39568a6470bf3cb376da5aa10fdce9561bd44754d1d40bd3c67bc700fc5d551245ff2993d6a954b8325b7c958bc11efdd04d3fc207ee1f9a65aca4993081f8b0ed764d92f40e1910454a67792c35aaddf10f15dc0d89f5121af90ae4", 0x93}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000000c0)="f3e3e6d7355144270747bd00035d7519ce989a49422262034ef2", 0x1a}, {&(0x7f00000012c0)="a306471a362ade7d3f8762c99197da171fc49c8cd054c49b2044f7cd55fa72cef49ab7c60fa946bbf5249e03f8745043164b1c60c7810f500b6c07686a97d88643af929ee9f9c7c324563276e2fb49f2e5bad1ae6f3a4a84620e7c6b52527acad0ba0ff05965495b30194ac417487b14ec85299935bbc4ec79209aee8985d322fdbda8b8ce6b9a2919f726665f08f70a6d94adc47a9309832fe6601ff3c1db72d8d610ed2182bbd7441d7859b5e69a9b55d521bba96f78c74b27a8c46c24997dce55310f8b44722faa1339cd648415f9e252d4d887c72bc1a154a7a446d9", 0xde}, {&(0x7f00000013c0)="3211cc454d0db2be4c7ca17f598d47982df9752a31b18a02f6017b06e438eb45f960dc874109808b849841114b85ef75596d604f5db78697db2bea9053a78262d76a5378ab9bee85415c7573d4ba8ac0886760f59ba16caa16a913be49ad9222e4f7fda1f19082a6caede61b22ceab3615e72f3673a754f20f3e6255478977ebc042002dac2985362ec7d279f0d378b44b09391a10926cfd5794073d05732f5b2d43ace8ad1421dc8044", 0xaa}, {&(0x7f0000001480)="721cb7277fe59afb785f16dea7d6c6e2532e35c2d0003a40e6a9923beca65124517fa52c0172cadeac57d817ec6191994f4502e9b4a6226cf79a45a4699689c7b5026e341a544c20cbcca7fc1a6b6800010af6468d598cd405b2d227a7e0599c1dea7582e96df79c16ef696bbe42d03b3749db1de2cfc2033474001f7b3fead622cb5b4b642bf3552ed82e75d48a1b450bccc709de72acb7e376d1580baecc2d93d0547dfa3c9c3d93f98d8850bdd623ca8000e463508153d88279a2fb5bd01a0506ae967f5a10cb398cdac4c92df0350d73ad4e3d5d026660522594797107f3ec21a097", 0xe4}, {&(0x7f0000001580)="ced18271c5a57a2694287462a26d4f03d049c3564d6221f697ffb255b746a74aa4736abc652c4987ac1c7c4ba3fbd7118384f43f223b35d94ca8dd9d201a7ca2aeaa7b312ef54a6811a476cc4975e610622443f6b309303626a9e1cb", 0x5c}, {&(0x7f0000001600)="6fdd405827bb86bfc40484134c89256bf1c30c1b8b66f5c1f440d2c709f91564db3b1e07670e36020e08004c5df95d4d58f95b191ed1c7ae89379c8521d2e430f3048b6b72ac3b4c46230457fbbc492aa1963a7f9aa007d8890e5780ca20c6a95cb34a337f0f3772acb3531307337a878fc682ea4a45b8d905f23d2fb012192dddd87ab20563846fa37761b553f14ba8f65ce151d5ba175e5d0a3f3cbbfde806bb9dac5f1ee7e901bf64015b9b6f84780204d47a6c70f60601ef9a69e2fe222bd4aff86beb3001640b34b4e0ad44789b3da4eb9503ec632f1930a2cfeb2782b8e20748f72b49313279982f933155", 0xee}], 0x8, &(0x7f0000001700)=[{0xc8, 0x116, 0x2, "1ce20177ef80957f202b73b7b0f30b9d37742b1c102687321bc5ed6d4898060477e9f72f04b1a4508cbe847aa1449d97ba2225f53ebbe564157c04b0f94a22a8602c52cb02255ebf22d80771f7e8b30f1bd1ebca23bc99d616708206b850a5e3d0eaba5969f0647eeeb6064c429d2244f10f598bc1675303e9874fe65137de53054f71fe7cb664f4876398dab4b0761cd52d75798c30fcfd9fdbaf270583ffaf8e4d8481af3cb0d4eab1102a032fece979504a088207c778685490d5"}, {0x50, 0x10b, 0xb2b, "6773faf947c4d81365eae3e2867b5502d0ee64d3fdbfdc4fbae65bdbf7f64e702521ddb12c5d0a65b0429976bf15e46ea84951ddaba4818b1cb5d2ec393e2c4d52"}], 0x118, 0x40}, 0x840) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x11, @loopback=0x7f000001, 0x0, 0x0, 'sh\x00', 0x2}, 0x2c) r3 = dup3(r1, r2, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000001900)="c5b2b624112b76166f983d8c7715a968e337437fd4e1278b09426d4103926316b81852a025428f22f0ef5e1c5446e65352ad6a5bc90e") setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000018c0)="b3c49ddd7a77e36300c21659388813c0", 0x10) [ 709.771050] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 709.787998] binder: undelivered TRANSACTION_COMPLETE [ 709.793259] binder: undelivered TRANSACTION_ERROR: 29189 [ 709.798792] binder: send failed reply for transaction 1595, target dead [ 709.812443] netlink: 16 bytes leftover after parsing attributes in process `syz-executor6'. [ 709.839865] binder: release 14141:14142 transaction 1602 out, still active [ 709.847076] binder: unexpected work type, 4, not freed [ 709.852409] binder: undelivered TRANSACTION_COMPLETE [ 709.873571] binder: undelivered TRANSACTION_ERROR: 29189 02:40:33 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="01634040000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f00000001c0)=ANY=[], @ANYPTR64=&(0x7f0000000240)=ANY=[], @ANYBLOB='\v\x00'], 0x1, 0x0, &(0x7f0000000440)="13"}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x80000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 02:40:33 executing program 7: prctl$getreaper(0x29, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000849000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x38, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, r1}, @register_looper={0x630b}, @request_death={0x400c630e, 0x0, 0x4}, @clear_death={0x400c630f, 0x1}], 0x34, 0x0, &(0x7f00000000c0)="c0dc4c2f840dc2d837b80915b10f72731cbc89cb3a6e1eaf00c8e4981c37b27561143be0def63b680b77b69df4ff5744a721f770"}) 02:40:33 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x300}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 709.890220] binder: 14141:14142 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 709.924280] binder_alloc: 14141:14142 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 709.932933] binder: 14141:14142 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:33 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x13, 0x400040) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r1 = socket$inet(0x10, 0x3, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x10000, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002071f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1, 0x0, 0x15c}, 0x0) 02:40:33 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_int(r0, 0x1, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x10000, 0x0) getsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 02:40:33 executing program 7: r0 = socket$kcm(0x29, 0x1000000000005, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) [ 710.029533] binder: BINDER_SET_CONTEXT_MGR already set 02:40:33 executing program 4: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(&(0x7f00000007c0)='./file0/file1\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) clone(0x800, &(0x7f0000000800)="48c1f873d84ffd7ac3229b087da99a3b385350d7ec234dd6389a9b948fa82790d515d2586e5d7ff2e2ca7eb9fb21c0b60f55e3aca173441b30c17447b42e9048a1a7987120d753bd5b2ed485876544e0574d471ee01860dea902a4cd1031b3165876b43725c784dd11934d3e65f01a871dde5923421ebb8085edc632fbb0293adcd4e9f9ea0fb4df9386f1574c7ad67d565473ddecea3b48518137965724d9a710b76b2edcf18346cc27f3ebd68e69cbc017bbfad4262c9a2cf812c13107a1d35b2596a3af80a47397536b6b79fd1a1026b9b811bb7c5b1ff0ba975beaff31a40169c1ff3453ebff7d2f60412ca10f301be2ee64e7beb901e68611aa49f2c99f70f0950a4c9b717678dafb998bed454f8290007c51143aee459d5ba55bd7c12f412928f4d70f799ef1193507b53422c269d668c6e178064a5fe3a9dc7376c279963bf73df52fe43131b73008de42ac04596e9d5bdd01772e14d3d7a3c9e966d2f999bc08fc4a69b2dc2a9d523dc7c1f072ccadd79582a3934d9569fda60a820efa833979a6890b0f9b819de4b4f31eb424a15c6038616d185ee9f9f5a53eebeefc204a677a40a0fc12b7f4dd0a54ff9b0324443c554f9c1406701180c2d13dea4c85f7dc88ee4f1e4ab7e8d6ac9a0fe45cfa6f5b29449dc63ff5e56db1c8fd27d1a37fb22037a1829a20f31e39b5be73fb361b999985df273d19e7f7de1072a8aea358ec0698ac97ae80a72f606c713ed33d8cfa227630ea1a3e6ce8b60558e8cf1450d3e06827821944135805ec9add6b0767f7668e27c7e89a636a574c496fc5e6301604253d65c8647aa15bfc39903ee471cd11e7c45a559f9250cad134f5c552e276aada7b3a50afdb554d63259e254a71a82b4a20a14d78be2dfa6557970645251b341474855ecb4f641f66c19164de30dbedeaa53bd010c95212443bbf5cbd137d388c1ec847326e805bea1e423c443f2b80db1e4affb785040ebe6a5812b85c6a03d92dada754ae7771dc595bc9a6a83afa436ed40c10e9e486d6d5ecb846f3596bdd23304d304d32e78845547c44806b9c5b7ff203d1b74b43125ccf2b6665f78a1dccab4e3004be8547dc33c0699e2d123333d890c041d8360140cd6369e13c7bc6eac73e85a9e6e6d1157ea287260c503b88183cb1a0fd5737919c462c079c4b518da4f648dc8f0b667c6451b44a17d4bd2623ebd90ec494249baa80d4efbe69835e3d3450381e3d0f20b786c5cf348ae5c9c1d7ac55372d0e9267c84e3e49b8a5e812bb837f73611d27c16d6f0b06943b5ed36907a8c3dae2e057cc5c1b260bd11cd7f30118a795bf48952efa18f17eafbb339c1fd6376ac1bc17dbf84c3c75e98efa749c09c2cccfafdd25bf90f1eca76d7a4310515482f3eb54df03204ec305520a56a9f49ed7a58af98d15a72cbad8f682194726f370d2764274c6acfbab3c5892aaf7afc19f42ad60f370a2ba472631d21b5fb1c68fc33128b8b745261b62517d907897ee7346e59cc7d2c40a80188c29bd23f25baee3f9e62221394743f1be223830cfd9b315ab8cd362c5a0222a78cbbddd40baa07e0e2b08aaa051af8155d5a493096f3006626ee70dcf1134996d787ba138ef2396f8f0cbd799af9db268e205eb045a23c7ebfe6e3045a4d7e06cd0ad1eedd6bfab8ceda79d85102bd1a12738e4a904bf14721f3c3e292d0dd02c71768651e379c9b50de71070c3ccfaea0be37775239a8f60e2624da17886968bdb7332ca04282366b5234adbc506602dcb46937571bb43854f320fde0d396941231a20fc07e21264e6b6a193dfb9d9a13db587c781dd8e15b286b4f12cd6c98657492ffcbd7f0a9bc0184fdaa69475d4d926cad622a2e91efbcf61f1406989375d8d795c1ec448329ee3bb2c30e8a449da590a55dae3f437752ba38cd5a2c3e3c2f3f07c12ec0fe4d6f2385a50beeed5c7fbc29cc6027cb1ce94a6d7b384e35ae596e56b3f7070d3c6d7c8494ad71e61abfe25871ec039149a77f2e3eaeb25cba593a6e95b92b563322b75cc91f66584621889aef93c3c10dda1f2b55ace52f58d0147a83d295bbef2f32bfc93b06c0d60c1aea58ff39a803cd3b745faa995bbc2b738aea2322df62930a1965a1e6ea8465ef2a52c2150e5d4242e507000653496d3ef5650539b9b51ab4e35e9de5640352433c791c72ba892e0cf93118f740c3d5d8bbe324399a6f1abd3f0671565c4faf453f2c88d2ee8c07fa841c64d01ef18e9781f59158d3dfefeefb0b546bc938e07821734c34f42c0b48ae8e708de27622180fdc6ad5a36ac3bd79e3812fb558ebaa2b11b55996fd84695f3a276f0c0f126ad882b8933a56a86dacdf216d660ea5e2ed4df85560d9a989cd2ca6364481ecff1803602b92037bcb13927dbaa4804d5627f9c713d413695f116eebb6f30424058434f774b671888414365db23279a200ab7d8438cc9a5ffc23c312c1ee58902fa9ec825eb8a4c146d66e2ad1177c1adbc93d26a1e2b655976466e3a8a3e55654cc965d7ad3e8c72aa3f7c41a28c6d7a7cf31664c5bbd790d57b43ba0bc8b6bb7617415a7d3990a350925f0b7980f0b5d2af59c2a47c093e4c4c76fda040372cbf571becf4e40b0a5b6e47267bcc36ab5fe9db9d9add700ddcfcea1e88e0aeae0389fa462836f961476aa1c0aa1cdceae902da55c20dbd602c03750199539fbdb6603026f05a8828203b87174bc9e7bcfdcf2b15a82f74cc771a377c4d34ee63bb4c9827b7f5f056c5ccba6fad3fa22925cb642a3a2e4bda4986dcebbf6c3bf451756bac5613346fef41d4dd91362c04dc1e46cc291afcbf5ff5c8483509bd7f8c4928491752a16e490d14508ecae3af89195e023a86023ef757520878b60b6796172588cd5056da26073dd3beed57df134506a2e88bdf7f27050dce372f8db423b91d7123b8ae038d682cafc76b8a6561050adbdbb90d47e84b3bf4c73b37286475e187b9cdadaad5a66ae5a6e79f2ad2eb786bd1c9093a5acb6eac5a119f2502af3c7738ec89be43c6db405ebd05e275955126efba16c8f559f915cde77a68a91c4674fcb3b890519418dac69348f2af7fee5f0eb0da3169e789890764b35fdb56e5b853a62d637c2c61f410db3b707bef10e76977aa7b3eacd5999610602226eb79be61e76a22798199d8404d27dea56dca051c2f5ac96391b8c59e825dd98c08a8797193a0d68c520b9fa92067eb536bcf7e56b1eb3e4113717998ac99d52fc01c18227143b3781f33fc507c8c6ee6338962c904e647f015c2ac04002eb02363bd520a001321c38de030f5d150976bfbfda93bc9b87140be954a95516d84032a2bf66527cd7aadcbf94c6c88e8f3bc37dfffb21e2723f043e0f424fc4cecf438c326a95e3bb379d60d1039c78c1c1918130232107d5e3a8680e60815797bf9b7f0ce5f7f5d675a54647396bd9d4c1703deeaf105f205ddc891b91bfec0074aca6be24319bb359fb10d04553d0f1249b6f38096c3b30a60664ae9d4bf893ffa7536381d62d9f2e5df6d7fb672fa4a2401403bcc1f489725ef82322be00bdd3fd694bb5fa4577a05eba8038e853f5ba9b71e50a9e66017f1c3cf58d397832238ec9386744707b10bfb821eb83ad5bea194ea56476d4b8c39550bf2688c70dee352dfdf76fe74d589c5f254e330040bcf692fe66c06c073168bd61639b351dce1934414fcdc37017f540f23147900f79e622c657d6866c5d1ffd3710377ef7f0be1bfad5009f84d2b2d179fe27bdb5f32fbdaabb289dd63b886a54540c67cafd6368937bae1130ac766364852927bda810492cb886dc646b395492baecde601c1f88a97b89eafc7ac47ad37a0bb2993f3c2363dab4c5316010e5e6816f56211c1852e2c6c1f82f7d03ba7a9a6d9a1ffd54c9c25f3342bce4bdff53b6730dba4666a763cef84b0992b3ec949c673d3ba5d2d35a26c39d6c0618f74af6742e51ab18e7071f7d64adc4452b7df340f08ff1249d3fdfe1ec3455ee095192e195dfcaa1a534c3eb290c50dd32d4b408f6a154cae57fb0ed0c8d766418b90d64109911477e3a17a0ddd4dc5212a7f36a19fa548b0129bc6e81b7815f0cda8d0ae4e30b7bb7b4ed7c01bdee504fb23ee8fe5d6b3954489b23651e962eeda1ba0102bfec3ef4de4acc6aaa1f099b79a17905ee8abd3e0c500725254c95db1cb9abf177f04adfaf8f256e77311ade2b5b497c1a338a1f83cb5dfc29f0b8d3bd134eca71ecbb6e9e09be700cded0e1f9730a3127b29d587603cea7ebc7d5121b0bf20559bb6c51afba4519c8523b0528bf9047cf2a744556742e18a8d61bdf8e548867a1d84c91078bc276f76726f94caec77542ed1a50f0634abe0aa438e3b8c9ebd4f03754881f15fd710a925cb604b8c296382feea561f6b8649b6b49005582c4b6daaebe069b7a0664bcec20f451915159cb24932c88c88da25ce10947afe17bac4d892db3787e3ce992674970f86e3a66cefc5a212c3bc224c5533f0f764b05e6dc9289275ba87260bdaaf5442be4ba41cfb67f2d5baea6c39c02cc6b0f14e696d3f7cf0e8dca23773d2a9d881c6449ab7b6e231127760581cb973e51ee52ca317cd85f84e4846ae2cedcd222d1e4c0f4cd919a5629c69794bb95392545f5ead53e8b1b30c424150f44522b49a73433afbd79f4990a3686a97501b6cdc0159e0063eeb31dc0d06f1a937d40ef599a0711a6ee0bb06bcc5103d7085d0d7abbf4f8916b4ffd27c26b6a2b1e6ea38e26640bd244f116d75258ba65c881a07c87b67cecaed742745a41b1f74f57dd9cbcbff06cbd72182d5f17727ac5e37bfad5cfa304e41b9a4bf62d2b66920c874ae0d1fbad62165d835a6a614f70609b13e9f40a3170a18ef50754ce75a28603c38f41a74b977808e848b50fe721b3be518ff553630724a944fc7c7b9ffe25746e792ee0fb5f08f8cafc4bdb088c37681517493cb6f715d7fea377b3701bd6f080d75127aca62c981007f97988fdba73dcd2e780d10c8678a0e62131a3b530b2d6bf0bc95febc91790db494a5bea3d48034335abaff849a4282f950dea9fdfe2190981b833fdfe36e91edc991b4c510e02986488fe524c99ba2a4c5dd2a7ea467084ed1cab3ec3c600f66a4732002089bf702bcdc74e96a0c12c6c110c90cdaa600cdf859750f42dc69272fa88132ed632152461c8b94e89a3efd60ed991cf201ac24b12902f451c0d96a427dfaf75c55136c5c232f1ea356380cb74f39c367553d6802c2a10260385ad6be039cea2db9688461c5609ae0382fead61ec0826154fa2e9c087f633bd61c2aec96ca945c565da256c6a19027166f7d5ee32420d3fc64f8e083901283203c0c84d16bf2b5d4b96be3dba35dd88409278a7248e41e6689724a7474029e21757b9bd4470203fc7bd45dfc12efa56e1b4428674e97249ac5ceeb119c319711a3db1509528e1ce44e34b0e808372e2cb5401ab75ed7f22e2c38d321a98b8765041bef7f31bdd204c5b5a1ba7b66f97ea2605bea96d49c7cde31fd937bbd790d757d5d112c35e8dcffe0d33745a7eb50e35bd0667d90278703936cb4fc469ba45f4f3ad07369f49ec0fbadc8dd02c6cde6900cf464e5303ebb532a8172408c187cc3b313d754ca2fd0a436cdaf1529a5dc76f533f819c4f985678a2d9c811cb629a611827cf7410eb1f55feb4a3807fb39efe055b693080b647c5c2ce706695cbc159256ea2ed1119ca49bf78da801d39589f4def9cc2eedc8d4df9d5223ec5c0f5925fd8e83c93766dea87be6bf97eee93d359b", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180)="48ea8e69e312eda17b5432d8f5b12ac518760e589a5a83fab081491f1317c7c297295961ae7a4bd2b82eab4cd9a9930614bf5ca545e3ea101696c717362ad23cea3ef4824ba0760de006323705198d6a54d1af39ebfd181500fc07c65c060f2b5779741b64121628167d3daced842b8d70500d4b2251d9c6e13d48252c654f17d1fcec92c561b41962d5338a032cf76c802741772f9e6add4d9ede3ed47d1f") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x30024000, &(0x7f0000000040), &(0x7f00000003c0), &(0x7f0000000000), &(0x7f0000000100)) 02:40:33 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000003c0)=0x2, 0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000380)=0x1) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000400)="bcb9a8cffbb6f10d0e7fa40cdc991ee24a37934b7561f4fbdfa23176058ed57397af57300c9294198bfc72250decee897d96aa57216071e967ce4add6e78b7798ec323efd78ddd8d8b06f21ca25734acc1366af904d70062425b87230568bd3b700789e2c9a2cca4f44b7d6782cfc41cdb5ed0863201dd8e5f3e313757d7382d76a312bdeb93ba48a1823bf7aa0e48035e9842d3ca27af47eeba5324063857b898bf8c97467e718fe544daf786911b844be03f940162849f4e06aafe4d44cc6ad5e766d11cb9ffa5cc4db2537371883e01e3e48e90b11dcc179753929e5d050bfec23add1091d01e6aa982b1b3f8d353780ba59f324093", 0xf7}], 0x1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0xffffffffffffff9c, 0x3, 0x1, 0xd6f, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) socket$netlink(0x10, 0x3, 0xb) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000300)={r3, 0xfffffffeffffffff, 0x7}, 0x8) [ 710.078020] binder: 14141:14160 ioctl 40046207 0 returned -16 [ 710.139393] binder_alloc: 14141: binder_alloc_buf, no vma [ 710.139481] binder: 14141:14174 got transaction to invalid handle [ 710.145128] binder: 14141:14142 transaction failed 29189/-3, size 24-8 line 2967 [ 710.151525] binder: 14141:14174 transaction failed 29201/-22, size 0-0 line 2852 [ 710.253777] binder: 14141:14160 BC_FREE_BUFFER u0000000020ffc000 no match [ 710.265159] binder: undelivered TRANSACTION_ERROR: 29189 [ 710.274447] binder: 14141:14160 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x74, 0x0, &(0x7f0000000480)}) 02:40:33 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x600}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:33 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffcbe, 0x0) r1 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) 02:40:33 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x440300, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000001c0)=""/52) r1 = socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x7ffffffffffffcf, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x10e, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="04010000008b00ddb8460900ffb25b4802938207d9033780", 0x18, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x5, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) r2 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x50) mknodat(r2, &(0x7f0000000140)='./file0\x00', 0x9000, 0xffffffc0) 02:40:33 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000200)={{0x9, 0x3ff, 0x0, 0x3, 0x3f, 0x200}, 0x8, 0x101, 0x9, 0x3, 0x7f, "dc278b394bef3e13a6bac3c3a0a8d11dba27558645317f91bb551fcb691e4ab515e46af96f9472bd6b921c0d028e1230807f8ec58be290fecb3cfcf6cf5712a67795554bf7b7b5586e94f89d3babb16dbc7c919fabf82c9a96fecdf12f9d515e61e1c3dcab43463c04dce0d6937b8c935f123cf524256ee61084e3b1df9a4c85"}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000000200)}}], 0x1c) 02:40:33 executing program 1: add_key(&(0x7f00000004c0)='d~Q_resolver\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) [ 710.302706] binder: undelivered TRANSACTION_ERROR: 29201 [ 710.308424] binder: send failed reply for transaction 1605 to 14141:14142 [ 710.365280] binder: BINDER_SET_CONTEXT_MGR already set [ 710.381119] binder: 14200:14201 ioctl 40046207 0 returned -16 [ 710.382932] binder: undelivered TRANSACTION_COMPLETE [ 710.392219] binder: undelivered TRANSACTION_ERROR: 29189 [ 710.397715] binder: 14200:14201 transaction failed 29189/-22, size 24-8 line 2852 [ 710.397742] binder: send failed reply for transaction 1602, target dead [ 710.412007] binder: 14200:14201 got transaction to invalid handle [ 710.419410] binder: 14200:14201 transaction failed 29201/-22, size 0-0 line 2852 [ 710.431755] QAT: Invalid ioctl [ 710.444340] QAT: Invalid ioctl [ 710.458800] binder: undelivered TRANSACTION_ERROR: 29189 [ 710.464757] binder: 14200:14201 BC_FREE_BUFFER u0000000020ffc000 no match [ 710.480370] binder: 14200:14201 BC_FREE_BUFFER u0000000020ffc000 no match [ 710.504940] binder: 14200:14209 got transaction to invalid handle [ 710.511404] binder: 14200:14209 transaction failed 29201/-22, size 0-0 line 2852 [ 710.520759] binder: release 14200:14201 transaction 1612 out, still active [ 710.528133] binder: unexpected work type, 4, not freed [ 710.528199] binder: 14200:14209 BC_FREE_BUFFER u0000000020ffc000 no match [ 710.533447] binder: undelivered TRANSACTION_COMPLETE [ 710.545592] binder: 14200:14209 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:34 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0x4) 02:40:34 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00003e2000/0x2000)=nil, 0x2000}, 0x1}) prctl$intptr(0x29, 0x2) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x4000) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x2, 0x9, 0x8000, 0x7ff, 0x101, 0x2, 0x4, 0x0, 0x3, 0x3, 0x1f, 0x3, 0x4}, {0x8, 0x2, 0x6, 0x5, 0xf59, 0x0, 0x9, 0x9, 0x100000001, 0x1, 0xffff, 0xffffffff80000000, 0x7}, {0x5, 0x609c, 0x7fff, 0x1, 0x8, 0x1ff, 0x6f6, 0xe83, 0xfffffffffffffffc, 0x1, 0x80000000, 0xd5a7, 0xb2}], 0xfffffffffffffff9}) clone(0x0, &(0x7f0000001f37), &(0x7f0000000280), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000400)=""/100, 0x64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'bond_slave_0\x00', 0x2001}) 02:40:34 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000000c0), 0x10) 02:40:34 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x400000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:34 executing program 7: getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x68b}, &(0x7f0000000200)=0x98) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x8, {{0xa, 0x4e21, 0x7fff, @remote={0xfe, 0x80, [], 0xbb}, 0x1}}}, 0x84) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x12000, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000001c0)={0x3, r2}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc2c45513, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 'syz1\x00'}) 02:40:34 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="31c514b778a877b31c5163b87b4b1e16105c18e05e54e1bffb7cc28b830f9ddfbcb27c7a7eb2fa018c04004a8dd4edbc040f628b03516855f4a4e7c7cf3118f8e5523e91f42a73d0c3be92c5b80a1fa1720c79aac6bbcbe0edf94a380230f21b4cb74c17a1cbdb9332628c990890ce6e61ec55ddb2a913ae81e5fb44823d7afe61218a6d2d1f0ba50dcd67bb6bc9f6c56a916e171bca7fae4ce41a6425d9b8d07f2cdac156e3c33e133ff601c399466de93e2dd2ca"], 0xfffffffffffffe1e) getpeername$inet(r0, &(0x7f0000000000)={0x0, 0x0, @dev}, &(0x7f0000000040)=0x10) 02:40:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) r1 = dup(r0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000140)=0x3000) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@local, @dev, @local}, &(0x7f0000000080)=0xc) 02:40:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x7a00000000000000, 0x0, &(0x7f0000000480)}) [ 710.561791] binder: undelivered TRANSACTION_ERROR: 29201 [ 710.567372] binder: send failed reply for transaction 1612, target dead [ 710.574858] binder: undelivered TRANSACTION_ERROR: 29201 [ 710.636299] binder: release 14217:14228 transaction 1616 out, still active [ 710.643422] binder: unexpected work type, 4, not freed [ 710.648748] binder: undelivered TRANSACTION_COMPLETE 02:40:34 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) r1 = socket(0x11, 0x100000803, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={"69666230000000ff8800", {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}, [0x5c0110b0]}, 0x10) shutdown(r0, 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, r3, 0x714, 0x70bd27, 0x25dfdbfe, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x28}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x1a}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xeeec}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x785}]}, 0x78}, 0x1, 0x0, 0x0, 0x844}, 0x800) 02:40:34 executing program 7: getpeername(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0x80) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000005c00)={@remote, @multicast2, 0x0}, &(0x7f0000005c40)=0xc) sendmsg$can_raw(r0, &(0x7f0000005d40)={&(0x7f0000005c80)={0x1d, r1}, 0x10, &(0x7f0000005d00)={&(0x7f0000005cc0)=@can={{0x4, 0x6, 0x10000, 0x1}, 0x7, 0x2, 0x0, 0x0, "03f158cfa55c3a88"}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00') read(r2, &(0x7f0000000100)=""/186, 0xba) setsockopt$inet_tcp_int(r2, 0x6, 0x1c, &(0x7f0000000000)=0x100000001, 0x4) 02:40:34 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0xf0ffff}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:34 executing program 5: r0 = getpgrp(0xffffffffffffffff) sched_getscheduler(r0) prlimit64(r0, 0xa, &(0x7f0000000000)={0xcc8, 0x6}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x10080) read$eventfd(r1, &(0x7f0000000080), 0x8) 02:40:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x300000000000}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0xf434}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x111) ioctl$KVM_SET_PIT(r2, 0xae71, &(0x7f0000000640)) syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x7fff, 0x801) [ 710.712682] binder: 14217:14228 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 710.729702] binder_alloc: 14217:14228 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 710.738370] binder: 14217:14228 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:34 executing program 3: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x200000) ioctl$LOOP_CLR_FD(r0, 0x4c07) [ 710.857181] binder: BINDER_SET_CONTEXT_MGR already set 02:40:34 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x40030000000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:34 executing program 7: io_setup(0x6, &(0x7f0000000140)=0x0) io_destroy(r0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x80000, 0x0) getcwd(&(0x7f0000000200)=""/233, 0xe9) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)='nodevvmnet0\x00') 02:40:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000001000000000000000100ae8ff5fd37180c284589ba00000000000000000000ffb6bfe00dcc00976a88009360819537ea0be7de2cc629e7275299fd26c8206681a2521ed0186edb3785f227debbd1"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x490}]}) [ 710.884550] binder_alloc: 14217: binder_alloc_buf, no vma [ 710.890238] binder: 14217:14228 transaction failed 29189/-3, size 24-8 line 2967 [ 710.894280] binder: 14217:14254 ioctl 40046207 0 returned -16 [ 710.989875] binder: 14217:14258 got transaction to invalid handle [ 710.990289] binder: undelivered TRANSACTION_ERROR: 29189 [ 710.996292] binder: 14217:14258 transaction failed 29201/-22, size 0-0 line 2852 [ 711.016643] binder: 14217:14275 BC_FREE_BUFFER u0000000020ffc000 no match [ 711.040206] binder: 14217:14275 BC_FREE_BUFFER u0000000020ffc000 no match [ 711.112985] binder: undelivered TRANSACTION_ERROR: 29201 [ 711.122967] binder: send failed reply for transaction 1619 to 14217:14228 [ 711.131561] binder: undelivered TRANSACTION_COMPLETE [ 711.136809] binder: undelivered TRANSACTION_ERROR: 29189 [ 711.142350] binder: send failed reply for transaction 1616, target dead 02:40:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x8, 0xffffffffffffffff, 0xfffffffffffffb16, 0x7f}, {0xfff, 0x100000000, 0x5, 0x6}, {0xffff, 0x0, 0x1, 0x4}, {0x8, 0x7, 0x6, 0x400}, {0x100000000, 0x2, 0x3857, 0xd5}]}, 0x8) writev(r1, &(0x7f0000fb5ff0), 0x35a) 02:40:35 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80) r1 = socket(0x10, 0x100000802, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'rose0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8942, &(0x7f00000000c0)={"6966623000f7ff010000000000000076"}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x10001, 0xdf7, 0x200, 0x5, 0x63c, 0x8, 0x2, 0x8, 0x0}, &(0x7f0000000140)=0x20) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x3, 0xffff, 0xd467a615314ad91, 0x3ff, 0x7fff, 0x101, 0x3, 0x1000, r3}, &(0x7f00000001c0)=0x20) 02:40:35 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0xffffff7f}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:35 executing program 7: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x2) 02:40:35 executing program 1: r0 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000080)="641c508c0eed24018a921b24aba9e5afa50bc61d177ee503", 0x18) sendfile(r0, r0, &(0x7f0000001000), 0xffff) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="d3be8d35780a3ff52fd809f63058788c", 0x10) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {0x77359400}}, 0x0) 02:40:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) r0 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x6f, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x2, 0xff, 0x4, 'queue1\x00', 0x7}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000280)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000140)=0xe8) getgroups(0x2, &(0x7f0000000200)=[0xee01, 0xffffffffffffffff]) chown(&(0x7f0000000100)='./file0\x00', r1, r2) chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 02:40:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0xfffffdfd, 0x0, &(0x7f0000000480)}) 02:40:35 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="240000000b061f001cfffd946f000900010006e700000004a3a20404ff7e000000000000", 0x24}], 0x1}, 0x0) r2 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x80, 0x4) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000240), &(0x7f00000002c0)=0x60) [ 711.635901] netlink: 16 bytes leftover after parsing attributes in process `syz-executor6'. [ 711.646361] binder: release 14289:14299 transaction 1623 out, still active [ 711.653608] binder: unexpected work type, 4, not freed [ 711.658945] binder: undelivered TRANSACTION_COMPLETE 02:40:35 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x101, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000000c0)) 02:40:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000080)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000100)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000001c0)={@dev={0xfe, 0x80, [], 0x16}, 0x37, r2}) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0xfffffffffffff000, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000001700)='Q', 0x1}], 0x1, &(0x7f0000001800)}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000006c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000540)='8', 0x1}], 0x1, &(0x7f0000000640)}, 0x0) 02:40:35 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x34000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 711.688172] netlink: 16 bytes leftover after parsing attributes in process `syz-executor6'. [ 711.722432] binder: 14289:14299 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer 02:40:35 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0xfffffffffefffffd, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000000c0)=@routing, 0x8) write(r1, &(0x7f0000000040)="f8", 0x1) write$binfmt_misc(r0, &(0x7f0000000280)={"15007139", "504b9ccc161b05000000079a3cfaf9761bfcdb6bda5ba0bde0644a2b076b4317aa17e1ee4d09f09b039a78381b97e73ee637c154e46fc5fbe8ab64670a4c57023158e4f02c22cd76c32fad449c8d65a330690b2fad8ca700a2bb94a2c99260195788ff832432e55b8d173cae6587e7c08ae9f4f3f51c20b58029"}, 0x35) [ 711.772890] binder_alloc: 14289:14299 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 711.781674] binder: 14289:14299 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'ip6gre0\x00', r1}) r3 = socket$netlink(0x10, 0x3, 0x1b) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xffffffc7, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="02c602000c000200aaaaaaaaaaaa0000e5c83020a631683ce3f4a6d3b7b04c97556bed6c7dfa7d91bd82187a8e306a6a75322ad9c405e151353f7bd7c8849a68cf14d9ee9dae73fdd49b3cad5f28631982a99509c86081915ace87a4c0d4c48d76f94c0753e127d435c20b7964b44a309972b465931d88368e2194fc39e5b14c2d4435f236e311cfa1efcd2520bf64105a5d0a751c1715debe9f84461c726efe292fd23851d6d3ab1328f903f7a5eaa461e4456756e19896e389fbd76d7a26f7"], 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x40012) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000040)={0x8, 0x3}) [ 711.820924] validate_nla: 6 callbacks suppressed [ 711.820934] netlink: 'syz-executor0': attribute type 16 has an invalid length. 