, 0x35, 0x30], 0x2d, [0x75, 0x7f, 0x36, 0x64], 0x2d, [0x7b, 0x66, 0x0, 0x39], 0x2d, [0x36, 0x7d, 0x39, 0x7f], 0x2d, [0x62, 0x63, 0x32, 0x3f, 0x36, 0x77, 0x33, 0x7b]}}}, {@subj_role={'subj_role', 0x3d, '-'}}, {@euid_gt={'euid>', r5}}]}}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, 0x0) pivot_root(0x0, &(0x7f00000002c0)='./file0\x00') 17:00:49 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x4, 0x0) 17:00:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4138ae84, &(0x7f0000000040)) r4 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) mount$9p_virtio(&(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x800000, &(0x7f0000000300)={'trans=virtio,', {[{@posixacl='posixacl'}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x0, 0x7b, 0x35, 0x36, 0x38, 0x35, 0x30], 0x2d, [0x75, 0x7f, 0x36, 0x64], 0x2d, [0x7b, 0x66, 0x0, 0x39], 0x2d, [0x36, 0x7d, 0x39, 0x7f], 0x2d, [0x62, 0x63, 0x32, 0x3f, 0x36, 0x77, 0x33, 0x7b]}}}, {@subj_role={'subj_role', 0x3d, '-'}}, {@euid_gt={'euid>', r5}}]}}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, 0x0) pivot_root(0x0, &(0x7f00000002c0)='./file0\x00') 17:00:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="00000000331cf837bcea258233bc766bd67f700500000000"]], 0x0, 0x0, &(0x7f0000000300)}) [ 309.551077] binder_alloc: 10239: binder_alloc_buf, no vma 17:00:50 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008003500100000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d400000000000000006de400000000", 0x55}], 0x1}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x400080) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0, r0}) 17:00:50 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xc2, 0x0) 17:00:50 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xd4, 0xcf8, {"5dc22065a08038962928ab7d9655442619491d45ac8874b9e07f832d20766242c1d2d70bb4d02a5133a5256541d21cc7003706fdb82c299dcb251064a1b19732064d9bb5ae567030da20d6f614658d4ebf50ecdec7b32e2219eef52331f63f9c7fecaea3d40fe71bad8503164f504883ca3eed486caa559c8fd87372bfb0c122409c476868932bfd85b0c1d7c6faf278c3c51f90bb13ac9be28e9411d2559a8777a20d6f13456026e24161ca1a07916a6388b9a27d7b3f6eda"}}, {0x0, "c4db9ab8f665029d77a369b9a2097390b849ef8f7783f36bd022cee8da2bd7fd3c9f6e25ff960b8ee538cb8d90a2aca2616bb068e23b5298c129ef6ac4fe411113101279f6c3add37c18af28c2809d769be9eb858ccb4c316bd31ed30a4c17c9619b5e85ffd93e967c45698bbe2ec0add1b1a47243e8269b2e63da6bbc899ac88196f9961f7a7780106a167548af5f8c63c9fffcc76db81667083123580487b453"}}, &(0x7f0000000280)=""/239, 0x177, 0xef, 0x1}, 0x20) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) close(r0) 17:00:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="00000000331cf837bcea258233bc766bd67f700500000000"]], 0x0, 0x0, &(0x7f0000000300)}) 17:00:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4138ae84, &(0x7f0000000040)) r4 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) mount$9p_virtio(&(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x800000, &(0x7f0000000300)={'trans=virtio,', {[{@posixacl='posixacl'}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x0, 0x7b, 0x35, 0x36, 0x38, 0x35, 0x30], 0x2d, [0x75, 0x7f, 0x36, 0x64], 0x2d, [0x7b, 0x66, 0x0, 0x39], 0x2d, [0x36, 0x7d, 0x39, 0x7f], 0x2d, [0x62, 0x63, 0x32, 0x3f, 0x36, 0x77, 0x33, 0x7b]}}}, {@subj_role={'subj_role', 0x3d, '-'}}, {@euid_gt={'euid>', r5}}]}}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, 0x0) pivot_root(0x0, &(0x7f00000002c0)='./file0\x00') 17:00:50 executing program 1: r0 = gettid() mremap(&(0x7f0000189000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00005de000/0x4000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f00000ac000/0x400000)=nil, 0x400000, 0x1000, 0x0, &(0x7f00005cc000/0x1000)=nil) madvise(&(0x7f00005c3000/0x4000)=nil, 0x4000, 0x80000000000008) r1 = syz_open_dev$mouse(&(0x7f0000005440)='/dev/input/mouse#\x00', 0x7fff, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000054c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000005640)={&(0x7f0000005480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005600)={&(0x7f0000005500)={0xd4, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xde}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) [ 310.111185] binder_alloc: 10261: binder_alloc_buf, no vma [ 310.116818] binder_transaction: 11 callbacks suppressed [ 310.116837] binder: 10261:10263 transaction failed 29189/-3, size 0-12288 line 2989 17:00:50 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000200)) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x410080, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x8, 0x3f}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000180)={r6, 0x1000, 0x1, ']'}, 0x9) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) close(r0) 17:00:50 executing program 2: r0 = socket(0x40000000015, 0x805, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x84000) write$FUSE_POLL(r1, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x3, {0x800100000000}}, 0x18) getsockopt(r0, 0x114, 0x2718, 0x0, &(0x7f000033bffc)) 17:00:50 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x1c, 0x0) [ 310.219183] binder_release_work: 10 callbacks suppressed [ 310.219192] binder: undelivered TRANSACTION_ERROR: 29189 17:00:50 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x2, 0x8f, 0x9}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) epoll_wait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0xf41) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)=ANY=[@ANYBLOB="f3a269745f697461626c652c7573726a71756f74613d2c636f6d6d69743d3078303030303030303030303030303030352c64696f727561645f6e6f6c6f636b2c00"]) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 17:00:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="00000000331cf837bcea258233bc766bd67f700500000000"]], 0x0, 0x0, &(0x7f0000000300)}) 17:00:50 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x8c, 0x0) 17:00:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4138ae84, &(0x7f0000000040)) r4 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) mount$9p_virtio(&(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x800000, &(0x7f0000000300)={'trans=virtio,', {[{@posixacl='posixacl'}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x0, 0x7b, 0x35, 0x36, 0x38, 0x35, 0x30], 0x2d, [0x75, 0x7f, 0x36, 0x64], 0x2d, [0x7b, 0x66, 0x0, 0x39], 0x2d, [0x36, 0x7d, 0x39, 0x7f], 0x2d, [0x62, 0x63, 0x32, 0x3f, 0x36, 0x77, 0x33, 0x7b]}}}, {@subj_role={'subj_role', 0x3d, '-'}}, {@euid_gt={'euid>', r5}}]}}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, 0x0) pivot_root(0x0, &(0x7f00000002c0)='./file0\x00') [ 310.393543] binder: 10286:10289 transaction failed 29189/-22, size 0-12288 line 2850 17:00:50 executing program 2: clock_gettime(0x0, &(0x7f0000003080)={0x0, 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f0000002e00)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000001280)=[{&(0x7f00000001c0)=""/160, 0xa0}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000100)}], 0x3, &(0x7f00000012c0)=""/152, 0x98}, 0x3ff}, {{&(0x7f0000001380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001400)=""/6, 0x6}, {&(0x7f0000001440)=""/130, 0x82}], 0x2, &(0x7f0000001540)=""/1, 0x1}, 0x3}, {{&(0x7f0000001580)=@in6, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001600)=""/122, 0x7a}, {&(0x7f0000001680)=""/59, 0x3b}], 0x2, &(0x7f0000001700)=""/164, 0xa4}, 0x166000000}, {{&(0x7f00000017c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001840)=""/59, 0x3b}, {&(0x7f0000001880)=""/83, 0x53}], 0x2, &(0x7f0000001940)=""/35, 0x23}, 0x20}, {{&(0x7f0000001980)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001a00)}, {&(0x7f0000001a40)=""/74, 0x4a}, {&(0x7f0000001ac0)=""/47, 0x2f}, {&(0x7f0000001b00)=""/106, 0x6a}, {&(0x7f0000001b80)=""/111, 0x6f}, {&(0x7f0000001c00)=""/118, 0x76}, {0xffffffffffffffff}], 0x7, &(0x7f0000001d00)=""/34, 0x22}, 0xd9f}, {{&(0x7f0000001d40)=@sco, 0x80, &(0x7f0000002340)=[{&(0x7f0000001dc0)=""/70, 0x46}, {&(0x7f0000001e40)=""/146, 0x92}, {&(0x7f0000001f00)=""/177, 0xb1}, {&(0x7f0000001fc0)=""/185, 0xb9}, {&(0x7f0000002080)=""/234, 0xea}, {&(0x7f0000002180)=""/53, 0x35}, {&(0x7f00000021c0)=""/14, 0xe}, {&(0x7f0000002200)=""/237, 0xed}, {&(0x7f0000002300)=""/53, 0x35}], 0x9, &(0x7f0000002400)=""/14, 0xe}, 0x7fffffff}, {{&(0x7f0000002440)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000002580)=[{&(0x7f00000024c0)=""/169, 0xa9}], 0x1, &(0x7f00000025c0)=""/224, 0xe0}, 0x9}, {{&(0x7f00000026c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002740)=""/105, 0x69}, {&(0x7f00000027c0)=""/37, 0x25}, {&(0x7f0000002800)=""/74, 0x4a}, {&(0x7f0000002880)=""/68, 0x44}], 0x4, &(0x7f0000002940)=""/85, 0x55}, 0x7}, {{&(0x7f00000029c0)=@can, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002a40)=""/195, 0xc3}, {&(0x7f0000002b40)=""/129, 0x81}], 0x2}, 0x9}, {{&(0x7f0000002c40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002cc0)=""/192, 0xc0}, {&(0x7f0000002d80)=""/23, 0x17}], 0x2}}], 0xa, 0x40000000, &(0x7f00000030c0)={r0, r1+30000000}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x58, r3, 0x305, 0x70bd25, 0x78, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400204) r5 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e000980000000005e510befccd7", 0x2e}], 0x1, &(0x7f00000013c0)}, 0x0) [ 310.447310] binder: undelivered TRANSACTION_ERROR: 29189 17:00:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="00000000331cf837bcea258233bc766bd67f700500000000"]], 0x0, 0x0, &(0x7f0000000300)}) 17:00:50 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x47, 0x0) 17:00:50 executing program 1: fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x11d, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='utf8=0,measure,subj_role=utf8=0,subj_role=utf8=0,fowner>', @ANYRESDEC=r0, @ANYBLOB="2c80"]) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x9, 0x200000) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000180)) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101000, 0x100) [ 310.573827] EXT4-fs (sda1): Unrecognized mount option "ó¢it_itable" or missing value [ 310.628386] binder: 10314:10316 transaction failed 29189/-22, size 0-12288 line 2850 17:00:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000fc7000), 0x2c) r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f00000000c0)) listen(r2, 0x0) accept4(r0, &(0x7f0000000180)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) 17:00:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="00000000331cf837bcea258233bc766bd67f700500000000"]], 0x0, 0x0, &(0x7f0000000300)}) 17:00:51 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x13c, 0x0) [ 310.668868] binder: undelivered TRANSACTION_ERROR: 29189 17:00:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000500)={'filter\x00'}, &(0x7f0000000100)=0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x2, 0x6, 0x7, 0x80000000, 0x2}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={r1, 0x53, "2dfbb5c24ade2ee6b44e404a0e574cec52918d791022a2014acc62a657463825d534907e034e754504840defd2567f39f974f851f642760379422d7499e2d0aaeba03184c09afeaf85f064530fc94b09f0a4f0"}, &(0x7f00000000c0)=0x5b) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x11, @local, 0x4e21, 0x3, 'wrr\x00', 0x1a, 0xffffffffffffffff, 0x74}, 0x2c) [ 310.773029] binder: 10323:10324 transaction failed 29189/-22, size 0-12288 line 2850 [ 310.796137] binder: undelivered TRANSACTION_ERROR: 29189 17:00:51 executing program 3: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="00000000331cf837bcea258233bc766bd67f700500000000"]], 0x0, 0x0, &(0x7f0000000300)}) 17:00:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) r3 = getpid() capget(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x3, 0x6, 0x4}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) dup3(r1, r2, 0x0) 17:00:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind(r0, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:00:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 17:00:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x5030ebe784bc1a3d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={[], 0xb}, 'nr0\x00'}}, 0x1e) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)=""/136, 0x88}, {&(0x7f0000000240)=""/97, 0x178}, {&(0x7f00000002c0)=""/149, 0x95}, {&(0x7f0000000380)=""/112, 0x70}, {&(0x7f0000000400)=""/177, 0xb1}], 0x5}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vcs\x00', 0x400040, 0x0) socket$alg(0x26, 0x5, 0x0) gettid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000500)) getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc) getpgid(0xffffffffffffffff) getpid() r2 = fcntl$getown(r1, 0x9) r3 = getpgid(r2) fcntl$setown(r0, 0x8, r3) socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x2000) getsockopt$inet6_dccp_buf(r4, 0x21, 0xe, &(0x7f0000000100)=""/113, &(0x7f00000004c0)=0x71) 17:00:51 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x146, 0x0) 17:00:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000fc7000), 0x2c) r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f00000000c0)) listen(r2, 0x0) accept4(r0, &(0x7f0000000180)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) 17:00:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) r3 = getpid() capget(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x3, 0x6, 0x4}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) dup3(r1, r2, 0x0) [ 311.086245] binder: 10356:10360 ioctl c0306201 0 returned -14 17:00:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}) 17:00:51 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x18a, 0x0) 17:00:51 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4000, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x10001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f000059dffc), &(0x7f0000000000)=0x4) 17:00:51 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'ip6_vti0\x00', @broadcast}) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") fsetxattr$security_capability(r1, &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000300)=@v1={0x1000000, [{0x27b, 0x1f}]}, 0xc, 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x101001, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0xfffffffffffffff8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xfffffffffffffffd, 0x0) socket$pptp(0x18, 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, &(0x7f0000000000)={{0xffffff92}, {0xffffffc0}}) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000280)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000001c0)={0x6, 0x0, [], {0x0, @bt={0x9, 0x1, 0x0, 0x1, 0x7, 0x1f, 0xf4, 0xfffffffffffffff8, 0x2, 0x60c, 0x9, 0x1, 0x8000, 0x800, 0x1, 0x10}}}) 17:00:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) r3 = getpid() capget(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x3, 0x6, 0x4}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) dup3(r1, r2, 0x0) 17:00:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}) 17:00:51 executing program 1: r0 = socket$inet6(0xa, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040), 0xc) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0xbe70100b55b0100, 0x4800000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000018c0)=ANY=[@ANYBLOB="34000000100001060000000000000000000000007a8723ab3ee54fa0e843571d479f08059c24cd281cd72b98c61b350e7c1265fb18b741a3e9f8c619748d49c76c0cdc22c5539294fae3a1c9255747923a5b35b69995f439764f2c81b71826012c18aaf2ec56603d7201bdeb25d1b239cc10e62bbf6ff4816836fb66a54cd30422c1db560d37f9578883373c08000000000000002a8ddb587b7fc7c97ebb1de334eb9c7f3fd5f921f46978e12433c9db1a96e80b48a574f1e902b93a50f809ac37c34367f8c069b364bdfe5064083613e66d0fc3dfdcb089ed4139731710e66a8582effe4b0614ab5f878e69f8940b13fda575c53412e1aa9cd2e01bd726cb5d83ead3a2131b6a8cf954d251d2283b8e72a9da4cecce6c4a116ea9c038ea5929fc334c516a67e22161cbcab511ba66625fa6eb5baf9678b68bedabca88dff0b486796f8b871ad03e6b4d47a1931e215ab3225585976cc1cc51431c3733eb3125b913c639357f1c8bf911dd1041c463d373fdf89105f8caea830f106b7d76babd5f79ee29e7bc25b373b11588b99687dcd3e2d50f28ed88017e845b3a6b61e01ea759b7379e2fa18cfc04cfea2f57fe283e313ec2ea7379a6a12e5dfa07a49a02f870bfae1c948eba9226982f3aca7b52b1150c97c0f2697d9cee80c32e973cabee5498a682490ebfd6ca1113d19c0ecaed9e079a1b516f16986d680822f035af39bbe7938e4e5390ed96ec990ac2b408a92d4c93827c12536d69a142d355ff50908e78447dc0f2362cf4d039311f0bb6c6ae049a6e99cc560b6eff9f1d40f35053ba4174126c2aba25165b67e1f3c56c85f7147a08538a1eeca2af618c6666018511bccccb3fe271d180c5a1571d65cd4537c0088ef0763ddc1b1517e6f0581f6cdab911d301551995f78639efb655a2b914aec1d685", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000c000100626f6e640000000004000200"], 0x34}}, 0x0) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f00000001c0)="90395602da5af142e3a7deb9f80a83eca43b003edda06b271a6e6b8fce2f2bb2decd59438a094082ca3ba2ebe6eb356a77636f817591f46a9907d1e373ade297593677014bbecaefebde3701ed20f9de8005c7cef78617f895b92aa504c75549723212a621ddaf651f2cd109fe9f01bbc5361d69fbce495142c288f97038495d6f1c2fa218688b71f8a37cba56e60e10ecc518683c35cfbfa3b4b3a62ae20de27e458ab2", 0xa4}, {&(0x7f0000000280)="d6548eb83c3cc95162c26102e82876d3a7c01a9d055f4367be22f5fe0d722c7dc84b8b1dce34d8d64277600f56d66a176501d2f9b9d6473ddac95d113f82a788b17e43b54b83c3722dd572231e63a2ed3d", 0x51}, {&(0x7f00000000c0)="d501b3b68038729b6da2a64e611fc1e87709a6830125ad69a5", 0x19}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000300)="99f15f01eddabeea00b5440141862a026f808805d2deb8c2141bba76648f0c1a6bb02e86b63d67e7b49ce71908d210b84a90963d48ac461a6cd2f61dcd90a2ff9269c63f850d1bf800aee1b3e9256652736ace9843d0679b9a204104439ec9bbc08cd6aa705ed8ba45b0c7aeea16e4ab692710b6889baf95a694a7006747eea9b7c69eb29c175f61031cd21391f42d91c534883c4387ac7e7c3bd68e1f57ed9fec0178", 0xa3}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="1ac52ff8a168d44ddf1ede18f754f1eb70122a066316ccd2960349814c13aac530a3b59b9d9e3f7aa5da8b4d8bf1b1236d7f7203a769efb590cb003cb7d66522d0de209afe92d8be52440f495972915473d75342631e98525c837fd5ab63593dfa4fcab2a762dcfeb9ca436144f4126778d282bb9a5f8df7dd5460b00361ac", 0x7f}, {&(0x7f0000000480)="d90fa312a5aafb727b3c87bf18c38ccfd87e0bff263c863c84a6738f0853caa1d2385527775362cf1de4c1c831ca69bc4a83d12e7dc85f36575b2458f3096878217cd2d58844915aa9029ecd531631fe419aa73dfdd2ba4b5ecce338a3cf174550089d40775598a0bd428be925c1", 0x6e}], 0x8, 0x2) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x10000, 0x0, 0x803, 0x6}]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x5, &(0x7f0000000080)={@mcast1, 0x5000500, 0x0, 0x0, 0x3}, 0x2e) syz_open_dev$dspn(0x0, 0x0, 0x0) r3 = semget(0xffffffffffffffff, 0x7, 0x200) semtimedop(r3, &(0x7f00000001c0), 0x0, 0x0) r4 = creat(0x0, 0x0) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000580)) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) pwritev(r5, &(0x7f0000000300)=[{&(0x7f0000000180)="0f", 0x1}], 0x1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ftruncate(r0, 0x0) 17:00:51 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7f, 0x8000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r1, 0x600, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe98}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffffffff5961}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x800}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffffd}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7b03}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x1) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f00000000c0)=0x70ea37c672e54d01) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@loopback, r2}, 0x14) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000a, 0x31, 0xffffffffffffffff, 0x0) getdents(r4, &(0x7f0000000440)=""/8, 0x688) sendto$llc(r3, &(0x7f0000000340)="df3b662e41ed3405aa9eb1fe3cd6329257e2c15604ad806dace69f841101c4cdf3f1708b77941119b3bc48a6affef2c4132f4b9c319a68a8736f76", 0x3b, 0x80, &(0x7f0000000380)={0x1a, 0x17, 0x1, 0xff, 0xd3}, 0x10) 17:00:51 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x27, 0x0) 17:00:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}) 17:00:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newneigh={0x30, 0x1c, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xc, 0x2, @link_local}]}, 0x1db}}, 0x8004) 17:00:51 executing program 2: setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x1ff}, 0x28, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_gettime(0x4, &(0x7f000052bff0)) [ 311.498293] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 17:00:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) r3 = getpid() capget(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x3, 0x6, 0x4}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) dup3(r1, r2, 0x0) 17:00:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[]], 0x0, 0x0, &(0x7f0000000300)}) [ 311.590411] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 17:00:52 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x13d, 0x0) 17:00:52 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x40, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x58, 0x4000) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0x40, 0x3ff}) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000140)=""/4096) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x2}) 17:00:52 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) r1 = gettid() pwrite64(r0, &(0x7f0000000280)='M', 0x1, 0x0) fchmod(r0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x3d, 0x2, @thr={&(0x7f0000000140)="798796c86dead5574c5c353059375f9a755f07d73d6fb5bb23597b45b34a5d9846c456be5590342bd2810d0ee9203670f70e580472e2adaef71a88ad1f94a28edf06772f567341933a5bc14f69d227074fbc81c124d73431f14021c521074e03f0d4c4630a", &(0x7f00000001c0)="a0cac5be7200cf7cff1cac5b067bfa488963fb5f81d3b36f8da0a121195192b91075aee2676b104d8240bab2b290268f27e2b6de9bcf73a346313358b816aecb0bfc85932f86c8d170ea2bf8de1670a247d3ec9cbde2b778d09c4d10933d248adfb0dc16aea5fbaa8c9ed11ac2da84a65f76a43e34c27385ab79c5bac0fb2adda825c48f35709e02ec1db98c3c2617937450a783bd0fd26d6b1a3adb4cd9"}}, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000040)={{r3, r4+10000000}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 311.686344] binder: 10426:10429 got transaction with invalid offsets ptr 17:00:52 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x902, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x80000001}, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f00000000c0)={{0x0, @name="3609131911df413301923ff1301ef28e830cc8166177f8fec66cbe3e3d409f30"}, "034ad1c1023fe35f0069ec199c72fe5bcb771f18c55fe60f3dd690a355bcb445", 0x1}) getsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 311.729195] binder: 10426:10429 transaction failed 29201/-14, size 0-12288 line 3016 [ 311.752185] binder: undelivered TRANSACTION_ERROR: 29201 17:00:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) r2 = getpid() capget(&(0x7f0000000040)={0x20080522, r2}, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x3, 0x6, 0x4}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) 17:00:52 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x5f, 0x0) 17:00:52 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) syz_open_procfs(0x0, 0x0) write(r0, &(0x7f0000000700)="be3987d6910128835b4ce8889623cc2b2bce68217b2e5e298cbe4a3b80ddf83123ac72ad4c084765a1dc71e0ca3b273bed95884787c25cb0f671073859e055c81b6918e2a87b7b2e3b22551aba9817479cd5c75f3e5cd4aeadc440bdaa38456399245f916a7073cdc7ad2603633019325ff69bc9d873bf8d4f882ac4de27dc907a0e64541f86d97adf1cf4f888f4f54c191c8258584e76542dd7296dcd5593c7c63e18884aab4496937e90603997c40c67a027ac04d08ba365fa4a05ac837fbe020978de6385d221452905ea9b311284b087a81c812f998183bf72c753a1294cbd38136483ca49f14cafc0bc290fbccb0f76e5d44aaaef7525e7ced161620b9d2d546c85a206795d388d43e6ee4b2483c49ce8c69f886b832bb8ee07a0a805f52b7d432de545b9a052659dfcbc8901885311b478d4df473a48f28c20808ead2daa5d438d965e690d529c0d072463100786ba8a13a1f2e3ec4060e755e8f92e30753736a5ddc8b7da2abed3462efad8ac17ced95b0f8672193c982b0abe692f9650ac5717ede5f179814c7dfba5a06dbcde642550a4285d31104e757d8b3fb5e52391e4c29860047fd82ec3c69bea7e541c0352d83d8b260e728de7b5442c462e731f99c243122b53028460b40656985a5a56547a5f063a97c88568e2c3255dfa5a1fe521558d2e46573403d491530bd19aecae2369d156ef90f6ff0d1b1db3ccd7432d6375dadc9a8e21f56eb6abc2cbd2daf3819323a6089184c87695aaa57327794ba2ea81637f9b7f2072d810053e785e2deb5ec248efc6116a4cdbee0ee72f9815bd51d930ee60a90fe89f7441cba12c9afdc65f562ee1202c0ddb99eecf410d911c15ca753f3928e97d78b4245affde59b2d43cf1439875fa5423272cfb58897b256456ec14f5ae79f645e5a51c2cd9f3ded94a95e7ea8885d7dcfb688925f747cdcc1f56995466683015a28752baeaf0231e6c0fb24419ec6dffe04e18787b94bc49b158edbb98914ae55e5ea5250ee8713603a07adc2c493edce3e61269beab7401398019b3bc7ef1d6b9727717dc773e70cce25b1d80a2d12a241ad110b274f9cfae67ea6e215639a4df291b6cffef3134007d4195d826a2f13569c5d54ab957066544ec31976e64a8a72e55fbd095ccd18403e73e0d477414025dc3768cc2b0b6a7b4949f87cd945c98b91e5e146c5f68404f55d62f7b714aaa126f200eb13c0340bc8fbb24071a59001db36c29d430a5804da0f8283089267eaa50d7430c3ef88ddc44a93671b6de24af800d0c024f04ac90350682cef984f313507a70678a3c4258e883f890a93aed03ee43b00be8bfb00c97fa3cbb502944d2fd89f190ceebd5463970185f1a67d78c66e652d7a443bbcb9586e7a34fb414f4af517c25d557287c21c75928eedf4a9fc5778e0f4f9c5e6b9167293909308c9e9508fb9e109e744cba8ae0463dbba97937d4628bb284f5bdd97855d69b66ea0e9d3a05c232445f547fc5f58d2cf88990c31b2ac5195d40fc0c729979328a06a28874e0f1eb5affca5a1b42e2d8c71fd3f7af25b02c810c97458b9e95e8b10f6491618b78e23944dbdd77cc9d311c0d76e44914904560aa484e14839b9cc5fe73452db7ccbfb10900e820189b099a2cbc23ae042e6b01417ca35514824da4ed0cde1822ca5328349af1de166a6e6ec6bfb57c146d2dea93703908b0066c4329bc45fcd4cd20b234ef46c0e3b934054e9fd2dce2a4640bdc19dfae6a6c834194d3e5ef61783cfb2fcfc14300dde9355a312188455aff20ed0f67aa4c3104ea47d3c5bdbf5cdc6ff2f8bff7cf5a4fabb8de5980f91ebd7cae2690d3764d461d0ac1f2b2691fd464dce2787209a0bbf9c49033ac2277f935e4da30ac0f346910df9cfa82c79ec652de5ab0c9f08a4febfc7db965ec1f62b73c5be8dabe130cfce2f0e3aa241e7fdbe8f70666e2d83ac8db2bd09151bdace2b78570b69d6e8e6786d24b2f026b97aaa59779e583e74344f3546f15c3849e44b4f03ef6678caf0cf7ef33af71b5e513b6d61b2b22a8dee65e0b6af385823294778a70205988b5188135dfc42e51716ea7232b5e10ca5f6c60dd286ed10472a100d5e86ef16de0b2af9e7615e9219cf1e720c21520214aa7f014e1f2f2b07de88c64d64312fa62dd49aaab91f0d0974178d5935f3af56cf1ed361675c8a71c8d7c8af2fbb32083937eb6684b10c80a92c3e797a83391b51daa70a8448a0e62902f726960155955cfee73e1b0d2f8ce21b206a18ad4fe13b3b0a4148892163a25bd6fc1da03fabbdc8a9286b504fcbdd603f6e5c921fbcfb67519c54635d7a37498c26f5b3c7e3e25d67865d65383010c37374b6644ca6618f74aee75f41bc8d7a7b209135eb57149e67cc95007aede9e0e0f0b81d83f54cfdfef9f595f9d37f2aafb61bac00b59ee4af06df56b67bc776f55013dbd8ba5c28f657ff35473b21cb6f537aff9ac905ee0a60ae03b90b67ba1e9f5000afa080c6fd34d7b445422de6e8b76d6986ec537b3cf2d03bc46d9b1837d43edad8068289cff26c0ff1dba2ab2b2de4365a63995ae3233eb43e85a507dc24ad5b5e825d23250924af074d3e6aba3960115b6d34af1906009bcc709915ff0b5693efe8eaf010ffc270bd119bb3119b0edbbd8e85b877662d3e56f852d1d7d67903452a574bbe4127fd4c1796cfd94ca5c166719da7767cc2f65093b7f57103479fcf87803b50a24884d4cb9e6e668e35a9aaeda45b4f1cdb514bb6ea731587bf99eaea16ec6a0e2b56f69661af9f7e9ca95e43c36bfc399c377df7820e9b0624493fad334191b81beb3184a74fcdf0c9fab4cf22b94da95815eeb1e57b330dbba973df083b24fbbce64dad46b6be0df5d8db906fffca282bf312967d8b48ab6997e765424431ec2b286efda513cf49d9d756299ea5e7cc35511708c614dde11ee0ec5129973d7a104f0b5895b2665313b43959ad571a9667c6c8c65bb076eb8b622605dc45ed28253ba39af95f63633c764a1dbd759aca0ecf7a2129190c479ebe327cad6929eec2a7b01fc02b70f791bb1b8e6242a23302247de533d53943dfdeecc85c44b1fac573dc7996af1c17149d251c8667797baf6811c6e6bec87f2b858ae618beac97a5fcc4ee12b16f3337ef4598b2c004d55e6b22d3f6910dfc00bc6659ab24f850ace9a1b5311e2590c9fc2d21faaad7ff2d542b42481ab484550691164ea7583508a9d27c3c509bc433a6f0986d7007ba0c27c4278e37a7762b79ce189e6ee9bfbe25d681c12d4164577a4d7659f14b0132e19426649a63e315b281a252850dd6f17c8c38d4257848d0b9a9e23f33f7eb7dc95a6312b441c653b364ba20aa8be25abd08e6bd4477e445025e89711938cd63e9993eb32123924e148ccc978d6806ca00ab2cdc5446e08de921cbd7808c5892f13d55279c402e52f03d78b1875bd6d20971bc5ffe0e99552b3c1167654ab29691e4659f95aa72bb0486000c97674bec6c79ad89f859d75ae904109e9014c9c5fcf527bfea97d8368d199ce461013cc29a72b993cfedb3bd673e03f121a1cb56fd8d59aab2117d208973bd5d4b4d1084022fb9b0ae98fa3e0fe445719db423964460bcff51e85b6e1e811784d77e331102be25c72da6442f79cd91749aa885f73c1d68905c3365ad872780c7ebb966fc64663b66329b2dddca81b45b903e55fce02e61b4172323e25488b22d643fb4c1bb66a129d0b2379f3f53d4b9fac2b7d56d538671f5efd17c2c7790ddb2f563e5c2d74e52826b0d79943e1b728f49ad57d1196131ba3555d17a4a5b6304faaca79e59d3178def63e28c59eacfcc2dc39d9adfdd6cd6d99a0b8b211867549d6ffe4a3cddb50308d6f8f5124385a751760b668da2c6864fe8858d65b179b87ed771760cb54330e22983521b7bef86940361407fb69edd13bd82aa3f8a48a32c673f237723f8c6c9361a55a60a14d6b6fc88a5c90678792dc47fc8e60cf41e255a205b32737e5e85104aa3b733d789accc9e33e6b4c6d519b6f085c378b67ceb457fa8e15e76b5fcfd51dab9122b9fead6bb17b6ae562ab6f0347ee0c05bb3d536ffcf6c6ac24feb66dae2fce622351e3bdc85e2f4d8d146eda16d47e24393aa70edabff14b3b35a375bb9a2c19218c4384579e93be8b67570bffb4680a070564b19e419ed96ba03160f7b6c798f6af06865f2016c875954431747367a855bae7870a6818d11d4bb1eac5a14a221a011f1598778f00ee8a546eb75c1b9c0fdae1b76b6836a071d76cdd1a7493d31f61101c8aedb3441936f3529c0cacd033b6d760cd30ccfb49d6668d8bebb96ff9365c309139916c9a349743a9065b2918c12a359025342fec24078ad83d9849d08d7fb571572e26e1636cb9d5440ab94e8c67f5710fd7a84a488d72e2e89c49a68384242fcf29c1098332d86d588166d68b06ed8dad1674cff14f4f018b4526e1fd76b8b608c6bbcaaab59855c0a71cda0682f4e9abbba128f1566577efecc7cec29a1bd0b148f70e728f7ce734a7abd4b8fb0acabb54f6e73e4534b41bfa220dec6433b4855ce04c9edf57a883d99ddbf1fb223dca33b3d4990e3727b2be065481383e5c43d037301b6274b13fae2552703f7b430c5db7279e61eeb299134390a9b05fc8027b5143c6348481c02ac423c92b8a01281e2c230f741c173ab9a89310efb10eca069968e2771f409c722eb8cf3540d35f15e19c28a32695cd3eb59f2f22e09e6a519d93eaad5f60345434d0be0596163cac623404fca1da8d0302238fc27cfd6c78c4798521b715db8d277c6df6765ba20fb62d9ce4d732cdfaced24653904a1d159e06ab394bdd625b8609369f7c6bdd40aba41cae60d4c9fd20b7a6d0653254f729f3c3615fc2ae7b5496831994a9e698b456dd47ad28795660aa8223ad8634a1b6a256428c22c020b560615c612a7a3181de030b8d8677e6fcefbfaec4816d18c0c84274250ca6d6f841fc8f13fd4e8e0b6cd4911e0fde58d0b195f59719d7cae91f7faa61a21ba31a49f55b4ea167dce7f175272c3a485820732a508bab18f194c16841e9907fe20e637b97fa19269b24e51acc3cc08abf8c30d7e5ceb8625f036cf1975b82b06a4e9081e68e48d40ac37500c7c8d3f4077496e1da8f84c981c598285698ae865e37b9faf08facca67c19be013aca3ce4a865ed99d88b0ed0eaaeac5e08ddd8ef6128ffd7be3b57e4c01c30e36128976ab2c1488ec10d49a03210f10d584a4de834cac1f9c417509fc4272813544475ff822d71aa84964d3a7a13789b6b406a9e02cecb06fb05b9ca970a8f1a6441867e701b2d719126af036fc2b939b614e2d94c00371b3976f3c0f40b21fa8eb15f96da5bbdc185fc446459c7dfc507952b6892d88ada0bf536eceb22764b35e7c9c3eb006ae280fd3fe472885d0ccd0b013e633116f4c8e55decbc52dd0a0699b4f8637909cb9f43de95dcc40478f7e7b6eb011fc705228db151a86a2cddf49f495f4faf841e1af90c4264e8aaa844988feb82b3ec16cdcb8a2f5a5d40d456ed3672ff147a9abfe5ab364d0a413ff534915fd0355941970e7c5ceabd28eec765b1c439542b2dd1a4e071ce0ec706d9646ddaa7cea191e034d80fc38260bb2b012a8e1a6db6e9b9aaeedce75c793384a20d486758fce9103eb7389d53e1b60e9810078b2733f41b9cd703bb01ce23d84a674edf038525385f0aa9bda18daf3702a4b4d4c67d3d7e5ec67660204137e6b99914d0428d470c1465dfb9c7ac5aa79f2a81733afab5a26", 0x1000) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) syz_open_dev$sndpcmc(0x0, 0x0, 0x2) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f00000001c0)=0x40000000000044) 17:00:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000300)}) 17:00:52 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f00007b5000), 0x8) mkdir(&(0x7f00007b7000)='./control\x00', 0x0) signalfd(r0, &(0x7f00007b6ff8)={0x4}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/216, 0xfffffecd}], 0x1) r3 = dup2(r1, r0) fcntl$setsig(r1, 0xa, 0x3) r4 = inotify_add_watch(r3, &(0x7f00007b4ff6)='./control\x00', 0x2000000) inotify_rm_watch(r3, r4) dup(r1) 17:00:52 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x80000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x775f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x10) fremovexattr(r0, &(0x7f0000000080)=@random={'btrfs.', '+vboxnet0]!