02:40:35 executing program 4: r0 = memfd_create(&(0x7f0000000340)="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", 0x4) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) mprotect(&(0x7f0000658000/0x2000)=nil, 0x2000, 0x1000000) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x4) open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x1b0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x30f, &(0x7f0000000140), &(0x7f0000000200)=""/155}, 0x27) [ 711.877177] binder: BINDER_SET_CONTEXT_MGR already set 02:40:35 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000200000000e6", 0x20) 02:40:35 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, &(0x7f0000000600)=""/50, 0x0, 0x402}}, 0x305) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000000000)=""/24, 0xffffffc7, &(0x7f0000b4cf9b)=""/101, 0x0, 0x2}}, 0x68) unshare(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x7fffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x6018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x3, 0x0) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f0000000040)=""/28, 0x1c, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0xfffffd11) [ 711.909007] binder: 14289:14326 ioctl 40046207 0 returned -16 [ 711.939975] binder_alloc: 14289: binder_alloc_buf, no vma [ 711.945711] binder: 14289:14299 transaction failed 29189/-3, size 24-8 line 2967 02:40:35 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x200000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 711.956284] binder: 14289:14335 got transaction to invalid handle [ 711.962654] binder: 14289:14335 transaction failed 29201/-22, size 0-0 line 2852 02:40:35 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x10) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r3 = fcntl$dupfd(r1, 0x0, r2) fcntl$getownex(r3, 0x10, &(0x7f0000000480)={0x0, 0x0}) r5 = geteuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000780)={0x0}, &(0x7f00000007c0)=0xc) fcntl$getownex(r1, 0x10, &(0x7f0000000800)={0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000003300)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003340)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000003440)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000003580)=0xe8) r11 = fcntl$getown(r2, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000006bc0)={0x0}, &(0x7f0000006c00)=0xc) fcntl$getownex(r3, 0x10, &(0x7f0000006c40)={0x0, 0x0}) getresuid(&(0x7f0000006c80)=0x0, &(0x7f0000006cc0), &(0x7f0000006d00)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000006d40)={0x0}, &(0x7f0000006d80)=0xc) sendmsg$netlink(r3, &(0x7f0000008180)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x94040}, 0xc, &(0x7f0000008100)=[{&(0x7f0000000100)={0x18, 0x19, 0x230, 0x70bd28, 0x25dfdbfe, "", [@typed={0x8, 0x3a, @str='\\\x00'}]}, 0x18}, {&(0x7f0000000140)={0x320, 0x26, 0x402, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x30, @ipv4=@loopback=0x7f000001}, @generic="ef9c93d9be375b023fccbe1442a24b6254071afbdeec2ed91dbaf35f594b158838ed5113f24bd1332ffd38d8388283c59e0a1cddfbf3ad16f54fad25a9863a3f7b4953535f2f4c03a7965a4d52fe824a0e87fb64", @typed={0x8, 0x7e, @u32=0x800}, @generic="a8e3a760d6488622dcf955d80ac4046d54110737384321e1f6d8e0f512105230357a6a7b2526aeb9405d8d98ccdeb5", @nested={0x27c, 0x73, [@generic="866027ab769b9073b459a19358d701873fecaba7159c7a4c86b4458ee6deda8ed5c25d3cf9342b4bcc473286a246a1c3a4cfbdad18003d82746ddf94ad04c1099541997e0be0bb70b6d8d2553adecf5c71f20b41c603bb1d008d591e471dd601aa2d43a348c2a9f8f33685d1284e4b9586383b", @generic="58216455f8cb9e22d0cf2e123f64ae6bb5dc585846fc5e4d545a4dbab03e54798faa1ee7e8776519422b5665284964154317e49ae5ae47a14b4486fec157ab973b3467e11f9cb9236841a4b1d9f03d05598978d30796c824cf878d6638d9d040717ebd00391f9df0c08c6c55d9205908b7bf198e0c7f06d34483f08ccb26699bc1f3fd11d0965f8c9277bb4beda8f4c4ef93532ad1699fa86ca581ae790d4ae9a8d4b639d57bc44b19956c060f547269e1189aaffad2d78685fd7388fd5b16b7d739", @generic="26aac6e0559faa6310e62f2ceb63c1b633a651764842a209c111aafad964e908463c3f73905f77729ef3b108df08c0ec9339002e0be8dbd8707ab2671cf6b7ce520e37a7eab9c19cd64ce2af9071d86dff53c107c43b67", @generic="3b10bf0dbec5ffaafb5b370c30763ddd5a633e459ea9bf30f5547045cadbb2a28636ce898cc83002373edf1e44361c5aeb64fa49aa836bfe0e2a833c839d07c95ac04ce8d21e1d1e0012219b80b10a0dff3da957f582bce43cfadd6a684987374e5764e4c21446bf821d98d650bb172910311c414f0f53e16d138edba08df6b6540810407be266c43a924426afde21f0f14a7e1c3c5bb1751a2324597074636579a01a5cbc90f1abb77c970ec5b832d68133fc602eb19883375fac335476fb44717c98141bd683211fc5fda86a4d7f5da11eae33057c611e3dc6b37d0a1f873b6dfe8e934d4ed37114"]}]}, 0x320}, {&(0x7f00000004c0)={0x294, 0x13, 0x0, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x184, 0x66, [@typed={0x8, 0x5b, @fd=r3}, @typed={0xc, 0x10000, @str='syz_tun\x00'}, @typed={0x8, 0x22, @pid=r4}, @generic="b4dfb30cc8504176218ecfde59957ce74b737e3718a52fcf7d6b735b5fdb4bbe05849daa5b91406de8d52667514392b1ad9d7a663bffca705ce70bc6a49798a867ae654499fd60ecc9764aafb83fb490cbfb10dd80e34811aa8b93c220aa5f89af616170077f555bf9a236a6907a3291cd6c1d38b9a9683c97c5ef3b6d24d9ec21ce9774300d30c5112416ae1af820fd6ac03305cfc3e585762b8dc547ab227798690676d4e8088141ac37d333b98c5f92f01c85993e8e1f265af712028ccba12f897cdf7e2bbc4fe737780599f71c8755e40276c8e4b384136c7a5d0d3f0e97f69f097e10b0a0", @typed={0xc, 0x7b, @str='syz_tun\x00'}, @typed={0x8, 0x2c, @uid=r5}, @generic="6c2827388786b42f34968e437ea1be41cae395931ac07daad087843e44d66b2f7978c6aa678f52899c5fe7dceffa3a009ddd2a97ad1b1e455434d348efc8c8fa739426eae5e8cdb5025313608d4481ccead8a1cdec3bdcbc5925bb5cc6530265", @typed={0x8, 0x7, @str='\x00'}]}, @generic="01113f359c1311f9c3bac81cc3821d7bbeaefc19e28811bedff0163100b3b5801c84a77e38a48abb8517b4bfc844454aa54c4ab1bed2ebf68a436889b385921044baf75bd05c2ca32ef0c40b9136e156cf80caddd78f20c844fe77b0bd7840addd54d31f962539ee6d18cbc6619b8ae4bb37a633327706778d8ef498bdb8b1162d02438d050588c16424f2d2edd80cce738ca40b8010e126f4489f8ed310cd9f1e43f91c2273f1fef56a05befbb241cf0ed945dead3299f0a672b975334bd624e96a0df3d093d47f018eca36d74ca88eb62bdda5d42a34368941b99fb3fc4dfd26b97ac162eb023ed08194b55fdbb0cfbaa25ab9b6fa626823282fd85d"]}, 0x294}, {&(0x7f0000000840)={0x2a28, 0x36, 0xd00, 0x70bd28, 0x25dfdbfd, "", [@generic="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", @typed={0x4, 0x4c}, @typed={0x8, 0x4, @u32}, @nested={0x290, 0x4, [@generic="01edf47d7210021632a62effbf0ca07cde6c2148705b691cbcd5ddebbb4e3b4c985aeed4408bb49277fc66ab6ef5b25e43d228c88d17a9c9f2a3748bdd748ed66e79feea72030bc7e5653331395fa61852daa5da534a03915a0474079df16d1103f32047f7e3d7b2a1b6b4baf6ecb1bb25ced0885701f5b07e097907f699e9af034647cd5a08c9b3c6fdf5f7ea8c0911bf1f9e97debfc7014fe6d8dde40e261502144692e758f92ffcbd30f98cf9f6d58db197147918f69a5b1cdbce23d0a805671d3bf6c9478d363fc6", @generic="314fa608034414520864c192989b8d71f8611b577541c79964ecb783ac5da5de74acf4362f6a86c8acd119dc7713ec9a37f80b43a18e44e842944752b6c20bad70a72539636064caadaea1bac04456927c02a45a9d928d93bacd0b18e0df3de08c88a22f4182d11d86a95b047914287ce6239ba08dfcb1a0f57ab8d3737851ac36ea326f5e6ca32bbcb7ce0d7ca3cb", @generic="9825d01270c0ee2137445c01bc86a00101520f9486d04bf53e48c7575613e09d9ed92a9153e02887ba2667eaa9be332a332d5c3898e8ad33", @generic="702b5fdcd6e03047037e27d5080b4d107e2d785b74c3b3ccf199ae99d68e211218c43c814f498343f9b54ddfe874b3e7c5a8eaaa854959f592e7b18b2afe3d81d3a7c98103b8f4c2e5f6c9ebb7906e81b6157f8a8a477d945ae7bdfe97b4792759251c62431cf99888e552cfa685e32aea56c774138070103ab0df675b87a7ad3b15fd4777796033d88aa5af880b69ee4eab9ee3bec4432415708f39c9535f39374539db74093473405849a36927cd7afcbfdaa5b78a78c16b2dcd99e1a8a7ab0dfd27be01ec1f63dcdfb32ed3e9743b7b62d87d3b17", @generic="82cb2a0bde0c2148bc0ac2ed995c41e4d41284de6c3aaf73", @typed={0xc, 0x74, @u64=0x400}]}, @typed={0x14, 0x94, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @nested={0x4ac, 0x91, [@generic="bbd52256c92b676310c2181c1ee66c77b7d413e87d864c7845d6cc0fb0ed3d751853cb51b6429067", @generic="bc41d3598990a0c2ecf07a3ff1fb3279be33d292c2d7925ac4b590ed0677465f9a23a69f8c5cc326423fb62e9371a921e51e1337d0ce91ac02fe486a01a1bff80d276f797a9dab0604f86d9d9b4dc612cb474dee807da5472a930a711ba4057cc0a3fffe163a84ecaed47bf14c00bdde16bae6d0ab399ffa09041abc469ee06796f7d3b0fa2b0706546f61e0345e6ab6bb6dcfe43a4f7fc7a68c62cf8daab8910ddfdb2196b497d4ac3d983523beec5f284892641ddbdf13025bbbe0e3e64fd7efac6f61df6e6db39315e542c4ecd6ed9fff087e79f619cf726753c282956265e568c49f1af9cd46e245eb63acbf11", @generic="1fe7bf874b5ae43472c595409c2ce0f04d8b169faaa7ab793efdb7cf68d6adf06b0787e5c839aa9924d5a5c76b5ed99a09b3c20adb11819abe9b3a17f573d7f6986953594d5dd4db164550a58a6e5d666d5dbb13c746f9e2e7bd1ee86767e3b7acb8d26f2f93b790236cdb1d216ddb4c4a05e243639b10164a9adf9c5a1afc4a2e467caa946ba9ad6b306a7459e2fb78fe02c943c2854cd9aba09f7089372e0b0a53200b66b8e6bbcbe888e19a7fb402e549446d280a6d55146d397cf8", @generic="9e9f65bac90764e507ec945cf5329803bc9c99901c375ca5c4e3ad5de20fb29464fadaa1da9a802cf78dea70fad3155d00f49edcd2f883a03a3c37bd11c43e62a4dba3611250120c50c96fce07cd8962aab944016c206d6813df0044b36279a62e2efc1892c912356bb85b52c231f3fafa03b4b32c73d59f0e3d943fcf15eae08f326f982c32dbad0221abfd301192be631020276d35db5b288e8a2672991e4ba3e2750fdf19fd3c724e3b4bd823a8b611354873311b8332d014680d97dfa1aede0ddd749d2750a103511226fcf53ea2eabaa240d1d6ab60dcffa114953e000eb0ced05aefc4839543ac415f69975f9d84", @generic="116bb0545967364ff466c601f166c6eab5539d77c730123ef9b9082ef0b4d9e9a678dcdfd753ec513b0bec7ed467d5388b253c77610a828ec4790686455e25e2a82e09e20d2bec5427b541e4423b441ea47984e570c8e7ef4f1fa41a843b8f3b35be8eab4174875c2d2f161bc6c79423146e7b2849f6c54f1ca30ee8080e9c69cb26def77730a531406130fc7973facd829edb286290d2f7a5b47eae7fa92b3cde0e77c610aee0bd7bcfceb2a522986c82516a4d20bdcf265352896cd7ba821fb68a923b392a1da4218513", @generic="1b11addcb4a80875dbd46c717aab62a117b9861fc20e3d3e68079ad4ebd60c3e14ef9ea6b2c1a52da52b82f3a56e6b6ce298a0e9a66a536195a8c64c4f0b5657f4205fc9fbd4c0348557bcd0b21107d3a92985c669e712a7cd6c58f50336756c5f6e555026471041c846333784ea819daa98bed8ffe717017b0bc5f28410da65698c9b8eead5cb960d87d3dbb8272e86a96d2811ce9953a944", @generic="1042b9e9f6594399a49597d6d17d8ec633d2b76058b05b7014400cf753a85fcf3872e2e3b076034c52d58561a09f0455bf31f0174fcdc6063f1565994de4bce417228a230b3d8df11bc78f807ce78a0531796bea24048cefb97d2d20028288ccf9b89ad3d215e9c9c0fef3947cdfd614800e17724c4885827cc3e59cb5aae9"]}, @typed={0x14, 0x56, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @nested={0x2a8, 0x6f, [@typed={0x8, 0x46, @ipv4=@rand_addr=0x9}, @typed={0x68, 0x8, @binary="419fcb263be3fccbe829421c365e7e911ee5484651d6676c3824cdc9629698eef118ad304400b10347b1565e84344535b952f79a5c416d42945961e4a224900995cb317bf74be3433d01e502ed9adda98df4715ec0c58896c965e83e995cae00f6"}, @typed={0x8, 0x47, @pid=r6}, @generic="85182265557dd108c658a50d2e600172b6c755463a016c3536f4464bebafde4c899d0360fe9b5d1a5e41fc1b9c5c3b17dcaa17a020f840000d387308180374f3701e2597b502c7363d9e3bc7c1382e98c6bd410610f9811240cfe660aade53b8945b5f6705d0b3090e18526227dd7210a6b767e8df38717f9ae7d290c721981f56a76a4f0d1603d401324c44d95f", @typed={0x8, 0x83, @pid=r7}, @generic="09e133369ece6513e5a5aaa12b679d4e6da52c05084bd7f7c15730ecddd8512aa3b1a19cea988303acc1a42a012730f230e6618aeb9044f31fa478c258a2d2a0abe47c371df6242aad9a3d97d241339c92236d560127edf8678abdb1ca5b430d65c6a5e52557bbd57fff78c59a4b0aa7762fe23b9561e78fe3f9f60ff989a20d6d688815a25e0515e43f59222cdd1c13a2b8845374a1dba0b133320d956a704b73d85899b068a9884824fac79ccfed5e", @generic="77ad41ea8e9d479ace38ca1301370111d1df06d525751077a19c5040768a8ff3be479b096d2ab75deff831bc99614b22958326d78c0ef4429aa2df736407a7ead6e9eafc0d42cdf4c0b60ae274ee9c3346a536fa7eb470a0f76ee604dfbae7b26d7a892f32d7158ee6394594309c54d291862ec4d8d111878404a3799173f4921c5e9c36a91d65505198ce97335372862cb0277340bf08cdbadf8f005132cac9c57e6ecd8c97e6bf0a6034d8cb8b833c1a8745289ffcae3b130f4e9089421f189d7f829829181458d9aa3c709bb10cfb14b68dadcbd320fadc11e7247fb7fb5dfa7362248eab"]}, @generic="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"]}, 0x2a28}, {&(0x7f0000003280)={0x74, 0x17, 0x101, 0x70bd28, 0x25dfdbfd, "", [@generic="5115bc31eb60d490264a1a6ccafe0199de6e4d272facf658713869c56f44ccb5643b923c65b1383362605e673b19a2cfce3b01382fe4c002847e37bcd4bc57204c25e9d45a86855bd995e0437c6d3736809797f62bbeecb61a47cff1a5248f68e0"]}, 0x74}, {&(0x7f00000035c0)={0x33f8, 0x36, 0x704, 0x70bd26, 0x25dfdbfb, "", [@nested={0x2c, 0x6d, [@generic="e4a9ffa0ff6786f3ea76cd318e356f53d1b8ec5e33dbb8878d", @typed={0xc, 0x83, @u64=0x140000000000000}]}, @nested={0xd4, 0xd, [@generic="f0565c2aa0ba5186b36b8f15ff1f4fc7afd39567ebc695c4d7f520999c66d3ac972ef6e2362d3e4d8239d2017cbe92f419e9af089b334e51dae43b0be0e2c48e7bb2d2fa5acbcbbde328aa14178091abb0b1b7784396270b78fecc8d96d758", @typed={0x4, 0xf}, @generic="85049246b7ae2651368a89d8519092fd11a8d4a5b5c26041f310b81b11c1a01d53ad6a209f1b0af2919d5b2311ad5105cc8024b0f3b11a1f", @typed={0x8, 0x44, @pid=r8}, @generic="dfd636c87c14789f445d0f0410c80d56a8cd29d8ff8b4b45d7db18a62a", @typed={0x8, 0x2d, @uid=r9}, @typed={0x8, 0x39, @fd=r0}]}, @typed={0x8, 0x1, @uid=r10}, @nested={0x18, 0x72, [@typed={0x14, 0x7c, @ipv6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}]}, @generic="3adf1538bac1a5d14c010e8cf636327c52d99cba921f74e2b185b122864222cdec09edc38ca10b02cd2b6ce06933a84234bd7e2a7d097a1938e0fc365fc5f852bbdeaf6f6b378abce3f692205bd4126ecfdca13c1c171b38925462cdd842ad01f2e4d3b53b0be609f32b7cc97139ddfdfb25f15c1ab9205fec18a50e18f66774236a53d76b3124719bcdc643e84d95a5dee15bb50039e934f764aa34ede52294dc04a7beb84307b97c0e5baf3e204e7868a3c94dfeb25db6c8dbdd9235a040fcbefc7e411cbcf967bfc59f39ca854e90a0169134e81922f2e9c92038143efb2a4477adea9455b1331d9f80f8", @nested={0x20ac, 0x35, [@generic="75ef1a8bcac8164d442b865fee36da4e3ff8c4b113e133c6cfbbe944ff2aaf14b60e9b31ff9d916ca835c75a4c70fb951d14c622a692ea7dbf9e55af5236d0dac24b067cd00754da63b46061aa47c79b72b3feb21e58ed6ba58eb70a9e86db96c7319d003d98a0e982ae9b96e7e3d81cbafe76e459d459b1a39b4cf9d132f181f1f7096048912dfd56d4033ba0566fa1e956170a502fed78b6b10b8692825bfc25a618d37b4ba74eb3871077607adc45af80bbf68e027642462546dac3359956d8326d5d8f261bf98d53bdfe18d2c1f79a609794f88b77ed3509482a74b5f760c7abb59f8ba32d66d7df0e4860b86650f9cd30002194a4f86e4fac75e09a890e3546ab1be1b2e3a87b9f9593c298a8f302cc40744fb2ef989934f9623b38bbbf921305a050ac37454985ad9121182f143efd670a631c3dc3a9be7acfe0807162a99b4a1b1bb47dcc6e7a315a17cd3c6c24952970604193f7d3f35c4eadef668d9b839f2f470a92cc81de4979b06fd2dca45327d332b9ea7a863d40bb0bc9945dcddd85b80726c0629e6728ed05d4001deed1613d098bc6eb7b80510db5b98f509e20b6dd03a2ebcc28251c42104e65528e4501ece5e91b83efefa42792990c30a77c59fea390f45a16fc6051c1cc28c4d2a1a3a63a8d2240ebea6e761e77bed99ca9798efc6daee2400d757a4fe651c5260a94033530810fc28cdf473195b0cbfa2dbb1522b571a89f2d07f07d9917976ae584cc695a1b8672c89d48f0796083d09402e1b54b70eb17da51b55ca3f8815fcbde8aeee14d4ed67d6ec6b41402f8357711a5068e61b4709353cf81139e11e3a1c38111142aefa04aab91910e7db25b3f21f438778fd8225a524b84883ea6866034b3117ad162886b2248a35f8488ea40852771c42693b04e988d2c065fb17294ff2b4bf2a38001f4167a24d5aec368f54e31445d65299fdbe1fc547d5502039cd2d435f00e905adf30bbc9ebe52d842c453e8586d39d328b868b0b6bb5c72e1d61b2d2fc4198f662f53284b34e1abcdc02ec37688b7815ef250ecd8e19a830b3b3c9bde9e664934c9308fcabe2766b3ede0f4edc7f3497d20440c10dda5f4bb5244a1899f7b8cde508cb2516f0efc9d74213f28554a9da2fc7b61ab170fbe46829fb6d2d39a6f56005c56b5403bf2d146b692d1c48252de5c6ce7f1b64fbc66677333aaa86cf041d08336a0a22d3578ebda534f4bca68f36de6d293901807e9cb371a72810290d1cbd8e834047d0b98b00855f48bf1be735fd4461d273c386524ae943af87cf512a1e780e9d68084dbdb01be0c8be12fa324f2e486041d3599265ae73d854391dfc2a8eecba0bf085a3cc19dfc8bd906ea358e02b9bc88981ac0078f870005ada73479155a0c983a4b3d668d9925fe0001e4ffb0684d03deb1e190b77fe5306f866fcdac75ddeb7c8e691b66ca9b50e8ab08fa45762fd71bb6c2bc4f869606f233bfa97d9ce3e82dba4b3c7da0df40eb42e37c9974edbc2916d7d7da114c53f9348a6e62dd98b0ca45ef726681c0f7ab36bda55acbc192acac117a19aaf2b0ab20d2cf8642fe65f29827c9ae8ab5226fc0b0d85cd81a28cb8db5a2700507a2f6e2c7ecfe68abdd215807e69bd171428045ed219327bc1a79b9715ee66ad96969855fcb15863cba93a98f75077a464f762a4fa9f8cacaf4baa113ec12f0ab85f5da5c3e03cc5129d127a879e2502b077937047af162a609151ba56dd94b12a45fb91ecfb3fb024b2c907d3713c1e04b0a973007397b4523b17a3df215b7d1260d4169973d0b54839323a4f5e69dd27f2e2d96350581d5fe2549bbbc7a77b3910edbb6c588f3c90829d01abb14bcc0692faa9c705028f956c9f3d5785c41ca6ea70aa60bb7ce568979f9359b5e52c8cda2eb85774744682bcbf5828b50f4e80a3c64773d7018e338469a8d0667d19e3c2dcb64dee063e8e31144dcc9433e063200b04d7329cbd716b63fbef4dac54f9555e35e399815685a23b3e7beb96f6be0a8809233d6d353beebc0601430aaed3c47b5f247bccbd5f910fb2cb32fbfd7368146ad865a9ae7f06da67b672b5ecb047953b13ed1a3e46913ac6eb2ec6362bbd9350fecaef5efa1a1c513fb62553cc127bf8d54eceb374aa0414f01620c3ed55dbc7eb0e11ffbd9ff8c7bfbfea198f0c932344e2d41288a1cc97e8c336be1645ee0c68500b630ee48521b59a8f640ba8b3459b98f357c6112e9d79a4214c27e105423b1da5cc12392076a6301823fca609bfa567404d2254b5b89fd1b3383384412a931fd153fe4aa2510f945ec55c0b5355ebca39ff00eef1946dc9cfde8807fed74e27bc44c06ad6c815a7a228ef184f43ce6e80778002d9e178916172938c9e051b10720d622a003265e308a5707175635fd0fa875f05b0d3a79bf336b885d1a75788abb31c88138b4db4dd4d24707421f0a5e74b3b38e2348fb6c2301b1f74140bf977d7105b12b92fa846db5e2f1c656a3046b10696b23240a663bcea656777aa2eb1995cae42fc6567bb84bb50fad66677bac04b68b03689eecaa378edb2560381a7e7b09a1c53350ec6e635a9b535bb7f7b6cf45f9edbfe494bbaa90739a041db48170a8f19010fb5c225fcd05405b5d2d1f70729dd009801ad2b84d0bca332761d8886548e051608aedb2b155ea57beb3c303552e65d18b61097d549c6c0ad7b07ca819def9d46b895d67083b1c6dc51b652b160a82d4edac348125fc2affe4b54e80f1f9533975ebdee4dc144f5799057f4c9228328e77432884837b8e93a605e2d0cc9ae803925b5d6f9953b1f965ec739e531d5e0208195416e2f754b548c6358b79f33d1823b0abb867a5557ad8d50fd794c9a8da4c59f04e5e63940a3d86681a0c29db3754b54368065c48cf376ec102a6c610e2e60652feccfbad23b10253ac725d067a93edb7aea0d28c5431dbfed78ea610881fc45f2a4c9fab300abde768610b0de91249d17cc25ff0fee0f8fbcc20fa409182f79b07bd8974014c7d28f9700f19cbf821a3d3717f301850788a52a52ec77c94dc6c5201922c6f6864f4a15ba739bf8a81b1c40898f6258a1d2cddbaf3b69416704bdb876c5ece3821dc88cd2d64e5d66fdbfee1c1e68173e99763dc5d735044a97f0738fecd8144be3553f6b7392bd453a8e949c8ca4b4745f5f1cfd5e1b4a09033ddef86c8a4653a288a4bbf9eb88c2a98459bd7344b9d403e35a9180ac63e4ae9d48247f7168209ab3287a7eff71ad6b0f765a4a99109e5fc6875096454f68810dbc520d1c149e2a08993ef7aec20cae899f60f1aa78225b6072a95a5f1d6c6ff69a5e2134bfbbf5d0498aa490b1c8d7a322c02f65e4475ce40c3943f184f5e0877c349ca93d9fa8ec6b050b0971d3b3340076aefeb7ce881df748367a8b8925922aea6ef7822dee394047a622868f33fc6fd54fdd4671f243a9b49572e44362c4237929d13ea0b9dd5df4b04a1e038d018d0d7c7bbeb57a24f269d26e4f0b918290abbf51df34c71fcbcbcbee3eb326c206d13467c4517c18a825c98c49cddd10d85b5c3a1fbb3ee0fd0c9aa4d4e0df74c18fbe49dbfca553e84ce948c54b0bbce31c6d718f0dbd1302f0c4170a20d2fb5f8d1af901bf1463d6aba26674a436b4462f4385fa6fcc6b8f35d1cf6a043f7aa3f871a37adcd70f3a6e1e1830574d1db915ab4537db7b1300a67bdc9b2827f570efb5cfc10fb86f1ce318485650ccbc8a5c00d23d4bc9fca6aaedb93cd92c61ed41c08f2029b0d358cd133a6ad702a003bb48ea0edd084f43c7afe0b9660410a053afb215421b6624a14f281ecb81d8c56989508824e779545a932697825b2eea238817e1ce5d7ced01fec87a98b409da254d904291441224e30692f16a48c99a84ad455868d9f172b843943b057846dc28982aed139b91d21cc1c13464e91d9968beb4dbf2881a903875dc0bd99d97eb867ba1cbf8c53125bf9a47aec30bfad8028584b02884fad8da25c962a111468a4b652f44e41554cf4a3e5facae32ca50d3d3f8fa59cee869ed501bd96e421e720f82b7f61d647ccb345aa7dbd9dca6db2c59651a3bbfd5a48053dec149c6701af0601eef5cc3e1e99be38af6c1604317d4f510709d11504c3cef3c22bde6e8b3fa5ed52e4b324911507cd6461860a200f566c10d6a3e7bf89e26cd4c285d9e6ec2876e6d0a1264f1c83201f0f56ea499f4cf6d97e508f4b3984b171b7809d86286ccc6b789bac981f90b709c2eccb57f8923055fcaaf3c5a5b5e921b17fd73b4087b307247a11a3818dac9236f01e81c2b06de9ce0574546678fa60596290d97c339fc5595cfe50f418394e099da2aa467023a57461db79bf82eea5340469ca5985464b8774850c6a3c8647c88641818bfb22a80c0fdbe7a99d6872d89bf0a25ad0df2b3393acbf5049125fbb8e303ad31585db49c714dc8b57c1ff3e695bfc3489ee973d84ec1c568985dff934425fd34ea61dd03c0998c8c01572e2c75a7725b59ef7f3d08a1851e0c5a41613889e0249ed9b1065a6cb83069ac2e93361ab7ac3a9d9d887d3e22747ac1f6741ece8e2491497e26792f4809118851bdb2f80099c70cb961e2af9ea05187f148d9f61a2216edef685c1396953375479eced070c87332e2681af2030a3b17f820289dc663ba90728dadc5bc8840f895a547c752a57c8f03845aaca0d98e262860c513301fdb1acab211bce70e0afd2c94a2b550f2f744cc9b58429ba28a20549b0ae02053ddadcc9268bb0809370469f5cf4040b0eaa03d1c52cfda3b5a0beb17a75873e362e9e43c53cb046be09dfe9850ce8929d2245579ce970c63fc2be3fee06dc248cd4e12f7d2269ceb32fbff11dace7063642e46f35890e3cbecad0660f6c67b465354494e26728fd639e5c8837fab9962dc95f6168226a013d744850a3a1147111255d85c5d22bf75523b0bbce438beee4280a5410763ca2b930749b200c9cdf5aa38a9cab12eeb8edc7345d7308cf178f8443822b26e63126b7a8ea841cfc5d689809c21e313902ad8883f56bf96604ed2279b85f29e8eee8931ee0349e0bc211313740b780d44ebf1aa9e3139279afde593a4857c92b6f37ea62cf949213e73f7570f7bd7b39df934a638510ebee89c8350f46eada1d3e2d35b736bddeb6b468f86809561993769e160a215253e1cace0b77eb422630c8700c037d9c3f5358c64296b72306a8f3a4e4f6c299b860616ac85c55a4899c9644fae836329f28e238de4ef43b1d229ba521937c56b1c738938068d84191b7621fb349eac862ddcf2bf913168634bdb1d32ca2b1bcafe59e5fa852d271e238b57d252cf4fe1e26da950208465db94efcc82c133bf5a732427e52a75b26c374df8e81dd57d6110b18f51a94a938e6a9ecdbe9a0ec4c3f97c007427091a5f05870beccefc5e244dbbf197504e14b43aa79f76dbeea0fc497a842dcc7556ba17ad9573e2f27828534ab1ebd5fb01981228e969c545fac9bae9b1a5d9bf296ddbbed9102dc660efd522a22cf5dea133692914db6800bb332f91e8d5920adb410272c59009c06728555df7c7aa6a8f71097116852d54d98e13e72dd030c5c4b4cb0c1a5ba2eb7609bbdae4c379182e1550a30169b9a453a36aa378c3cb0142138c0d84c53e31de1ede00d6721d43e04f1d8756bff9cdee7a1057af17150a00006fafd84816c90c898d4626340c7d004dba0ebd52d263aa1e5245d1d89714dcf5be5fdb7a89222985d5b9777b2e789b24fb0e86ddb0a15429fb738e2548c0cdba2f7d75", @typed={0xc, 0x5b, @u64=0x80000001}, @typed={0x8, 0x2a, @u32=0x3f}, @generic="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", @typed={0xc, 0x5, @str='bdevem0\x00'}, @typed={0x8, 0x14, @fd=r1}, @typed={0xc, 0x79, @u64=0x3}, @generic="7f8d5c7717a16a4dd7bd389480cd5b3c332bcbf5dc174ef5794f6833c6d6297e1fdc7211989fb7fd46023e1448b8314f75", @generic="8d56fddb2601d5dad4cf36c716c1471e72d8432414d50d4709a78e09fcaa3172f88c0e36afcdc81e000aeeac89ae60e58057a4830bc21672c2906a94a52964b1f214"]}, @nested={0x1130, 0x46, [@generic="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", @typed={0x8, 0x8c, @fd=r1}, @typed={0xc, 0x56, @str='syz_tun\x00'}, @typed={0x14, 0x69, @ipv6}, @typed={0x8, 0x44, @pid=r11}, @generic="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"]}]}, 0x33f8}, {&(0x7f00000069c0)={0x1e4, 0x26, 0x400, 0x70bd28, 0x25dfdbfb, "", [@generic="1449e479ce0ac002bae9ca4add44f4acb61c78190186720ee8a0bd9311ae811f9380fb9b352ae44a88cbd8ed8a42bd1f7e6c15e574ff05ad5e38d46b1780921eb6a3585d8050ffd21f769113b20d4406a8f9c66a49474e8a5781b66e04b046aad765e4b4f76c6e34336bc7adbc8c3eeb945cd331805028ac16e77a26eb0617cd6fb313cac477b273d03a2d3566f42f0e12cb5296d9c09ac48b5a2fda9bb4cb", @generic="080ac39619b5293fb027d4c54088d2ffd435d523487f278402a32f3c068d7eed3bbfb48628d745d51817ca7369e092e379728ebc219c9202e1ceb48d19dcfc4ea711ad0a2bb0a2ff30", @typed={0x4, 0x40}, @nested={0xc0, 0x12, [@typed={0xbc, 0x6f, @binary="0a6607214feaa87c09d71db87876b4c9808a12256b8f6b8a64b09f8b8030e9478bd1cbae672c0cec4b4351b3d9dcfd93eede67b55cc1ee6bc80590e6a089b2ff236f5e249b106858fe27473669bdc4650270549e6bc8a7d6328e4f1dfa187ff1b0064534be86566ca55cee6ec339217b8ec03f0876ae523a95444461e813d37e5537d6cad63b8df509811cc062e2f463f143d4c2ec25fb068e29c48071bd7f54b4013b530ddd1dd1312c846e775d5958ee258cbe75d8"}]}, @generic="63f2204f469747d85bcc0aa3a8a611fc57409813bb035bc32c4c5f36a4999870823e2ed1e30bc3"]}, 0x1e4}, {&(0x7f0000006dc0)={0x12f0, 0x30, 0x110, 0x70bd27, 0x25dfdbfe, "", [@nested={0x19c, 0x6e, [@typed={0x8, 0x4c, @pid=r12}, @typed={0x14, 0x29, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @generic="13ff4f98013e6fd1b2aa88ffa1235e45c5dc2a67e9483d231d68dfe3cf1329c74908e82d2e5b122341c872257b5e6a7b827b8a5625ddd68f77f02260cc7c381371aba17b5ea2d1de377e4a78b18158a0e7a3a5b4077c5bb1736ab05ce17a318921ae94561ad60ead6b9a94cecda6e89d5cb7ae1d0a3aaf52884597c931b86757b999b533bf7c11503cf8d941fbb548eeb5c2570c0f9e8564c1a289dd26661306fbeb269182551b774b298da68c42ca15", @generic="251fd16825f3a05cd9e39c12870c10db33267bcf2bae477309ed8b716740b6aa3ca2d3366ae4a8cc58ff348070cb847e4c6a95d3002fd5f90a783519f50af5ce26a405a68c156ccd285863c3c4232fcbe4daac86e8f5f933f3a2d966ccb8172718ff8ff91c13c7cdfa2264de67b94c32c4e9dfa8234691d68595c4ca342e51293817d6d81cfb5f81eb9c3028ea0594a0f5e691683b40177ca291b5c3c3e43c5a09a76a8f1d2288312455ae15477e4f580275f5e724b7045151e5937a54f880d23066", @typed={0x8, 0x74, @pid=r13}]}, @generic="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", @generic="c8e512c723", @nested={0x54, 0x54, [@generic="0c29690892fe49e8a874fae8783a2c6209cf5d733dc939d696f4ba03946551c9e61ea224ef3c13e7a8e2872c0645848777ea9e934635493b2396d70f2e22730a17d94e678c4ab9c7f4731e7c9071b4"]}, @nested={0xa4, 0x8f, [@typed={0x8, 0x10, @uid=r14}, @generic="2eef08b7beb4b6dc9248e2e6f976f97ce3fdc2638d68ee9c72210c91e20435de120853eb9a72e2001ce4b23c57754cd10e0ac64ff019a3e494c6ae37252d0c4de454a80ef0f5872490c6f3d40c4a350850946f13aaec056372db8ad308d04ff1a37170461a3d30862e97f80c956dba6a3baa5d9545c7c4ee8cf87fd154e9d657ad11c4bf11fc01f6b965b790b32514db729a93d3338a"]}, @nested={0x44, 0x30, [@typed={0x8, 0x4d, @pid=r15}, @typed={0x4, 0x20}, @generic="f05af52ebdbd575e7217e06a2598a812b3fb158ffee0c4dd55d75ab36126d9601b25dfdcf16e9226e3ee0b2bc71f72dd59"]}]}, 0x12f0}, {&(0x7f00000080c0)={0x18, 0x30, 0x8, 0x41, 0x25dfdbfc, "", [@typed={0x8, 0x13, @u32=0x7}]}, 0x18}], 0x9, 0x0, 0x0, 0x4000000}, 0x4000000) 02:40:35 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xa, 0x0, 0xf00}}) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffff, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000140)={r0, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) process_vm_writev(r3, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/125, 0x7d}], 0x4, &(0x7f00000013c0), 0x0, 0x0) [ 712.025587] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 712.064334] binder: undelivered TRANSACTION_ERROR: 29189 02:40:35 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0xf0ffffffffffff}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 712.090693] binder: 14289:14326 BC_FREE_BUFFER u0000000020ffc000 no match [ 712.125663] binder: 14289:14326 BC_FREE_BUFFER u0000000020ffc000 no match [ 712.209740] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 712.229817] binder: undelivered TRANSACTION_ERROR: 29201 [ 712.235864] binder: send failed reply for transaction 1626 to 14289:14299 [ 712.245953] binder: undelivered TRANSACTION_COMPLETE [ 712.251295] binder: undelivered TRANSACTION_ERROR: 29189 02:40:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x3) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x3}, 0x1) r1 = dup2(r0, r0) getsockopt$inet_int(r1, 0x0, 0x32, &(0x7f00000000c0), &(0x7f0000000240)=0x4) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x10f004, 0x0, 0x7f, 0xae, 0x1, 0xfffffffffffffffe, 0xac51, 0x5, 0x9, 0xead, 0xffff}, {0x12001, 0x100000, 0xb, 0x8, 0x6, 0x3, 0x800, 0x6, 0x5, 0xeb, 0x1, 0x2}, {0x1, 0xd004, 0xf, 0x5, 0xad, 0x9, 0x7, 0xff, 0x6, 0xc1, 0x7, 0x1}, {0xf000, 0xd001, 0xf, 0x2a, 0x5, 0x7, 0x1, 0x40, 0x100000000, 0x2, 0xff}, {0x1, 0x5000, 0xb, 0x2, 0x1, 0x0, 0x4, 0x40, 0x7, 0x22d, 0x9a7d, 0x3f29}, {0xf000, 0xd000, 0xe, 0x401, 0x1, 0x5, 0x7, 0x8cb, 0x1, 0x3, 0x4, 0x5}, {0x3000, 0x2000, 0xa, 0x1000, 0x6, 0x3, 0x0, 0x3f, 0x200, 0xff, 0xffffffffffffff01, 0xff}, {0x3, 0x7000, 0x4, 0x8, 0x3ff, 0x5, 0x0, 0x6, 0x1, 0x101, 0xffffffff00000001, 0x33528507}, {0x5000, 0xf000}, {0xf000, 0x10f001}, 0x6, 0x0, 0x6000, 0x20100, 0x7, 0x2000, 0x0, [0x6, 0x5, 0x4, 0x3]}) 02:40:35 executing program 6: ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/34) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000040)=""/87) 02:40:35 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 02:40:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x6000000000000000, 0x0, &(0x7f0000000480)}) [ 712.256828] binder: send failed reply for transaction 1623, target dead 02:40:35 executing program 5: r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000180), 0x4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000012c0)=0x6, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000040)) accept4(r0, &(0x7f00002c0fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00003bd000)=0x14, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x2, 0x109000) ioctl$TIOCSBRK(r1, 0x5427) shutdown(r0, 0x1) r2 = syz_open_pts(0xffffffffffffffff, 0x8000) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000280)=""/4096) gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x4000000012}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) socketpair$inet_sctp(0x2, 0xfaf5784c983cb895, 0x84, &(0x7f0000000240)) gettid() syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x81, 0x10280) openat$zero(0xffffffffffffff9c, &(0x7f0000001280)='/dev/zero\x00', 0x800, 0x0) [ 712.304962] binder: release 14367:14368 transaction 1630 out, still active [ 712.312128] binder: unexpected work type, 4, not freed [ 712.317468] binder: undelivered TRANSACTION_COMPLETE [ 712.389298] binder: 14367:14368 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 712.418932] binder_alloc: 14367:14368 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 712.427569] binder: 14367:14368 BC_FREE_BUFFER u0000000020ffc000 no match [ 712.460786] binder: BINDER_SET_CONTEXT_MGR already set [ 712.466380] binder: 14367:14380 ioctl 40046207 0 returned -16 [ 712.474801] binder: 14367:14380 got transaction to invalid handle [ 712.476882] binder_alloc: 14367: binder_alloc_buf, no vma [ 712.481273] binder: 14367:14380 transaction failed 29201/-22, size 0-0 line 2852 [ 712.486810] binder: 14367:14368 transaction failed 29189/-3, size 24-8 line 2967 [ 712.513482] binder: undelivered TRANSACTION_ERROR: 29189 [ 712.514510] binder: 14367:14380 BC_FREE_BUFFER u0000000020ffc000 no match [ 712.526569] binder: 14367:14380 BC_FREE_BUFFER u0000000020ffc000 no match [ 712.550268] binder: undelivered TRANSACTION_ERROR: 29201 [ 712.556485] binder: release 14367:14368 transaction 1633 out, still active [ 712.563587] binder: undelivered TRANSACTION_COMPLETE [ 712.568794] binder: send failed reply for transaction 1630, target dead [ 712.576545] binder: send failed reply for transaction 1633, target dead 02:40:36 executing program 6: r0 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x529, 0x142) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}], 0x1c) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x400, 0x0, 0x80000000, 0x6, 0x1}, 0x14) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000140), 0x8) 02:40:36 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x3) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000200)=0x9, 0x4) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb) 02:40:36 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x6800000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x80000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {0x3}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x20}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x74, &(0x7f0000000000), &(0x7f0000000040)=0xb) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000280)={r3, 0x3}, 0x8) 02:40:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x4800000000000000, 0x0, &(0x7f0000000480)}) 02:40:36 executing program 4: r0 = socket(0x10, 0x4000000002, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000080)) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10}, 0x5) 02:40:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x20000, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) tee(r0, r1, 0x1, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x400000, 0x0) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{}, {}]}) ioprio_get$uid(0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r3, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7379e99fb3e63309cf9607636a017a302b3799afc0140bab4bc575f198adc179efdbddab9b13fb83983033ba2f96296a0000000000a7"], 0xfdef) 02:40:36 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2b, 'pids', 0x20}]}, 0x6) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x200408d6, &(0x7f00000011c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1b) getpeername$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x201, 0x0) getsockname$inet(r2, &(0x7f00000000c0)={0x0, 0x0, @remote}, &(0x7f0000000100)=0x10) 02:40:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x1000000000004) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)={0x80000000, 0xc, [0xffffffff80000001, 0x7f, 0x94]}) eventfd2(0xfffffffffffffc01, 0x800) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x9, 0x10, 0x81, 0x3}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={r2, 0x1, 0x0, 0x5, 0x6, 0x6, 0x0, 0x8, {r3, @in={{0x2, 0x4e22}}, 0x98, 0x1, 0x8, 0x6, 0x1}}, &(0x7f0000000240)=0xb0) [ 712.785940] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 712.803786] binder: release 14396:14402 transaction 1637 out, still active [ 712.811000] binder: unexpected work type, 4, not freed [ 712.817135] binder: undelivered TRANSACTION_COMPLETE 02:40:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000140)) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0), 0x1b3) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffff00000000, 0x40000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, @in6={0xa, 0x4e22, 0xd8b, @dev={0xfe, 0x80, [], 0x1e}, 0x401}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x4e22, @multicast2=0xe0000002}], 0x58) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xef}, @in={0x2, 0x4e24}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0x8}], 0x58) 02:40:36 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x7a000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 712.865680] binder: 14396:14402 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 712.905174] binder_alloc: 14396:14402 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 712.913974] binder: 14396:14402 BC_FREE_BUFFER u0000000020ffc000 no match [ 712.953433] binder: BINDER_SET_CONTEXT_MGR already set [ 712.964736] binder: 14396:14420 ioctl 40046207 0 returned -16 [ 712.983269] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 712.994597] binder_alloc: 14396: binder_alloc_buf, no vma 02:40:36 executing program 7: unshare(0x10400) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'raw\x00'}, &(0x7f00000000c0)=0x54) ftruncate(r0, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) setitimer(0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) 02:40:36 executing program 4: prctl$void(0x22) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) [ 713.000300] binder: 14396:14402 transaction failed 29189/-3, size 24-8 line 2967 02:40:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2}, 0x10) close(r0) r1 = memfd_create(&(0x7f0000000000)="76626f786e657431d276626f786e6574312a656d3070726f6300", 0x3) getsockopt$inet_tcp_int(r1, 0x6, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 713.037407] binder: 14396:14420 got transaction to invalid handle [ 713.043845] binder: 14396:14420 transaction failed 29201/-22, size 0-0 line 2852 02:40:36 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 713.101998] binder: 14396:14440 BC_FREE_BUFFER u0000000020ffc000 no match [ 713.134223] binder: 14396:14440 BC_FREE_BUFFER u0000000020ffc000 no match [ 713.172263] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 713.221663] binder: undelivered TRANSACTION_ERROR: 29201 [ 713.230506] binder: send failed reply for transaction 1640 to 14396:14402 [ 713.249077] binder: undelivered TRANSACTION_COMPLETE [ 713.254266] binder: undelivered TRANSACTION_ERROR: 29189 [ 713.259798] binder: send failed reply for transaction 1637, target dead [ 713.266657] binder: undelivered TRANSACTION_ERROR: 29189 02:40:37 executing program 3: setrlimit(0xe, &(0x7f0000000000)={0x800, 0x20}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x84040, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xffffffaa, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000626bd7000fbdbdf2504000000080005001f00000008000600ff0f00002c0002000800080001000000080002004e20000008000400fbffffff080002004e210000080007000300000008000600d6dc0000"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x7, 0xffffffff, 0x9}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000440)={r3, @in6={{0xa, 0x4e24, 0xa06a, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x9}}, 0x400, 0x8dd}, &(0x7f0000000500)=0x88) socketpair$inet6(0xa, 0x80000, 0x4000000600002, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(r5, &(0x7f0000000100), &(0x7f0000000140)=0x1c, 0x80000) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x14) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f00000000c0)={@local={0xfe, 0x80, [], 0xaa}, r6}, 0x14) 02:40:37 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x81, 0x3) bind$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) write$binfmt_elf32(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x100, 0x2, 0x1000000, 0x1ff, 0x4, 0x2, 0x3e, 0x192, 0x247, 0x38, 0x38, 0x65, 0xeb70, 0x20, 0x1, 0x20, 0x80, 0x7c}, [{0x5, 0x40, 0x2, 0x100000001, 0x7, 0x8, 0x5e, 0xfff}], "97e777b3bc71a0c00e0de196a04e2ad44b450f7673c5d350a2d3da534412413c0d13701ec3169b27c4a879c10770601db3c1ce5d1a151f04ccfc30a19fb1bdf9741b3170a276e23d75715304f4767e1ff4f112c5bfa37f2fa383cf28ef21d845b98af05193b7f28068c1082dfd4cffef0e4577cf7b6fff01fa4f9c3f07c1182bf458c7a3ea011d20e5ceebe2c62a221130409c5fc1be9c3e9ad742f2c7", [[], [], []]}, 0x3f5) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)={0x1, 0x10, 0x20, {0x77359400}, {0x77359400}, {0x0, 0x400, 0x9, 0x3}, 0x1, @can={{0x3, 0x7, 0x2, 0x2}, 0x1, 0x1, 0x0, 0x0, "8b6233866b3275d2"}}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x800) fchmod(r0, 0x0) 02:40:37 executing program 6: socket$alg(0x26, 0x5, 0x0) 02:40:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x2000, 0x0, &(0x7f0000000480)}) 02:40:37 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x224200) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7ff9, 0xa, 0xfffffffffffbfffe, r1}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x2}, 0x2c) 02:40:37 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:37 executing program 3: syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x4, 0x401fd) fchownat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x1100) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x400000) 02:40:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x40010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000580)={r1}) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="08800038016c4aa59733727d225d88842c6c3f4ee13a0932ccef5fc932da2fdde3d9f862fa31f5301569f9c37c978001edebfa93d24c211b0db72a9138599c09338385862a456b21e18d108f529efefecd0a66084a3b8edcff43afade8618e754b66d773ba95b87a2f18185bd87696ff287661e37700b4dc920a8e19b9888fb6fb024506dd7275e52ca15d7194cbbab4181b6ce374cc3337c3f34ec72f822a1fc5bb308ecfa259344e096a49186ac2584cac0d1fdecfded6f48ced9f63e92c71d68f48b2f2c7d2748db462297a0b43cf4e33e8335ef302e616d969540d", @ANYRES64=0x0, @ANYBLOB="04000000000000000563044003000000"], 0x1, 0x0, &(0x7f0000000240)='D'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000400)={@reserved=0x1}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x4, 0x46d, 0x7, 0x6, 0x856}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x1e}, 0x1}}, 0x20, 0x7}, &(0x7f0000000180)=0x88) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000000)=""/199) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000600)='team\x00') getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000640)={@loopback, @dev, 0x0}, &(0x7f0000000680)=0xc) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000780)={@loopback, 0x0}, &(0x7f00000007c0)=0x14) getpeername$packet(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000840)=0x14) getpeername$packet(r2, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000008c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000980)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000a80)=0xe8) getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f0000000ac0)={@loopback, 0x0}, &(0x7f0000000b00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000c00)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4}}, &(0x7f0000000d00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) getsockname$packet(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000dc0)=0x14) getsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000e00)={@multicast2, @broadcast, 0x0}, &(0x7f0000000e40)=0xc) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000e80)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000f80)=0xe8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000fc0)={0x0, @broadcast, @multicast1}, &(0x7f0000001000)=0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001040)={'irlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001340)={'ip6gre0\x00', 0x0}) accept4$packet(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000013c0)=0x14, 0x800) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000140)={@remote, 0x0}, &(0x7f0000000740)=0x362) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001480)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001a40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xc0800}, 0xc, &(0x7f0000001a00)={&(0x7f0000001500)={0x4e8, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {0x1}, [{{0x8, 0x1, r6}, {0x4, 0x2}}, {{0x8, 0x1, r7}, {0x80, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0xfffffffffffff8cd}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0xf4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x7}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x100000001}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x178, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3b}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r16}}, {0x8, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r18}, {0xf4, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0xc0, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r24}}}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x40010}, 0x24000000) r25 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x9, 0x2c00) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000540)={0x5, 0x400, 0x7, 0xdeaa, 0xbfc}) ioctl$BLKPG(r25, 0x1269, &(0x7f0000000500)={0x79, 0xd30b, 0xba, &(0x7f0000000440)="b2c32ce35d98c458ba6b8702ac1dbcf2c2cc1459d6282e71356036ede4cb0eec9b3352455962ae86465aef5e139096f51cbc4770a61c63dc01de68efeae7801559e61ae49985423d235c4843e7cf850fbc91b9069b116a8165711e31a58d84ec18c998770f8103a080c94afa3a3fde50f29bf6245368833bfea8beb3c0cc72515abcbe0b909c0aa3f7a0af2f99743c0b553f9fe07b2a951b6866f119117922f5fb2bdbbe33d852a30860aa48e85d93224e59a181ab9e969ba9bf"}) 02:40:37 executing program 1: ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0xc8) recvfrom$unix(0xffffffffffffffff, &(0x7f00000001c0)=""/222, 0xde, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x101, 0x400000) accept4$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x800) [ 714.109317] binder: 14461:14463 unknown command 939556872 [ 714.112620] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 714.135367] binder: 14461:14463 ioctl c0306201 200001c0 returned -22 [ 714.146340] binder: release 14460:14470 transaction 1645 out, still active [ 714.153469] binder: unexpected work type, 4, not freed 02:40:37 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x8000004, 0x3, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x40000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000013c0)=[{&(0x7f0000001200)=""/245, 0xf5}, {&(0x7f0000001300)=""/148, 0x94}, {&(0x7f0000001480)=""/157, 0x9d}, {&(0x7f0000001540)=""/142, 0x8e}], 0x4) [ 714.158799] binder: undelivered TRANSACTION_COMPLETE [ 714.173451] binder: 14460:14470 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 714.177288] binder: 14461:14463 ioctl 4008af60 20000400 returned -22 02:40:37 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10004, 0x3, 0xf000, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f00000001c0)={0x906, 0x8, 0xd1f, 0x2a1f, 0x76851506, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:40:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x4400, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000180)={r2, 0xc1, "43e86c8c5c6b6dbc1bead74fece8fce6509a50de5906454a205337fbcdcb350432e287297312f04d12c91628dfda8434660b5eddc25f70c3ce75f099b62329e91d7fa5a20e875f4f933cd4bb8146a9e0ca573603153d9a56c1f76f4df5d0e7ffa17cd2b311c9d8c1fdaf67b2a117e624a2a3d30dc609e4db34966bbb6d956cfd9f2ba0229fba94943a213634bdd0193546e0a395e3d673a0d49f58af12b35136b839c807fadf967468f2f937650a4a05bc9431276b00ccf1aea35ec28ab5ae9ef7"}, &(0x7f0000000280)=0xc9) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) mlock(&(0x7f000092f000/0x4000)=nil, 0x4000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x6, 0xb, &(0x7f0000000040), &(0x7f0000013000)=0x221) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r3) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000340)=""/66, &(0x7f0000000100)=0x42) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x401, 0x0) ioctl$KVM_ENABLE_CAP(r5, 0x4038ae7a, &(0x7f0000000000)={0x77, 0x0, [0x0, 0x8, 0x400, 0x2000000081]}) [ 714.212593] binder_alloc: 14460:14470 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 714.221327] binder: 14460:14470 BC_FREE_BUFFER u0000000020ffc000 no match [ 714.240116] binder: 14461:14463 ioctl 8040450a 20000000 returned -22 02:40:37 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x6}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:37 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a11cdf8311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000180)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) sendmmsg$alg(r1, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e9b5461cab9d65e59b6ad74950bd17e5908803e52c3aabc5f143ac6ec8bf76660", 0x21}, {&(0x7f0000000400)="b3013a2128d220e9ac5225120ffe8bb9d5ca3e618d6332d660ab31270107a6cc", 0x20}], 0x2, &(0x7f0000000500), 0x0, 0xc000}, {0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000000600)="b8b8110fd1b4226ffe2a78ba692fc55e886f9e49dcb94d066c1ea01ef3a237d6d710170bfd2d336f9d2831a16bd31292691845a8c623a9204f4913322f35171e5447746db72655608997e061700a5c14ca9e", 0x52}, {&(0x7f0000000700)="761c3ef5f002bb149c9434b702451a9926e590d3f0ae8892c9a40a4d11e74ee5a2bc741b9881ea6142c524d690980a023f8f5c69fb2d5b36fe304d88d4", 0x3d}], 0x3, &(0x7f0000000780)=[@assoc={0x10, 0x117, 0x4, 0x1f}], 0x10, 0x40000}], 0x2, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/222, 0xd2}], 0x1, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) io_setup(0x20, &(0x7f0000000040)=0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000280)) r3 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x5, 0x400) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffb, r1, &(0x7f00000000c0)="67bc0072ab103271ff556d0257f2a044e8d92fb705fd165407fe69ef1468ec87002155665348bf238fb852ae56c61ada9f25ad", 0x33, 0x7, 0x0, 0x0, r3}, &(0x7f0000000240)) 02:40:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x2a14, 0x3}, 0x2c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x80) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000080)={0x10000, 0x10, [0xa43, 0x7ff, 0x3, 0x1fc000]}) socket(0x9, 0x3, 0x295b) [ 714.285796] binder: 14461:14463 ioctl 8933 20000b40 returned -22 [ 714.324268] binder: 14461:14463 ioctl 8933 20000d40 returned -22 02:40:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x7) r0 = socket$netlink(0x10, 0x3, 0x1f) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 714.340686] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 714.354660] binder: BINDER_SET_CONTEXT_MGR already set [ 714.388934] binder: 14461:14463 ioctl 8933 20001040 returned -22 [ 714.397345] binder: 14460:14497 ioctl 40046207 0 returned -16 [ 714.409541] binder: 14461:14463 ioctl 8933 20001340 returned -22 [ 714.426449] binder: 14460:14511 got transaction to invalid handle [ 714.426468] binder_alloc: 14460: binder_alloc_buf, no vma 02:40:38 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_tables_matches\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, r1, 0x300, 0x70bd26, 0x25dfdbfe, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x8000) readv(r0, &(0x7f0000001680)=[{&(0x7f0000001500)=""/135, 0x87}], 0x1) getsockname$inet6(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c) 02:40:38 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) r3 = getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x9, &(0x7f0000000100)=""/55) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f09"], 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:40:38 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0xf00}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 714.432888] binder: 14460:14511 transaction failed 29201/-22, size 0-0 line 2852 [ 714.446162] binder: 14460:14470 transaction failed 29189/-3, size 24-8 line 2967 [ 714.475391] binder: 14461:14463 ioctl 8933 20001480 returned -22 [ 714.484538] binder: 14461:14463 ioctl 8933 200014c0 returned -22 [ 714.499720] binder: 14461:14463 ioctl 541c 20000540 returned -22 [ 714.545714] binder: 14461:14463 unknown command 939556872 [ 714.554209] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 714.563699] binder: 14461:14463 ioctl c0306201 200001c0 returned -22 [ 714.583346] binder: 14460:14497 BC_FREE_BUFFER u0000000020ffc000 no match [ 714.592324] binder: undelivered TRANSACTION_ERROR: 29189 [ 714.600954] binder: 14460:14497 BC_FREE_BUFFER u0000000020ffc000 no match [ 714.610831] binder: 14461:14527 ioctl 4008af60 20000400 returned -22 [ 714.645727] binder: 14461:14463 ioctl 8040450a 20000000 returned -22 [ 714.657558] binder: 14461:14463 ioctl 8933 20000b40 returned -22 [ 714.660691] binder: 14461:14521 ioctl 8933 20000d40 returned -22 [ 714.681071] binder: undelivered TRANSACTION_ERROR: 29201 [ 714.687144] binder: send failed reply for transaction 1648 to 14460:14470 [ 714.706674] binder: undelivered TRANSACTION_COMPLETE [ 714.711963] binder: undelivered TRANSACTION_ERROR: 29189 [ 714.717559] binder: send failed reply for transaction 1645, target dead [ 714.725996] binder: 14461:14521 ioctl 8933 20001040 returned -22 [ 714.733535] binder: 14461:14463 ioctl 8933 20001340 returned -22 [ 714.739795] binder: 14461:14527 ioctl 8933 20001480 returned -22 [ 714.747709] binder: 14461:14463 ioctl 8933 200014c0 returned -22 02:40:38 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0x1c) io_setup(0x840024, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00001b0000)}]) 02:40:38 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000740)=0x14) sendmmsg(r0, &(0x7f0000004d80)=[{{&(0x7f0000000040)=@un=@abs={0x1, 0x0, 0x4e22}, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="aa1df1cd176745fb9a13981615ce8e1661d9d79a8f4004030a167695216cb19c6a3705065e5c67d29cb8d5aa4674effe6fce95bc9974976adf8e9f040b7ec3df5670871533657edf03ba1297a833b9f55cdddcaf83471e325494b34722"}], 0x0, 0x0, 0x0, 0x41}, 0x3}, {{&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x80040000}, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)="7f176979ab7e6f270234cc754e453323e3524dfcd84212b89e1250c3a39025c055eb5815701c0fa8fff1435d1bc9b9c1cf6ab8a953d77d1ecc13ee9fe660169a4ad3837f6ae55f91d6c55165ee73e132b3c6aa8a4efe01c86328406fc42bd18b9a8609b2478471781f29defccae4f4351e8a469317ca7bfd4a7468e3e02c8b3018d9a97e615b802259540b3f3feccd27db63787fdc0d51ea86b3161e5ca194baa5de27d83a820444543d589b3076e901b0e1aeb74d5ce8bcaaf67326b672"}, {&(0x7f0000000b80)="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"}, {&(0x7f00000002c0)="a2240870084c0f5552d11d68fe428605d1c4fcf3ebcb9f1637c5e23a943b35c062bcd706933061e358cb04fe59b1de8ac93e5d72026980ca862faa08fbb546af984a66be798f6267569ea0f3edeffd3061361c4def1ac225e33390d532f84a7b70a2eb4ca7f7109fcc291c81a8ea635eb0d738de4497cfb5f5d1459e7a744fef64e0c0405d695ed38739"}]}, 0x1}, {{&(0x7f0000000780)=@hci={0x1f, r1}, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="50c4c168201a6562c6cb6dc2f98b4c4f96f6c16ccbbd94d4dd66267ab16172a27f85c96027a7417817fd4f8719941cf34c36b4daa860c009214efabbd3ae98fc30ad0c6badc657c73bdc10331daa0266fa8555243ba62e4aafb4169189418a924617a646ad67d2a1fc43a4303b5ad6e20f7d25f268d747ac0972"}, {&(0x7f0000000a00)="7ec96944943215da823b2819475ddaf981fca2882d4d7e2cb7daf297d927ebdec3cf5fcde016fe4492b42d1fed3f29d46edce09200a2629d9e5e9129d8307f181500cc21ecfd0774372855e4be2f06352f3c"}, {&(0x7f0000000a80)="40fb927f9512930b9664f51eb5f9374275cb27883b5ecbc79e1e18c3c16b7085253d2e772fe2d00c3bb55d4406a4b402f6386965e9786e1f49c71a7b9d2a296e3dc9c5dedada80a5b676a3f601f4564da50ec9098a6db6e8d9a2baa379472e8dfc46cd"}, {&(0x7f0000003b80)="f2778a9d31703e38faadee779e61027e6b3552e640df946f8c71df8fa8578a8a01fb2f7ac9bf043cc7773b4564b14ea70cd7968052752fe2ddf53889c09774d0508cdb110590b3868d"}, {&(0x7f0000003c00)="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"}, {&(0x7f0000004c00)="c7d51ecd9d278a58da9548d4cf4261477ad26c380081bfe70df4b2340085fe7f5984be73acf7cc4e5dfff8447825d74c3deef59391b931f5bdfb9b7e33ead98ea531a04c280d"}], 0x0, &(0x7f0000004c80)=[{0x0, 0x119, 0x1, "0536b3856c416a7001e8dcad2bcc7a7dd8a3aef048c6de8ff1093ddd3e6334425072ed3c2e643a19424bab8bc5bacd63131db8766de82f5e8e230305c2770dda6f74c47688e874f5d886813d517b7d968b035ae51e54d7afd091741a8d49145fdcb44acc10666c5f8a2716da711d9a9431380d8b5ac701533d4fee09b593c2a678d2f8a30bdec07f3e8e9ee3a64a0b11fd6caba2817c7806447fade533e7adf08b7d70933a311460276549f212c3efaf10dd139d0807b3300eea1267238149f989b10b02134b9f8d"}], 0x0, 0x48000}, 0x9}], 0x0, 0x10) 02:40:38 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffdfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x4}}, 0x5}, &(0x7f0000000280)=0x88) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r1, 0x9}, &(0x7f0000000300)=0xc) syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x8, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x5, 0x7, 0x63be, 0x7, "73797a31000000000000000000000000000000000000000000000000000000020000553f0b399700338a00"}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f00000000c0)={0x3, 0x7, 0x81, 0x7fff, '\x00', 0x9785}) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) 02:40:38 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0xeee}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:38 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4080, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socket$inet(0x2, 0x3, 0xa653) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140), 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 02:40:38 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xfffffffffffffffd, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f00000000c0), &(0x7f0000000240)=""/41, 0x9, 0x0, 0x0, &(0x7f0000000280)}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x100010, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2200, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40047703, 0x25) timer_create(0x6, &(0x7f0000000340)={0x0, 0x7, 