&\'-$\x00'}) syz_emit_ethernet(0x300606, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0xffffff32, 0x0, @ipv4={[], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 311.920607] binder: 10452:10453 got transaction with invalid offsets ptr 17:00:52 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x8, 0x0) [ 311.998965] binder: 10452:10453 transaction failed 29201/-14, size 0-12288 line 3016 [ 312.015241] binder: undelivered TRANSACTION_ERROR: 29201 17:00:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, &(0x7f0000000300)}) 17:00:52 executing program 1: io_setup(0x0, &(0x7f0000000680)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x301000, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x800) recvfrom$packet(r1, &(0x7f0000000080)=""/12, 0xc, 0x2122, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x3f, 0x6, @dev={[], 0x1a}}, 0x14) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@multicast2, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, 0xe8) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000100)=0x2, 0x2f0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x210102, 0x0) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 17:00:52 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000440)={r2, @in6={{0xa, 0x4e23, 0x6cf, @mcast2, 0x200000000000000}}, [0x6, 0x9, 0x8, 0x23c, 0x78e, 0x1, 0x9, 0x7fff, 0x20, 0x9, 0x800, 0x2dce, 0xed89, 0x100, 0x1]}, &(0x7f00000000c0)=0x100) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001b40)=[{&(0x7f0000001a40)=':', 0x1}], 0x1, 0x0) unshare(0x400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000240), 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0x80, 0x0, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x0, 0x1800000000000000, 0x6}, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000400)) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) tee(r3, r1, 0x7fffffff, 0x0) 17:00:52 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x5a, 0x0) 17:00:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, &(0x7f0000000300)}) 17:00:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) r2 = getpid() capget(&(0x7f0000000040)={0x20080522, r2}, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x3, 0x6, 0x4}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) 17:00:53 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000440)={r2, @in6={{0xa, 0x4e23, 0x6cf, @mcast2, 0x200000000000000}}, [0x6, 0x9, 0x8, 0x23c, 0x78e, 0x1, 0x9, 0x7fff, 0x20, 0x9, 0x800, 0x2dce, 0xed89, 0x100, 0x1]}, &(0x7f00000000c0)=0x100) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001b40)=[{&(0x7f0000001a40)=':', 0x1}], 0x1, 0x0) unshare(0x400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000240), 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0x80, 0x0, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x0, 0x1800000000000000, 0x6}, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000400)) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) tee(r3, r1, 0x7fffffff, 0x0) 17:00:53 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x176, 0x0) 17:00:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, &(0x7f0000000300)}) 17:00:53 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x121000, 0x0) bind$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x1, 0x0, 0x6, 0x100000000, 0x1, "5cd43f61a7f2076bffa6fe39064c2f816597af3def538f82166cab18c3b1d6be91e01e2c558f4d17f4a937b70d16f6d5edb676926ddfa3c524f6d849eb714f", 0x3c}, 0x60) 17:00:53 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x0, &(0x7f0000000040)) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x40000000000003d) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x80000000000, 0x0) 17:00:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fanotify_init(0x0, 0xf1b78e31499d1969) r2 = dup2(r0, r1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000380)=0x1, 0x4) r4 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x9, 0x101200) openat$cgroup_ro(r4, &(0x7f0000000100)="6d656d6f17284026ee59ca9110781308b0ee2304750000febe52", 0x26e1, 0x0) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000300)={{0x3, 0x0, 0xfc, 0x3, 0x1}, 0x3, 0x7}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f00000001c0)={'dummy0\x00', 0x7fff}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x810, r0, 0x0) fstatfs(r2, &(0x7f0000000240)=""/192) write$cgroup_int(r5, &(0x7f0000000200), 0x44000) ioctl$LOOP_SET_FD(r2, 0x4c00, r2) prctl$PR_SET_PDEATHSIG(0x1, 0x14) 17:00:53 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0xfd4d}], 0x1) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x0) 17:00:53 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x30, 0x0) 17:00:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000300)}) 17:00:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x8000) fchdir(r0) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x280000, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080)) 17:00:53 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x22, 0x0) 17:00:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000300)}) 17:00:53 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = epoll_create1(0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x480480, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10000000}) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000180)=""/199, 0xc7}], 0x1) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0xcbe, 0x30, 0x3c7b61f1, 0x47}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000380)={r5, 0xbd, "bf154c655c5c5bb49e0daad588e28c00b30f2b492fbe1f33d5bbb83c693bc4c60638988e5e36980999d5109a7eee5b2d80170d7f54ed800aa08f4a74205972d5ac262b669e8bc754a9a0cbb50f19597fce803cc4783c652807f2b13f9b4ba6e7ecbb3d145549a8e81c4103967c5e422d237bef99b63bcf1f3ad8ef28f99fe0ce597cdf9f24ea5d3972d6a3a4d4fff0866c01c05f3485d1f2c2df0ff0a6275a3786ab0d880e1ec7b69f2076f379291d5b29cd1a2763cc8d83b1d6739288"}, &(0x7f0000000280)=0xc5) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000040)={0x5, 0x47}) 17:00:53 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x19f, 0x0) 17:00:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) r2 = getpid() capget(&(0x7f0000000040)={0x20080522, r2}, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x3, 0x6, 0x4}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) 17:00:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0xc, 0x200000) accept$nfc_llcp(r1, &(0x7f00000001c0), &(0x7f0000000240)=0x60) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x6, 0x8}, 'port1\x00', 0xa, 0x20009, 0x9, 0x8, 0x100000000, 0xc4a, 0x400, 0x0, 0x2, 0x80000000}) socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000140), 0xc10397d813d90193) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x37}) 17:00:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}, 0x2}, 0xf) r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x1000, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000340)='logon\x00', &(0x7f0000001380)={'syz'}, &(0x7f00000013c0)='/dev/rtc0\x00', 0xfffffffffffffffc) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$l2tp(r1, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23}, 0x3, 0x2, 0x3, 0x2}}, 0x26) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000180)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x0, 0xb49ffa76aaedb84c, 0x1, &(0x7f00000001c0)) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0) 17:00:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000300)}) 17:00:54 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x153, 0x0) 17:00:54 executing program 4: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) setfsuid(r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x220000, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) fchown(r2, r0, r4) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000180)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r6, 0x8, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x5, 0x8000, 0x6, 0x7ff}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000400)=0x10000) r7 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000440)={0x0, 0xd219}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000004c0)={r8, @in6={{0xa, 0x4e20, 0x12, @mcast1}}}, 0x84) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) perf_event_open(&(0x7f00000005c0)={0x5, 0x70, 0x7, 0x1f, 0x1, 0x807, 0x0, 0x0, 0x200, 0x8, 0x2, 0x5, 0xb3, 0xf7, 0x2, 0xffff, 0x7, 0x100, 0x1, 0x4, 0x6, 0x5, 0x4, 0xc3, 0x1, 0x101, 0x9, 0x5, 0x7, 0x4, 0x2, 0xa08f, 0x20, 0x5, 0x8001, 0xd483, 0x401, 0x1, 0x0, 0xfffffffffffffffe, 0x7, @perf_config_ext={0x1, 0xf4}, 0x80, 0xed5, 0x6, 0xb, 0x3, 0x7, 0x2}, r3, 0x0, r2, 0x1) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x21}, r5}, 0x14) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000680)={r8, 0x8000}, &(0x7f00000006c0)=0x8) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000700)={0x10000, 0xb, 0x4, 0x1000, {0x77359400}, {0x1, 0x1, 0x7, 0x8, 0x401, 0x9d6, "427260e8"}, 0xbd6, 0x57ec31970bbed5b6, @offset=0x9, 0x4}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000800)={0x7, 0x2}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000840)={0x22f, 0x5, 0x32, 0x68, 0x3, 0x42}) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000880)='/dev/ppp\x00', 0x8000, 0x0) recvmmsg(r9, &(0x7f0000007000)=[{{&(0x7f00000008c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/219, 0xdb}], 0x1, &(0x7f0000000a80)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000001a80)=@l2, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000001b00)=""/251, 0xfb}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/149, 0x95}], 0x3}, 0x100000001}, {{&(0x7f0000002d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002d80)=""/219, 0xdb}, {&(0x7f0000002e80)=""/51, 0x33}], 0x2, &(0x7f0000002f00)=""/80, 0x50}, 0x4}, {{&(0x7f0000002f80), 0x80, &(0x7f0000005180)=[{&(0x7f0000003000)=""/221, 0xdd}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/82, 0x52}, {&(0x7f0000004180)=""/4096, 0x1000}], 0x4}, 0x1}, {{&(0x7f00000051c0)=@ipx, 0x80, &(0x7f0000005440)=[{&(0x7f0000005240)=""/237, 0xed}, {&(0x7f0000005340)=""/69, 0x45}, {&(0x7f00000053c0)=""/108, 0x6c}], 0x3, &(0x7f0000005480)=""/83, 0x53}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000005680)=[{&(0x7f0000005500)=""/245, 0xf5}, {&(0x7f0000005600)=""/112, 0x70}], 0x2, &(0x7f00000056c0)=""/240, 0xf0}, 0xc2e}, {{0x0, 0x0, &(0x7f0000005900)=[{&(0x7f00000057c0)=""/115, 0x73}, {&(0x7f0000005840)=""/44, 0x2c}, {&(0x7f0000005880)=""/16, 0x10}, {&(0x7f00000058c0)=""/48, 0x30}], 0x4, &(0x7f0000005940)=""/186, 0xba}, 0xac}, {{&(0x7f0000005a00)=@ax25, 0x80, &(0x7f0000005f80)=[{&(0x7f0000005a80)=""/201, 0xc9}, {&(0x7f0000005b80)=""/72, 0x48}, {&(0x7f0000005c00)=""/110, 0x6e}, {&(0x7f0000005c80)=""/243, 0xf3}, {&(0x7f0000005d80)=""/216, 0xd8}, {&(0x7f0000005e80)=""/246, 0xf6}], 0x6, &(0x7f0000006000)=""/4096, 0x1000}, 0x6}], 0x8, 0x0, &(0x7f0000007200)={0x77359400}) setsockopt$inet6_IPV6_PKTINFO(r10, 0x29, 0x32, &(0x7f0000007240)={@dev={0xfe, 0x80, [], 0x1b}, r5}, 0x14) setsockopt$EBT_SO_SET_COUNTERS(r9, 0x0, 0x81, &(0x7f00000072c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000007280)=[{}], 0x0, [{}]}, 0x88) r11 = syz_genetlink_get_family_id$team(&(0x7f00000073c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f00000074c0)={&(0x7f0000007380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000007480)={&(0x7f0000007400)={0x60, r11, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000007500)={0xeac, 0xb, 0x2, "de7a6e66c00355c4e3f8df71e9f48d3e89ac456b5112edd0776d765f92c502bda4c68eed06b0989e6d9702379ae84f4580072f914a6a96e4ae80fb6c", 0x26, "f518b4a46285d2c5c1ebc43957498ac849fce7554ad0450d70bcfa3fa538696aef6dfad90d3fe87f11b284acb0055f47dff86da83807fd9152a7db5e", 0x90}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000075c0)) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000007600)={0x1, 0x101}, 0x2) 17:00:54 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x13e, 0x0) 17:00:54 executing program 4: r0 = perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)=0xc9a) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000240)={{0x0, 0x6, 0x0, 0x0, 'syz1\x00', 0x1}, 0x4, 0x0, 0x3ac3, 0x0, 0x3, 0x1000, 'syz1\x00', &(0x7f0000000200)=['\x00', '\x00', 'mime_type-{wlan1\x00'], 0x13, [], [0xffffffffffff7fff, 0xd379]}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000380), 0x4) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f0000000140)={r1, r0, 0xfffffffffffffffb}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0xffffffffffffffff, 0x0, 0x1}, 0x2c) r3 = fcntl$getown(r2, 0x9) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xfffffffffffffff8, 0x400000) sched_getscheduler(r3) 17:00:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000300)}) 17:00:54 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101882, 0x0) pwrite64(r0, &(0x7f0000000040)="2e22a652b14a1a55babbc8d5d7a34cd9d82c1dd2af9b54beb5ae964caf9d5946cbd21c", 0x23, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000080)) writev(r0, &(0x7f00000000c0), 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) recvmsg(r0, &(0x7f0000000640)={&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/190, 0xbe}, {&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/30, 0x1e}], 0x5, &(0x7f0000000600)}, 0x20) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000680)={@local, @local, 0x0}, &(0x7f00000006c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) accept$packet(r0, &(0x7f00000007c0)={0x11, 0x0, 0x0}, &(0x7f0000000800)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000840)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000940)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000980)={@empty, 0x0}, &(0x7f00000009c0)=0x14) accept$packet(r0, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a40)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000009f80)={'bond_slave_0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000009fc0)={@empty, 0x0}, &(0x7f000000a000)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f000000a740)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f000000a840)=0xe8) accept4$packet(r0, &(0x7f000000a880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000a8c0)=0x14, 0x80000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000000a900)={0x0, @dev, @empty}, &(0x7f000000a940)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000a980)={'teql0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000aec0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa07002}, 0xc, &(0x7f000000ae80)={&(0x7f000000a9c0)={0x4b4, r1, 0xb10, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x12c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xe}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3f}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r10}, {0x240, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x6, 0x363d, 0x7}, {0x6, 0x7, 0x1, 0xffffffff}, {0x6, 0x8001, 0x2, 0x6}, {0x0, 0x1, 0x7ff, 0x3}, {0x8, 0x2552, 0x5, 0x10001}, {0x1, 0xfffffffffffffffa, 0x0, 0x2}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0xfffffffffffff701, 0x1, 0x10001, 0x79fc}, {0x2, 0x1, 0x6, 0x2}, {0x200, 0x5, 0x4, 0x8}, {0x5, 0x8f5f, 0x8, 0x20}, {0xfffffffffffffff9, 0x1000, 0x5, 0x5}, {0xb6f, 0x6, 0x800, 0x6}]}}}]}}, {{0x8, 0x1, r14}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r17}}}]}}]}, 0x4b4}, 0x1, 0x0, 0x0, 0xc040}, 0x4000080) r18 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x1011, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000af00)={r18}) clock_gettime(0x0, &(0x7f000000b000)={0x0, 0x0}) pselect6(0x40, &(0x7f000000af40)={0xfffffffffffffff8, 0x0, 0xaf85, 0x7, 0x0, 0x0, 0xffffffffffffff00, 0x1}, &(0x7f000000af80)={0x8, 0x6317, 0x9bcf, 0x4, 0x6, 0xb25e, 0xfff, 0x213a}, &(0x7f000000afc0)={0x1, 0x6, 0x7fffffff, 0x80000000000, 0x140f42c9, 0xffffffffffff0000, 0x7, 0x200}, &(0x7f000000b040)={r20, r21+10000000}, &(0x7f000000b0c0)={&(0x7f000000b080)={0x8}, 0x8}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f000000b100)={0xc, 0xa, 0x1, 0x9, 0x3, 0x0, 0x4, 0x128}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000b140)={r19}) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) [ 313.959345] binder: release 10595:10596 transaction 78 out, still active [ 313.979182] binder: undelivered TRANSACTION_COMPLETE 17:00:54 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'veth0_to_team\x00', 0x80000000008002}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x301) ioctl$sock_ifreq(r1, 0x100008914, &(0x7f0000000040)={"65716c000010a95b0000000000001000", @ifru_mtu=0x1}) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=@routing={0x2b, 0x10, 0x3, 0x4000000000000, 0x0, [@dev={0xfe, 0x80, [], 0x1f}, @remote, @empty, @empty, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [], 0x1e}, @mcast2, @ipv4={[], [], @multicast2}]}, 0x88) 17:00:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000300)}) [ 314.020783] binder: send failed reply for transaction 78, target dead [ 314.092703] binder: release 10607:10609 transaction 80 out, still active [ 314.112226] binder: undelivered TRANSACTION_COMPLETE [ 314.144828] binder: send failed reply for transaction 80, target dead 17:00:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) r3 = getpid() capget(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x3, 0x6, 0x4}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) dup3(r1, r2, 0x0) 17:00:54 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) r3 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x4e20, 0x0, 0x4e20, 0x3f, 0x2, 0x20, 0x20, 0x0, r2, r3}, {0xeac0, 0x2, 0x81, 0x8000, 0x6, 0xffff, 0x8, 0xfff}, {0x6, 0x6, 0x7f, 0x4}, 0x2f8a, 0x0, 0x3, 0x0, 0x3, 0x2}, {{@in=@broadcast, 0x4d2, 0x32}, 0xa, @in=@remote, 0x34ff, 0x4, 0x3, 0x2, 0x8, 0x9, 0x3}}, 0xe8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0x4}, {0x6}]}, 0x10) 17:00:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000300)}) 17:00:54 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x7a, 0x0) 17:00:54 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = accept4(r2, &(0x7f00000009c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, &(0x7f0000000180)=0x80, 0x80800) clone(0x1c010000, 0x0, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="c254169f60cef0d516f52742913d2dd8e33558190723270d1e9f5874e775a0f9d557bf03df54228eed9a17603920e768f365ead1b817c68cdf7bce3e3cb4") r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x40000000013f}}, 0x20) prctl$PR_SET_PDEATHSIG(0x1, 0x3d) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000740)) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000780), &(0x7f00000007c0)=0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}, r5, 0x8}}, 0x48) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x400000, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f0000000240)={0x8001007, 0x10001, 0x1}) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r7, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r7, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x10, 0x0, 0x0, 0x0, 0x8001}}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) sendto(r2, &(0x7f00005c8f58), 0x0, 0x0, 0x0, 0x0) dup3(r2, r0, 0x80000) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0), &(0x7f0000000140)='hash\x00', 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x141600, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000640)=""/244, 0xf4) 17:00:54 executing program 1: syz_emit_ethernet(0x0, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2b, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x1000000003]}) [ 314.533027] binder: release 10623:10626 transaction 82 out, still active [ 314.564566] binder: undelivered TRANSACTION_COMPLETE 17:00:54 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xbf, 0x0) 17:00:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x27, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000300)}) 17:00:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000080)) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x8000000000000000}) r2 = syz_open_pts(r1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$TIOCNOTTY(r0, 0x5422) [ 314.627929] binder: send failed reply for transaction 82, target dead 17:00:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) r3 = getpid() capget(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x3, 0x6, 0x4}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) dup3(r1, r2, 0x0) [ 314.743346] binder: release 10644:10646 transaction 84 out, still active [ 314.753340] binder: undelivered TRANSACTION_COMPLETE 17:00:55 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x103, 0x0) 17:00:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x27, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000300)}) [ 314.815782] binder: send failed reply for transaction 84, target dead 17:00:55 executing program 4: io_setup(0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000540)='/dev/radio#\x00', 