0x2, @thr={&(0x7f0000000640)="3a1ef16b5c78d5147d867356d8b4626a7f52bbbbb48ceec1f1b50dd6954d78e646ecfa3f74ac711b777eee7f9b29172350cc836fa2161d259db8684dc0515f557affd918235464727b33659dd96ce6f5580046e1cddce58383761cb5309fdf5a68e0cd9a2e2afc810118797afd2d593ab3ee7908de2efa3b4b56eb6dc13d7396827bf8e67ad95aab5122f2d0fa7d0df4d17b728586e49c2a2cdd93", &(0x7f0000001c40)="8ba5f5f1355aed711a30c6b23930d557f03260056f241e82c2d9e6370984f793834f7a0b59e89a0a3065896b4a2c0f579bf1d16388d8dca7458c315fbe3752ac9d21c393bc610ec297104b375fc97aa26e8f6d510cf25f66f890394ee92a87ce93d0f83dd33e929a04ca42fcf6d03c2c47f372c8d39c25ac87af6508648baafe2cf8bf4e2296d56dd816842f432d5302a990c7e42cb60f5d06e7bdabe4875490f9d872f3905f126715228b8dd52943eb1aef15fa72fc8d3fa6f0587d6d0f752988773354919c59b06b22b5746a1c1558104e23f8f3bdb04417de6b321ccea972ea0614ce8f986e981775157179b1ca7b923854655fa56200b1d723d59a4bceb877d37123f4de495953b0081965fa4e515e9091b56847874be031d6bc052994fadcaa4cd65ac25941f87b77b6df9a77668360718d3013b5a8a6456305a32f0247400547552c6af94268a313b10a9f838a57deb0744b4e9abd5a88c616f691feda6f892076e2ca45a7257b74222504297d566434c2d4b8d165992021d71c451688b8eb3d92c0ce3c19170dfaf3b38563282873fcda902eb3e1bd2a537fa93c9aaaa5dc2947fb44bdfa1117953e6f8d046344b9323d605816279971fd37a283326e49b62a33ecde590515bb6ddef1c4e72a8cf2f786104c51e59e2c136a8241b163d1f7940ff233325db53355ea219c6ad2890e56e151ff3a85b53c12cdd9c6711cdbe7b2533f77c8b7652452573b38243b9f6c2b7169d5ab263ed7337f361a2bee31b8f972820375b2476133ee367f26c153165d3b5063a1883b33c7cda14c5cb4d91ae3ed85178d8f02519685f874297f5534d6c2c8b1f0dede93cff04429f50e2f4dd0e6ce39bfb5ed213bff46cbe8ef0cd08e909a014c07810bb27da71c97accdd06f8eab6ec302ca228b6b042c9cb1798a4ec66a9c7581a5496db82a06320049eb06b83c9ff04bf10861b34923de0939122d363a5baab58a4b657e69f75b97333cf6057bf2f21af2db6df408deb07962bb7ffdcf118ae0b57bc3d26a9bc214224c40191ce6ba2afc235b5798d6435af399dcc0c60290394472df3972752c63aafb02e741636750a740c9e7f61cb28c0cf0e2244fccb76fa7bda1c066b162adb2d3c1bc0ec2851748f34b9e9b4c733b3c54b1ed3033478d90b3944fbcdff111c768e5edd3befbb8fd51a5407e6bc8eeec2d804292e8183f67262731d1c62ca153c757caa0120b448ee7ad34ea937b539fc102392d5685a0e6c4dd4028dbc6c59958a6e852f4424483f8c291171e831b0d3f5d9fa161176a472d282f9b0773ddb7c1df7b3064dfde24b8fa7758ae9089dffa605106d75c4bd3b71f574447fd4e92598810007f02cf31ff6e8b829374b2fc68ffcbbe4d588c3b13b38a391f6668659f4d3fcc0b2aa1eeaf6f7758cec4eb881f27d147d0c777544fa305943280e8371de0d70484fda250d9b14fc677d9701cdc396240578b00c2a4786b6b288bfb423623ce02a8d2cd2a159c93844edbef9fa959d20960a824435c5ecedf4daf4533d064a3206390fdc0e69eb6eb27b27b1f1e4a37ed0d43b0f4101e7e07f087a3d69e80bfba5b9f7d63b97e626af501cc0e7f39c19f4c384a1bc267e34f1581ac0b9933853ca208cc021ab214c04f9c1adcf693f74bf47c7d784ac663de74d35c36f02ce2b72ff01abcdeb321a3c587c9128d84a82c2142bd71f4a83fa04dbdc0d7afe02e8ac68d4a6c0fb765232d360a1e20ea23114c8783dbe37c15a81a4042826bf6aa39814f22afc77fb8b6d6d1e0f2b466b8dc418dcfea5b689a7d8ace0dd78ed76470381bb880b602ec28723cb9fb65531a32ae3a87edb6571a46220e0cad13e1b45533727ddc2f9881491ba2edb7c134f3df8d898749eee8072e4763fe3ce0c276b8c48aa4489fb3f6a523a8a3de0f912ba6b19cd570a020102c188a5c7722068c9b545eeaf0bef8159bba7c9394b8c3d08b72ca473b057ae513cda3b49fcf3c47832563803e6760032fc351be01bd8663b9842f998096696ff3b2606483c1e466b546ac7ace1d8b45cfa662c089b632bfcbcf6e5740e31084e7d066da91695825ba3866d1a51e2993d31ba15d81dae80d840f66740e4a4fe041e9f2cf63c5093c1754900a7b9d7594342b354d81e00b980c51ec9750d7f61bbf2ab388a1d22f961cbb1fb288e5d2c0480d14ae0737e0de3ccd83ef709f0e473426c1ce138376539a357e6b875b41daaebbd40a75acdf9f02adbfae918fb9d2a0b083078d050000ff0a2e7736b86541d5f233ec1d63b20a46803bdef4eca44729250be0c0bee695afa353edae21f0e7870589a739b08446e32655208f6929633e26b6becab886c6785d3ff45dd898ff34efbc425ef8a146a72c49a7dc9c363f50df08858e6660a7c74a81f07f1e4d5596a52e8083cdf8d274f9f6a18bed9b9335564a395f0a75ed1a6a4dd211bf467a7ae99c745aca2bf871f28281930c0279a955c8adf6b46025b08ddc688ec15e0f2fdd04cec6f7bd553194d209554100530807876c3daec3c2c7fc6ba87503f89ae047f3c516257a5cb85e7891a73025730d05cdec5de8666ba4c918f0fe270531746b31e0effda687a022b9594e0371eaf4eefd57766c57192151cf6e75104870a8729076bbf3bddc428dda19d29e52e2cba4000a7af5c823426238bc95f7d9cdba65df074514d91944ea2b41a3063c3609961236bb1b65d97956a4315027eb737fe1136e7ffeac665302e588e345e0c74798edf823216e5a0a32d092469093db62f982e6941f910758631ff1919f2e796d2002a5a289599327d3e3e75f8303364db1eadff122da015fe5b289d78ca55a471d9d3b449612af1dd572c0e9f30f323cfb13c96a7d1819aae0265dfff83052c290428790ab5e729cdd0fa126e086d0fa6bc71123706d8e913554ac8b8688e06a4722842f6e4b34941e2f1eb0d0c3f98fae624fc646f6eb7a0b3e273a4d07461b673b94a6f83abedb302d35f6c497a5152a3c7f378104636a0de81f466c2b079a5cfa3248eb89d998623f62ffa55e9af0e05208425bd304f1c651a85ca33e0df47c34f38bbb68744fc355b29de5e0eaf1dea187e29aba6786380535c10afa8c2302e9a07380ffab70827a1b404886b6ba7a840b5cd52bb5da4611c57eebd7bd006ed943a57bb541abab50ce138186b67ef6c83c5627cf3dba7cf4725189e6425d0470b59777e8535f9fda0f616f8bda490460fc34e5dcbadb677c4e5d1f325f124580a22fcb24e0642bd1a57b4d4dc6f8f010c555897dd36c937f9a8ec273bc2745a4261c985d88f9df07666bd20003c907bc7c4f5a67bc2617a0c22ab3496c4e575b5903266ca6785774cce8995d37241f35018b634e6b52ad3a8277f718a0ac9d96792efa43cb60d5b55e233e060c4f8e221058c247423811f3e69225196ca0beccb0f0a8c678cd09b74fd061d5b378255c23f032430896081ca4b60ed0d4d9ef3517f439b3dcb956a77a45097ba3feb479a594315d41384a9c4cba932b525aba85ff0024f96e171302a6bc57b89223e0751f577f95fa2bd7edf4d44fb8904d912c8357bc0048945eae459a3cfc66247172f0b443dd3c554428bd554237d27236fd831da240e7ecacf9c3def0fa9558942c14c1c1d27c43831d6244aac6bae7fa96b34eae1ca4a64f7bde1d92f9c16e11249549f69abd6dab68dff2112c482067430012610a849299d789b639e586686221c5d71c4016869eb474c418eb20c766a7c5adead6ea49614f6063fec7130c74afb9ea9b89d501b48141e4ac1f71537113517fa3f6dc60682fa4b7561fa81a030d93f6e69340830c30f29dd7a8f01ab4ba021c2bf01f39c43d13684eb3e6fe156f6d98f89c1deaa276ede6711115fff8e7c1901d0bf5a378ad9cf2192d1c33adc2c85ad328ea3568bc5f49fb65ad0e57d300dbbff4e4be80898adab43aa96eee180f1e1224878199936f4f95c820680d12e671b3ef4ebecf606905dcf8f14df6425a5949581a2dfd7177aeb6aefb0332d8d29077027d28945130e4cb6144b1b036ecda1eecd7219ac2cc6804d556c6dec6bb0d324af95c47baca4e7eeb754d816377e6ef1ce5eb0fe835a8e999f7cbe8045190fcfca441574430c111dfe310d72bfc4e2bbd427dc8fcde23d7baee58b09bcb52472482b5091bed13e5afe8790fed62ace6601df3002b595700c36d00765c11ba638c0c98f8d8198bfb0fcc104fb646656a9743cd7347b40b81ee6083958f9d68dcc3fcf29f019a2ced7e60a421093f83d8604407975e40c10c85cdda005db370204bf6f3ecb88cc01eaeded36b7ac4331fc88beddb254099aa891399a4060c49d1eedddd2813d979ca38c6d5e2b2a617cef527985a1c1bfc312f52acd2f6427e52b76f2d30a42ecf6749d1db7951305125722e54158925809c5baed6de348ea9da668135cfdf5d08646af9c738cf7affea6e9f3e84040f0c85515dac4b04811a26d60892e5d2c726a37ef28cf7fdc612637940285fba89da87ccc7dea78a7aab6bcf6392f8a71a701c9828007c46e4c2ec05912d1de80efe3f2ecf50bc1000c4b66bf2b6cb8ae1923d872bcf223c342efb7913aa4d6d9d32761cd633b71563303b55e0a51cd4aab3d394fad4334e7939f1b2c5b174e1e5464b5fd1d2b77389e37ab4c0ac363c1596e0b4a0d0e89354990461cf0224de5664680fc8928e6d96ef233e014f2bef8e8e4c90882808119f05e5efd87f5316fa4b8ae037bfbca343c423c4999f46f60f34294d62ff6e9a5015a73cecd7e98fed2934155728af7a2df0450a30afdea063daba45ca9deeed52a0cd61e81ac93e2ff2d185d307d91f402eee382c6f9fee0aec04779e54eea55dca72400406045c817dd49f822464c98e3d15e1a1d5798f9e543bcc7e78159465989743f1fe54c50f1f46735e07c73853160ce662d9e8e7378ce9b57c50b434f6f0e09c57019e0032cb2b345314d473cc302a9fbb6bee7d2eaf125a2dae5fb4648eed7dd2a9a1faf7816dc2ecab6fffa0c05d7367cecc61f5cbf534d8e1bf1920704497a7c1d78f93165a4eb5162df94db72610f9c8db3d695173351f1848d4d30186670c7496dffa0f7dad141db8a5797cc9e2e27880ed43e8c9eb8459c9fc261b2467cb30fe86b81bbaf728625d210b70619e2fd99075500cd712e8c3a273ad4cb8d1f70bd41e390e64cddf6ea3fb36238eab3f112ea2b7fa2b975ab5ba7f370e2316d1878cbaea3c1b5723714a3024af82e16e35ab322be9c7a57bfb76951bb3b04335b75e9f0f3ab0eaa25caca33d3fff1878c0deb2cd7489403b97d642373e84ac24e7ddf8f3bcdd4761c755354e1cc7e92f3cd46626d6491ec14a119a852faa6bc81a267758b67bda38d438d95fd05e510fcb50bc6b131a96c368f154c18dc6efa185b6db6035fac58594f1c0ddd6db364e734bb922d09d861ed7526128483039bb47357870e06e4968d72eab050f56670c29484093cea37782476b31de6b2e8e94565a66348e479abd3bcc52e0a1cfe413016c131d99d05ac711f6b1bb10d131a154b7e6dab91ba0a476303962d18bb92022fa62ad869eecf6e77f42011c13672a932729ed42db62561659fd435ad2bcb6177e9bef13897d57920b9b46cceb6fb957c5985c60fe1fcd2a76a38561bee1f31458c279c9807a879149fe430aa1e73341ff0ea59ef95d4715b716712677b11cc3d5e8e4f8347c9c506cb300c15dcbf0339955e3fa76cc422514a0d89b104c4041aac4cc9483f9524e689d72f7134f5064905fdbb187799d8ba1456a"}}, &(0x7f0000000700)=0x0) timer_gettime(r5, &(0x7f0000000740)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/ppp\x00', 0x10801, 0x0) setsockopt$inet_dccp_buf(r6, 0x21, 0x0, &(0x7f0000000c00)="482f9ca56458b6ced78925a851816c66407f78920566266658c53969b3c671239e07673f60f7a7611d87e0625168e105", 0x30) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x40697eebd752b7b7) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r7, 0x4, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x3ff, r0, &(0x7f00000003c0)="0a12374fa3aa0a0b2e3cd10ad044f256d0cd7b3a7e73a45b02997dd1387d79a9345c40ff306893bd31aff0364646f1ad62c1a5e24075aca872d7d3b9883f9c21bdb9d5bc1ee01308d97458d1975f0e3da31e7bad457a56676eb155621ac491551adbb5742c0a3adc9c34956924366218b71bf11190bcfa5f42ec4affb74edb4061594ba7fc94b6bbf7ee7e46c760de24c0ab9310e4f76cfbe5a0ef7d3e035d1f01cd25d990a647cdf113506746e4227225e1983ebe436fe7c8b21bafd5e4b44ebd8ce0619bd86ecf2e5f6fc71b5f84551ffbae6f8576e6460f0d74f64f2e04", 0xdf, 0x7f, 0x0, 0x1, r6}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xf, 0xffffffff, r0, &(0x7f00000004c0)="db503002e78643ed90749bb684fe850738d65400ec75428344f07659a97279fff009bd39d295b22daa794fad4de2ecfcc975a24291c1ca5d0165f471c5978199647000f02c68f4ee3437209c2b392abf26ea9195cfc4f273d5a7f81e3ac0f07394d99f6ac3a38093c2197dc30162ba16cd7cc505ca9bbace85f37a37380d7bcba82dca784953", 0x86, 0x8, 0x0, 0x0, r4}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xb, 0xc5bc8a8, r3, &(0x7f0000000c40)="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", 0x1000, 0x20, 0x0, 0x1, r4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x6bdc, r1, &(0x7f0000000580)="f48f38461b352e5adf0ed0fae0cedc2a6a1a37fdc92a4928dbe87d56642e2363d6d4cdcb6cee381dbb320705ecbf77112d5e6e16a5f652ef642585b919765453352276b89dcfa891f36ef0dd221325bacc0e9b14fd7c38e5d537e96a5683c8e12165c15e877faae04c37ab418fb0b89138af98f1b6cabe32355fcd1a910891bd5247bf83e4e9d61bfef688d164ca96e593d2ff1c5695204f454c8ba34a1ff7fb9ff36b854a8daa20d7", 0xa9, 0x8, 0x0, 0x0, r4}]) 02:40:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x6000000, 0x0, &(0x7f0000000480)}) [ 714.754677] binder: 14461:14527 ioctl 541c 20000540 returned -22 [ 714.801684] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 714.805557] binder: release 14535:14537 transaction 1653 out, still active [ 714.817049] binder: unexpected work type, 4, not freed [ 714.822403] binder: undelivered TRANSACTION_COMPLETE 02:40:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x800) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = memfd_create(&(0x7f0000000000)='em1-\'trustedwlan1:\x00', 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r2, 0x301, 0x70bd29, 0x25dfdbfe, {0xc}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd63}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x17}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}]}, 0x88}, 0x1}, 0x20000080) [ 714.860958] binder: 14535:14537 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 714.881150] binder_alloc: 14535:14537 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 714.889945] binder: 14535:14537 BC_FREE_BUFFER u0000000020ffc000 no match [ 714.956192] binder: BINDER_SET_CONTEXT_MGR already set [ 714.967148] binder: 14535:14560 ioctl 40046207 0 returned -16 [ 714.983247] binder_alloc: 14535: binder_alloc_buf, no vma [ 714.988988] binder: 14535:14537 transaction failed 29189/-3, size 24-8 line 2967 [ 715.004188] binder: 14535:14560 got transaction to invalid handle [ 715.010587] binder: 14535:14560 transaction failed 29201/-22, size 0-0 line 2852 [ 715.018289] binder: undelivered TRANSACTION_ERROR: 29189 [ 715.021920] binder: 14535:14563 BC_FREE_BUFFER u0000000020ffc000 no match [ 715.032346] binder: 14535:14563 BC_FREE_BUFFER u0000000020ffc000 no match [ 715.055311] binder: undelivered TRANSACTION_ERROR: 29201 [ 715.060961] binder: send failed reply for transaction 1656 to 14535:14537 [ 715.073851] binder: undelivered TRANSACTION_COMPLETE [ 715.079091] binder: undelivered TRANSACTION_ERROR: 29189 [ 715.084682] binder: send failed reply for transaction 1653, target dead 02:40:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) sendto$inet6(r0, &(0x7f0000000300)="040300000309c14609005375c52cf7c21975e697b02f5c566b2b2ff0dac8897c6b11876d886b6621d8d207ccf73f257e55e86eb29406136fcfffffffffbe62159403c7a6", 0x44, 0x0, &(0x7f0000000040)={0xa, 0x800, 0x5, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="2569b5c1f1539c72d07874fc795bd9fbaf71a1c6aff7931b59477231d428b977240c225def659bb1c7569960ee8d1a06424196612b15a0bc950c8b6fd5617fd6a5130ed700772eac51dda7ffb6932c66f236fd322f1df490c57ef98dd3b66046966353fdcd7b8af90cf6a2e5d743c552f6f6c042164505de01d1ed7bebc2cebd8987e038347e10574a94b52cdb395319a9950b34ebfc2a1202e621ff5bb6ba0cc00a55b30a556ca5e19c2b2ad3d19c28268a98ae7a283e6f16dd48d40b5ebff42691363074a3deefcee2cd1868c0e843d4efac0db5393e94c879c4180f1cb137550b", 0xe2}, {&(0x7f0000000000)="985156c9773dc182b1496c0c1ff4acc5c980b1ef72a85ce48624179b9684636323f91feb5846", 0x26}, {&(0x7f0000000180)="7dbd340bf74922529233d68c910a9d325f1847e069593563f50b4a8cea7d92ca3bada876415f0f1efbb0b2344cd48e80fc24dc286392eea07ad462877ed9f4f7fc31cded93c0fee626ec602b92a177f8de0f9972b0138a342efde82994f76080", 0x60}], 0x3) 02:40:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000d00)={{0x2, 0x0, @loopback=0x7f000001}, {0x307, @random="90da5bc97747"}, 0x8000000000008, {0x2, 0x4e20, @multicast2=0xe0000002}, 'syzkaller0\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'syzkaller0\x00'}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000300)=""/242, 0xf2}], 0x2) 02:40:38 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x4c00}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:38 executing program 1: r0 = socket$inet(0x10, 0x80000000000003, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000001031f001cfffd946fa283005b580a000900030009000000000015000404ff7e", 0x24}], 0x1}, 0x0) 02:40:38 executing program 4: unshare(0x42000400) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x105800, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000080)}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') 02:40:38 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x4000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r1, &(0x7f00000000c0)=[{{r2, r3/1000+30000}, 0x9, 0xfff, 0x1d}], 0x10) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000100)=0x6, 0xfffffffffffffdc1) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 02:40:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x2, 0x0, &(0x7f0000000480)}) [ 715.113975] Unknown ioctl 1077456506 [ 715.132428] Unknown ioctl 1077456506 [ 715.181822] binder: release 14569:14571 transaction 1660 out, still active [ 715.182101] IPVS: ftp: loaded support on port[0] = 21 [ 715.188963] binder: unexpected work type, 4, not freed [ 715.188975] binder: undelivered TRANSACTION_COMPLETE 02:40:38 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x101a00) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000100)=""/231) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f59000), 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00005c8000)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65c856a45d61154adc2b2a976fbffffffffffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x81, &(0x7f0000e66000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) writev(r0, &(0x7f000042a000)=[{&(0x7f00001e3f5a)="2db4ff107e00a32a96ccd7785697535fe7e2d1cdf701f5079cde041c224ff8b177c81383265194f55b510ce5107c9164cfda3f99716d35b53be37a7b2a301f9d41650662b66dd4ffca8cf7641b6b5d4d65b9eb195c4666a99f69f89106ee3fc6c6d98f0afc8b4d26aacc19373135822e00f7982a4346d3b304cac13828ca5bede4cf", 0x82}], 0x1) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000db1c822aac5303a1ea1ee4b6e618ab6c32b69d2dfa57254c00cf8ef245ca30c7e888a642cae8924c3079cd7e44b4f8baadbfc06e049979d63fab6ce7dc2e93b1bb9e2bbecb9e4045fad326c87ec8b9c1"], 0x76) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)='^', 0x1}], 0x1) sendto$inet(r0, &(0x7f0000000000)='Q', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 02:40:38 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x7400000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 715.262213] binder: 14569:14571 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 715.299797] binder_alloc: 14569:14571 FREE_BUFFER u0000000020ffc000 user freed buffer twice 02:40:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xd90}]}) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400000, 0x0) [ 715.308469] binder: 14569:14571 BC_FREE_BUFFER u0000000020ffc000 no match [ 715.349958] binder: BINDER_SET_CONTEXT_MGR already set 02:40:39 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x4c00000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:39 executing program 1: mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2832, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000e1ff0000009ad874000000000000950000000010a2f4ad679287d964e4ed873e04534c05a4d2aa1e20adbcbc9b3f412b0adc09c3372de216048e8a6422ca4debea58983c449427bdbe73e479a4ffb5f8b063c864c8187fb69e23d5c1b060646fe594a991b8133c157c143d192b2b1f7014186df088941cb454eb6b"], &(0x7f0000002ff6)="73797a6b616c6c657202", 0x0, 0xe7, &(0x7f000000df19)=""/231}, 0x48) flock(r1, 0xb) [ 715.378828] binder_alloc: 14569: binder_alloc_buf, no vma [ 715.384505] binder: 14569:14571 transaction failed 29189/-3, size 24-8 line 2967 [ 715.395656] IPVS: ftp: loaded support on port[0] = 21 [ 715.396602] binder: 14569:14592 ioctl 40046207 0 returned -16 [ 715.484436] binder: undelivered TRANSACTION_ERROR: 29189 [ 715.492738] binder: 14569:14594 got transaction to invalid handle [ 715.499179] binder: 14569:14594 transaction failed 29201/-22, size 0-0 line 2852 [ 715.502178] binder: 14569:14610 BC_FREE_BUFFER u0000000020ffc000 no match [ 715.557723] binder: 14569:14610 BC_FREE_BUFFER u0000000020ffc000 no match [ 715.615374] binder: undelivered TRANSACTION_ERROR: 29201 [ 715.622442] binder: send failed reply for transaction 1663 to 14569:14571 [ 715.638326] binder: undelivered TRANSACTION_COMPLETE [ 715.643592] binder: undelivered TRANSACTION_ERROR: 29189 [ 715.649133] binder: send failed reply for transaction 1660, target dead 02:40:39 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300090a0000000000000000008000030006000000000002000000e0e72d0100000000000000000200010000000000000000681b000000030005000000000002000000e00000010000000000000000"], 0x50}, 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x12, 0x4) fcntl$getflags(r0, 0x0) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000003300)=@generic, 0x80, &(0x7f0000003500), 0x0, &(0x7f0000003540)=""/122, 0x7a}}], 0x1, 0x0, &(0x7f0000003780)={0x77359400}) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xffff, 0x20000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x7fffffff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r2, 0x100000001, 0x8, 0xf45, 0x1, 0xfffffffffffffff7}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000200)={'team_slave_1\x00'}) 02:40:39 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='6', 0x1}], 0x1, 0x0) 02:40:39 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000040)={0x5, 0x1, 0x101, 0x4, 0x100000000}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f00000002c0)) timer_create(0x7, &(0x7f0000000240)={0x0, 0x2c, 0x6, @thr={&(0x7f0000000080)="6c53ca8440fe3899db81045b21036ae7bdaa6cb508e8f6ab18538861b36c653274f82515c271ad4c975be3a88e05bcc7ec8fca80b38d200afc47acbdfded5dfe5ba0cf33d2f3a91d4938fecd970a885335608d69ef4acc4e0beea73f3630e360705889021366b4428647a2cb0cf1a40801b4919f161144eb7a0b89de769aa1b215391ad445824d03a036b99ec210f9785850135a0cc66d17806c38255489643f47c102ede758cbd914f35648", &(0x7f0000000140)="3ac35e31a3079ef053b70a49e352da392cc2184271062834a870bdee5eb5061cd0c15f1d64c8d3f18edd9fe577ac2697c77c8afe3b538f26f49ed0ef421bf4c32c23621697e015a17f5b5769246d9ebc98767191900a3035ab13b315f721bc8738efa579496c691742feecd177c59d374970c6bf7b5931f3abc568a2da699ae7ea758abf8cda419eaa016540f1efdd7a01e7d9ee76ec7f0f43da17bd5201700842caa43d3dfa5ea6c5454670c3967c1133c6c24c3dd63efba98b43327fdd70abd3c1503f3b561a7b279c855a364fd8c12ae29cc92e55b7252ef523cf167d040eebf77b8c77dc56f7ccb910bf2a65648c"}}, &(0x7f0000000280)) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 02:40:39 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0xee0e000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6c, &(0x7f0000018000)={0x0, @in6={{0xa, 0x4e22, 0x9, @mcast2={0xff, 0x2, [], 0x1}}}}, &(0x7f0000000000)=0x5d1) 02:40:39 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x100}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r1, 0x7b62}, &(0x7f0000000280)=0x8) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000140), 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) r4 = open(&(0x7f0000000080)='./file0\x00', 0xc981, 0x80) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000100)={0x3, 0xfff}) write$tun(r3, &(0x7f00000004c0)={@void, @val={0x0, 0x0, 0x2}, @ipv6={0x0, 0x6, "af04ca", 0x108, 0x6, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0xfdef) 02:40:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x7, 0x0, &(0x7f0000000480)}) 02:40:39 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x800}, &(0x7f00000002c0)=0x8) r3 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000040)={r2, @in6={{0xa, 0x4e22, 0x101, @empty, 0x4}}, [0x1, 0x2, 0x7ff, 0x8, 0x951, 0x3, 0xffff, 0x0, 0x2, 0x4, 0x1ff, 0x401, 0x7fffffff, 0x8001, 0xae79]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000400)={r2, 0x4}, &(0x7f0000000380)=0x19913818) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000003c0)={0x5, 0x6, 0x2080}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) r5 = getgid() fchownat(r3, &(0x7f0000000200)='./file0\x00', r4, r5, 0x1000) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000340)={0x0, @loopback=0x7f000001, 0x4e22, 0x1, 'lblcr\x00', 0x2, 0xe0b, 0x73}, 0x2c) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000300)=0x7fffffff, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000540), &(0x7f0000000580)=0x4) [ 715.887328] binder: release 14621:14622 transaction 1667 out, still active [ 715.894587] binder: unexpected work type, 4, not freed [ 715.899948] binder: undelivered TRANSACTION_COMPLETE 02:40:39 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0xf0ffffff00000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:39 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x204000, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e21}], 0x2c) [ 715.959955] QAT: Invalid ioctl [ 715.976801] QAT: Invalid ioctl [ 715.982090] binder: 14621:14622 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer 02:40:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000200)="e3eaa907c517f0d917ea1b86c5d90aff09b0a20a181283c11498d96a9ba72945e311699da2b66a2c5e71408107d871801bf7cc03a6738769a0a17837f9d7b76c6db4eb4efd380b4b90bac9db043f528fbae4563332db200c6033cfacd2fba1f826fa0707bd01371a62947904bcedb51261af4a13c7275e53d95d2ef7deac70f74e3ae9c5853296835c272959bd49916cfd1ba20a2ef02b7ed361fe1dbb400953707a0018982305262d9dd27b639406ff879c5b681daefdee581bc6732a0ddf4417340b4fbaf4d8da0a3037a959aa1ab190572a111e6786140ac824175367809463e07d9a3e75ce2f42", 0xe9) r1 = memfd_create(&(0x7f00000000c0)='fd\x00', 0x0) write(r1, &(0x7f0000000180)="6963e6424304006da3a74e3deec6fc5bb9650b5de56946c568f95d22c77190ba406d59a5958def156c9c8a2ac4677afffffffc800000000000200000f8bf54da32", 0xffffffffffffff99) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)=""/57, 0xc722893) [ 716.020181] binder_alloc: 14621:14622 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 716.028865] binder: 14621:14622 BC_FREE_BUFFER u0000000020ffc000 no match [ 716.114742] QAT: Invalid ioctl 02:40:39 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x32) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, &(0x7f0000000000), 0x7ffffffe) 02:40:39 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x9, 0x2000) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000140)={r3, r0, 0x4}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet(0x2, 0x2, 0x7f, &(0x7f0000000040)) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)={0x11, 0x0, [{0x0, 0x2, 0x1000000, 0x0, @sint}]}) 02:40:39 executing program 7: chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={r1, 0x0, 0x1, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='v7\x00', 0x200000, &(0x7f0000000380)="019b65c53eaba0f2c8b9bb305388de46039fe0baff7c7e2656fef1a5dd71108c0f2f175ed364f2c21173cdd984ef7b980fa68260aa45914c3e6b6e170477a6a2700d539a55ce6cc63bac8cd04f3cbeb006cb221d1aa45c736f30a0eb6398449cf5616a8f54dc9654f81546089ab82b801c123c18852def48b36e3d32c39e5b88eaf0a5b4d0c8fd065ec456338c991bdc122ef60202a6975612e7985013915144c077f895c415a2b5fa75e06c64ed58934c3a12b5f95851eb9b8972f321e84cd6a05ac8bbcf8704d2c3d666") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x40) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x2ac) bind$rds(r0, &(0x7f000001cff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000480)='team\x00') sendmsg$rds(r0, &(0x7f000000dfc8)={&(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x31a00dfb}, 0x10, &(0x7f00000003c0), 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000000), &(0x7f0000000040)}}], 0x58}, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000003480)=[{{&(0x7f0000000680)=@hci={0x0, 0x0}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/93, 0x5d}, {&(0x7f0000000780)=""/241, 0xf1}, {&(0x7f0000000880)=""/34, 0x22}, {&(0x7f00000008c0)=""/51, 0x33}], 0x4, &(0x7f0000000940)=""/61, 0x3d, 0x8}, 0x4}, {{&(0x7f0000000980)=@l2, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000a00)=""/97, 0x61}, {&(0x7f0000000a80)=""/131, 0x83}, {&(0x7f0000000b40)=""/247, 0xf7}, {&(0x7f0000000c40)=""/184, 0xb8}, {&(0x7f0000000d00)=""/252, 0xfc}, {&(0x7f0000000e00)=""/176, 0xb0}], 0x6, &(0x7f0000000f00)=""/67, 0x43, 0xd62}, 0x4bb0}, {{&(0x7f0000000f80)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000001080)=[{&(0x7f0000001000)=""/89, 0x59}], 0x1, &(0x7f00000010c0)=""/4096, 0x1000, 0x4}, 0x4}, {{&(0x7f00000020c0)=@ipx, 0x80, &(0x7f0000002200)=[{&(0x7f0000002140)=""/175, 0xaf}], 0x1, &(0x7f0000002240)=""/76, 0x4c, 0x1}, 0x6}, {{&(0x7f00000022c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002340)=""/215, 0xd7}], 0x1, &(0x7f0000002480)=""/4096, 0x1000, 0x7}, 0x8a86}], 0x5, 0x2000, &(0x7f0000003540)={0x0, 0x989680}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003580)={'team0\x00', r3}) 02:40:39 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x81000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 716.139871] QAT: Invalid ioctl [ 716.146766] binder: BINDER_SET_CONTEXT_MGR already set [ 716.169731] binder_alloc: 14621: binder_alloc_buf, no vma [ 716.175533] binder: 14621:14622 transaction failed 29189/-3, size 24-8 line 2967 02:40:39 executing program 5: r0 = perf_event_open(&(0x7f0000cccf88)={0x2, 0x78, 0xe12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) r2 = getpid() ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x100, 0x0, 0x6, 0x1ff, 0x0, 0x10000, 0x3500b, 0x200000000008, 0x3, 0x9, 0x2, 0xa, 0x7, 0x40, 0xa9, 0x0, 0x42, 0x400, 0x81, 0x0, 0x3f, 0xffffffffffff494b, 0x0, 0x0, 0x200, 0x8, 0x16b, 0x800, 0x100000, 0x1ff, 0x46, 0x100, 0x200, 0x0, 0x401f, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x29620, 0xfffffffffffff60c, 0x5, 0x6, 0x4, 0x1, 0x7}, r2, 0x1, r1, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) close(r0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='gfs2\x00', 0x800400, &(0x7f0000000240)="2ae58a34f307b9d9a01b35be38d783586999adc7711c7c339601809e437cbeff0b32e419718a80c9f334603f7ab1c7e8bc2308430599bc787b3c6a11b6311de0eaa5a1e99e24cbd9b2ec972e5a52faff2913405cc857e75c2ecafb1104058d8843") close(r1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000900)={0xffffffffffffff9c}) sendmsg$kcm(r3, &(0x7f0000009f00)={&(0x7f0000009b80)=@ll={0x11, 0x18, 0x0, 0x1, 0xffe0000000000000, 0x6, @random="434de4d182c8"}, 0x80, &(0x7f0000009c00), 0x0, &(0x7f0000009c40)=ANY=[], 0x0, 0x4000002}, 0x4000000) socketpair(0xfffffffffffffffe, 0x3, 0x20000000000007ab, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000540)={r3}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000002c0)={r3}) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) sendmsg(r7, &(0x7f0000000140)={&(0x7f00000002c0)=@sco={0x1f, {0x4, 0x6a3a, 0x99, 0xffffffffffffcd58, 0xff, 0xffffffffffffffaf}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="ebf2716387a78e98475956706ceecf4f691f0f64dfb2736aae935b7f8c8b4824eb0b99059de5958ea0fb81ea850657c27b1293c19343b34143d83d1c2ae986fab57bbc85c6b9f4fb2abb4d7cd4503b6455489b7ccbdf8e1be0183f09f69903b360c991de52fccfa2d9af45809b0eaa0ac1e9e2729078c6641c6ed2a4912937863e68512e66c8d19ae995af630d97", 0x8e}], 0x1, &(0x7f00000004c0), 0x0, 0x4000}, 0x4884) recvmsg(r4, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYRES32=0x0], 0x1, &(0x7f0000006d00)=[{&(0x7f0000000a40)=""/181, 0xb5}], 0x1, &(0x7f0000006d40)=""/65, 0x41}, 0x0) sendmsg(r8, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='v', 0x1}], 0x1, &(0x7f0000000440)=ANY=[]}, 0x0) recvmsg(r7, &(0x7f0000001140)={&(0x7f0000000f80)=@can={0x0, 0x0}, 0x80, &(0x7f0000001100), 0x0, 0x0, 0x0, 0x6}, 0x40) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x7, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="00000500000000000000fcffffffbf298000f8ffffff0000000000000000850000001bf2ff00dbf50e6200000000009500ddffffbf7e54000000000000000000000000000000"], &(0x7f0000001840)='syzkaller\x00', 0x3d, 0x42, &(0x7f0000001880)=""/66, 0x41000, 0x0, [], r10}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x2000000000000119, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x1b}, @call={0x85, 0x0, 0x0, 0x12}, @generic={0xffff, 0x6, 0xffffffff7fffffff, 0x257c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x8001, 0xb, 0x1, 0x0, 0xfffffffe, 0x8}, @ldst={0x0, 0x2, 0x6, 0x7, 0xf, 0xffffffff, 0xfffffffffffffffc}, @ldst={0x3, 0x0, 0x3, 0xf, 0x7, 0x5e, 0xffffffffffffffff}, @map={0x18, 0xa, 0x1, 0x0, r6}], {0x95}}, &(0x7f0000000640)='syzkaller\x00', 0x1, 0xd8, &(0x7f0000000940)=""/216, 0x40f00, 0x1, [], r10}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x2, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000d80)='GPL\x00', 0x0, 0x67, &(0x7f00000001c0)=""/103, 0x0, 0x0, [], r9}, 0x48) [ 716.247229] binder: 14621:14663 got transaction to invalid handle [ 716.253640] binder: 14621:14663 transaction failed 29201/-22, size 0-0 line 2852 02:40:40 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0xfffffffffffffff9, 0xfffffffffffffffe, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x102000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 716.337609] binder: 14621:14686 BC_FREE_BUFFER u0000000020ffc000 no match [ 716.337620] binder: 14621:14662 ioctl 40046207 0 returned -16 [ 716.394122] binder: 14621:14686 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20400, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@loopback=0x7f000001, 0x4e20, 0x4, 0x4e24, 0x1000, 0x2, 0x80, 0x20, 0x33, 0x0, r2}, {0x5908, 0x9, 0x100000001, 0x10000, 0xda80, 0x8, 0x1ff, 0x2}, {0x2, 0x1f, 0x4, 0x4}, 0x4, 0x6e6bbb, 0x0, 0x1, 0x1, 0x3}, {{@in=@multicast2=0xe0000002, 0x4d3, 0x2b}, 0xa, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x3500, 0x0, 0x3, 0xfffffffffffffff9, 0x400, 0x9, 0x1}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001e000106000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="c100000000000000b4572b398ce76abe4b226432a889fae71e8dd791d929c65f34080c587c645e"], 0x20}, 0x1}, 0x0) fcntl$getflags(r0, 0x40b) socket$rds(0x15, 0x5, 0x0) 02:40:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x4c00000000000000, 0x0, &(0x7f0000000480)}) 02:40:40 executing program 6: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xfffffffffffffd85) read$eventfd(r0, &(0x7f0000000140), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa}, 0x2c) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0xffffffffffffff9c, 0x6, 0x1, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x454, 0x244, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, [0xffffffff, 0xff, 0x0, 0xffffff00], [0xffffffff, 0xff0000ff], 'veth0_to_team\x00', 'bond_slave_1\x00', {}, {}, 0x2c, 0x1000, 0x1, 0x7a}, 0x0, 0x224, 0x244, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0x100000000, 0x7, 0x2, 0x9, 0x2, 0x5, [@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @ipv4={[], [0xff, 0xff]}, @dev={0xfe, 0x80, [], 0x10}, @empty, @local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, @mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}, @dev={0xfe, 0x80, [], 0x18}], 0x4}}, @inet=@rpfilter={0x24, 'rpfilter\x00', 0x0, {0x4}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @mcast1={0xff, 0x1, [], 0x1}, [0xff000000, 0xada43278fcfe023f, 0xffffffff, 0xffffffff], [0xff000000, 0xff, 0x0, 0xffffff00], 'veth1_to_bridge\x00', 'veth1\x00', {0xff}, {}, 0x0, 0x0, 0x2, 0x30}, 0x0, 0x11c, 0x144, 0x0, {}, [@inet=@rpfilter={0x24, 'rpfilter\x00'}, @common=@frag={0x30, 'frag\x00', 0x0, {0x1, 0x7f, 0x8000, 0x28, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xb9, 0x3, 0x3}}}], {{[], 0x0, 0xa8, 0xcc}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) writev(r0, &(0x7f0000002500)=[{&(0x7f0000002440)="759a78efe6fae04a", 0x8}], 0x1) getsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 716.499582] binder: undelivered TRANSACTION_ERROR: 29201 [ 716.505530] binder: send failed reply for transaction 1670 to 14621:14622 [ 716.534922] xprt_adjust_timeout: rq_timeout = 0! [ 716.553236] binder: undelivered TRANSACTION_COMPLETE [ 716.558475] binder: undelivered TRANSACTION_ERROR: 29189 [ 716.564050] binder: send failed reply for transaction 1667, target dead [ 716.606856] binder: release 14701:14702 transaction 1674 out, still active [ 716.614123] binder: unexpected work type, 4, not freed [ 716.619486] binder: undelivered TRANSACTION_COMPLETE [ 716.640848] xprt_adjust_timeout: rq_timeout = 0! 02:40:40 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x200000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961000)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="0b963ea9ffedfb16dd615e5b9dc9272fa53d237fd4ddd8f59724acddbb624d7ec4c8569a8fed32381bdfe03046201e08666052a5b2c6468c3321d63b", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f000095cffe)={r1}, &(0x7f000095c000)=0x8) r2 = gettid() getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000080)=""/53, &(0x7f00000000c0)=0x35) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) [ 716.652631] binder: undelivered TRANSACTION_ERROR: 29189 [ 716.702439] binder: 14701:14702 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 716.738410] binder_alloc: 14701:14702 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 716.747117] binder: 14701:14702 BC_FREE_BUFFER u0000000020ffc000 no match [ 716.796641] binder: BINDER_SET_CONTEXT_MGR already set [ 716.818625] binder: 14701:14710 ioctl 40046207 0 returned -16 [ 716.839332] binder_alloc: 14701: binder_alloc_buf, no vma [ 716.845093] binder: 14701:14702 transaction failed 29189/-3, size 24-8 line 2967 [ 716.880662] binder: 14701:14710 got transaction to invalid handle [ 716.887079] binder: 14701:14710 transaction failed 29201/-22, size 0-0 line 2852 [ 716.925245] binder: 14701:14714 BC_FREE_BUFFER u0000000020ffc000 no match [ 716.945809] binder: 14701:14714 BC_FREE_BUFFER u0000000020ffc000 no match [ 716.999831] validate_nla: 5 callbacks suppressed [ 716.999841] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 717.001924] binder: undelivered TRANSACTION_ERROR: 29201 [ 717.018470] binder: send failed reply for transaction 1677 to 14701:14702 [ 717.035979] binder: undelivered TRANSACTION_COMPLETE [ 717.041238] binder: undelivered TRANSACTION_ERROR: 29189 02:40:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x44002, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x2000) ioctl$sock_netdev_private(r1, 0x89fa, &(0x7f0000000100)="e4315ba1155c10e61e1126d491cff248cd71845b6b80cd3a60ada1db7cee778afc64348922e12e9bdd0b4deac480") r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)="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", 0x1000}], 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0x20, 0x5}) set_tid_address(&(0x7f0000000080)) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000000)) 02:40:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) sendto$inet(r0, &(0x7f0000e76000), 0x0, 0x0, &(0x7f0000bc8ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = epoll_create1(0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000280)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4000, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) timerfd_gettime(r3, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) 02:40:40 executing program 3: timerfd_create(0x4, 0x4) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x840, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x1, @tick, 0x745, {0x1ff, 0x3ff}, 0x0, 0x0, 0x1b10}) 02:40:40 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x6800}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x68000000, 0x0, &(0x7f0000000480)}) 02:40:40 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000040)) ioctl$TCSBRKP(r0, 0x5425, 0x0) [ 717.047088] binder: send failed reply for transaction 1674, target dead [ 717.063443] binder: undelivered TRANSACTION_ERROR: 29189 02:40:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x800000000000000, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x1, 0x3f, 0x7ff, 0x0, 0x0, r1, 0x7}, 0x2c) r2 = memfd_create(&(0x7f0000000100)='--\x00', 0x1) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000280)={0x3, 0x7}) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xfffffffffffffffe, 0x204000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f00000001c0)="06ccf574a0b8952ad2d2f40bf8880e833e970b4ca257f61b820598dfc3ebc830df4811d93a0424cd34f85f47963f4b0a72c57c1cbea8f927d526f522de918dcd3b6003ad708bdb1c01231065a4037a0392dc767957d54ba6d51d9c3d597b99192595353aa2ac10fd050aba2264d45b45b24ee0fbdaccffbd9daefe49847a4ed23aa2ae56e2c02b4b7e78fc45339b5f7b44428597a74190d4c2c442a4599628a3bc0c46b116731831f7d7a897c73413caee9389beaa35514c44d0037b"}, 0x10) [ 717.100748] binder: release 14720:14721 transaction 1681 out, still active [ 717.107933] binder: unexpected work type, 4, not freed [ 717.113296] binder: undelivered TRANSACTION_COMPLETE [ 717.124610] netlink: 'syz-executor0': attribute type 16 has an invalid length. 02:40:40 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x800) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x1, 0x4, 0xfffffffffffffffb, 0xff, 0x0, 0x9, 0x2000, 0x3, 0x49f1, 0x3, 0x80000001, 0x3f3, 0x4, 0x3, 0x3ff, 0xbe6, 0xfffffffffffffffb, 0x2, 0x9, 0x9, 0x0, 0x4, 0x8, 0x100000001, 0x7, 0x2, 0x0, 0x3, 0xec7e, 0x3, 0xffffffffffffffd6, 0xf682, 0x0, 0x8000, 0x9, 0xfffffffffffffff7, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8, 0x6, 0x6, 0x6, 0x3, 0x3, 0x4}, r2, 0xd, r0, 0x8) clone(0xa20f, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000200)) 02:40:40 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x5}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 717.205510] binder: 14720:14721 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 717.286145] binder_alloc: 14720:14721 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 717.295005] binder: 14720:14721 BC_FREE_BUFFER u0000000020ffc000 no match [ 717.325872] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 717.347584] binder: BINDER_SET_CONTEXT_MGR already set 02:40:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"73797a5f74756e0000000f00", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1f00001c0031030000e300000000000a00000000cd9553a99ef008826e", @ANYRES32=r1, @ANYBLOB="0000000014000100ff020000000000000000000000000001"], 0x30}, 0x1}, 0x0) 02:40:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0100b29f8edeccec4feef4f400007c"], &(0x7f0000000200)=0x9) 02:40:41 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x6c}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 717.376729] binder_alloc: 14720: binder_alloc_buf, no vma [ 717.382295] binder: 14720:14748 ioctl 40046207 0 returned -16 [ 717.382423] binder: 14720:14721 transaction failed 29189/-3, size 24-8 line 2967 [ 717.388931] binder: 14720:14751 got transaction to invalid handle [ 717.402304] binder: 14720:14751 transaction failed 29201/-22, size 0-0 line 2852 [ 717.416722] binder: 14720:14748 BC_FREE_BUFFER u0000000020ffc000 no match [ 717.467577] binder: undelivered TRANSACTION_ERROR: 29189 02:40:41 executing program 1: r0 = socket$inet6(0xa, 0x807, 0x1000000000000200) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)=""/149, &(0x7f0000000100)=0x95) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x5}, 0x1c) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001700)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x3, 0x1, &(0x7f00000001c0)=""/78, &(0x7f0000000240)=""/165, &(0x7f0000000300)=""/222}) write$vnet(r1, &(0x7f0000001500)={0x1, {&(0x7f0000000440)=""/4096, 0x1000, &(0x7f0000001440)=""/168, 0x3, 0x6}}, 0x68) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) 02:40:41 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200000, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200702, 0x0) sendmmsg(r0, &(0x7f000000a500)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x2, 0x2, 0x1, {0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5e79}}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000140)="887b4b82f76a3b4574c71b74127453ea9b0e618b4896fa0782b8b3aba88f0f7508c3aa1cc827e12093ef062722333993fdb761653162bc2d98b94f6612b517cfa0e942888f110cc387361be34b47bd36257ba3e752a2c146ae69a96a7355a1d93dab48794a0888ec367667500a9a5d3da66f1b168699f835af6129424b4c440cc3240fa2de8ce1d7d9893bfeadf07864e43c432e5da142b39d6ed34da0b775b0a0544777c1616b8dad25d46f60f5f6a22020bf80d5cd085938dd82d6383daf2fe3182abc6bcd55027b0ff988cb745a6c8c0261cc227d02f51b3a49b8e5b9", 0xde}, {&(0x7f0000000240)="cd1843dbe799d68d67defd59d1751b86aa5849d102b08eed9dd1a349da28ee751c1468f4a9404aec259789712e464617243bc92b7ed2363b0211751abd97efa1bdd5b010e12a5726520030aff1db2b6ff04c052fb36f6972f555b349cc7cc96137bac4a71647d6d45e9091f7fed9ea2b9a8e7dcc463a475e0fcb071f5f2170c7fa8050801453cc2829701d9975d9270a9cbb865edbd6d40403d01e5e0c54551d659b4634db0a35f54a", 0xa9}, {&(0x7f0000000300)="3b47e48afa48f2582072f020e491c99d8aa7f5f2f959afad24c2b9f3b0f9dfa30aac9267689dcedb2f630204ca9760624604e52578885bcbc3400dbe5c885fab1729e1db9f3766", 0x47}, {&(0x7f0000000380)="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", 0x1000}], 0x4, &(0x7f00000013c0)=[{0x20, 0x3a, 0xfff, "9848b23f2a6b9e43491b538ea2db5d5d1c71"}, {0x108, 0x116, 0x5, "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"}, {0x100c, 0x6, 0x9ab, "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"}], 0x1134, 0x8001}, 0x2}, {{&(0x7f0000002500)=@ipx={0x4, 0x5, 0x1ff, "69eedaab2ac9", 0x20}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000002580)="989e17e7e14e9b63cf064375f555fa12b2db742c6eeaa92d89c4ca0929d565543a6027fe96893175ea4eaf6458ec6c35aec49a032aca4d432b2aa291a3a38ba297ff27837341a8715684946cb07493cac5e24161f3990d47707e59e109b070e1fe8a64f8fe18cefe649011d7ad5351f781afcb69d598ea373b5bf9a34aec202e120bd8c3c5ea4f2d8fd46d5358b573960e7807", 0x93}, {&(0x7f0000002640)="a5b72f69113904a53232729373e7459823c822f7a81ad204d1491dc4bfb5765d3f9bba281db92e380adcaa0f9c32e4267446e3c403f585ee97cdbac6fbe82ecab816bc5cfab1b9cb8e1da9484c593feaf824d58ef962e735fecbf4c279150d2c98ec9d36cef18ab98512914c571cdeeb923f3744e0877aa5949c9b37bb361b84ce2067", 0x83}, {&(0x7f0000002700)="acd77e546fb84ff8a185a4aab0912e39e96aab2d66bf6f5ac1577fe55dc8e98f38173a3d901f8a694a64351ab9e4552094152f0e3cfe32d1506f63f66be688e4426ef251a054b7ced1563c772d059b0471c75b23e4aa59c61ddb84b416f88feef1eb1a34c39360775cbae94d9f624794819ee59df498c7a39d813d62522bcea7b4ab479187abd339620270a49fa11e0fbd985684bb0225017030f164d45f402d4c7db30c866cc3b6e319ae8da2b70106ec66e5ece5ac992fc109f52c56baf15f7cc5fcaed9dd8caeb662e557473351d3f7bf02664c8be16d9b5a47d2350aeb", 0xdf}, {&(0x7f0000002800)="e6152d717f7f23535caccceb701573062e30e941d9c7ef4cd0755e91b5bafccb9c2b5b9554a3a42267cfd87a91337bbb80ffa19bd3d86112877ac4a2313d760111e69c5c2e1d49878a9132248228ae7fc7e10cef81897943f68eff2dbf4a734f15d42aa1d49d4ab831befe593aeccb5938c3ec6452302cfa3f40e5a5b7ca660d9a9dc1771e0a81c5b365b62901473f524ad7876a7257fb7a86843690cb8dea26244270408c97ee2610c3e5d4a9af6313641fdb5c4c8e159b559b", 0xba}, {&(0x7f00000028c0)="101f78f0c749c665b98d8afa6e48c06338f05105fad10403071c8f1fb8b298c5de13faa93653051bf7b772f387f4455ae58f5fb3d47a6f44e85694a23a089d87b1458bd79cf235d8dfffc9b2337e10f42cb306ffbfb85e4a363f359ab09c4787138dcea13e380d935176fad37244bb4155b8af82ba34f9165c4f8bd2ed1fe694d68ce534860e1c4ae32032a0fc809f9a302aa05e3710b2901ea73356b3227ed05a501a38384df49d3bd9a6582f88ce3671a0d2edf5aa71c6d88fd4663cffdf66b21a99a3d88d33a4b34bd1b19fe9f076d3f1b4d0b9c80380e679cbd84498c27e13917f568d8767a6f5dba160", 0xec}, {&(0x7f00000029c0)="3d1be5eb21ff56327f6f735de75e8a062fcc5c8df2d105b6c030141a5f6bd7cdc9838714903f4cea2e70bf80aa657f225fb8f226e23d1f2e9597647e7949090551fa0c7394988fd3489de29a54f430ea4770288c430bfa66011b1822b89612dfa83ea5c003242d21ad38fde170f9a3985270355a0084b2cc3fcb0eed234e483e3fff881a7a35862b1db92d803803c99f9a7633b434747e680ed6a20b06eeb74467", 0xa1}, {&(0x7f0000002a80)="aa84a537ec5ba82c50bb8de8ceb5a9855de586736482311042fb9002800deee5cd564969228fce642b2676cd8d1a83f06e6b6f19513fc6697cb23c36147a70992dd519a27928067d155e592b638c22b449f2c5b75525319e2f00566a77bd45a7c11046389976e8306e1f98efafcefd66593b37d480d4530cbd16191c886069b928e72b95f11a136040159fabbc72804eed222bdd0d614d7b40455dcb354c61ff31792c14a69907ef60f900ce40951c87f799b9daff13d435d1c165b816bef0208ba0a82bd6c24ea92dbd0d3290cbb95e1db1ca6df48667c587dcde4263fb8a60865ffa55b7cf", 0xe6}, {&(0x7f0000002b80)="9d0ddb00e1031d1382c3b0888c461471a073bff70efa8006936809efeeadf72c37ad40f755cb185f718120976dc53ba8f602ef0cf9c3e25c8c5ca53fd2afb87145dcab2c4a07217cb36f958176b5e0455efe98ba88cf6f3ba0f126a412679c15f54f9f5c1ca951fd7f625c28bec40b26b0b55ad9cbfebc4d54a729d669e644d9d186b478e8471896c2fa49942d36b2c2d6c74e21bde6409d394731e14646ade3e1245218fbef128452cbc0b8c896cd5f32f1b4889c33457202bedbf4e18e47c647198af68eb460f27f8806b37b4d8ee390c1aaa10b5c7b08a9f6efec596f86321c2f4b6be7e31a7e", 0xe8}, {&(0x7f0000002c80)="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", 0x1000}, {&(0x7f0000003c80)="bab7686519720a0d3c1e232c859c8372409f8397904c3f16e098e2500925454416459e6c406d666453148d09a8d5007131f648d75d17ddfed1c488b7c87c4ae0057a5fc75287f86b5e517ef6ebee1b978bdfdebebb194034543bc2903faf1107def041650363e6a22e9bddaae97d8ec81466f2a5841b624d7a24bd38d1dfdc1c93437139679cb980e706a91d99869c5439699401e91b0b2f18671b99a6ebda3dbd9ddf1301251b514cb22c274d2e2f725ea316b1f55ca8180917b34fbefb77ac4b85e8647f63a5b9a15a96cf77d06186993ee26267e0ebe0d0a9f38e9d77470cf126765de5f45203bbaca7b590668c", 0xef}], 0xa, &(0x7f0000003e00)=[{0xd8, 0x117, 0x1, "d1138c0cb5f32ab13e977531bf6711bc42640adc98d90f89119482d83aa58e41febb68420ca8012f517fec3dd4f11ae64716e4d34a899fffa8e63513c66b28d89ac75d2fb82bd9f27d965efeca3d8eac0527789ceb0b5ba60c9a9174035406589c79e322c33ae0602ef420d4670ff695eb54a3d41e6fed41cebc93c81c9f6b81e4a08aeceb226ac368e93ae143df2f9e6a85d1acfc2f380695da2dbff3a909ee1c7341475081f9a924ef4dcb79b54f26293ed035c00de7f562cce5c346542709a57a9bb24e8408822c7984"}, {0x68, 0x0, 0x0, "9d1a077ad57807d7951e264495e044f853fa542a33660c1aceca34122eb2a5caaaddaf838365182c230c6853dd15504d5c74b42e183e95c80bb5e04abfb3e67a8c6e7f48f293e72afe014b70b060bd147116cea5df257c1758"}, {0xe8, 0x0, 0x2, "b92836571b81e09b2b9ffda1fb8c8e2a35807b5800b60f13f6a1baf57b3ffe74d376804cbd5a9bbfdee101047d65b449b9b5a088f189cadd1967ba53871f770e8c032470343bda019a42415fdc54a622d121d1c5756bf21697d2c4483a47c23aaec2980c5c797f6fff31734fb63071f32bacb5de982486a8521f060c9b39dd782b105bb964602e072e119ac370cd989167c26d2fd1b6d1b9e08e58d2a06bd0a69d415c27d24169710bf7bbd68fdbda8420b1976ffea32bce87ba467ffc50276c6270c3da52e6578c67132530d8c11bf690dcaad093479e82af"}], 0x228, 0x11}, 0x20}, {{&(0x7f0000004040)=@sco={0x1f, {0x6948, 0x8, 0xffffffff, 0x80, 0x1, 0x6}}, 0x80, &(0x7f0000004300)=[{&(0x7f00000040c0)="9cd8b991ac29d08661dec6bea8d94a2d2d1c75fea8e4630f09b89723d1ca9c20ab94e4a6bad774a692de9208ffbfa59c76ba108e8ffa3722f35b2fc9ef44321f250fbb83", 0x44}, {&(0x7f0000004140)="634b61f43e567c52bed5e5cce05e853adb35988cfa9d103250464ffe9d3bb7dd2139780027b861a0f80beb3ccff5c3cb03682e01bb37359e69ca165ae66cc92efd4d921f514f4fb5d1dc4c8188053e8a2b598462d8b1b6575ba6ccb1c29508550a87e1218bc63cc73a1d0727f3dc25b50843145ba15e1b166d16d83c3f2820407537dc2512017c2528c127210d253a8d01b9d730d2d939c23a35fe030d559e", 0x9f}, {&(0x7f0000004200)="89e15ae42418d5fad9aabcd098b5a73ba89f8e1e41f967d7dbd50f181194a2486cf3283f966b8e585b724e7e843b89d85409c7f6f2e1b5429e0a436dc35b1c989128484d5f2f87abe6df5f7b5f332956bc9926c5bc06000a164dd7772500a5c8dc0119d746220e6aadf3c168e199b2588c81b810c037177e5ed387c86cedb0705cb1f08db1ad2429f100447add3a2cb097bac4bd8253217fd90df0ba34a90c84b809b7f2440212b7d18569e106e3d7bb017102538d295150131dac5edcab615c4d2b4ad744a4cdee2e6a15eb0a574303cc20ed7e0445acc66b9156de244d19e0b4f9f3f3c5e4c3698d1d", 0xea}], 0x3, &(0x7f000000a640)=[{0xe8, 0x11e, 0x9, "bdcbf5c327060188aaf3a3c88ed1a3792545102ce6092c268e89e0f294804cab7239c8ec400e8cc26dc8ef9121550b68390104b830ce7b26eef8f66c81a2263f9f311ab4ffda5a3e916465c2a3ddb46629c1a70010ff815bd387c274951e77089360f26cd3038b0f6d9e4038ea66181f19426589107db69c6a6b530686ad52150a6a38ba6a4776b99a8145ab7a4886705151bf7a1448145e7b4944d486e5eb34b4aed243754ccdbc41f9bef6931e7e492ee02e78133880e2893532dce041edbaa547231cf5b059cfdfe72635e0fd0ae3168796f4d925e8e877f413"}, {0x88, 0x0, 0x2, "cd47a5e0a53eb8b2a8604ca1ef51810fb5b42a28644e8e7fe70351a2a804e7fea5e5e4d9280060a0bbe4f1d066e9257a2500b8b7df069970795066acce30ccf14e71cf69edc8a7e719885c71607a7ddc47e16ca8d8dbdec7ce617d2ca8af39e1dd43cff74b17b91e8d8fc861cda0ebf1e4d1b39301cb9a63c5b13353"}, {0x6c, 0x10c, 0x1, "6c3065b62cafcf0891faf2458576447915470278acc262af59b24f14222ac2c7c55504318e9fe2be4281613a586edd204fefe80be18ceae3e8c262a744e6262f243402441e5e0a6a6b6a3b09d4bd4b100ccd0b437eeff7bd2f91eb7fa3f0f4e3"}, {0x100c, 0x1ff, 0x7ff, "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"}, {0x98, 0x116, 0x81, "f3bd84e7dc880b54a1f9f0dc4b3eaf9d8b4e16c897a3e55bdc24fbad7c77f0312de31ec1a270b7e2882030365a6300b10273bc6ff785fd935f438e947f29787c85e1828d21bf79971ff4a8239002d4d8d0367a2eef9a3419ae677be13d607755f0ed538ecb8345f2d9db385aa8baaab1c5760bf0f46410a411c85d33ff88a3a0ca519affcb5e8d758de89c2d"}, {0x88, 0x101, 0x9, "86e3177851c0b133360de5f95ff7ac1b79ad2f7a73796f3fcdade647844aa13a157b12ff03011c32ee0a345f75118d45003d15bc04ba38b6d0f5d26268625d7b7d4e52b5d7e21d6849c2e3f1dbd2ed33ea703ebdb6ccd84c70be67f7292ff5e7e1c128b8847da7dee9a5db47e666d5d141e0ab1483e77fa1fb6d3185"}, {0xe8, 0x11f, 0x7, "fedbf0d0e6126e70fddd7315cc3ef55df87b216bbea54695668cd0511839832af4d8ccad7b9d9932706097d16f258170a7fa826a3ba93ce014b9343964790841bcc6ee4ebc8e48fe442677312c30d348b0757a3f1fafeb03be84dc9180759ac4bee5a24031c8061fcc0b374a82aea8218684dfc9fb7300844271b24397726e92c69afbc008debad40e9a9f48c75d1349fad797c2773f340ad4e36e769156ae2de39ba2612736b3647b4e86017458c7c36b956deb25d0a344478761661f880393b66ba9b7f9e7de3ba29f761e6f03970b7929863dc7bf97f04c59b2"}], 0x13f0, 0x1}, 0xcb}, {{&(0x7f0000005740)=@sco={0x1f, {0x80000000, 0x0, 0xf24, 0x401, 0xb798, 0x633}}, 0x80, &(0x7f00000057c0), 0x0, &(0x7f0000005800)=[{0x100c, 0x100, 0x7, "0c4bf528f03a4dde9a64532fcb60534587cef894e59601d18b80200b24cd4589f09902baadf4b2742d2be25ef247feddda0595807713169390d28e86f1a2e9242340d4f4a91d62002cce361cafd7927424efbb37f581269d377a5499c52e5c66625b9fb673fa2b2d0309120089740a2078eb9542456c4b3fc941c8ea5b3cf8693c897cdca93eb203374e666245bd310ee50c3d17303b0873a3ee8c96c638dac52dd881858917f891140694384ab345302de3b5bd927664c2f99c42263ddcff578d6250a9557de8906a71d5a2b675ef1163c5c8f2afc416757596d860bdd25bbdc393389668a4df54685aa99b8e0e01bd3a51b921f97df815cd63cea53210aa2d4791b7032197bab4ffb58c5665d38f594bd8234298afa24507ca5a3a118d890bca0575d77d8a7248b8f155f14c0479590cd719a3b61b2637e4ae7db68c52b737f9672506a125ee156f80a375996012e7019655a1329e7b5b7b4e3af5c1f56cf801f540d37178ac1b750428cf365f60ccc7fa2c0fdcf46ad22885734eaac5541fd9ad24f9bc4eae0705b78f8579a33b3c90b3bba80d7d876279b18d861231c0f092c29ebe8ccbffc659452fbe5fcc57a7d06423043432397f16f4d08fab4a3788a2df264d2f01082a5cf55d4a05f7b10df12cab170768c7e26802344de1eb7fc3f4d23b59485ef1f91117f8ff977136d60b4994acef2f674be9d546ce6c315248459bb8d8a9fc11af80771ac78d104c4dccbdb02606b8a233de86f25416fcc3dcb3febb3a72c7a0ef7c2d71b183ce4d1a262e7e0f82717dbb640d7f26dd4d3a0fda7701a0ca698027a90d633f0e04c266d1943ffadd6449d1b493fb06c635f51e32f7bf46dc807c15c0ce7d0555143bf3c6f989266a734a379b95104c9d7ce85066c9b4da048e6998fe0ae46695a9a32f256f2e9b0dd3e23ed9943e812762c75e7d64a864c6707db331b0cd3c5da4a6e5e04dfa933fb2693741addff4ecbb32ba02701b96fe5f603d8828f55903b66ab07337226cb97b40d26c24e0b987fd60ed976e085556ba6cfe31ce65790a13f964d031e96c9551d295e89eaebe38723664ae8dcf1ec4e7c17c527e0e9082b1627f2cfb584b4e0ebf0a4bc29e57a48c67d9b01d6705a3ef480da5b329a9c9050d27a17bf06bff893c1585548e2f83de8b10ae5ec5e7b461c5e5160ea90d35de0b75619498fa1ec37e4e8b77b3954fb93209f8889760929719488741e960da568e40f7563957f57fc584e01a098e92de2005f83cd106b0dcbc0228f0875c5116d5f4287f6c6af62bc64d467bc070b94ce09d964a75d0c1fbe951bf7d09d7e13a4ac9f5d206da0241cbf8026ba58f32c99da7da21216c0bebcddf3b697d16534d88f9b52e7ff78b693288c3fc76a01f58d6445e9831deba6782458afcaa595cc339f0a1531616d2de1ce5afbe5477abcb048b276eef753894182bdb175c0d8b8f1906c8d1910351fe67d870220dbadbba3a045f5248884c57381c00a90da34f559a59055b356e6d6bd2b00fd9010a9448c901f9ddd539c9f1834e2c7e5426a0bab59659420bb5161bacafba5cdd153e872750101a6c41f72f72ffc5a53f40a69b06ffc6a8af9e1835cbf7ce7a95005d9e32413fb291ac1e956e41b151cc8c5ddff94634774c53772e982010a71765aa8c26b06b292036d477536f5baabacf757bb2b131d54552340acd9de5bb84cf0cd6597dc0b519e25a7f578cc77f71faa36dbd63a163478cdf562269754bb61a923c9eefc369098486f4023092a7620c49c287fbb38c343eb29ca65cd9c87dd2bc2422b75549b7dd864f914e957dfab11b51b1e5d921022e28a2cc59d9ba0c49c9bd4a1b76e4689062b13bf001657c1170466aad3c81bf01038c2aa541e06294a0b04332c70eb18c28da69037f75530c1e8dad9932e24a6a8a9b866becda3c8c98d71e63242961cf9dd898fe2dc8ed5fc7a107534b6965bb50b63abec163fde3cd0e74b71c2dad538d614270abf7235e056ac6d4bd2f1d90365baaf3964081506be8efa7a5f95e00b43d13ae2eb9b44c44b501874403243ef953c5dee60e3f0a88a784aa3ac935d7ea4e5255dece1b5e269b1751d3fa0c0e61200337a7d00e03d9c373b6a0726af8699b584b5afda808316830c76e2fd4ffaf4c4149ac53181c59295f1e46285cf53a9cee65d9e3a05f0d06ed17895b24ba1e524894ba3a0c2d7bb9f88b06fb8d0d1af58207c356d1609652b7ff4af6dbf4fa9439feec78059b69478ac8466e607a6985d2b4a1eb3abf57daa1e585de24836a45bf19c1d4ecffd82319d408225883ffa2c6618349e8c81cb1dde735b62cb2cd04b008213b82c81901a667a694f1b11388d23a67ce064d3967687913529c1bbe5f12524aac02b7a7ce6bbfb29269e682b9aad772ea67210a207f49eab0af751c61ecce0a0ccff3d46b0611a1b1451c6e6b528b83264ee6a58fa64b53e9674e0cb54521cf74cf79fd58dd570365a72ba4d061b589735d6be3d30aa72dedc5e22601bc68f37163539457189cf18f66a97602bb9df367228d970cdb91f38b7b91ff0839d3205db3ad356684adcca23e7f3975de10142b35b09b381d99ef4e886c643d5ff7537971639c35417a69547a62e9fdc5cca64f844f5df1423d557bac13160fe2ac7d1fbdf6e37991f62e3dbbabd3fc945496bc8608508908f2f50a518025cbfc9f1c8f92b28566cd54cb9e478e6309f4b16e9d4cf30e84afe3e86596f53d3e2e131bca63a7fd7d9a2f88c4dfc4f5276292c89eb8214454689ea2fdfdf482082596b2ae77fff92984a3734b7f4c4eb4601a97f86b9695dcbf527b076d95d3a92a14ee81091bf41946c378003cf5b04f26f019f2d2d4e3c32d9b8721f6dd874fc4f8f60ac3c854d37aafa18ced7a1f3aafeb22a8bda70995df5da015ce60fc3ce0a2ab3371ab351cb7155a296365df525d18a23cbcd9494db858a8d9b1a09f3dad86e0222f0e740eeebd0c5a46f108bc88b9f5fc82a2cccdfcb0aa3e532aae2b46711fbe6bdd78bd0f8866b270e6af0575bb8f1d7ecafdd1911a5253f7dafe1c904e8fa3e901c149150fee83186b76a7d3bff6eef029043d66174ba79241239d07e1297438b63b984df65149dfff7b10f2cfff558aba819e621f0eac48490ab4402466b49d91455d2870c1fa80fc97486aa8df9a7693b1d611ba599ffd4d50febd81551ac085983b4365e76db8811ea6e391e2f5ce43835d935916141cfa55c3a2709d1baa7aa34f83df2df0087897312636e25d2ccee8d31d656050010adc0c08baf7f19c92130fa7810ee5323ccc4ec764c8f919163adc670affc278701a25732d8c71b5ba3226a4bbbd4f05567001f236f93d8e12e27eb51caad23c6cf3c4257b2a584f16fae46aed4010e7ca2d69c83ad8424b02e9544e0314e14370efe9d9961943cab431817f5ebd91d2314fdc2ca479c553843adee3055d76f07ca8d59f273968518d5e45b8d06cc60a7c3ee86aad30aec396a87dd6a371fd5cf60f5dbc6feebc4c6e341295905cca581c469e09d7e0ecbdee1a4d501e7a127ba6c893e88738724cfcfa7e2bdd58a02d615644b02c1fa20ecf0a471f2ccb7d62f6bf4cbaff5c469cccc01d8d1b1ef5d91122b7556b0f563deece0cee26dd2be58a81bcc7d8e5595d25f86c7790b1e09c50bf3d269fb26388316ed36222887c7b05e5f662b6e5d2150e30809fdf0b3cb828c040158c205f46997e60c22cddb32d8ca534f9e940bd05e2e55c2e57a8984d5ba6a2b04723e80059acd9410a030e71e3070d0c736d49ed801ea06aa92c774623c24c017cd2d51c1302e9d927376f31726ffd630dc7a8d4c792289cf05fa367f838318e9423bb0b1e5a5bf6620ebff0b8a78559896b9c8c3c53b7063c55e1e40cfc84194c8c6d86493fc52de8e454a45638d6ec997ac9ed7e38305c3fa1927df14d9c53de75299b513a60967685ebe251fe5e26daa058584968583d7076ab7ddd06b11cb954e7001d6b223c9bc8663fe4c663dcbb1face7824cf67caf205d277cd3eb65a7735bed0efc0926d02fae2dec4e7cbf7cba73e8206db238498f40fd9aabc98845abb415986bc4dab6f427370deb63b1b2a8cad9eae8013ff01ce52cc4bdcc6bdc466d8beeb602c28ea7aaa32968af5da739c07a1468535b50ef364b3d32ce72d46d8760285d85ab696ca4e76148367a8eed88904f3aa6a597773dc5a27362335c4a56bbb646484547c29b105abd5dacb9ed73d20502c4493673f68a1e226fbf32ccb79e7690a2ba1b1e9852d3f5d51b328f5721b8cbbe24eb7ab685f433657b665ecd4e275d1b35b9b5910e26c6edc38d47c7b6fa96f231023d8f672139680c568964ee01c73efbae6dd2a28d3bc2210b76a055353000b3996520838582d03abca8dd9b01d09d14f7c19b03f010bb739e19c058e78d27e67f715d108431ffa8de1ec842f2688cde04c7f236bde766c8e58b4880d6b6f8dff8abcd3959c440cec108e6b9a8f6d6281d1b0170ad8185a45036a393835b2d93736f43fa62678f4f0f0ac2f1e9e7cb76e3cc6b3b3133958458a6829690a8fc65b6a624cda8a25dc39aee34210eaffcd2824ba4c96bd76d4b74195038a013759feee00ff7b6fd6da5d0a1edcc7edf44ce4d44e5da912c2ee22d7bb938bd17fa4be79264bc1520f751ed08ac6b23a1a5e55c5aab28f4f19672430e3295e150fa0c955d1d8a47575482e74952e511568d5540c22e470ea693f278f215a042b8ce7b509052df9e11540fae79fcea94fa5de997ed0a76bb5c6f6ab486965bd3312cdcb68a3e8d518c649ae8c7b5119248249e6c6b54ae0fe357da49367712aa4ba6fc54af44d03c6e031f1dcc8c66ebf9f394a85feab200bda0fced6def69069e7286487a427e4399e72d18ac23b28f8c82fec2229d3049df260b0982f3e25f9b20140624ca05e7fabcdb300cbc1b015483b359dedd31b90b54106c64c81e0a10efecef6877688737424a91e1a53fefa3d5034798833960665a15de901c0135d13a95be8390220d609e0350b4dce19543c264b88c7ac6044b9b863f7698fba6ca473d5c99204e9c5624f2bd99cae9dc2a9541ce306d7847a5030e6f5b1b58e8d5a0c3c9364d4c6a7e66c5bf2f918b31e473e999e9e326d4742c879e069ab5b6531e48634e73fea921d7d5c882d5bdb9ef67e692479865533f50f1e1af7eb0a8857927dcfbd275e778efae64ad2578d9e946556a2752d10bff900f95be21c196ecac8cfac8e27035d0f75da4ca09f139a3b36a47e47e338fff0c8547d8040a40b77301701f3221624987052ad2c5e64beb7a24dcf85a87ec4dc3a167788c93d2fa347c5f271737f6f9d91519531e7014e1380c08f1d824ea0cdc93803575289a1c3648738b93e6a0efb56a20a08206e900481e622abfc156a2e5f6aad34a6c8a92a9790adc592268620f35757498a6aaa29dc98801628c2509a2990c0dd16afc51ca8422de282476b54ad4af5c279a372da4ed08ae11df789861944178684fa22b305b7cfea5f847cbc61a8f4a71be565c387aa30f7668f040931ae4fb18b60eb3fbfc43afd1e0bca8c1373b34958f0635dab9e90a43e11c7a6b67a1794e6731a76496e6bd06f0e3600e3e8892a8b6bcf3d6447a043f9ecca43bace43b26dc23667f69f48671d0bff39af44dfce997526456df6cc4ce4204ba24d13ba2e46f31f2e8cfd420c897f6f06de06df3de788cc58edcdb49da18f497f6c78209bc240f876781864a701cbdd13af43fa3e804b51d1af96b10bbdcc6c7fabfed1483e1a109154e42"}, {0x74, 0x0, 0x0, "ef4cc10e450357e70d122ebc737c9a3d92a2b69a8f8d32ff6aeac36853347bb14dc10ed155111ca618888ad1cb2965cc5e5d6c72c2637198d01e3f169bb1481d5afe93658fe8e7f7c4aa44e2520691274617899e999514c35e13bf153251b3afe4f4e1a4f5c9"}, {0x98, 0x0, 0x100, "7d65a7f9a3ef3756ad6083402a9733057f4ca590fe7fc9e3db6510e7ad4423475f09db3c3992ee03e9bfa47a032fb9f8e0cb8a4c12b18debc50f0fe57ca4ccad911dcc8b32db3f39b5baf469887e611abd58774753f726f2d4978700029e8fb57464385288a5beba0fe9ebf49b928bfaf5c7c3f1ae65057eff1bca5781cd44ae28bc291f8a189e311e264dcc"}], 0x1118, 0x800}, 0x7fff}, {{0x0, 0x0, &(0x7f00000069c0)=[{&(0x7f0000006940)="f47fb4e48e90f9c147f68aa42b6f1e030c07d18ccfb8aea784efa697", 0x1c}, {&(0x7f0000006980)="2454f6a0fbd46af0dae8", 0xa}], 0x2, &(0x7f0000006a00)=[{0x48, 0x3a, 0x6, "eccae8d2475eb490258e305927c1250d4685938ae5913cde9ac541192d0c5317c77a29cef1ba26672296764f831d61ae3f5f851ae145ab2818a856d5"}, {0xd0, 0x0, 0x6, "aa0a9501520116ce46c11781a30083a8aa7c000dfc25c12aa72b2b76f8b6e19ebc4256df490956f32953be5fff48700794c78790c1836da76ed04720b0395bb4c7f885753c1e215630255b0a02cdc84c65bd0e2e10fe17d534a6c58895474572683a7dcd8de55c86b32498d8d6b9681e5b472de534d7d53df2b6bea47eb6dc018c12098c4fe7e036d84a1f08c775222cc1b6eb02120f34ab0c616021d86d088686d5d266ee0587139a03ce54958bddbe2feb702de2ee27e22530953a7852f59005f83e"}, {0x38, 0x0, 0x1, "004eca74517402d252bed7153a3e3b11ac74e04bf4d7403581d25448e97fcfb2050dcc858b4ab49a22"}, {0xcc, 0x11f, 0x101, "de5f709afafa33ec175d366d6e069a221f56e5e2735f9efefe160d3a65e704c1cf050df931bc9e3ece6a3c55d76aa3a71c16085ca4720ee43c51ac8a90b441ea9cf3672500da773db7c15bc09c75ac93cc81d9704ff33d074c14f1f6bb8ef7f3d97ce61b530aacdda74e4da4740fbb90cf1c2a2e28c892cf9934a9a859de73209de44dd73263702b48f9cd1845e5cb899c9a2b41d29e69e2337aa40909e32804e3cb320c64ffb18de26dbed85e7824a91470ff8f9e60e09081a482209ad63260"}], 0x21c, 0x8000}, 0x5}, {{&(0x7f0000006c40)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000006cc0), 0x0, &(0x7f0000006d00)=[{0x30, 0x114, 0x401, "c9a1a63527427e7c6ba5a0d6604fbb0c9f6ab3b4507432e132a4465457b4e745ff19cc"}, {0x88, 0x118, 0x8, "56a0ac87c4e205347611c692fc37f44ae07bf328f8f328e38f53ebd42a281eeedc5924c0ace66d2f8891a4786de1f32b3977b79c03f828c582fcd4a2380a16896bc4fc8b8e94690162cbf0c2ee76c3621242f0f1f3f3c1aff691f103b8b3b81e80a711924bc18e7c6390a483be191284f96fe98e271002d72e"}, {0xc0, 0x6, 0x4, "95f8e39cccdf0ff1528d8203ecdfcdc0874cd46b312e9838b2371ae13fda1871f895f947f6004aa83ca5eb5e802fc8949768751948aeddecaf06cfad089ee0f96b2130195b2807c4c4b0d23e04404ffdc0555f07fe27df4e7c827858a3b2e72df410fc36a92cbbfd15e46b712cb371641e10a22a4772e43ce45fc421cb297a884922bd520e5d991dac533bb1829ef9c99fd58712ac7985ea1498e5ba0e09841fb604d46cd474d766942156fc7c66d85c29d7c5b9"}, {0x1c, 0x1, 0x2aff5465, "e08daf3f51781cb81a61f9e976"}, {0x44, 0x6, 0x0, "cf39f75d11951947f4b55090f1f2d7bd31f6d9077983be2b79d9ce318a8ff8b8b9680e266636288d55145c9c0c4c5383b88ce57906fdd4"}, {0x48, 0x185, 0x100000000, "15cf6eb93e0f7a8adcb746208ef3412e0ebbbcc134c50341d7ee454dee1c4c617c2d9c5af7bc5ffa45b37d5885468d79ef4aececb82bce925c61"}, {0xac, 0x88, 