0x0, 0x2) clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000800)) write$sndseq(r0, &(0x7f0000000840)=[{0x1ff, 0x0, 0x0, 0x5, @time={0x0, 0x1c9c380}, {0x80, 0x4}, {0xfffffffffffffffe, 0x7a}, @raw8={"f250120249e5a74ea07829ae"}}], 0x30) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x11, 0x2, {0x0, 0x1, 0x5}}, 0x14) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) stat(&(0x7f0000004980)='./file0\x00', 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[]}], 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000680)=""/248) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0x8000, 0x1]) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f00000000c0)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x100000001, 0x19d8}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r5, 0x2}, &(0x7f0000000480)=0xfffffff6) close(r3) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x4, 0x200000) 17:00:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000280)={0x0, 0x8000}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f7f84690f9b2accd5e34b519cdfd5b0ec6ddbef23da772a3bf8a3c6e95e486a2f957f2eae542dba76e22a14b2"]) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000b000/0x18000)=nil, 0x0, 0xfffffedd, 0x2, 0x0, 0xffffffffffffffae) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) [ 314.894321] binder: release 10658:10659 transaction 86 out, still active [ 314.928791] binder: undelivered TRANSACTION_COMPLETE 17:00:55 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x109, 0x0) 17:00:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x27, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000300)}) 17:00:55 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003c80)={0x0, @loopback, @dev}, &(0x7f0000003cc0)=0xc) recvmmsg(0xffffffffffffffff, &(0x7f000000c440)=[{{&(0x7f0000005200)=@hci, 0x80, &(0x7f0000005300)=[{&(0x7f0000005280)=""/36, 0x24}, {&(0x7f00000052c0)=""/55, 0x37}], 0x2, &(0x7f0000005340)=""/231, 0xe7}}, {{0x0, 0x0, &(0x7f00000067c0)=[{&(0x7f0000005440)=""/180, 0xb4}, {&(0x7f0000005500)=""/152, 0x98}, {&(0x7f00000055c0)=""/93, 0x5d}, {&(0x7f0000005640)=""/95, 0x5f}, {&(0x7f00000056c0)=""/253, 0xfd}, {&(0x7f00000057c0)=""/4096, 0x1000}], 0x6, &(0x7f0000006840)=""/234, 0xea}, 0xb0}, {{&(0x7f0000006940)=@pptp, 0x80, &(0x7f0000007c00)=[{&(0x7f00000069c0)=""/185, 0xb9}, {&(0x7f0000006a80)=""/126, 0x7e}, {&(0x7f0000006b00)=""/207, 0xcf}, {&(0x7f0000006c00)=""/4096, 0x1000}], 0x4, &(0x7f0000007c40)=""/4096, 0x1000}, 0x9f}, {{&(0x7f0000008c40)=@sco, 0x80, &(0x7f000000b000)=[{&(0x7f0000008cc0)=""/38, 0x26}, {&(0x7f0000008d00)=""/112, 0x70}, {&(0x7f0000008d80)=""/112, 0x70}, {&(0x7f0000008e00)=""/87, 0x57}, {&(0x7f0000008e80)=""/4096, 0x1000}, {&(0x7f0000009e80)=""/186, 0xba}, {&(0x7f0000009f40)=""/4096, 0x1000}, {&(0x7f000000af40)=""/169, 0xa9}], 0x8, &(0x7f000000b080)=""/31, 0x1f}, 0x1}, {{&(0x7f000000b0c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f000000b1c0)=[{&(0x7f000000b140)=""/100, 0x64}], 0x1, &(0x7f000000b200)=""/86, 0x56}, 0x100000001}, {{&(0x7f000000b280)=@un=@abs, 0x80, &(0x7f000000c400)=[{&(0x7f000000b300)=""/211, 0xd3}, {&(0x7f000000b400)=""/4096, 0x1000}], 0x2}, 0x9}], 0x6, 0x40, 0x0) sendmmsg(r0, &(0x7f000000cac0)=[{{&(0x7f0000000000)=@ethernet={0x6, @local}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000080)="d5a0c9cc377d847ce9ab94ada82e3d0ca8cae0fc0879164e707a49dff0cc1ea0b7f7c66cfd8254deaa0db859c8551d7cabfe035156d4d34232bfc82f411bc6e5f2101d717104ba188260b72b89cfce061455994329662cd21c1fcbdee734577853", 0x61}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="068fdd14cd55d7e38757a0aedf38a4be688d", 0x12}, {&(0x7f0000001140)="a078136e", 0x4}, {&(0x7f0000001180)="090445fe663df96d047d4ef0dcdfa8bb371ec5d63fae9b981ca2645202725c753db565a31bd767d16d65668411658a3a7a904b75a82a5743683a3bf9d4d52d1c8c2c2200acad7b08cc995137a983870cc8a5333034666f0b5ca1568d6a9e45cfc563eb9058b3d04bcbd85126a497fc6dcc7d9526a862fa39ca0198ab35b231c5d5025c817fbffee7b593", 0x8a}], 0x5, &(0x7f00000012c0)=ANY=[@ANYBLOB="680000000000000001000000000000805ad419b050e9de2f4995d1ad162b669cac2852a8191a9d2f14b92f2a26a9cfa9b79c0a8bfdb842eeeaac47922404ec379e309b1a6c47fb83c21354e764eaa2e6d63c1b4fd05713cdcfa225000000200000000000000002010000040000002444cf4285ce35250f9d09ba8176b59230000000000000001301000001000000fefe8a8cf53adfcb4179861b44411038981422a5be2755843efb880000000000"], 0xb8}, 0xfffffffffffffe01}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001380)="9dda39419b75edf3d37f947ece3107f785b43e6b55839b2ad4fcc6fac9e747ed84bfe154d1d93e3bb20a56181a137f8e85be11f71ab3ededf37bac663c574a102f655b7d1ef043cfdef0b0dc6dd940b0030485cfd7bd9a8e1cdd09c4caa891f64887af266f59c9df5ad366be0a5c6c6b462cf7fa2d9973d5f6c713a2765aa43a31249458d8b9ce7db954b0c0e56890acf403408a0634bc410912713ce73b174ab91ecc8d9251a5f4eb982f6bf9d267a744ea306041e632d48346e51949283230ef93d9a973ff66e28bfb40e6131cef595101a98fc3d36150d646e64aa5a9cc971e2a5a1fd133b728d589e80ea8a66c8f4e73d8403beab1ca2fabcc6c7110", 0xfe}, {&(0x7f0000001480)="aeee0828c9cc9bd82b76274fd4a70fccf3b11dc8f3169bd30c2452e65b9757fc252d51dae68d2633d941c46007e1b4f2010dd131b181fa72d1cf2d58c8ae17ab272263fa8c0f622aa8e04f8114bf1b7d94ccdf8f837b7e4a6f3c2684983083", 0x5f}], 0x2, &(0x7f0000001540)=[{0xb0, 0x11f, 0x100000001, "c3e1d8e6d0f2e1d5a8ff0697f271cb77c8e8838564ccde429b5ab2a4fa292aef060976bbfd6fb63b4937e9d6684862ca76f69bebbfb96682160c6ef2bba739ffff4c09cc8e3760bf5b4fd9f47deb16bc021904e0b12ac5621e19189230758fcedd17e581c28d9d96f6442a6b0cbceb7337295b1bb94e6f3ca07ffd835530a685d90d1406666458bc140d2819a9c213b48bd236eb95234e9b6d"}, {0xa8, 0x0, 0x80, "2e7193571ae59f430e5ff9ebdf0f797f52ee02b4a48d8e9a0878e97fc5961980bcf5028b25be6537ff3fd3222e781d511341e9190f95768e54ad4dec12344623fd63d499413ff126197c135df6b7d667557c774ffedeed0a578c90b53857a995023ed7beb2e043c9f1b866a759a536a9c00e2e93e0ff1720aa71ff5135dadf9e3852b9d1bd47c0effc45395a55618795ac"}], 0x158}, 0xfffffffffffffc00}, {{&(0x7f0000003d00)=@hci={0x1f, r1}, 0x80, &(0x7f0000004f40)=[{&(0x7f0000003d80)="11bbe5be6c7a5fa3a59ba7570c584354437821eb106a589ebb3277d2c8f8d1e2532fcb31baf1cf095bd6f19195531f525acbb35ffeb94bec889f3c53b33ed8fa8bd83343d41008aa20b6ebb4741d", 0x4e}, {&(0x7f0000003e00)="cc0ede6ccf219506b9593bc50c", 0xd}, {&(0x7f0000003e40)="01e79e731bac9b013c6eeccaffadc4b76640fbc18bdf50a7d49f5b6b184b5b2231d465eee38cdb66a9847b90640a98f4a5a3d1d26c58a96676685a4109a064b02c6fe95989aa79573dd92a48b4e47a9e974204bc61b6ee2241161927bf8903682099efe02c12a40d7b6820931062cc602a41b1bee661645e96436b082ebfb99959ff551c611f466d7f78fe59679b16ddd6b6b717c5b7ca6a2d6c2df1cc548ed37d6d593567dfd61263731bb6f8a685bd04778cf86b7aacad722adeb8cbb3932e38f50d02cd6c71a29ce4a2982b16ebfae66041c189cfe6eedd997e", 0xdb}, {&(0x7f0000003f40)="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", 0x1000}], 0x4, &(0x7f0000004f80)=[{0x48, 0x13a, 0x800, "b4e515af8b303781452517c70cad076d72449b9fe73d42ceaf977805220429b5b2fc7e2af2845bab7639ffb61d54ef6c28f22025660d"}, {0x108, 0x115, 0x4, "42efffcc5acf2683ec1e2504f71f51482acdd15a1702099c8a0f3c0c8cae1885974b284f9fe2f9970cc8fd4485b5f15510d26e43151b971b6063b7679e1c89bae1bdec5898b5cd56301c103eacf463ddc1ad74b7aaed6fa580ca9ad864aaf5f1e8b939dad68b41cec6b56c9d7f526ec1b1545854db894cb5ef60b10a96bcb99018dc401bba2f422020a78cc7f6ae26e5e0e5bd88e80ef771b27b97d0a05a01fd531fd4ae94137b8100a9f916f1685eb41c0020dde96ae4982a30547241198160bf0505bba8150729994fe201786f4ddf1d5e1f804c44188be3a34cf41eea80832cf8b63b593db0c7b71cdb4848fc979372b2a7f958a8682d"}, {0x18, 0x101, 0x45, "f44a4c"}, {0x20, 0x112, 0xffff, "5d25ffb3c9d3614641f3"}, {0xf0, 0x108, 0x1000, "ce1ac6031bf6bfc037ba4151934e85d96aeba7461f999613712ff4a61afa7ad68ee4b26111ab1b34126ef45b123f67d101dcea5094ea46b750fdfad712f7a3ab6c58f8f4f92362a9a1cfd0b0245ecb41b6093ebad40fdf1ae312440bfe3d819c49d72550c8d93b35e66c59f05f99f78036ea6cd8423ebb59cd080412f3ea837e6f62fd7fec4d15de99bd0ed3b5d1868121a76e56ed39f10ab2c34677ef72452b9cd342ecc27480fcba3d26acbe74dd052c4987b3674c802b36ada045dfc4f3a7790f19b1ccc01b47550fae098c4e549eed8fddb4edec8e6075d8a2"}], 0x278}, 0x1f}, {{&(0x7f000000c5c0)=@can={0x1d, r2}, 0x80, &(0x7f000000ca40)=[{&(0x7f000000c640)="0062900449093b612ae23efd98d398e55ff79f4d368e45eda85cfaa35e0a1722013c27358c4eded9a97b0598d9fa58e1db0094feadb9107d628e316111f3368854d735a62311e0ba0bcebe6e6629bd421d07cf5547e7a5ce1d4ba0ab6095b68b2d7b74870a5ca0cdb51062c058613f6b5b13d151a3c00fa4940006544dce6934cfbbd7fb1e2275879e35bbef90fce2b76fb4266613d91b8d784dabe79c5ab56e9530facb36d5dfdbcc8d34627c7d72", 0xaf}, {&(0x7f000000c700)="5df6c7eea668e37a6f5b0d2e6f604edf0196b53568d40969449d8be8751f47cbf7614880ac817a63d2e1b5361bb2be17f760c4b1fa6d5d05dad620e2f77054a16ce7c6b262506f8986a58ae72ed6320dfef1048798bd04125d6c7a0119d3a6a40efc5d41fe34858d8be0cd69", 0x6c}, {&(0x7f000000c780)="2a38565675481afc8877ddb5a315156082d8710db19fa6b2e4b0eb0433eab87ad381cae8199153bc1de8fe6916062a73d756a4082090cc0820ad572c75fd7213a489f0fd", 0x44}, {&(0x7f000000c800)="080f56526ea70ca6fd72a7105b4c486341360d1cfe7f0dfee03919fd9a2b7477f0152b3c02ed1348f8c363510a38d34248b97c10fe3f066f05c45214f5f08e097907ae20c03f1d4c4af30a02f9c2716eddcde190e63fc47f5775c03a04f313598f1a691e44f5b912ac665ad7171fea1c0ccc018a44e91a797ef6c2f5358dfc6299ef4d869dcb23e37f0c53ee209fc4697f16c1", 0x93}, {&(0x7f000000c8c0)}, {&(0x7f000000c900)="097e6d8fed759c9c13e7aab7c5365a0ff561ee17e56908a33883e18dd213f3ef39d3c8a5c2c6a2462f8780aaedd916db3a03420aa439b8e06179642f0bfd3cacb963d8724c740cf84501a3bec92590e56afb1e1112335dfad89aef402ac5078d03dca0ae4481bbaf461e452bc45b5c69b3f1c07f42a3e6ef02b2b55d86ca0de225a8335e3926f2de47cfe7165660e9ff7438c6b7aaa8d60522763d30387667202d698662ebf3de100628e33abb812476d51a9afb9bbeab551ab20eb676ca4ac8be7a155e", 0xc4}, {&(0x7f000000ca00)="7f3f8d3af126ab1f9328c664fa1497a859966fb6edad2988ce846179f98ca68951c7bb928727a1", 0x27}], 0x7}, 0x3ff}], 0x4, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f00000016c0)={'icmp6\x00'}, &(0x7f0000001700)=0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfbfff024}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000004500), 0x2a6, 0x0) 17:00:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) r3 = getpid() capget(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x3, 0x6, 0x4}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) dup3(r1, r2, 0x0) [ 314.962480] binder: send failed reply for transaction 86, target dead [ 315.079311] binder: release 10676:10684 transaction 88 out, still active [ 315.086230] binder: undelivered TRANSACTION_COMPLETE 17:00:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, &(0x7f0000000300)}) 17:00:55 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x14a, 0x0) 17:00:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) r3 = getpid() capget(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x3, 0x6, 0x4}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) dup3(r1, r2, 0x0) [ 315.137328] binder: send failed reply for transaction 88, target dead [ 315.213857] binder: 10692:10694 got transaction with invalid offsets ptr [ 315.239747] binder: 10692:10694 transaction failed 29201/-14, size 0-12288 line 3016 17:00:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet6(r0, &(0x7f0000000040)="1b495144410519103cb6c5a0972dd39bc7f3051196beba379946277c51de18a12a8bd59ce4957eeb8c8aeda0579ee45b00a5a9cf3770574415f15afd6cac9b0039e1ad7807483a27ebaeae819f87a2094735c75ca06f66e06758729c2a90bb97b6e4fde0d8d78f33d41a010fdbbd803f20e049fe65f4ee21e0533763ea3f76d272a6f3b7fbfebd5e5558372e95c800c61850382ec6baac6c21b6c2", 0x9b, 0x48001, &(0x7f0000000100)={0xa, 0x4e21, 0x3, @loopback, 0x8}, 0x1c) listen(r0, 0x6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x8000000000004e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="485b5c853017017239f87d291f"], 0x1) inotify_init1(0x80000) r2 = accept(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x10000000000000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000200)={r3, 0x4, 0x7}, &(0x7f0000000240)=0x8) close(r2) [ 315.259955] binder: undelivered TRANSACTION_ERROR: 29201 17:00:55 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x119, 0x0) 17:00:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) r3 = getpid() capget(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x3, 0x6, 0x4}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) dup3(r1, r2, 0x0) 17:00:55 executing program 4: io_setup(0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000540)='/dev/radio#\x00', 0x0, 0x2) clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000800)) write$sndseq(r0, &(0x7f0000000840)=[{0x1ff, 0x0, 0x0, 0x5, @time={0x0, 0x1c9c380}, {0x80, 0x4}, {0xfffffffffffffffe, 0x7a}, @raw8={"f250120249e5a74ea07829ae"}}], 0x30) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x11, 0x2, {0x0, 0x1, 0x5}}, 0x14) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) stat(&(0x7f0000004980)='./file0\x00', 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[]}], 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000680)=""/248) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0x8000, 0x1]) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f00000000c0)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x100000001, 0x19d8}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r5, 0x2}, &(0x7f0000000480)=0xfffffff6) close(r3) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x4, 0x200000) 17:00:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x28, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000300)}) 17:00:55 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc100) r1 = syz_open_dev$mice(&(0x7f0000000480)='/dev/input/mice\x00', 0x0, 0x60000) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000005c0)={@loopback, 0x0}, &(0x7f0000000600)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000640)={'vcan0\x00', r2}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) exit(0x0) accept$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000440)=0x1c) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40, 0x0) accept4$tipc(r3, &(0x7f0000000180), &(0x7f0000000200)=0x10, 0x80000) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000040)={r0}) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000000)={0x6, 0x2, 0x1}) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="d0", 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000340)="7b81e5fe8c3a2fb365495c0f73bf6ea6abd6771844c861d0e6eb6650e46a392105f405a67e5f62383ac50c660364bab246a973b7fa51784f61749fac22446614c7004a6d2ca4fc90f35d421278cd5893a5768c152f938db0df43112fcf2aa028dec3cf96c877dd85dbde26682fd52aa1189879940fb47e60d9b55b79ce138a7fc5aa8105f6cf1ecfd6ed7f2d2a9ff99da84805ad3149f502c95fd94df054cfd399baa51df5457bc9e70bc90ece3f29562a96c78110f304e612feb99db3ded7983943", 0xc2, 0x4000000, &(0x7f0000000280)={0xa, 0x4e20, 0xff, @loopback, 0x4}, 0x1c) 17:00:55 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x138, 0x0) 17:00:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x1]}) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)='bridge0\x00', 0x1, 0x7ff, 0x5}) r4 = getpgid(0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=r4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000100)) ioctl$KVM_GET_XSAVE(r3, 0x8080aea1, &(0x7f0000000300)) 17:00:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) r3 = getpid() capget(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x3, 0x6, 0x4}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) dup3(r1, r2, 0x0) 17:00:56 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xe3, 0x0) [ 315.635860] binder: release 10724:10731 transaction 92 out, still active [ 315.646376] binder: undelivered TRANSACTION_COMPLETE 17:00:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x28, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000300)}) [ 315.692352] binder: send failed reply for transaction 92, target dead 17:00:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) r3 = getpid() capget(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x3, 0x6, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(0xffffffffffffffff) dup3(r1, r2, 0x0) 17:00:56 executing program 1: io_setup(0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000540)='/dev/radio#\x00', 0x0, 0x2) clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000800)) write$sndseq(r0, &(0x7f0000000840)=[{0x1ff, 0x0, 0x0, 0x5, @time={0x0, 0x1c9c380}, {0x80, 0x4}, {0xfffffffffffffffe, 0x7a}, @raw8={"f250120249e5a74ea07829ae"}}], 0x30) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x11, 0x2, {0x0, 0x1, 0x5}}, 0x14) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) stat(&(0x7f0000004980)='./file0\x00', 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[]}], 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000680)=""/248) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0x8000, 0x1]) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f00000000c0)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x100000001, 0x19d8}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r5, 0x2}, &(0x7f0000000480)=0xfffffff6) close(r3) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x4, 0x200000) 17:00:56 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xf7, 0x0) 17:00:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) r3 = getpid() capget(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x3, 0x6, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(0xffffffffffffffff) dup3(r1, r2, 0x0) [ 315.811793] binder: release 10746:10747 transaction 94 out, still active [ 315.823266] binder: undelivered TRANSACTION_COMPLETE [ 315.915314] binder: send failed reply for transaction 94, target dead 17:00:56 executing program 4: io_setup(0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000540)='/dev/radio#\x00', 0x0, 0x2) clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000800)) write$sndseq(r0, &(0x7f0000000840)=[{0x1ff, 0x0, 0x0, 0x5, @time={0x0, 0x1c9c380}, {0x80, 0x4}, {0xfffffffffffffffe, 0x7a}, @raw8={"f250120249e5a74ea07829ae"}}], 0x30) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x11, 0x2, {0x0, 0x1, 0x5}}, 0x14) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) stat(&(0x7f0000004980)='./file0\x00', 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[]}], 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000680)=""/248) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0x8000, 0x1]) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f00000000c0)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x100000001, 0x19d8}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r5, 0x2}, &(0x7f0000000480)=0xfffffff6) close(r3) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x4, 0x200000) 17:00:56 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x8d, 0x0) 17:00:56 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x201, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) syz_emit_ethernet(0x140, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) delete_module(&(0x7f0000000080)='/dev/ppp\x00', 0x200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f00000000c0)="ed622c6817e9", &(0x7f0000000100)=""/142}, 0x18) fcntl$setflags(r0, 0x2, 0x20000000401) 17:00:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x28, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000300)}) 17:00:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) r3 = getpid() capget(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x3, 0x6, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(0xffffffffffffffff) dup3(r1, r2, 0x0) 17:00:56 executing program 1: io_setup(0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000540)='/dev/radio#\x00', 0x0, 0x2) clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000800)) write$sndseq(r0, &(0x7f0000000840)=[{0x1ff, 0x0, 0x0, 0x5, @time={0x0, 0x1c9c380}, {0x80, 0x4}, {0xfffffffffffffffe, 0x7a}, @raw8={"f250120249e5a74ea07829ae"}}], 0x30) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x11, 0x2, {0x0, 0x1, 0x5}}, 0x14) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) stat(&(0x7f0000004980)='./file0\x00', 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[]}], 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000680)=""/248) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0x8000, 0x1]) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f00000000c0)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x100000001, 0x19d8}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r5, 0x2}, &(0x7f0000000480)=0xfffffff6) close(r3) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x4, 0x200000) 17:00:56 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x26, 0x0) 17:00:56 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) r2 = fcntl$dupfd(r0, 0x0, r0) recvmmsg(r2, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010041, 0x0) 17:00:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) getpid() r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:00:57 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x142, 0x0) [ 316.586712] binder: release 10782:10785 transaction 96 out, still active [ 316.597733] binder: undelivered TRANSACTION_COMPLETE 17:00:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x40000000000022a, 0x40002000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 17:00:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2b, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000300)}) [ 