0x8, "6c91d05ebe413a79cbe8585faa7d3c6fe5f492f3c28a1817eb945b8d0814859db200037ef032abecf404d7bb92250f0fd6f73baca1e4ccc017bea004784528353f466231b28230440a05505d08ec94da9e734380a57ba2fbb656e2ffc6f6d3ddb59468c841796e0367edb478e3e1c39abbfff00dfa5a4464bf467f110fac724016a58d82dac4ae22d8fd62362e515b76953b1cae44b9d4822ba905200125"}], 0x2cc}, 0x5}, {{&(0x7f0000007000)=@ax25={0x3, {"31d6f0199270a0"}, 0x6}, 0x80, &(0x7f0000007280)=[{&(0x7f0000007080)="4f585bc4f0908f69982cbc4404d921b6592b927c3efd77e1b0a930036e4b8caed71191abf5e72c3b64d2c611c4d05352d6f172db657301260c4385e470fc1ce17889be62ee5ab756a181b00f6b5f3b714648ad8cad693ba95ef3dda5c9f070d3b17e1f7241ea5854e1dd898c3ab88a63bf273a47eb89434e314a69789839e188d9a30ba6689ac4f00841196bc6fc0cd484db6f73437c867833ff9bc138b0aa0f938787c9b5ab9f7c0893843fb74fa85ef8cb3b4e70f3aa4442d3a40af289eb52404c4d789aaf0b3e230522ae5f09", 0xce}, {&(0x7f0000007180)="816c9abac3914b6c0ab67b1595863e340dec9648f03d5bdf954b3ff11a182eace8bfcb5c1d7e8b41bb4027ff3f679175ead09ccc443220aa1bae257fc794164beb0772bcbed906887056247bbeb1a058859322ef8dd417bfd666fac0f460224adfceeb992578a658b53da1f89b53c80c0c3f0099419c9c8e7c209f22f0bc4f9f9a046e3868ec2fe68657f1202fbfed7741d410e8a17cd7f4e76e6d678280369062a4bf4e81fca71988a7e0cb6329fed852db739bc419269d45eeaa63bd4cb6390e1f318595b387b0a83410acc7285102f48e85ebcf1e1bf209045e590373", 0xde}], 0x2, &(0x7f00000072c0)=[{0xc, 0x0, 0x81}, {0x50, 0x101, 0x6, "62f6905d454552943d9e76e0571707e09eaabee1355eb1c3922cc9ce9c22701200ecc78bb26ce72d97c5cb49395d499e348518f953d9cce56dbc13e403cbbe9152f15c41"}, {0x70, 0x0, 0x8, "9e4880ad08cddca90bbb1fd90cf8d6916b198268301a1c2dfdd9fe3f6dd47855e8c95141e84aacfaf2143e7ac9e24ef3e5efedbe8ed8bea9efc35697556b53693d15f1b3d30c3cd36e38f4e7c38b9ef7f5c95ec8f756c713439bf5f9507546a2d4514e"}, {0xc0, 0x114, 0x5, "0e2e0ea2f450b436ae380bec4fb8a49cb67cd5cac5b6d90fc53f32e1cad21a60da2e2fc2cc811fe04d0a283259437b0b0399974aa21b32540ac87ae5e6a927497347dbf3175f281d9f45fc61fa26c2ff543326bb2d9c45cda544c1a8aebeebce1f274f8362be707a629ac6234fc978c09f014eaa0b95b38e8664fa8a4d2e20dd41d55fd0c026ff4ad302208cd7198335151a0cb03e192f84fd359e147a2ffbf364ffac45b017e22fb846f0e1ccb91a2990ea"}], 0x18c, 0x8000}, 0x8000}, {{&(0x7f0000007480)=@in6={0xa, 0x4e21, 0x81, @empty, 0x75bc}, 0x80, &(0x7f00000086c0)=[{&(0x7f0000007500)}, {&(0x7f0000007540)="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", 0x1000}, {&(0x7f0000008540)="0f04c66696717110c7ebc62c6d2e52e551fa9a76fae0f91519bbbe24bc2141449067a624def3622bbeab7004ba2b3d2a6af8481c97e06a7c21102014c5b6397b19697ed55239d6cfec7c55ee259c2972b1dbbc95010aaf8f9b78de4e8581def189bb47b56fdac1911b7708f08da556506d56a8d5910af2a1c39cf18171e629a8b6622602ce1bc27a22c44cd76dc208fb439c4df147b0bd59f96f6c6012c1d2dcae960fb3f8fb35ce6e74a64c539b2927a5f696175eb0cb4b4f2106143ee0d59180d5513b761b", 0xc6}, {&(0x7f0000008640)="35a0bb2b691d6607c6be9b68f618de111e357ab6a63bc12f7bc09e7fbc6240a0fadfb1367cce585b526a759321f8af451ccaab162f72586af46c13954d36a68f7e17904de6c531fb3a1ab842d7b3099f61b9ee6f1a6f8b750dc501347a40abe790a32334e19de9", 0x67}], 0x4, &(0x7f0000008700)=[{0xc, 0x187, 0x2a8f4d61}, {0x100c, 0x10d, 0x7, "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"}], 0x1018, 0x4040}, 0x9}, {{&(0x7f0000009740)=@ax25={0x3, {"1bbb737a7239f7"}, 0x5}, 0x80, &(0x7f0000009e80)=[{&(0x7f00000097c0)="fe6f4bb7e66060664fbe8b7366b551d8031f61934231fe7ae0a5f3298b93bbf91144d55fa62798f0bfa0e2a3963a56b3769a2b5398530f703aa85f0a40c4466d80819fa7af5977c8940e1680a3f91e8e0544e99a9f0dc847e7601584d25dac2b921efe60bebbef79de16bc4ee0faf4a202a19da240d291362432ac95f6ab08c5d3fb6323606faa3c982eb7b3fc1ee87be8b3d2488599864af3e0", 0x9a}, {&(0x7f0000009880)="da9f221d868ea9d5f4eec4735375231f30696970a5e83bd40f8ac6ba04ac75291eeeda6a9b2193081ad271884c7ed5d8ab60aa516f1d333f96444cbf0a3f5d66761f088e9ad8a4ff71ef7f9438aabe4d1c692782ca551dfd52ec64fa4167a61082323bc93becb828133868b8996aca4f46106c1044f3ebc285917fb0c0fcb796f76480a56d673e60771782a593398c281e0f09af4535050b0be66e4937b87a3f8e9cfa", 0x457}, {&(0x7f0000009940)="84558409967db4daba965120a9a4e3c180524e6307ef52b7bd9bb013b67653a4136e38a855206b5be4533d45aea1beff37b61183935311b80708cb6c669b62a995c03ecc3599c267892cb67d86697fb0636992cfe2208339c2dd6366b4070c507f85c95eae3e99cabe46503c11f21cbbf115219a706c4f2650fff0d803180b6e6be5b297925521c770e0df880d5094e7fdae0def80168c9e3261abee041780c417e4f9baee81ac866cc3fe15b6ffc112b0977c91c9d20ef2a1e25fd5243988a53a0d4cf7e81f08b9bb482d2041433558830611c2b5dc8111", 0xd8}, {&(0x7f0000009a40)="8fefe98bf7854b2c1199228536f00cdeb2d237f3c3e85f9f07c88657329417675a0677997ee475ef3882e0434b608c1bdbb7bef0c6b9f440c8fe7ccf759ccb3bfe14e743a2520d3838aec36e3f1143310266648e7a7306a6b169a7cf01114f0dded000a7b302d5965d381b8313b19baa9e06c31911fdd4e85892dca5d36ac7946d7ac3f3ea014f0b18ec47abb5914f43805c84420c50391925d626f625f9e04219ade93d853aba51d4dd8ae94a65e39edfeacda61bac0b0d2584", 0xba}, {&(0x7f0000009b00)="79537406d68b91d2238f4a200e7d99bcaeba55e55dc9d77fff33976069924038748d680f9e9d37d48650bc868b6a553c268315c112c93e94df71e00f1dd6bda223b42fe5661bfaacdf57eb8c21e4333d2800e79465ef993bfa14b98ac355e6e18f764e7355d1dbc58d9c8d5f10f7481a8fdc526484c32ef963d301734225e6db85b2079c9e0ef3882cb2711c5301673468df661a810f80f788953dcfbdca2e732f3bc8da2866e60afce2b1661ec8ec4d633b9e782bedd9afede908e0a243a765bbcb2cdb393b016cf2", 0xc9}, {&(0x7f0000009c00)="59f2ee0f907f8e0118b4161ea6b56b539e6e20db9962732d005636d3d8e71fbf72c17af79252094d1d88c74fa73cbcf1cbd468319ba2526daf0b45852f4fb06c4ada5a1dea3003802b835cf5118286f8ddf0", 0x52}, {&(0x7f0000009c80)="1df57197b94b12d0e3d07fb960be18d1da0333d3b84baf9053907765de21fcd6a4637683069a15e14a034a5692a6af2cde6a93940f6e746b8f93dc05f87ca2fbbfdc5a61928269071a0012f9b245b1d79367fc3a4c880bd19cd83e3309f0daca570d31beb23aa8fdb69f9ee14d6a2a44ee9541fa34bcdf5129e0afb983de09dde8462399f50a6b9b777dd3c24f69df5065633b1a7aac5f59aaf35b81b8", 0x9d}, {&(0x7f0000009d40)="201ee17aa2f87fa387589463d841628387f2c647e70793f82cc725e6d61b576ebd842c4acaff2c9c5ac1f9c2a38c4d318e1aaaa6a42f66bbc44e4bedc570db694af9a4a1172bee896f02a911534e03f0ec444c3efc0cb6ce5f972c2499c5dcb600f155f797eda54650df12d29211c9379b53af45b41815d054dc340a98de36e50ff6d4e376ec6634ed158e4ac83abbabe52109471562f167bbfdf70e577c17cf78a532de", 0xa4}, {&(0x7f0000009e00)="9aff468e1edefd1376155eaa7a3240bf5b5ae9074d9773624586ea4c20d00cd8eac0df57ec95c5bf734517f0da23f3d17b783ddc277fadfe2427cd67a3c427614fb78b3180cb3cda67124706e82db7ffe5a4a7968c365e85a450c1e0dbb1af6f4c8825e74680bb92af77", 0x6a}], 0x9, &(0x7f0000009f00)=[{0xe4, 0x117, 0x9, "1a66495e0da4cde385158780587a97022a1dbea3256493654c0fad94e356379161577ca5bd567281cd964dc5c030fd53e439c7b7ad3442194319c8395debb2f2f591ab56a70f78193648b83a512d7f7d8bb3eb46807f56104c04c4ed054a65710131a5d1fec6dc450b4ee8a93bfcf47c5a592e7861002101feb4b5db29d280169da2ec46877377f720a876960bad645831d735baa9a9b3091dc78f10c91517bbee041333541b11eb8cd12c3dba8607f7317b1661ed7ff48857887b146fcf5273e6bb4aea7b665e298de65dc340267e1254ae500637fb"}, {0x94, 0x0, 0x8, "c4b87d62d223614abf3a69edbea7a885e9a3367ce329dc16fe377a1d24fe267a8aab6c79cecce2b9e619d0b9633c890de34045aa37f34f9e029f6567b06108341ae133fba7e949fe896fb8aa2512b71886fb41a7e109f970ed2d2df0f7b81cb1b582885ae59927d73b98e7a120cdc0c4f35578199d1ceef780ac2f747f6037039ad4f9707073"}], 0x178, 0x4000}, 0x400}, {{&(0x7f000000a080)=@l2={0x1f, 0x8, {0xfffffffffffffff8, 0x1, 0x1ff, 0x5, 0x1, 0x6}, 0x7fffffff, 0xd1b}, 0x80, &(0x7f000000a4c0)=[{&(0x7f000000a100)="2935e7d7260fa141a1af63186f229ca82985269f67e29ad02a005c250972c41fe62e178a0d35d1f5e1ef8c7590a3ba978c2f91a06bf4c27bc01af5a25aba4f7efa2a2327f639", 0x46}, {&(0x7f000000a180)="a26d941b4965fe0b993acedb0d4c55a1091b9452f50c3e1be82e2a20c803f9e8eee9f85a751193eb39fef1836aa9efd58a62920d968bbc370c08681212dab776ff5256f199312d440f82f47a01901701fd6e135f40b148159e2b4b0288bdbaa8df39b553d73e39d74365fa480be0cd06fff746848c4c6396de599ed72641ead27c9633afccfaf73a2db7939d96d4072f9566ea7e42", 0x95}, {&(0x7f000000a240)="594f493bd87d16ee2638a2f98cd467f27ca69e1f7b505c5f1d5b67b7c180", 0x1e}, {&(0x7f000000a280)="2e1a60c5e436400bdfa6cd6629593b42add1dc202e57a566b18da674511dba880ea95a2af79e2dbfe0db78e90661056640793f5c8feb0d57", 0x38}, {&(0x7f000000a2c0)="95a4689e6223d0352f1cd828df6cba9b69918bad081ea7afd15fded09fec20b36afda5e55f7dbafa9e4e0130285e412dda48d20c7c13354d63458b0e47f8824076640dca456307d2f449dcffd007196371bf554ebc09ce8bbb586f490e128b0bd50d9d10a7b7f1fc8ce5c79e63dad73c665cd106e93732b9d4a72f2b64d3b9e05a57da51feb8c483b0dfc814ed99b420d0b0aac1155947d62404d6ca75e0ed72e1fee411d42e111c60b33a86e0d2909f4d100f90f9f5a45591f01de17787dc546592f145f118a8ff2ff9051477349ab64208d88f41682b849379620125378c8bd541e68a913edc82cb4d91a222efbcee7705fa", 0xf3}, {&(0x7f000000a3c0)="a97bcddc1aea734398cb8ca38c21fb8ac8cb983de284acef25a5c27cb95deeda88f2eac3be4d6bee4ff1688a719f4fdd4e47dd97a985ed71e08ecf17826cc88107a63f203eb5e4caf888428a005144d19bf96364ed52c1df3cd971cdebf4b084ddf0376395b4d0c24cc83358131a109d3b03f8afe24ea85fa4b4f9a0f057020fb2512cca68f213f304e3f2d1b951dd44051f61e3f56f33254dc1a2d8b5cdebe5e9f2c27534497204c32316b3dd46357d4c664f3e3616b182ece03fc8d397153e193e9411dbb4ca9de1d0feb2ac51c1d90f93d0a09378db9c1f66160ab86a307fc95c0dfa77", 0xe5}], 0x6, 0x0, 0x0, 0x40}, 0x9}], 0xa, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00001caff8)={0xffffffffffffffff}) syz_open_dev$amidi(&(0x7f0000004340)='/dev/amidi#\x00', 0x8, 0x40000) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000004500)={0x303, 0x33}, 0x4) getsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000000), &(0x7f0000d8cffc)=0xfe61) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000043c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000044c0)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000004480)={&(0x7f0000004400)={0x6c, r3, 0x308, 0x70bd28, 0x25dfdbfc, {0xf}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast=0xffffffff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2b}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x6c}, 0x1}, 0x10) [ 717.510922] binder: 14720:14748 BC_FREE_BUFFER u0000000020ffc000 no match [ 717.512176] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 717.683248] binder: undelivered TRANSACTION_ERROR: 29201 [ 717.689489] binder: release 14720:14721 transaction 1684 out, still active [ 717.696620] binder: undelivered TRANSACTION_COMPLETE [ 717.701996] binder: send failed reply for transaction 1681, target dead 02:40:41 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:41 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/rt_acct\x00') close(r1) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x100000001, 0x401}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x4}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'gre0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYRES32]) r3 = syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000003c0)={0x5, 0x5, 0xffffffff00000001, {0x0, 0x989680}, 0x1, 0x5}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) 02:40:41 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x76, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000100)=0x5001) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x400, 0x1, 0x6, 0x100000000000, 0x2, 0x9}) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 02:40:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x700, 0x0, &(0x7f0000000480)}) 02:40:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x60280, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x12}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000140)=0x3) 02:40:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80c0, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000012c0)={&(0x7f0000000700)=@in6={0xa, 0x4e23, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c, &(0x7f0000001100)=[{&(0x7f0000000480)="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", 0x246}], 0x1, &(0x7f0000001240), 0xffffffffffffffeb}, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0xf0, 0xf0, 0x1d8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @loopback=0x7f000001, 0x0, 0x0, 'veth0\x00', 'gre0\x00'}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@loopback=0x7f000001, @broadcast=0xffffffff, 0x0, 0x0, 'lo\x00', 'bond0\x00'}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x338) 02:40:41 executing program 6: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x2840) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@mcast1, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="641c0000110010082abd25070000000000000000", @ANYRES32=r2, @ANYBLOB="404002000080000008002c000700000008002c0064040000080021000800000024000e0007000000000000003f06000000000000060000000000000004000102000000000800050040000000"], 0x64}, 0x1, 0x0, 0x0, 0x8084}, 0x20000040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_bond\x00', 0x10) [ 717.790914] binder: send failed reply for transaction 1684, target dead [ 717.805086] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 717.826579] binder: release 14784:14785 transaction 1688 out, still active [ 717.833771] binder: unexpected work type, 4, not freed [ 717.839151] binder: undelivered TRANSACTION_COMPLETE 02:40:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0x40045564, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) [ 717.899102] binder: 14784:14785 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 717.936319] binder_alloc: 14784:14785 FREE_BUFFER u0000000020ffc000 user freed buffer twice 02:40:41 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x68000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 717.944963] binder: 14784:14785 BC_FREE_BUFFER u0000000020ffc000 no match [ 718.001850] binder: BINDER_SET_CONTEXT_MGR already set [ 718.015210] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 718.024368] binder: 14784:14809 ioctl 40046207 0 returned -16 [ 718.047672] binder_alloc: 14784: binder_alloc_buf, no vma [ 718.053401] binder: 14784:14785 transaction failed 29189/-3, size 24-8 line 2967 [ 718.094090] binder: 14784:14809 got transaction to invalid handle [ 718.100558] binder: 14784:14809 transaction failed 29201/-22, size 0-0 line 2852 [ 718.128882] binder: 14784:14820 BC_FREE_BUFFER u0000000020ffc000 no match [ 718.136435] binder: 14784:14820 BC_FREE_BUFFER u0000000020ffc000 no match [ 718.168800] binder: undelivered TRANSACTION_ERROR: 29201 [ 718.174854] binder: send failed reply for transaction 1691 to 14784:14785 [ 718.189736] binder: undelivered TRANSACTION_COMPLETE [ 718.195047] binder: undelivered TRANSACTION_ERROR: 29189 [ 718.200607] binder: send failed reply for transaction 1688, target dead [ 718.208261] binder: undelivered TRANSACTION_ERROR: 29189 02:40:42 executing program 4: socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x4, 0x7, 0xb9, 0x10000}) userfaultfd(0x0) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0) 02:40:42 executing program 6: io_setup(0x7, &(0x7f0000000080)=0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000140)=0x14, 0x80000) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x6, 0x12400) io_cancel(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f00000002c0)="10f96b7afaca56f9d678f81794d5e8fd0a9f40bb262072d881e03ec4da4f1165dc56e47fd2041392473c6a5e3b7f90105145511c72b76c06e24e482408cdd4642a80689a6251bbbb1241a3c6c6013dfb4d1a30c90ddfdb7c8e8968fa0708ff09363b22001d8ee8989debefcb5a652296dbda9766d0df1d731816704c591dc88e1880b6598680f6fcca4aa6231ec7180068f4582812ce8b0d2b1e9d10bf1674f58a5f9ae514", 0xa5, 0x4, 0x0, 0x1, r2}, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000500)={0x303, 0x33}, 0x4) getdents64(r2, &(0x7f00000004c0)=""/23, 0x17) sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="00efff000000000000020805000000040001000000000000779f1e8c3732"], 0x18}, 0x1}, 0x0) getsockopt(r3, 0x80000001, 0x69905c3c, &(0x7f0000000200)=""/163, &(0x7f0000000040)=0xa3) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000440)=0x7) syz_open_dev$vcsn(&(0x7f0000000480)='/dev/vcs#\x00', 0xfffffffffffffffe, 0x80000) 02:40:42 executing program 5: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000000000), &(0x7f00000088c0)) r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r3 = inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x100) inotify_rm_watch(r0, r3) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x4, 0xffffffffffffffff, &(0x7f0000000100)) ptrace(0x10, r2) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x400, 0x0) symlinkat(&(0x7f0000000280)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00') ptrace$cont(0x1f, r1, 0x1, 0x20) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000200)={r6, 0x22c9, 0x17}, 0x8) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 02:40:42 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) r2 = memfd_create(&(0x7f0000000000)="d202b999cf85000000000088f301e710", 0x3) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000040)=0xfffffffffffffff8) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000001c0)=0xf) 02:40:42 executing program 3: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r2, &(0x7f00000004c0)={@void, @val={0xffffff7f}, @ipv6={0x0, 0x6, "af04ca", 0x108, 0x4, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0xfdef) alarm(0x3) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffff6b1}, &(0x7f0000000040), &(0x7f0000000080)={0x77359400}, 0x8) rt_sigqueueinfo(r0, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}) r3 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x300) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)=0x1, 0x4) write(r3, &(0x7f0000000140)="abb70265183369b7b9d5fc4e27faa8fc1b8da60938a47f85a95f5161ca351d2e02322fef55c8ed6aa7f41bfda3001668a2ae294937bf89aa76bf52b1d7b0a16db795137a2619500d96bf298503235556f512769f33eadb8216f6c5c9916641b455ef8a4bdbbea7efd57af28de161094e25abd506caede963754a6d8219f07ed32f1f7bd9ecb4276e3fc529919a20498008cf483c5893d6418b60e7702772e60a", 0xa0) 02:40:42 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x6000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x200000000000000, 0x0, &(0x7f0000000480)}) 02:40:42 executing program 7: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x40000, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000100)="8c8ca8f4adc2e1afb0bfbe89dc6b883dafc35c730c972dab9edaed4a1c8ad4c3a0c7311c0f72", 0x26, 0xfffffffffffffff8) socketpair(0xb, 0x5, 0x0, &(0x7f00000002c0)) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r3 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x7ff, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x3969) keyctl$reject(0x13, r1, 0x1, 0x5, r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000280)={0x0, 0x4, 0x573d, 0x8001}) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcf, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x4) [ 718.618870] binder: release 14836:14838 transaction 1695 out, still active [ 718.626119] binder: unexpected work type, 4, not freed [ 718.631454] binder: undelivered TRANSACTION_COMPLETE [ 718.644167] netlink: 'syz-executor0': attribute type 16 has an invalid length. 02:40:42 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockname(r1, &(0x7f0000000000)=@nl, &(0x7f0000000080)=0x80) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000240)={r3, 0x1000, "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"}, &(0x7f0000001280)=0x1008) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000200)={r3, 0x9}, 0x8) 02:40:42 executing program 4: prctl$setname(0xf, &(0x7f0000000000)='ppp1eth0\x00') r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x10000, 0x105081) r1 = memfd_create(&(0x7f00000004c0)="000000008c00", 0x0) write$binfmt_elf32(r1, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}], "", [[], []]}, 0x258) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) [ 718.688143] binder: 14836:14838 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer 02:40:42 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x500}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 718.759398] binder_alloc: 14836:14838 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 718.768065] binder: 14836:14838 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:42 executing program 1: r0 = socket(0x18, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt(r0, 0x6, 0x400, &(0x7f0000000040)="411b7f26e2e3237d03d7c010b0592807c8", 0x11) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000080)=""/33, 0xfffffffffffffff7}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x404, 0x10f0c0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0xa7, "463b1f54d4b025594d9576ded54c1790972bf96aab8fbeb69599835e211599b1b36026c2a6ec9226a1994c7097cc51b9483d4762bd0c7360b148ac05b700e7047676ffd682ba61b5fde3f3c1b6aa57f46290c24687ea6782cfb3191b1dd614e1a1567cafbf9f190fdc2fb1828d9c62bc1998ae84aed4c6be2889039d24e986f50483026efe0192e04f6bf8fa9859998d287a7a990908d8a864725f4bc3cded7dc5bc834551eab9"}, &(0x7f00000001c0)=0xaf) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r2, 0x1ea8}, 0x8) ioctl$PPPIOCGMRU(r0, 0x8983, &(0x7f0000000300)) [ 718.829572] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 718.844261] binder: BINDER_SET_CONTEXT_MGR already set 02:40:42 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001800)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x10, 0x0, 0x8119000}}) r2 = gettid() r3 = getuid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) r5 = getpid() sendmsg$nl_generic(r1, &(0x7f00000017c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x1594, 0x3b, 0x800, 0x70bd2a, 0x25dfdbfb, {0xe}, [@generic="6bd6afc81a84eb346aa2bb3b5b13a0f5caa439e3cd9350409188ef3c8e423a127c366845e7932cfea1b9c175687d39e5e2b014315c0a94fe73e2fd35b28ae1e706d6ced6d942fefd8a28686a5bd588dec47ad08a366bcb3c4a0f627aa949dc80f1a5a28ebc2cc8d81811d8561f1de8806bb74ec438d2e2e4a623149f0b88aff7c9f1dadd9bc69f9db2df565c701637d88f78cb", @nested={0x160, 0x92, [@generic="58779a3233a63c2ce63f6494e7bcfe33a5c92b97bbb1e79a94cdf1767b026dc2685c35c056ad894bab61d6efcdc3e7fa49cfaafac363612eb545be1449", @typed={0xc, 0x1f, @u64=0xf3}, @typed={0x8, 0x22, @pid=r2}, @typed={0x8, 0x68, @u32=0x2}, @generic="cbd7037595c54a64d3bb48de14cd", @generic="4b6b0b97896d8d8b6889a891225a43ea49c924", @typed={0x8, 0x87, @uid=r3}, @typed={0x4, 0x39}, @generic="bce16fc55408c0539954488efbd3cb7c8b5464dbf99b01859f412db2b0130b0a9d451290afe77c705b41d08b8888224859fb13f03b48cb0022e5974d467bae6e19ba0ec00de2ebe0977c2d5dd54d9b19d48ec6b0aa1c3a3880bf25551ad412dfeadab406c03d209694e4380368171c6c443b66c62f0bd096c2ad587177578986af45707f35418ee5e91b0c79dbec6f392275c33d85b60081fdae4faa72d14f61413f5c84da508821a592", @generic="44d865da0a9f3019c79c294f6e5066f25209c56c0b5ce7e448d00c2701e2d3c46e2eb16651a90534fc91"]}, @generic="7e0d00d091c0b9c60b8855fbb312a76ed39f97177d94e990785e8e141e2bf9580b7fc40394474995908e4232bd4271ccc525c0847b8dde1e578859bfde", @nested={0x160, 0x4a, [@typed={0x4, 0x83}, @generic="fb462c884da22b1de5b642d4fc892941e3bdc2794cd61ef9e0327ef02b4cba5daca4cc45efa813b8b9b670be2c5b6075038330644f8f6e960ac3b72af09165e4745994239187b2e2c224501101db8028f4c363594e469bc31e5bfb803b551e7b9e25bace2077fe3268c385e1ac178dccc696938bfb15142ecbba63c4bde441956719e77db5fb7482bbc8e1be69348fd8c022d93d45f9445f58db36", @typed={0x4, 0x24}, @generic="4c8d359b5efb754e4bf3d4def654ddeb6b3352bfe4da8711d95369e695fff51792d0833e1263f9cb4af9d4750994fd66d8fc6bb28bfad1710456e6433bd029030fbd338c5b7f0273e3a2ed2c7a264e30815347d6b1e1934f70d6935c2bc9e3fa8f2fc0dd8b6420fed5301736e01ebb43da18a29729d691e38abdf70108cfe68c014756bd65198d149299f76867520effffb9ff27dc0158e80c5dea90f3364bf069da039d6f81ba6b24d37803223e04f5", @typed={0x8, 0x45, @pid=r4}]}, @generic="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", @nested={0x100, 0x56, [@typed={0x8, 0x1a, @pid=r5}, @typed={0x8, 0x38, @ipv4}, @typed={0x4, 0x47}, @typed={0x18, 0x62, @str='/dev/snd/pcmC#D#c\x00'}, @generic="f72920499b408cbb49ac60f19b592b066582caf5994b03a901f1b93e485b83eb6d2f8a8929fcd30ad711db23fdabb322779c71ff3ecbbb8f2618eb5c4b3838d78cc2b47bdebaf995356230fbea58173105001fbaea9a00c921e71093ab1424aa45633b59ecd1dadfda9e4578dd67935719c66effb62f36b1895916b5eefb2388edfbdb43ba8d1e5bf2418e7a063f5a59fc2596ed8f0434a06e8fd9b9d8d5bff283e7919736ffc5c86c4aae056e76a203b565f649a05d1e02d688a7002e0185f86f7aeabc47", @typed={0x8, 0x27, @fd=r0}]}, @generic="2c8698fac510f20f69bd17e2144c92778aa934eba2ff6d960631766549f8faf0a8371cef48283ae7ae5e85c394deb1423659ac", @generic="4b66536952650e25ff55c89a8fb7f95fdf16c5ad18eb61c96659c8af3b4a360b2dd476d67d9330205d7fc2e1e224c7646f81c2b8f625b1d543d8f5f5a06f20441c35835e2c8cecfc879f84b0b345f95d48a66dc4e4af1cdf61ca21df05ce2dfe93cf854e760edd34774e0ae0486bf9c10de95050a4efd0f6a78cfcfd884143f6e6de52aec4481cc21123f49284ad00d8bcde4277f8f3321e53b820a3c6f230a85a9d7fc258f8026c5f0ac5312459f43d622d475b57c2812e2822cd"]}, 0x1594}, 0x1, 0x0, 0x0, 0x40000}, 0x14) r6 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x200000) sysfs$1(0x1, &(0x7f0000000040)='/dev/snd/pcmC#D#c\x00') setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r6, 0x111, 0x3, 0x1, 0x4) 02:40:42 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0xf0}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:42 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xfb83, 0x80) ioctl$FS_IOC_FSSETXATTR(r0, 0x8942, &(0x7f0000000000)) [ 718.885759] binder: 14836:14866 ioctl 40046207 0 returned -16 02:40:42 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0xffffffffffffffe0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}], 0x20) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x80000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @loopback=0x7f000001}}, 0x0, 0x282, 0x8, 0xfffffffffffff001, 0x2}, &(0x7f0000000040)=0x98) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000280)=0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000180)={r3, 0x800080000000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 718.944340] binder_alloc: 14836: binder_alloc_buf, no vma [ 718.944899] binder: 14836:14871 got transaction to invalid handle [ 718.950139] binder: 14836:14838 transaction failed 29189/-3, size 24-8 line 2967 [ 718.956420] binder: 14836:14871 transaction failed 29201/-22, size 0-0 line 2852 [ 718.966940] netlink: 'syz-executor0': attribute type 16 has an invalid length. 02:40:42 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x60}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:42 executing program 6: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0xffffffffffffffff, 0x3, 0x1, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x80, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000140)=r1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_deladdr={0x34, 0x15, 0x1, 0x0, 0x0, {0xa}, [@IFA_FLAGS={0x8, 0x8}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}]}, 0x34}, 0x1}, 0xc810) [ 719.067483] binder: undelivered TRANSACTION_ERROR: 29189 [ 719.134229] binder: 14836:14888 BC_FREE_BUFFER u0000000020ffc000 no match [ 719.138669] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 719.176213] binder: 14836:14888 BC_FREE_BUFFER u0000000020ffc000 no match [ 719.251274] binder: undelivered TRANSACTION_ERROR: 29201 [ 719.257502] binder: send failed reply for transaction 1698 to 14836:14838 [ 719.270810] binder: undelivered TRANSACTION_COMPLETE [ 719.276157] binder: undelivered TRANSACTION_ERROR: 29189 [ 719.281786] binder: send failed reply for transaction 1695, target dead 02:40:43 executing program 5: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x20000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000ffc)='\x00', 0x100000201) write$eventfd(r0, &(0x7f0000af1000), 0xfffffffffffffd0a) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x2011, r0, 0x0) ftruncate(r0, 0xfff) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000080), 0x7, 0x3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000200)={0x0}, &(0x7f0000000040)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f000094e000), &(0x7f00008d3000)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f00000003c0), &(0x7f0000002480)=""/4096}, 0x18) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffff}, 0x10) r3 = eventfd2(0xfffffffffffffffd, 0x80000) read$eventfd(r3, &(0x7f0000000080), 0x8) io_setup(0x9, &(0x7f00000001c0)=0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x307, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x4, {0x2, 0x4e22, @loopback=0x7f000001}, 'veth0_to_bridge\x00'}) r5 = creat(&(0x7f0000000380)='./file0\x00', 0xff) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f0000928fc0)={0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, r5, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x1, r3}]) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000001400)={r1, 0xf80, "81d00dab7442d247228971b711d68ef3b0d341367beda2fb999b70347088422c9ff99bcf7250a271a8b16b670fba925f99b51b42ed006377ea197c7e6ced9775f79994e6870bfcbf85c6aaa7d3cf53d01ee5bde82d316e12a7141541463398ffeef37c1ddbe0cd431be11a5a7b3aeb2e335633a232e42a1f0660a523215a3971fe554f8c5f616dd93c342e048bd45be302c27dbd42b5b1071f2fa5ec38df94bf6ce1c4d896c46756c3fee033f8668020211c6260fa3c086acf373f35aa92a2f2225db43896995500a4d9e01be9f181af58a0fa87b4db9f05dfd2c96fa6414c95f0d50fa447c80229b70e84066d02558972482fc129a663c088daab45a6334291446c953333f3a77e372335cf745cdd875f3b3b5ffc1602c11bd6bfd04df70d6b40f6290928fe6fae143a5a058f0544a2d228c1c0260b2f0caa623cc0169b8dd802d4dcc94b12b57875ce6eac8c30e53978410ebd658738213fa677ca8ce6f6b3af06eb280341e0546638b9214321cf5cf84074766c31d541394759389d041fc158e548785d25994004d078e1ae24bf6ce9822701cde10d710d3b1515d33dd8830694b1fdf29d0383d20d1bee01a75ead7f34efb16fc99b718d8b28efd8b877d5e4ff88ebeb850a2c608cca3360c86078e64911ad6be4160038055648657e40d26620db5def16108c8844faef0dff16ce8190af24bc4e5b6458956f9deb80aeddc5bc6abe00ed4826def1a6616551b406caec543a39b839245fe8c2bff3df7d6676000e800819ff10105d6451c8e7000edb78cf7e1fa669818336c705fe90035576484b23e63d05e709a2d36d7f971a4a2bf198ed6ded1f9ccf5c7126e9521d660a86ec83ff37ce5babb05e88a01bdaa786f13d6716a63d7af0d76d2aaa854d6f56930fe6c60ea37ef2a5ae68f22f63b97674273578c19c835a814ee5cf4599b6067e69af0dc9a09237b8e3e8e5260ef768c37ddf2e60afab98e84e612299a64ca0fb51cb913c0cb653a8e6a42ac4e6ab2c18a1bbd016a5108c06afeb8d993a5ecd35d5700ed8be5334670ae21dc1624294e3de1d12a01e30bb2d3033cfa2be82af456846e824a41f6239c968046ca0d0f9281d64fb0858175e1d2650f40844d6647f25ebd38fb8ddfe3f04acb1758fd5067087c35ba81fdfe3d9cc0a92157cf0e3ea1c174622d02190083d3407541a769ea50a75c949fd8ec2b5e87aa0c2295fb7c024cbe1156c56c0042ce582c6d97ca246e5e99902f8e9316a80ab80ad861a9db0fa6565855451b44addfc30ef272097185435f2f61b4de02f65c5037f07668e533d73482e391152c82edb16b57f11f8153bce3746ebdf39af8270cfdbd9befd54ec80210fb516e3520a9282f2f69e8d1572bdfc677e45fdace083a949853f907490ffe06957a9e005e75e104d0624e1f537a3511c4acc8f4a7cdd1ff54569d646e0d0ba1623f13dd71c31db2d503db69ef6d70f849632aa8b29a2207c4285cf821308ea0535b8a42850861954802a20752c90d0ea8ff0e354886a2af147f5f5e1cd76d96b34a723dec9da0aa8e3fe80920fd966a28629b7ffa629b5b531df3309640a631170db7f68174dcc54c8f34b0cfb5e831a39cb3f83c41fc5002d507cb0c6ee029912094796bc499280bc62926d2e1a0bce06d8887c50dc8c33459d68e33b3a73f7de25f0b49de45c1eca33582641aa6167ca086ec3ef172d331b8997e5983a0506a297909738238baa8360af3abb02265e8aa6ed517cb517d0614c329dfb39cc9fe570eaac15d3b20c03fcb3b8a909c07dedb12a2febb7a3a9040ca24aa5446df2ae8185723361042eedad2c53250f316ac2bbd98c383fcb817af039086a88141c3beada9130536607276e9d703de31f9016c1be5314de2053b34e5ff6e53b698f3dc357ee37a52c8d34dcd8d3ffe016f79bf0d55411987dc92b9243e9d9f8fe0bc1e9628068aa9556852b07506e5f12bb29cef9a5b90b55102b2c7270f7ceed3bf8370b442f759454d633c0037321972278f6e314a04f5e0f719f4caf85753cdbef97e1c5b05730a7aae343725805837086a0dad82e3da7857d81f47df222bfcdbe8b0d9aa972dd07afbecf7dce323cfdefd4011143b8d112c42010aaa020877bb03ef1ca4dada43ff0f96586d2ed30e7ecc6a050711952ba72914ff12bf237fa8f3f7a580a016c22bbfc21dd18dc8b59d2e73108e3033ddeeceb0219d4461fe780a60ee31fbb31c1200705acc666ef92623996bb14d99ceb47b8e32e701d4d7639f7c7a6b2242c2677944397993757b35bcd0ed4cb579b71f60a22b9a4b9f73ae8d9c7f285ecc5cd07e1313ac1e97c943d6c758b238826d7dc54ad1b5858654873cdf74a2cd260d63a4ba19f01c7b87d2cdb8c94af5a67dc4acc158e7a4d8dccc99bd4aceeabf8420df1325c89ec17c304a79787ee660d6286ddeca77cbc17f44c0509f226fa926f79c98eefdb763df999fe0fd2ba6e720b572c6e966cd1cc4f07376abe5ad6398d74578e3fc4acef8e5438bb41a6dae0e9dd58dca0c046e50e0cdd7a3d35ce371dedcbb8909b8d590202fd036970383588ac53e1ba181ee22df0637f692b6eadc03e9c25bd1cfaa5a98d6ef78a98368b930e52a401e59206d5034ce5ac8ec7e6a0e8fb708d37309b3a286427b25e55ce303319dee8dc07290634e1404236d085881f235e48c9d524baf6c2660032516e40bd40ea9bc2d505b77e18fda6de89904e4679c5eaff78e87b0932210b294c2613249a4187db6a56f64184c9c339dce79bb8239f146f904529bc9fefe6446b7423d451db0b5487f7d9ac6727ff3284bc928e8e2d5b078f7740c346abc2fd7b0abe9cec3a85bdc9b13530a4433e474ec3493e1830e2b703f34446ea4b0b0db9e5aa2cc10714b40188de2635fd6b98d7818acd20cb35a644b76baee7b5a97bdc53b59fe148abb35b5a188e1098acdc4d40e4467bd1afed551bd201f274c221fd8072e14f46c6dda47655e87e3944373d767c8c74d877ef157af39ba39d56c5e181593237ec9b7f6f2a2a7aa2bd31b4cb78892c54f7f7c56760fced66e9234573ae7173213c328fe8bca46004a685bb63138e48c3ecb002b26867f015d312807b75d70629a836084cef2272d1d9d32f55739da76731dbbe321db2c34f59951ad54edda6dbdc44ce67cb2e03849275d30a387b05068b9cf4d01c344622f24a88595b98e73caa86b36cd7eb0eba91d7955d5245093e8c3b4d7646de11bc38f399af2a0d1553a7aa2f45cfbce01a963ab606fbf39c5e1d9000ccc48d86bdbdecd1a53a0868bac847f1bd380471b8d9dba30d4bcd7e2dd02421f154f3169de2521b4f589811b5113d80b9a422096cb0cf985a8af4c96f8f0b72cc32ca8da3bfe01f182754d4681599bdd52387d016e1d224fcfe6f24eac88829d8712d277d0c2d6ae95324dd0d0f1015a895505f6ccf1491f233ed0e99de582d34924a13578e3fbc47f622e1ecc5d24309886bb4d5c161d9661b5dd276b6e066a386178799843729fd85a6b786500de2e838529303918f669f5e6d010423a619f221c1f06984c4c7424bf6bcefa24e71f9889a4c43c8d0d418a8a112ad27a9fe9ce7e11e2fc5ba24bb7076df4bc567a6a36d8862db8072cf814ae330b567163b756e8c5cd001dba52a2ad045776a7218f7a570f4adbcef708e38c9979515cfd769fdfc4a1c7ad757aecce8bab9b28eedd22685985adc2aa1de9897b04197c94073fdea0d5577be887e04b7b6d184440cfaab59ff8b0f58b7a0a3f475a09dbbdd7441d26f85bf5cae78b29d516c957ce383f0ff3ebf2ae87babce9aa0aebdfc65317b9743d32ff1111265153d5560bcfca4897bc84c9cc67c33c38396ba64b4e8bdfc240f512c87425bbf4d95be12354f91ce01b944cb3802a187b2fbaf7e167542e526b87d27d6021411d28f3d37b28fd69781c597ef4028dad193baa9a0a501da6079b01f56484b49f0aecbbae32ff5eebe5ab3f703f510975818dd10268499c35630d7bb719a481d5ff0be0df9357e06a37110ef45d4e6dea52fd7d1135e43342cec92e6f84449cc262005411cc93baf540cb6dcf41035a9f3d52646f4000534b13841d04d75d9cbecadeb58ebc70e0f30dd05a38f2dc48471a016d3618410d1873116bc78e1fef2a90caf3de88f781678b28b4861636afa4630cb2290b66d3876079d20124637d443df4fb1eb3db50a548503f3a3c74c9c072f84cc60d2892f6e171e882cbbdfa38798ebab53228a0c45cc3af023518441cae4385d473b0ec1bff57ec572362256c564c00abf93bf0a9344938891b8c93602206c6e9665e72120aad954d6ab881ffcb2807f7be3ae8a46154e72812faf67a7c225819a4ad37c0545f4372f2cf3963e109e2e1e086dd215ea34694ad73aa68b60f5e1b41228a0c794db95b40d1731d5611f791f8558cbce79305bb7cd5df16e38cd2cea1b652290733b7c9618cba61fd320ecad9aa472bc1413c2431cf724af1d62536e273c7d9b8dae077f3557ef55b6188045797cb6417bdfd2ace86f36bb40a1c40cbff87612c3cf0520b81136e200ea7db07e8994bd0e61794ab325cf6cf421e77b2cb1b3f561da7bb12c465054bd0009116dcd35886ea32ee1e45c8398fc3889663197cbdfb452f94dd1ca36de1c50cdda2abfffc0fdb5a9adeee1f0f065137d0725c53aa2d618c279a3cb2f4b3f75cc2b9309709ce9f6751b52de4ba2936ce43463a1aaae56667bf9c38a6eb43c8138b7eadca17dbf8abf7032cd7a4839bf1d45934b52f8ce675b404deb4c781b9e2c9443e8bf218c2bcad6dde7e8c48f0ac01e215fb9447f9986a303164d9f39f3b15cdf09247d446a3e72a7af24befde44771475efaa394d0845c8b3a56146d2b5b89ed2de0eeac7cf4db6614fd1e2c872bdf88ada8a2d462d817f5b59557c181bd8e486f4d82c99fc3165561050c0946de7eb5b33accffdfafef247f117c574c0daf893ce191fb056aa876b1b7f16a91618d223e54679f2a1b0fdfd6058f48392018df47107d6afdb35cb7cc1067a93ee184476336065e1ec7f0e5c225d04017ffbbbc2f1abfa5cabb8ac540d25ed00cd69eb5c27788bb712330faf665e48e3ec007be6fe677e8468acd7d055553ec9ac874c5ab9c97fc85fcf6928893df09447eb1049edf978c56f9140983ee6ce58934927b65096afbe001765efce49a450f86a4ccaba6ce93f11ab5526abd10c5bb8efc305c0e69717b9a6b653dee345d2b0250df1974e4d8fd1a5c9732c6b70a4fdf6eb18df474ca423101f397e95f3ea6a7b138547c21d23019a575e623ce25ee6cd8f36b00c0be4536dbe1fb81d92cf6f3792228704fe0c123cce6482e2fdfaabb34ec06d86f3f02859f0065066e0aebd7db0ad980d04771d7047e169245310d46e011555ad44d701d6c6eedaf105127ef5f0edb204568d7697b15b42f19f127922b6d70247c9a207ce7d01694905ed91e446ceb4be52be953078c7e8f621c17a5f19e894f9bc9e2945c97b3e371a3ba74f333c46c9a4da633ebd88378f9f2874ba3763e40b6af4ecf9ce039cf2ee1b1b5c79bec01f26070fb5454a99f78072944ea45775afc350eeade40c11efa92fd72"}, &(0x7f0000000240)=0xf88) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000140)="e9dde879d5f8afc9f2ba56bf29444bb5bfde9ad50a56986a103077ec108a1fb5739ed4ced5d2ec6999423fde4c21", 0x2e, 0x9, 0x0, 0x1, r3}]) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e20, 0x2, @empty, 0x7a}, {0xa, 0x4e22, 0x2, @ipv4={[], [0xff, 0xff]}, 0x7}, 0x1a3, [0x1, 0x2, 0x8, 0x66, 0xe97, 0x6, 0x2, 0x2]}, 0x5c) 02:40:43 executing program 4: mkdir(&(0x7f0000001000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '#zppp0}$-%\\\'-'}, {0x20, 'nfs\x00'}, {0x20, 'nfs\x00'}, {0x20, '.*lo$cpuset{%'}, {0x20, 'nfs\x00'}, {0x20, 'nfs\x00'}, {0x20}, {0x20, '-@userselfmime_type-'}, {0x20, 'nfs\x00'}], 0xa, "13b59b6e9c74279fc84ea5bb3276a2843e9b95028b8d26d6"}, 0x6e) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:40:43 executing program 6: socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:40:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1=0xe0000001}, 0x4, 0x4, 0x1, 0x4}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="603650125e190e7ed1913ed160474554a170a99349003143", 0x18}, {&(0x7f00000001c0)="8ff32c68f21165868cc62e88491e11539795a64cad73fba6fa99a2ab1967bc58d4a7e64f022b223da767c94a6d4b349641ccb8f6a2d85e420f443ead2f1ccb149f77ff8c83fe34378ddf11287fe7ba7d5f939ccf2f3c98ffa7d556d9a4c557e56e5ddad536d56f5e9f2fa11401f149ef4afc694528af19b5160338c8fee9ee39ecf0ae557d6a4e4c81d250f808e3ca09acff750b6d9c60001efff7162aff0042e1567d2a51d195bdaece436f4dac278c344c2c2d4d7a2a965cb7f0e11e42d8a2", 0xc0}, {&(0x7f0000000280)="16c2cd76f0448e9bc9b9f410e9a5c59515b802ee82822e05f30ab84af9c4207a97037f2fe392064058894c9161b274387bf600f371adccc6f03366260f69bc383c0bd6040b370a2cf26a15caf48620b6b5d2548537071fd836c6549ad85a91def7645821d4adefa79f5aab006b32ced37e680a63e020219a2880f4c5409727041240e1095a2df5285f5c8344fd6c6b", 0x8f}, {&(0x7f0000000340)="be2c9d0d10673f619ec4e1a4d3150e184aa3f5fbc188ab737ac32aba5b6871ccd8d7c8b6bfca98", 0x27}], 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1c0, 0x800}, 0x800) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)="79438532410463ededc20536d2e0497f4f76db4612a9ff426b95c794fd35e6be186467751fa63fd4f85376b1c3eded575e338654f280379d9f0ff990f9d5e2a299914af7f776343a4a900bf6867189cd9b9ba31955") sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f00000000c0)={0x20, 0x28, 0x1, 0x0, 0x0, {0x1}, [@nested={0xc, 0x0, [@typed={0x4107, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 02:40:43 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000000c0)) r1 = fcntl$getown(r0, 0x9) capset(&(0x7f0000000100)={0x20071026, r1}, &(0x7f0000000140)={0x8, 0xfffffffffffffffb, 0x9, 0x7fff, 0xfff, 0x10001}) r2 = signalfd4(r0, &(0x7f0000000180)={0x6c6}, 0x8, 0x800) setsockopt$inet_dccp_buf(r0, 0x21, 0x0, &(0x7f00000001c0)="67257bdee489416ca97ccfef5589685f7fa368f365ec74919077f44e915e80141a5ede5c408d6b9357b22bd66aa683db9d217d1b617b50c3d6e7fbaac92f5a7f5cd4cafdcd0ee76eaf6e0b2f51860b3d64dba57c805e53c342acbdb92654613b1c7f40ea3ef38c04598096041366d67badb791d532670aee4266c4b5c8f1958c30dc83cd4962158342a7e2e5e0c0b021192add77dc59ecbe5c3876ca12", 0x9d) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)) recvmmsg(r0, &(0x7f0000001500)=[{{&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000440)=""/84, 0x54}], 0x2, &(0x7f0000000500)=""/4096, 0x1000, 0xffff}, 0x100}], 0x1, 0x0, &(0x7f0000001540)={0x0, 0x1c9c380}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000001580)) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000015c0)=0x3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001600)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000001640)={0x6, 0xff27077bbe092b10, 'client1\x00', 0x4, "dbf135cbdac507de", "625435a3f64d95a9e679bfcd3e2e5798ee56574698e623f2292afb4ba9620a4e", 0x3, 0x1000}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001700), &(0x7f0000001740)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001780)={'team_slave_1\x00', 0x1000}) times(&(0x7f00000017c0)) seccomp(0x1, 0x1, &(0x7f0000001840)={0x8, &(0x7f0000001800)=[{0x1, 0x8, 0x40}, {0x183, 0xfffffffffffffffe, 0x7, 0x6}, {0xfffffffffffff800, 0x2, 0x0, 0x100}, {0x290, 0x2, 0x7, 0x5}, {0x4, 0x8, 0x1, 0x7fffffff}, {0x4, 0x6, 0x80, 0x9}, {0xd1, 0x8, 0x1, 0xffff}, {0x400, 0x8, 0xa87, 0x8}]}) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000001880)={0xfffffffffffffc6b, 0x162}) bind$inet6(r0, &(0x7f00000018c0)={0xa, 0x4e22, 0x9d, @mcast1={0xff, 0x1, [], 0x1}, 0x200}, 0x1c) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000001900), &(0x7f0000001980)=0x60) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000019c0)=""/185, &(0x7f0000001a80)=0xb9) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001ac0)='tls\x00', 0x4) sendmsg$alg(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001b00)="7f11e9f94f62b07c6ee1a136b34cb9bd62cb0e81586592e0f7b66b9cf83ee9f3287b8048b1729057ffc32f93771d18e406a6b0938fdbf0b24cad960a7adcc5ff2872a6b793f4b49665036914edb2ee71f9dfb87b0f9a07dd7d2b97409b1036cec9ce9b90b12ca0db1774e3d1461bb433adf1c44abd6d253083410280ea9bbff7b0c41e503f79e604dc9b8ae9e9bf9e627eae60dc05cef91481a2a9a773", 0x9d}], 0x1, 0x0, 0x0, 0x20008000}, 0x15) write$binfmt_aout(r2, &(0x7f0000001c40)={{0x10f, 0x7fffffff, 0xffffffff, 0x35a, 0x203, 0x7, 0x31b, 0x9}, "c59d2d00afc6cf969e67da98733fe23febf67c67ed8aa86570447b68b5b1e7baa9c5f4ca2891bc00f325a139ca4d5365b3a2eaf3dddbf1a311a582849728d2ece31990f4352c5961ea8ee8d06de848bf77090a7eae560ac7799b10420e01f159f69a2a0fd46ae093d50fd3bbfaf31676d471d834e680840ae03b", [[], [], [], [], [], [], []]}, 0x79a) rt_sigprocmask(0x2, &(0x7f0000002400)={0x80}, &(0x7f0000002440), 0x8) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000024c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x28, r3, 0x0, 0x70bd26, 0x25dfdbfd, {0x2}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4084) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002600)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000002700)=0xe8) fstat(r0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000025c0)='./file1\x00', r4, r5, 0x800) 02:40:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0xfdfdffff00000000, 0x0, &(0x7f0000000480)}) 02:40:43 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0xfffff000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:43 executing program 4: r0 = socket$netlink(0xa, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x16) r2 = dup2(r1, r0) getsockopt$sock_buf(r2, 0x1, 0x2c, &(0x7f0000000000)=""/68, &(0x7f0000000080)=0x44) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f00000000c0)={0xfffffffffffffeff, 0x80, 0xffffffff, 0x80000001, 0x6, 0x10000}) 02:40:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000640)="070a052208c559771f", 0x9) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x7, 0x4, 0x550, 0x140, 0x358, 0x358, 0x46c, 0x46c, 0x46c, 0x4, &(0x7f0000000080), {[{{@arp={@multicast2=0xe0000002, @empty, 0xffffffff, 0xffffff00, @empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0xff, 0xff, 0x0, 0xff]}, 0x3, 0x6, 0x69bb, 0x5, 0x6, 0x5, 'veth0_to_bridge\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x22}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x100000000, @rand_addr=0x3, 0x2, 0x1}}}, {{@uncond, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x3, 'system_u:object_r:ping_exec_t:s0\x00'}}}, {{@arp={@remote={0xac, 0x14, 0x14, 0xbb}, @empty, 0xffffff00, 0xff, @mac=@random="80db361d4176", {[0xff, 0xff, 0xff, 0x0, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x3, 0x1, 0x1, 0x9b, 0xffff, 0x3, 'syzkaller0\x00', 'yam0\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xf0, 0x114}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x5}}}], {{[], 0xc0, 0xe4}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x59c) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)=""/10, &(0x7f0000000040)=0xa) 02:40:43 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x8000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) sendfile(r0, r1, &(0x7f0000493000), 0xfffffffd) [ 720.073328] binder: release 14920:14929 transaction 1702 out, still active [ 720.080598] binder: unexpected work type, 4, not freed [ 720.085969] binder: undelivered TRANSACTION_COMPLETE 02:40:43 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0xfcffffff}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:43 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffff9c}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x9, 0xffff, 0xffffffff80000001, 0xffff, 0x3178}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6], 0xf000}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001300)=ANY=[@ANYBLOB="15040200009b9d07cf"], 0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:40:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'dummy0\x00', {0x2, 0x4e21, @broadcast=0xffffffff}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000636000)=0x2, 0x4) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x141000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) 02:40:43 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{&(0x7f0000000880)=@ipx, 0x80, &(0x7f0000000b80)=[{&(0x7f0000003040)=""/4096, 0x1000}], 0x1, &(0x7f0000000c40)=""/99, 0x63}}], 0x1, 0x0, &(0x7f0000004fc0)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=ANY=[@ANYBLOB="1000006eb3d29903046d00f4"], 0x10}}], 0x2, 0x8000) 02:40:43 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x4000, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x7fffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in=@multicast2}}}, &(0x7f0000000200)=0xe8) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000700000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f00006ff000/0x1000)=nil, 0x1000}, 0x3}) 02:40:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) [ 720.216973] binder: 14920:14929 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer 02:40:43 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0xf000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 720.297163] binder_alloc: 14920:14929 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 720.305805] binder: 14920:14929 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:44 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000000080)='/dev/net/tun\x00') r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x80080) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 02:40:44 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x207e, 0x0) dup2(r0, r1) mknod(&(0x7f0000000040)='./file0\x00', 0x100, 0x5) [ 720.377719] binder: BINDER_SET_CONTEXT_MGR already set [ 720.412312] binder: 14920:14970 ioctl 40046207 0 returned -16 02:40:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lseek(r0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0000101}]}) 02:40:44 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000063fc900fff9000a"], 0xa) r1 = dup(r0) r2 = geteuid() quotactl(0xf4d8, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)="ef4c0dceaaf9f94a6301d733dc1b76d0d3e90d4efb58114792198b3ac844d0690fd23a9ee7fd20a985c69fd24d7e43") getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000040)) [ 720.453802] binder: 14920:14970 got transaction to invalid handle [ 720.453833] binder_alloc: 14920: binder_alloc_buf, no vma [ 720.460293] binder: 14920:14970 transaction failed 29201/-22, size 0-0 line 2852 [ 720.465983] binder: 14920:14929 transaction failed 29189/-3, size 24-8 line 2967 02:40:44 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x4800}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 720.740766] binder: 14920:14970 BC_FREE_BUFFER u0000000020ffc000 no match [ 720.754913] binder: undelivered TRANSACTION_ERROR: 29189 [ 720.761755] binder: 14920:14970 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x500, 0x0, &(0x7f0000000480)}) 02:40:44 executing program 7: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000ffffac1414bb0000000000000000000000000000000000000000000000000000000000000000626f6e643000000000000000000000007663616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006970365f7674693000000000000000006772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x3) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='user.syz\x00', &(0x7f0000000140)='^,\'&cgroup*,,\x00', 0xe, 0x3) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) 02:40:44 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x3, &(0x7f0000000980)) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)='\x00', 0x1, 0x0) 02:40:44 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x6c00}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="0f33"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:40:44 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x3ff, 0xe0, 0x3, 0x80, 0x3f, 0x994, 0x4, 0x5, 0x9f, 0x4}) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/238, 0x49c}], 0x1) 02:40:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_newrule={0x48, 0x20, 0x803, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@FRA_SRC={0x14, 0x2}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_to_team\x00'}]}, 0x48}, 0x1}, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x80000) connect$netlink(r1, &(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 720.789840] binder: undelivered TRANSACTION_ERROR: 29201 [ 720.795906] binder: send failed reply for transaction 1705 to 14920:14929 [ 720.841552] binder: undelivered TRANSACTION_COMPLETE [ 720.846960] binder: undelivered TRANSACTION_ERROR: 29189 [ 720.852532] binder: send failed reply for transaction 1702, target dead 02:40:44 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x10000, 0x400140) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000000), 0x0) 02:40:44 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x24080, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd44, 0x3, 0x14, 0x8, "b4f942aec084238488585389b776319074ab5a53babd026f49eff5fa0126f4de3659d363a5c51ac31344fd15e96d8d24beab3ef71d62b5d99e05077ac555ff91", "8d06f7e9e7d0f5b9ff17017fb44b8b5610482365117a0cea85bc5d30145751f6", [0xfffffffffffffc00, 0x4]}) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 720.888248] binder: release 15021:15022 transaction 1709 out, still active [ 720.895624] binder: unexpected work type, 4, not freed [ 720.901200] binder: undelivered TRANSACTION_COMPLETE [ 720.937287] binder: 15021:15022 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 720.995931] binder_alloc: 15021:15022 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 721.004706] binder: 15021:15022 BC_FREE_BUFFER u0000000020ffc000 no match [ 721.050944] binder: BINDER_SET_CONTEXT_MGR already set [ 721.070590] binder: 15021:15036 ioctl 40046207 0 returned -16 [ 721.080724] binder_alloc: 15021: binder_alloc_buf, no vma [ 721.085614] binder: 15021:15041 got transaction to invalid handle [ 721.086431] binder: 15021:15022 transaction failed 29189/-3, size 24-8 line 2967 [ 721.092686] binder: 15021:15041 transaction failed 29201/-22, size 0-0 line 2852 [ 721.109593] binder: 15021:15036 BC_FREE_BUFFER u0000000020ffc000 no match [ 721.118669] binder: undelivered TRANSACTION_ERROR: 29189 [ 721.123154] binder: 15021:15036 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000080)="0900d7fc377c8731", 0x8, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast=0xffffffff}, 0x10e) 02:40:44 executing program 6: r0 = memfd_create(&(0x7f0000000100)="885d292b00", 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x800000000ff8) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=""/84, 0x54) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000140), 0x8, &(0x7f0000000000/0x3000)=nil, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x400, 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='./file0\x00') 02:40:44 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0xfffffffffffff000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0x3, &(0x7f0000000080)=0x9, 0xfffffffffffffefb) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180), 0xfffffffffffffddc) 02:40:44 executing program 7: r0 = socket$nl_generic(0xa, 0x5, 0x84) fcntl$notify(r0, 0x402, 0x0) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], &(0x7f00000000c0)=0x8) 02:40:44 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r1, &(0x7f000082cf40), 0x203a0) close(r1) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000080)={0x7fffffff, 0x0, 0x1}) close(r0) 02:40:44 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="2400000052001f0014f9f407000904000a00071008000100040000000800000000000000", 0x24) write$binfmt_aout(r0, &(0x7f0000000280)={{0x1cf, 0x56e, 0x9, 0x5, 0x18b, 0xbdee, 0xce, 0x192c}, "c116a7e4edfc71763d8e5b671bdfb187dfc5c55380beec4ac7f5fdc2ff0d1bde1b5c50d58578183425ad1d2b300efd954e814191237e46bf66186f4ac57f", [[], [], [], [], [], []]}, 0x65e) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000000c0)=0x5042, 0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x7f, 0x101000) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000140)) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x42a, 0x101001) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000040)=0x101) 02:40:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x600, 0x0, &(0x7f0000000480)}) [ 721.157814] binder: undelivered TRANSACTION_ERROR: 29201 [ 721.164353] binder: send failed reply for transaction 1712 to 15021:15022 [ 721.212169] binder: undelivered TRANSACTION_COMPLETE [ 721.217475] binder: undelivered TRANSACTION_ERROR: 29189 [ 721.217520] binder: send failed reply for transaction 1709, target dead 02:40:44 executing program 7: mkdir(&(0x7f0000000040)='../file0\x00', 0x0) mount(&(0x7f0000000500)='../file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000480)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x14, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@newtfilter={0xf8, 0x2c, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, r1, {0xffe7}, {0xb, 0x5}, {0x0, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x3ff}, @filter_kind_options=@f_matchall={{0x10, 0x1, 'matchall\x00'}, {0xb4, 0x2, [@TCA_MATCHALL_ACT={0xb0, 0x2, @m_ipt={0xac, 0xa, {{0x8, 0x1, 'ipt\x00'}, {0x64, 0x2, [@TCA_IPT_TABLE={0x14, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x1c88c00000}, @TCA_IPT_HOOK={0x8, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x14, 0x1, 'mangle\x00'}]}, {0x38, 0x6, "a8a41f3cf53fa075fbd3b6039c7bed44366ea0805dee49a59bef3ea728f7d39b1243dd2ad7f42010ad36efadd7269535295648"}}}}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4048040}, 0x1) chdir(&(0x7f0000000780)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) getcwd(&(0x7f0000000140), 0xffffffffffffffc5) 02:40:44 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="5bcec6a8d0ad1e94f3f0d4d6a78987c14c4b60aab5a5c74686de99a0b202c46570755bcaefbf5c3125cbd4ef436295ed77ddc49cc5d7b047d030fdac5671e6432615d7b99d6eb7aa43cdc5da5dd5131fcb47f5a3c3176683fe415bd0c2449fc086329c3087992c86b0fa71e77b4c5ca64cb5b9b622498b46115a48c8f6a2988a3026eb41b6e918ee2ff01fb3434e8d6881eedb8282c2f4b07c7703c640d0ee9341addeedb9e4e56bbd8ec663aa756ded812bda4718a21fe8cda6989698e798c5a22acbc1434c479829cbb3a751e5f530dba6fe445ba820670546d4c208264ce02a07d7471db7a7701e8cde88edd7f5cebee3d95fbe1825247d1d8a2eb3d60f96") r1 = socket(0x10, 0x800, 0x6) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000001c0)=0x1004) unshare(0x3fffe) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, 0x188, 0x80, 0x7fff, 0x1000, 0x2}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e23, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x4}}}, 0x84) mq_getsetattr(r2, &(0x7f0000000000), &(0x7f0000000080)) [ 721.258011] binder: release 15059:15062 transaction 1716 out, still active [ 721.266275] binder: unexpected work type, 4, not freed [ 721.271667] binder: undelivered TRANSACTION_COMPLETE 02:40:44 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x1, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000080)={0x7, 0x9, 0x2, 0x8, 0x3}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04630440000000000684db3a62000000"], 0x0, 0x0, &(0x7f0000000280)}) 02:40:45 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000080)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0xa, 0x4000000004, 0x1, 0x7, 0x6}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f0000847f95), &(0x7f000089b000)}, 0x6) [ 721.391693] binder: 15059:15062 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 721.397215] Unknown ioctl 1075332591 02:40:45 executing program 1: r0 = inotify_init() ppoll(&(0x7f0000000000)=[{r0, 0x8320}, {r0, 0x180}, {r0, 0x4142}, {r0, 0x42}, {r0, 0x4100}, {r0, 0x430}, {r0, 0x2000}, {r0, 0x2040}], 0x8, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x7}, 0x8) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x40100, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) fcntl$notify(r0, 0x402, 0x1) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)={r2, 0x662, 0x2a, "a272f032dbebfc3cf34583e2f22bd5a0829b1125825ca5608b5ccce841f08a8adef07759663d9e186bbb"}, 0x32) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)=0xff, 0x4) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000280)=0x1, 0x4) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000002c0)={0x3, r1}) syz_open_dev$evdev(&(0x7f0000000300)='/dev/input/event#\x00', 0x0, 0x0) ioperm(0xdd, 0x6, 0x100) clock_nanosleep(0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c9c380}, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000380)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000003c0)={[0xb0, 0x0, 0xaa3, 0x3c, 0x0, 0x9, 0x10001, 0x200, 0x7, 0xfffffffffffffffe, 0x80000000, 0x2, 0x43, 0x8, 0x1], 0x2000, 0x20000}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000480)={{0xa, 0x4e24, 0xd8, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, {0xa, 0x4e20, 0x44, @empty, 0x1}, 0xffff, [0x8, 0x7f, 0x9, 0x20, 0x0, 0xfffffffffffffffa, 0xfb, 0x3ff]}, 0x5c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000500)=""/72, &(0x7f0000000580)=0x48) openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$LOOP_CLR_FD(r1, 0x4c01) r3 = request_key(&(0x7f0000000680)='pkcs7_test\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000700)='/dev/input/event#\x00', 0xfffffffffffffffe) keyctl$clear(0x7, r3) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00000007c0)={0x20, 0x2, 0x10000, 0x0, 0x0, [], [], [], 0x4, 0x7}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000900)=0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000940)={r2, @in6={{0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x18}, 0x4c2}}, 0x5, 0x2, 0x3f, 0x0, 0x88}, 0x98) ioctl$TIOCNXCL(r1, 0x540d) request_key(&(0x7f0000000a00)='keyring\x00', &(0x7f0000000a40)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000a80)='\x00', r3) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000b00)={{0x0, 0x6, 0x101, 0x80000000, '\x00', 0x5}, 0x6, 0x70, 0x7ff, r4, 0x3, 0x1, 'syz1\x00', &(0x7f0000000ac0)=['system\x00', '\x00', 'keyring\x00'], 0x10, [], [0xd75, 0x8, 0x8, 0xfffffffffffffffb]}) 02:40:45 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x4c000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 721.439441] binder: BINDER_SET_CONTEXT_MGR already set [ 721.445991] binder_alloc: 15059:15062 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 721.454793] binder: 15059:15062 BC_FREE_BUFFER u0000000020ffc000 no match [ 721.464674] binder: 15076:15078 ioctl 40046207 0 returned -16 02:40:45 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000f8dfe0)={{&(0x7f00002a9000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={&(0x7f0000a88000/0x4000)=nil, 0x4000}) [ 721.503426] binder: 15076:15078 unknown command 987464710 [ 721.532078] binder: 15076:15078 ioctl c0306201 200003c0 returned -22 [ 721.538945] binder: BINDER_SET_CONTEXT_MGR already set 02:40:45 executing program 7: r0 = socket(0x2, 0x3, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'brid\a\x00', 0x2}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x3}) [ 721.564357] binder_alloc: 15059: binder_alloc_buf, no vma [ 721.565748] binder: 15059:15089 ioctl 40046207 0 returned -16 [ 721.570119] binder: 15059:15062 transaction failed 29189/-3, size 24-8 line 2967 [ 721.585571] Unknown ioctl 1075332591 [ 721.592139] binder: BINDER_SET_CONTEXT_MGR already set [ 721.630936] binder: 15076:15095 ioctl 40046207 0 returned -16 [ 721.674290] binder: 15059:15094 got transaction to invalid handle [ 721.680881] binder: 15059:15094 transaction failed 29201/-22, size 0-0 line 2852 [ 721.689706] binder: 15059:15107 BC_FREE_BUFFER u0000000020ffc000 no match [ 721.698231] binder: 15059:15107 BC_FREE_BUFFER u0000000020ffc000 no match [ 721.764009] binder: undelivered TRANSACTION_ERROR: 29201 [ 721.773370] binder: send failed reply for transaction 1719 to 15059:15062 [ 721.789319] binder: undelivered TRANSACTION_COMPLETE [ 721.794687] binder: undelivered TRANSACTION_ERROR: 29189 [ 721.800242] binder: send failed reply for transaction 1716, target dead [ 721.814868] binder: undelivered TRANSACTION_ERROR: 29189 02:40:45 executing program 6: r0 = memfd_create(&(0x7f00000000c0)="05216370757365742ddd3a40286d696d655f74797065657468315c00", 0x3) write(r0, &(0x7f0000000040)='4', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) fcntl$addseals(r0, 0x409, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400000, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00') write$eventfd(r0, &(0x7f00000003c0), 0x8) 02:40:45 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x400300}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:45 executing program 7: r0 = socket$inet_sctp(0x2, 0x80000000001, 0x84) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='self\x00', 0x1) set_robust_list(&(0x7f0000000180)={0x0, 0x1, &(0x7f0000000140)={&(0x7f0000000100)}}, 0xc) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)=""/20) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f00000001c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000200)="18", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES32=0x0], @ANYBLOB="e6205fe03df843527bdd6b9f94606616a44a94f38d647e0ea843d5ba6cacc6b71b80478735295d842487153dcde56c63f24bf127f5a01bc25d0c2924bba25b6cf964e686054a5e1394f1decab0c0c63ea7f79270a99bf741024a3d648c80758496cf5352ddd649ac22493529"]], 0x8}, 0x20048845) 02:40:45 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0/bus\x00', 0x10) io_setup(0x2, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)='D', 0x1}]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x3000)=nil, 0x2000}, &(0x7f0000000080)=0xfffffffffffffe26) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) mkdir(&(0x7f0000218ff8)='./file0\x00', 0x0) r3 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x5, 0x20000) syz_open_dev$sndmidi(&(0x7f0000000340)='/dev/snd/midiC#D#\x00', 0x9, 0x2086d54eb8ffd3f0) ioctl$TCSBRKP(r3, 0x5425, 0xdbf4) setrlimit(0xc, &(0x7f00002ffff0)) mount(&(0x7f0000000140)='./file0/bus\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, &(0x7f0000000200)="812f2c82b25fb7c3077c501341d39b28d5824a1cc8a40e4005b51a8ebbecf9ebffa14aa5725eb73c000851b623d6415c8b9d2a89c9006460467681f81e6b28977d8128d2b4840c51442a51e10fb63e2cc50d7d99246835776250a8ab6238828be08cb1c128e1d22d0bfc6e3d1cfaa791c653d6cbc9b25012858abfecbd8847829cee21acaf70ad63f2c81ef580d19202b761494a1b33062e07e7129146bf3afe3674e500d2c44142f84772b03221468c4f35d1de75") syz_fuseblk_mount(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/bus\x00', 0xa000, 0x0, 0x0, 0x9, 0x9, 0x44002) 02:40:45 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/169) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/62) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x4, "ce48877e61486b3e956f6f8bb66383d559958b8166a32a1e4bb1377cc58c2c3627d25fbbac2192c90fa21510b53190212f32a3843ae35c68e96ed46ac15887c2", "90bd531907bb2ab29d1e38ec70b77e364d5391893f80276c1db9ed1e9afc5329", [0x3, 0x7fffffff]}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000001c0)=""/220) fcntl$notify(r0, 0x402, 0x8) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000002c0)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x7, &(0x7f0000000340)={0x0, 0x4, 0x20, 0x8001, r1}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x6, 0xff64e8ab19c87187, 0x1b, 0x10, "16b31d078ab869c5401f9a91f1ddf8e63f23bad076819558fec5b61a9ab8c8e16c92225fba3790e4e797477bf8b7836b71b2a4c28ddf3f3a2f2bc6b1e5cfcd4b", "2e550251c90fd80111f30cd6e3240c942fc7852c2783e4f61bd66f0b07e4142b", [0x5, 0x8000]}) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000440)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000480)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000540)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r4, 0x900, 0x70bd2a, 0x25dfdbfb, {0x2}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x7f}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x6c}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x4040) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000680)={0x1, 0x7, 0x1, {}, 0x3ef, 0x400}) recvfrom$inet(r0, &(0x7f0000000700)=""/4096, 0x1000, 0x12002, &(0x7f0000001700)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000001740)) write$binfmt_misc(r2, &(0x7f0000001780)={'syz1', "a022948538895819f30e64b0d4ccdd34549e8ce64650a212eb322356faa7d3b1c5fcc6bcabdc0d47badbf236018d3cb1fe9ff712d284fa38fc691d56c228027b774a084a45bcd8a6ac24b65ceb208c9dd96215315e352b2425d0c65028ab07add0568c824e99d17e89ce8ffda18a1700610b65e68a18103d483f2f6d8930ba5506d3af741705f3a94bf4aa796cdc067bb7cc1951fce65498a3a7031fe0343c02d693e53614e95f1414699dd773215294c6a1f9c6752f28c3b1e2829977428bbbef632f9f06290196401712db15b5d63bf88d491a9bc6ac437e91f8761029a25f290598"}, 0xe7) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000001880)=""/125, &(0x7f0000001900)=0x7d) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000001940)={0x3, 0x196e}) write$binfmt_misc(r3, &(0x7f0000001980)={'syz0', "54c3ae55d9a7e3d606d5df5ff0af0ac281b75f8446fa95bd2778372e9bf82a56de277128680ac4c17dd74694d629276e1596bcc5cc96e6373f8dca3b7ea46e1bc118500842b6a675cefc2a8ba6f2815bde8a4022de67e83b1642524201074adc5a80f03033d5533a829d2409dc866de3babbce901f145536f2f37de21166c514325df71651b4ed4f9e934f73"}, 0x90) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000001a40), &(0x7f0000001a80)=0x8) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001ac0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002b80)={r0, &(0x7f0000001b00)="364a07da80369b54dcbf348754c56b9e29c76f2bc56eac942cb6baa2a6262897218c0ba8ce12ffe665532aa9cebd516f3d70b2c64f4c12ca80e67234afd32b50a4964acf5b2e0702261a73a3f2160f128c0c8ab55d2de8a5729638600d93e480fcddc4bdfe0f254b787ad65e1ec17882157dcce63879e00d27", &(0x7f0000001b80)="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"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002dc0)={r0, &(0x7f0000002bc0)="7526ff103fd2d313d01ed88e60ae5b03a5c47202063148a5098de7b6057dde49a9271acb1e15cb6fc318eeabbb750770dea76391e2681e39fae3c73c82314c6b565445122d9f72b4784d34ffd18ac64c9526e019053199106a3cc9daeee6dfce0e42bd5ba45728db8eaee1b13adabbd19da8519433a49e010df087b6a1d7d28337370fc947a84922c8b13cee945362535be0f9807ecf98a78a5b991097886cb1713aab8dccde65e209f16e73837f137fcc391aa243369698f16b441308b690858bc95feecb9748c193fdbb3111d68f251705b3b8", &(0x7f0000002cc0)="b4495a64f6798bd94f716a13956f9bfc3063671106be0b6f36641eea2a122c5e21d0c48a1ef53480f3327b3a4d1459e5586ffa68c2553ba28a6adedacc3a2a1b6f3d74beb82be108b90629fdc24669d458d8154722524ab007fff5d61b48bce5f17b81582c5ab8e4b884774ff91c48a7f81043612cf27cd5198178bd2cac175e7000eede4390bc66c2f21cfbb010cf242a3cf86c9cf8219f060a79e48ee97e41b47c7cd1e2fd56ea58fd24f6ec3633d0484b6bb37af95448cb9001c184ba0ed4afe89ce38d255921ce9bb56d9e", 0x1}, 0x20) fadvise64(r3, 0x0, 0x8, 0x5) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002e40)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000002f40)={&(0x7f0000002e00)={0x10}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x54, r5, 0x609, 0x70bd2c, 0x25dfdbfd, {0x4}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xd9cf}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000002f80)={0x0}, &(0x7f0000002fc0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000003000)={r6, 0x4a12}, &(0x7f0000003040)=0x8) 02:40:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x4c, 0x0, &(0x7f0000000480)}) 02:40:45 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000000000000) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x400) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x7, 0x1f, 0x7ff}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x1, 0x7, 0x1}, &(0x7f0000000100)=0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000002480)={@local={0xfe, 0x80, [], 0xaa}}) 02:40:45 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x48000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:45 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x4001, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000140)=0x14000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$VT_RELDISP(r0, 0x5605) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x3, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x9) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000000)) 02:40:45 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x3f2, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) rt_sigpending(&(0x7f0000000140), 0x287) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x16}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) [ 722.059569] binder: release 15130:15132 transaction 1724 out, still active [ 722.066707] binder: unexpected work type, 4, not freed [ 722.072050] binder: undelivered TRANSACTION_COMPLETE [ 722.082458] validate_nla: 9 callbacks suppressed [ 722.082470] netlink: 'syz-executor0': attribute type 16 has an invalid length. 02:40:45 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x6000000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:45 executing program 4: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000500000010d10200cf", 0x1f) setsockopt$inet_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000040)="8ea878cd6b7eea71411ec76ca33f176968b78efdb74217ca34cae023a27600e8b03193b0acff4ab177946b7d9d735e5b37a58888ce9f510a432f33effd2ba0b321e546d4b15a81882836d1e25eb01f6e63c29587a3a38393b973074c55555d963c6d4c088a1fc9f1ac576c4797e74d594418b6eab7ea27e945fffdfdd8dd998ebe98b0402dd1cb1ebda5419903f123f0c0b0e926c402519b8a92f209f29c733f6efc188ab9a0734c48", 0xa9) 02:40:45 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000015ff8)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) listen(r0, 0x0) [ 722.181745] binder: 15130:15132 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 722.213545] binder_alloc: 15130:15132 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 722.222236] binder: 15130:15132 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:45 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x80000, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000002c0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r1, 0x2000000000) ioctl$TIOCCONS(r2, 0x541d) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x20100, 0x100) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x12200, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000240)={0x7fffffff, 0x8000, 0x8, 0xffffffff, 0x7fffffff, 0x200}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xffff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000180)={r5, 0x6b, "d7acbe5d9ab130f98f2399d89cf4132bc95cea3f0d968f2967911ff1111977e97aca21aec8140fc8bf1a3619af1af2ffe09133aac6d1da0439ece60f871326c786493c02ad8f2baa60787646f4c7bf65c7a76fd66854c10f11ff49d06c3aacc8701d272683128be95c708b"}, &(0x7f0000000200)=0x73) openat(r4, &(0x7f0000000080)='./file0\x00', 0x40000, 0x0) [ 722.250624] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 722.269724] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 722.317424] binder_alloc: binder_alloc_mmap_handler: 15130 20001000-20004000 already mapped failed -16 [ 722.336688] binder: BINDER_SET_CONTEXT_MGR already set [ 722.363050] netlink: 'syz-executor4': attribute type 5 has an invalid length. [ 722.375059] binder: 15130:15163 ioctl 40046207 0 returned -16 [ 722.385330] binder_alloc: 15130: binder_alloc_buf, no vma [ 722.391167] binder: 15130:15132 transaction failed 29189/-3, size 24-8 line 2967 [ 722.391661] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 722.412264] binder_alloc: 15130: binder_alloc_buf, no vma [ 722.417998] binder: 15130:15167 transaction failed 29189/-3, size 0-0 line 2967 [ 722.426206] netlink: 'syz-executor4': attribute type 5 has an invalid length. [ 722.453842] binder: 15130:15156 BC_FREE_BUFFER u0000000020ffc000 no match [ 722.480683] binder: undelivered TRANSACTION_ERROR: 29189 [ 722.489719] binder: 15130:15156 BC_FREE_BUFFER u0000000020ffc000 no match 02:40:46 executing program 5: clone(0x1771e000, &(0x7f0000000280)="3e1b69cc14aec7f1fd5b7d9b737530eaaad9afd9686bdc3537324020be5d8983c9ac69712a35e6213f9d3806ba7d8b2a1ed244d7073d43c1fa13907c049fef1791a20d9b55a37b9f3358c9dc949dfe4a3051daa14f85029af5cc4c73d8f10de38b83621d7fd1d5186da155ae5245d79e467853e909639bfcf0f02c2c7dbd4e8838e3b25f8d1316041873081f29618db2d9b377563e81266f52852bc28b8f68720b027388ff100ad377273cd799b83286421616b144aa0f8fc965fcf3f6d2d90a8d743582293682a30e6f46d4e8784c950ec54beb9ddffe22f749c8f086cfc9f8d28c159ff4d84c452428e2b9498e", &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000080)="5535bb2c34431fd4d951e8650b7ffce26a884bd8") r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x40000) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) 02:40:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) sendmmsg$alg(r1, &(0x7f0000001f80)=[{0x0, 0x0, &(0x7f0000001ec0), 0x0, &(0x7f0000001f00)}], 0x1, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x4, 0x401) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) io_getevents(r2, 0xffffffffffff2a1b, 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f0000000140)={r3, r4+30000000}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0xffffffffffffffff, 0x1, 0x0, 0x1ff, &(0x7f0000000200)=[0x0], 0x1}, 0x20) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000300)=0x2) [ 722.539287] binder: release 15130:15132 transaction 1727 out, still active [ 722.546471] binder: undelivered TRANSACTION_COMPLETE [ 722.551668] binder: undelivered TRANSACTION_ERROR: 29189 [ 722.557202] binder: send failed reply for transaction 1724, target dead [ 722.564465] binder: send failed reply for transaction 1727, target dead 02:40:46 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) utime(&(0x7f00000001c0)='./control\x00', &(0x7f0000000200)={0xfff, 0x3}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x1, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') unlink(&(0x7f0000000140)='./control/file0\x00') lsetxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00', &(0x7f0000000100)='md5sum\x00', 0x7, 0x0) close(r1) 02:40:46 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x20001, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) syz_emit_ethernet(0x2e, &(0x7f0000001040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0xffffff88, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @rand_addr=0xfffffffffffffffe, {[@timestamp={0x44, 0x4}]}}, @igmp}}}}, 0x0) 02:40:46 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x7000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:46 executing program 6: r0 = socket$inet(0x2, 0x800000000002, 0x0) recvmsg(r0, &(0x7f0000002680)={&(0x7f00000033c0)=@hci, 0x80, &(0x7f0000002600)=[{&(0x7f0000001380)=""/125, 0x7d}, {&(0x7f0000003440)=""/4096, 0x37c}], 0x2, &(0x7f00000014c0)=""/251, 0xfb}, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) r1 = syz_open_dev$mice(&(0x7f0000001440)='/dev/input/mice\x00', 0x0, 0x125401) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000001480)=0x8, 0x4) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000000100)}, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000000)={0x2, 0x3, 0x4, 0x3, 0x95ee, 0x3}) 02:40:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0xffffff7f00000000, 0x0, &(0x7f0000000480)}) 02:40:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000000000000000000000000000000000005821c6d7ae64851e7e2b18ad88ca52dd3f53afc74f0fa2426525f5531a18069eb6f115bf7f9d57a6057e6ee0845bf94557f8cd9ff86d78aba69092202c31c6bf09aaf02bb05e61ee7b7f7f6886975b2f887ed28e500d7f24eacf91e936579d4678b9bf0df7bec326dcd92d03c6ef2eb9e92f0c532cfc0c535822be2d2869ea5d07598624da45c266bd345222cdf12f2eb0fcb82770679619ec472128b5f73a656c71020fb35"], 0x14}, 0x1}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x80000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 02:40:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic="99"]}]}, 0x1c}, 0x1}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x100000000, 0x10002) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000100)=r2) 02:40:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, &(0x7f00000001c0), 0x8) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140)}]) 02:40:46 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101100, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x7}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r1, 0x66a1, 0x30}, &(0x7f00000002c0)=0xc) r2 = socket(0x11, 0x80002, 0x0) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) ppoll(&(0x7f0000000080)=[{r2, 0xb000}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100), 0x8) [ 723.121469] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 723.123236] binder: release 15193:15195 transaction 1731 out, still active [ 723.136270] binder: unexpected work type, 4, not freed [ 723.141603] binder: undelivered TRANSACTION_COMPLETE 02:40:46 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x18100, 0x0) ioctl$TIOCGETD(r0, 0x80045439, &(0x7f0000000040)) 02:40:46 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x600000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) 02:40:46 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="06", 0x1, r1) r3 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000580)="b3", 0x1, r1) keyctl$update(0x2, r3, &(0x7f0000000340)="df02754677212dfc3e2abcb244e22773e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd9", 0xc0) socket$vsock_dgram(0x28, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r3, r2}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f00000001c0)={'tgr160-generic\x00'}}) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x4, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) sched_getattr(r4, &(0x7f0000000240), 0x11, 0xfffffffffffffffc) 02:40:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x400001, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) splice(r0, &(0x7f0000000000)=0x2, r0, &(0x7f0000000040)=0x281, 0x8, 0xa) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x1000, "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"}, &(0x7f0000000080)=0x1008) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000000c0)={{0x8, 0x2}, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001240)={r2, 0x9, 0x80000004}, &(0x7f0000001280)=0x10) [ 723.186417] binder: 15193:15195 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 723.216188] binder_alloc: 15193:15195 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 723.225000] binder: 15193:15195 BC_FREE_BUFFER u0000000020ffc000 no match [ 723.245567] binder: BINDER_SET_CONTEXT_MGR already set [ 723.263158] binder: 15193:15217 ioctl 40046207 0 returned -16 [ 723.288425] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 723.309543] binder_alloc: 15193: binder_alloc_buf, no vma [ 723.315411] binder: 15193:15195 transaction failed 29189/-3, size 24-8 line 2967 02:40:47 executing program 7: ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000080)=0x10001) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) flock(r0, 0x800000000000007) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) 02:40:47 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="000000f8000000040100000004000000ac0514bbac1414bb000007ff7f000001"], 0x20) r1 = syz_fuseblk_mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x6001, 0xee00, 0xee01, 0x6, 0x5, 0x1184412) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000280)=""/83, 0x53}], 0x1, 0x18) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000440)=""/91, 0x5b) r3 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}, 0x4, 0x1, 0xff, 0x1, 0x7ff, 0x5, 0x5}, 0x20) bind$unix(r3, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000500)={0xa, 0x4, 0xfa00, {r4}}, 0xc) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @rand_addr}, @in6}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) 02:40:47 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x2000000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x28}, 0x1}, 0x0) [ 723.337852] binder: 15193:15217 got transaction to invalid handle [ 723.345196] binder: 15193:15217 transaction failed 29201/-22, size 0-0 line 2852 [ 723.362294] binder: 15193:15233 BC_FREE_BUFFER u0000000020ffc000 no match [ 723.390841] ================================================================== [ 723.398743] BUG: KASAN: slab-out-of-bounds in tgr160_final+0x93/0xe0 [ 723.405313] Write of size 20 at addr ffff88019aa98054 by task syz-executor1/15230 [ 723.413035] [ 723.414687] CPU: 0 PID: 15230 Comm: syz-executor1 Not tainted 4.18.0-rc2+ #21 [ 723.418897] binder: 15193:15233 BC_FREE_BUFFER u0000000020ffc000 no match [ 723.421973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.421985] Call Trace: [ 723.422009] dump_stack+0x1c9/0x2b4 [ 723.422030] ? dump_stack_print_info.cold.2+0x52/0x52 [ 723.422045] ? printk+0xa7/0xcf [ 723.422063] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 723.422082] ? tgr160_final+0x93/0xe0 [ 723.422100] print_address_description+0x6c/0x20b [ 723.467649] ? tgr160_final+0x93/0xe0 [ 723.471740] kasan_report.cold.7+0x242/0x2fe [ 723.476189] check_memory_region+0x13e/0x1b0 [ 723.480624] memcpy+0x37/0x50 [ 723.484018] tgr160_final+0x93/0xe0 [ 723.487669] ? tgr128_final+0x170/0x170 [ 723.491846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 723.498032] ? tgr192_update+0x18a/0x520 [ 723.502131] ? kasan_unpoison_shadow+0x35/0x50 [ 723.507009] crypto_shash_final+0x104/0x260 [ 723.511362] ? tgr128_final+0x170/0x170 [ 723.515375] __keyctl_dh_compute+0x1198/0x1be0 [ 723.519991] ? copy_overflow+0x30/0x30 [ 723.521251] binder: undelivered TRANSACTION_ERROR: 29201 [ 723.523922] ? lock_release+0xa30/0xa30 [ 723.523940] ? check_same_owner+0x340/0x340 [ 723.523974] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 723.523990] ? _copy_from_user+0xdf/0x150 [ 723.524009] compat_keyctl_dh_compute+0x2d0/0x400 [ 723.538503] binder: send failed reply for transaction 1734 to 15193:15195 [ 723.543371] ? __x32_compat_sys_keyctl+0x3b0/0x3b0 [ 723.543401] ? kzfree+0x28/0x30 [ 723.543419] __ia32_compat_sys_keyctl+0x137/0x3b0 [ 723.543439] do_fast_syscall_32+0x34d/0xfb2 [ 723.543457] ? do_int80_syscall_32+0x890/0x890 [ 723.543473] ? _raw_spin_unlock_irq+0x27/0x70 [ 723.543488] ? finish_task_switch+0x1d3/0x890 [ 723.543505] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 723.543521] ? syscall_return_slowpath+0x31d/0x5e0 [ 723.543538] ? sysret32_from_system_call+0x5/0x46 [ 723.605647] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 723.610490] entry_SYSENTER_compat+0x70/0x7f [ 723.614883] RIP: 0023:0xf7f81cb9 [ 723.618224] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 723.637478] RSP: 002b:00000000f5f7d0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000120 [ 723.645190] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000020000200 [ 723.652444] RDX: 0000000020a53ffb RSI: 0000000000000005 RDI: 0000000020c61fc8 [ 723.659707] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 723.666968] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 723.674231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 723.681491] [ 723.683111] Allocated by task 15230: [ 723.686814] save_stack+0x43/0xd0 [ 723.690262] kasan_kmalloc+0xc4/0xe0 [ 723.693959] __kmalloc+0x14e/0x760 [ 723.697485] __keyctl_dh_compute+0x1000/0x1be0 [ 723.702224] compat_keyctl_dh_compute+0x2d0/0x400 [ 723.707050] __ia32_compat_sys_keyctl+0x137/0x3b0 [ 723.711882] do_fast_syscall_32+0x34d/0xfb2 [ 723.716186] entry_SYSENTER_compat+0x70/0x7f [ 723.720570] [ 723.722178] Freed by task 4560: [ 723.725441] save_stack+0x43/0xd0 [ 723.728877] __kasan_slab_free+0x11a/0x170 [ 723.733103] kasan_slab_free+0xe/0x10 [ 723.736895] kfree+0xd9/0x260 [ 723.740000] kvfree+0x61/0x70 [ 723.743098] __vunmap+0x326/0x460 [ 723.746533] vfree+0x68/0x100 [ 723.749626] xt_compat_flush_offsets+0x159/0x280 [ 723.754376] compat_do_ipt_get_ctl+0x4b9/0xc90 [ 723.758943] compat_nf_getsockopt+0x9e/0x140 [ 723.763335] compat_ip_getsockopt+0x218/0x300 [ 723.767910] inet_csk_compat_getsockopt+0x97/0x120 [ 723.772820] compat_tcp_getsockopt+0x49/0x80 [ 723.777212] compat_sock_common_getsockopt+0xb4/0x150 [ 723.782388] __compat_sys_getsockopt+0x1b6/0x890 [ 723.787128] __ia32_compat_sys_socketcall+0xb35/0x1090 [ 723.792389] do_fast_syscall_32+0x34d/0xfb2 [ 723.796691] entry_SYSENTER_compat+0x70/0x7f [ 723.801084] [ 723.802695] The buggy address belongs to the object at ffff88019aa98040 [ 723.802695] which belongs to the cache kmalloc-32 of size 32 [ 723.815250] The buggy address is located 20 bytes inside of [ 723.815250] 32-byte region [ffff88019aa98040, ffff88019aa98060) [ 723.826933] The buggy address belongs to the page: [ 723.831847] page:ffffea00066aa600 count:1 mapcount:0 mapping:ffff8801da8001c0 index:0xffff88019aa98fc1 [ 723.841283] flags: 0x2fffc0000000100(slab) [ 723.845515] raw: 02fffc0000000100 ffffea00065d83c8 ffffea0006730a48 ffff8801da8001c0 [ 723.853385] raw: ffff88019aa98fc1 ffff88019aa98000 0000000100000018 0000000000000000 [ 723.861259] page dumped because: kasan: bad access detected [ 723.866946] [ 723.868553] Memory state around the buggy address: [ 723.873467] ffff88019aa97f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 723.880816] ffff88019aa97f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 723.888157] >ffff88019aa98000: fb fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc [ 723.895507] ^ [ 723.901723] ffff88019aa98080: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 723.909067] ffff88019aa98100: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 723.916409] ================================================================== [ 723.923744] Disabling lock debugging due to kernel taint [ 723.929825] Kernel panic - not syncing: panic_on_warn set ... [ 723.929825] [ 723.934491] binder: undelivered TRANSACTION_COMPLETE [ 723.937192] CPU: 0 PID: 15230 Comm: syz-executor1 Tainted: G B 4.18.0-rc2+ #21 [ 723.937200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.937205] Call Trace: [ 723.937225] dump_stack+0x1c9/0x2b4 [ 723.937238] ? dump_stack_print_info.cold.2+0x52/0x52 [ 723.937256] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 723.942359] binder: undelivered TRANSACTION_ERROR: 29189 [ 723.950987] panic+0x238/0x4e7 [ 723.951001] ? add_taint.cold.5+0x16/0x16 [ 723.951014] ? do_raw_spin_unlock+0xa7/0x2f0 [ 723.951027] ? do_raw_spin_unlock+0xa7/0x2f0 [ 723.951041] ? tgr160_final+0x93/0xe0 [ 723.951058] kasan_end_report+0x47/0x4f [ 723.960425] binder: send failed reply for transaction 1731, target dead [ 723.962975] kasan_report.cold.7+0x76/0x2fe [ 723.962994] check_memory_region+0x13e/0x1b0 [ 724.021076] memcpy+0x37/0x50 [ 724.024168] tgr160_final+0x93/0xe0 [ 724.027775] ? tgr128_final+0x170/0x170 [ 724.031735] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 724.037254] ? tgr192_update+0x18a/0x520 [ 724.041304] ? kasan_unpoison_shadow+0x35/0x50 [ 724.045868] crypto_shash_final+0x104/0x260 [ 724.050172] ? tgr128_final+0x170/0x170 [ 724.054131] __keyctl_dh_compute+0x1198/0x1be0 [ 724.058698] ? copy_overflow+0x30/0x30 [ 724.062579] ? lock_release+0xa30/0xa30 [ 724.066532] ? check_same_owner+0x340/0x340 [ 724.070843] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 724.076365] ? _copy_from_user+0xdf/0x150 [ 724.080514] compat_keyctl_dh_compute+0x2d0/0x400 [ 724.085339] ? __x32_compat_sys_keyctl+0x3b0/0x3b0 [ 724.090256] ? kzfree+0x28/0x30 [ 724.093520] __ia32_compat_sys_keyctl+0x137/0x3b0 [ 724.098348] do_fast_syscall_32+0x34d/0xfb2 [ 724.102912] ? do_int80_syscall_32+0x890/0x890 [ 724.107485] ? _raw_spin_unlock_irq+0x27/0x70 [ 724.111961] ? finish_task_switch+0x1d3/0x890 [ 724.116439] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 724.121960] ? syscall_return_slowpath+0x31d/0x5e0 [ 724.126878] ? sysret32_from_system_call+0x5/0x46 [ 724.131707] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 724.136530] entry_SYSENTER_compat+0x70/0x7f [ 724.140927] RIP: 0023:0xf7f81cb9 [ 724.144280] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 724.163900] RSP: 002b:00000000f5f7d0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000120 [ 724.171598] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000020000200 [ 724.178935] RDX: 0000000020a53ffb RSI: 0000000000000005 RDI: 0000000020c61fc8 [ 724.186185] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 724.193436] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 724.200684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 724.208504] Dumping ftrace buffer: [ 724.212028] (ftrace buffer empty) [ 724.215713] Kernel Offset: disabled [ 724.219321] Rebooting in 86400 seconds..