316.666093] binder: send failed reply for transaction 96, target dead 17:00:57 executing program 2: socketpair$unix(0x1, 0x80000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x5c0, 0x3e0, 0x110, 0x110, 0x298, 0x298, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x5, &(0x7f0000000300), {[{{@uncond, 0x0, 0xc8, 0x110}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6, @ipv4=@rand_addr=0x7fffffff, @port=0x4e22, @gre_key=0xfffffffffffffffd}}}, {{@uncond, 0x0, 0x128, 0x188, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d2, 0x4d5, 0x2, 0xc6fc, 0x1}}, @common=@unspec=@cluster={0x30, 'cluster\x00', 0x0, {0x1, 0x3, 0x4, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0x0, 0xff, 0x0, 0xffffff00], 0x4e24, 0x4e21, 0x4e23, 0x4e21, 0x1, 0x7, 0x619, 0x0, 0x9}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@devgroup={0x38, 'devgroup\x00', 0x0, {0x9, 0x4, 0x6, 0x7, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x6, @ipv4=@multicast1, @ipv6=@mcast1, @port=0x4e22, @icmp_id=0x64}}}, {{@ipv6={@mcast1, @mcast2, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0xffffffff, 0xff], 'ip6_vti0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x11, 0x8000, 0x4, 0x2}, 0x0, 0xc8, 0x110}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv6=@local, @ipv4=@broadcast, @port=0x4e24, @icmp_id=0x64}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1f1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000030000000000000000000003000000000000000000000000000000000000000000000000000000000000000000df00000000000000000000000000000000000000000000000000090000000000ef0000000000"], 0xb8}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x4800) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000bc0)=""/243) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x24a) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200000, 0x0) ioctl$GIO_FONT(r5, 0x4b60, &(0x7f0000000100)=""/49) 17:00:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) epoll_create1(0x80000) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:00:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2b, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000300)}) [ 316.783424] binder: release 10799:10800 transaction 98 out, still active [ 316.812125] binder: undelivered TRANSACTION_COMPLETE 17:00:57 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xe4, 0x0) [ 316.834298] binder: send failed reply for transaction 98, target dead 17:00:57 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = memfd_create(&(0x7f00000010c0)='\x00', 0x3) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001100)=""/187) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1000) mkdir(&(0x7f0000001200)='./file0\x00', 0x40) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) gettid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) getpriority(0xfffffffffffffffd, r1) r2 = semget(0x0, 0x1, 0x2) semctl$SEM_STAT(r2, 0x3, 0x12, &(0x7f00000000c0)=""/4096) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000011c0)=ANY=[@ANYBLOB="000000007f000001010000000900000000000000ac1414bb7f00000104ffffffffac1414aaac1414bb0000000000000000000000"], 0x34) connect$nfc_llcp(r0, &(0x7f0000001240)={0x27, 0x0, 0x1, 0x2, 0x2, 0x63a, "42fdc1b12ce951051ac34b23f99a1f055a8a60283d9e796e9105a254c5ff7786fdb1ed4ee30b7fad02c2c7d5e1dab99047cc1919e81cdc7b38a435a88c17c1", 0x22}, 0x60) ioctl$TIOCNOTTY(r0, 0x5422) 17:00:57 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x2}) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x0, 0x8, 0x6, [], &(0x7f00000000c0)={0xa00964, 0x10000, [], @value=0x2}}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000080)) 17:00:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400000001) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000180)=""/197, &(0x7f0000000280)=0xc5) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7fff, 0x321500) ioctl$KDDISABIO(r3, 0x4b37) ioctl$NBD_DISCONNECT(r3, 0xab08) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae9c, &(0x7f0000000000)={0x7b, 0x0, [0x3]}) 17:00:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2b, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000300)}) 17:00:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:00:57 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xcc, 0x0) 17:00:57 executing program 2: r0 = socket$inet(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast2, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r1, 0x0, 0x1, &(0x7f0000000240)='\x00', 0xffffffffffffffff}, 0x30) capset(&(0x7f00000002c0)={0x0, r3}, &(0x7f0000000300)={0x800, 0x9, 0x81, 0x1, 0x401, 0x8}) getgid() fcntl$getownex(r1, 0x10, &(0x7f0000000000)) gettid() getuid() r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040)) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000100)={0x11, 0x12, 0x5, 0xa, 0xb, 0x80, 0x1, 0x49, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x80000000, &(0x7f00000001c0)) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x5}, 0x10) write$P9_RFLUSH(r2, &(0x7f0000000380)={0x7, 0x6d, 0x1}, 0x7) 17:00:57 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x1a0, 0x0) 17:00:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000300)}) 17:00:57 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x3) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000000c0)="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") r2 = syz_open_dev$video(&(0x7f00000010c0)='/dev/video#\x00', 0xff, 0x200) write$P9_RLINK(r1, &(0x7f0000001100)={0x7, 0x47, 0x1}, 0x7) sendmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="9642e333c3104c6ed9fc8abfa3544d9656f75952134858e4e65b1e82032585a0d20cc5fcd0fb665c776fb8cc5fdc0374c783e1a30af5380799e29cc344b9f7e4ab9f8a7f13d008c94edb04", 0x4b}], 0x2, &(0x7f0000002200)=[{0xa0, 0x0, 0x5f, "1d1ad7691071a52baf8e2544721708227202303d184bd4e14f0e176c4ece74372fc1979e5a146ac255c47d91ecc53c366302e1411f93e75be950a6a4242c9041247452b27cd41de7a0bde454db8655927f3ec78afc4e84b1962d1263294395bbc869a0d50a93a68c6a50300ce8118201516d14d8ebde3155964fdfd279e49aea39da925e130494c345ad7c935838d7"}, {0x60, 0x10a, 0x7ff, "96e35c46068ce1eb41c34459027b0923a54ebf97de358c93338aeef397dec6afce46b2520e9fd8936aa0e231698c27a506c38fbe5794956929706a25230bbdbe81634753787d346246"}], 0x100}, 0x5}, {{&(0x7f0000002300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm(cast6-generic)\x00'}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002380)="46a6a4b35fc8992355240d6502e002cc3661513d84d30a51a3f6ed59622567f47d9a9a59360defa2b5ede900d2fda6808c2e10df531d5da9cc09bded2fd75873b2b8e4ea067b11ab1ee6fa55ffa1fdd0652e7e7e968f92e4f4dc5f4902726b5206b1168b81b30ae6a1ebf173c002697cd3232292d976e3de2da88a197594a8a373ff33515760fba9326e6df8d2bac66634c12b79903aaa48d356940d9cead00bb8ec465556f471b5037dedb80868435508a628cd702ea549737252eb2ce7ae30f17d1184d4d10b497dea7bce182923f13c15dbe90087140986", 0xd9}, {&(0x7f0000002480)="34d5ccecb40d6c4df02455f340a72ff6346dbc241604a3d937277d8a4a914f93f345143356c5bad88de5953fd881482228403432a38af13af643fc5d34a293e7618c9fa62184f7a835de261d99fcdad4b480a76b19033a6d65fc0abf9d1c49606f8bca065c90a2d76335c1689f051056cfcb9a9d2caa9d908990fa257c27af493003f2affe35680a50783dd58b5c6cee661c4ad5637856423b10d94f59b9f313e6c233a7951ef803e1e88d502cfc1dc2", 0xb0}, {&(0x7f0000002540)="47fd886af5a61bde8c96f8aba35cd59b0785c8a98662e0e04e6cffe6d532113c82888c092df514d9c59089", 0x2b}, {&(0x7f0000002580)="4730ce51562bda639e410872b7080db39688833b85249eef240118318f6c7d1f863efcdc1a47317f4f66e7826bd86ae90f672affb9a230", 0x37}, {&(0x7f00000025c0)="e94b787fb9a7f5d6307472f5371181bd61e69198dc74de87d877b0c735e2b18ae3ff6f607daebb73be219621cf01a512430f86b132c0f5f7408853ed84cfdae4eaad57536f691da918d53e26462b237d6d07f195c794d1d2226b22a45f62d70ec60b2778dd3092a5e143d15dfc5923b4504a8a8cb22933d029115073edde5acae0cc78b5ce13ce10c76ffdd18d502ab28f3d42b9c6108c43bfd5a6fe4c213f9159", 0xa1}, {&(0x7f0000002680)="4d9aa1aadeffe1727070b8c7fd72904daa4559a5013504473f16f5c5d42bcb49e9489d6343339f188ae100fa7ab181fd9382a1c303f174e90550467c6fb1fdd07da25b39fb836ed67bffeace34879e873f37e6ec73bd0893d76c2a97393d17797555ba1b2017450ef8250353a46739318822eb4aded79d3f6665b6cb31d4387cc5c3220f785589349b07edfa08ce7a3e79a7d2acafd4fd7f215715ae98808e37e5078de1ab4ef5a0dda825cd2492dc4e88dd2641bf1c78185e6da9adc8ff5684880ca90528e826fa3244f717e6475449a01d65c4486b350b53405580e8f3de72ed3ec9d9f1ad08f9a8", 0xe9}, {&(0x7f0000002780)="64dda64d6a4ebb392acaaa6b36895bea50ac86a22851da929f4f787e6281e3a7305f6940b819353ed7889c72fc016bde442422d97ead3709a4369d0e97b853ca503197baaf059273c7bb8ae1549abb4f5333a594e455b6495922ea78caedde96a86bcfbf19b5cda23683ed647d97dd77642d3242e314d2ed", 0x78}, {&(0x7f0000002800)="8ff6b84d78043924ecab86913ca3ad2073040cffc9e32e3ab969cf52b99c350377a204a7bf3ee8dc46305c4ba54afe792823c009062b973bf75dffe5cf89c91b2eff71befd310459f921f56fb7e064f026327b490f199d1196f67db457b63112b029e02b0a935a", 0x67}], 0x8, &(0x7f0000002900)=[{0xe8, 0x11d, 0x0, "f85c9023e5df8d050df952988f6ea41133e2350962449a8dc883afef25bb3016b687f7d30f69f1f0965a06c9f141414e37fa23fdfec2f4d7e03990a9b358d747714bbe1682a8e699cb1fb5bb29ceb0d503b17e611af5a98becf2823496c9e765cd7e165ae2c58c17327e4d4a8c96ed6ba57099761eff213699097f38f091541c59bb5faca218f65dd5365edae9f57adc873dbad3237683a7a5eb7d22a3d0820d3549ead57042c6ab5404067a7a652bcd3c0a9255ab101f08c8e88116713bb95ae88b954728b9d4f5270e8f3e8dca1e7a2f44"}, {0x28, 0x11f, 0x3, "90ce2673e94c36ceee7653cf99b8e1c793"}, {0x1010, 0x103, 0x4, "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"}], 0x1120}, 0x1}, {{0x0, 0x0, &(0x7f0000005e80)=[{&(0x7f0000003a40)="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", 0x1000}, {&(0x7f0000004a40)="14fff8a7df68763e", 0x8}, {&(0x7f0000004a80)="062a74359830f45c8493c49420bb68c479fc7f92222fd8d8db78b597242d6e08327894f4d326554b4fa00d1204", 0x2d}, {&(0x7f0000004ac0)="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", 0x1000}, {&(0x7f0000005ac0)="d679", 0x2}, {&(0x7f0000005b00)="4c44612b54db712b1aa10e468bc8e077db6c5f8b9c4cd69b7b28363a7443869dd70e4dccdfbb7ab9d9bcf3d960cb92e31663c0f8af9bc74211aec31fee54ff64a93c8da88244a7093afdb584e0a6bad78cb2d999af5c87d10340aafaca0cb391dd513408a3c5c9cfcc0d7b0edba4c0140a903c2267406edbb6a2d0a7529382f79bdb4430c09b6a02f21d892b63e1c3eae6736a8e820c3a0cd11cd9002cebe4f79ac9287f8894c0b6689b8cda13df75aebc9935c581f3923062f7d81fc50b99488faa9bfca7b41ba4a3524f74c23f45e2", 0xd0}, {&(0x7f0000005c00)="895e98ab5c84ed62c9096b468f46bf921fe3f06cde2d112b7f480743da9d399b34454b18e98bf87e600280d60aeff08959c6d2e31c5a50ba46736bb508f15990e052db079ba35551ad987a7f62f8906dfb884671b86f9f8c", 0x58}, {&(0x7f0000005c80)="5d624ca64d928ab11710adb6f86938bde8a2e66f71ea02faf062b3ac86852cea02b1b85bc6177dfc90fa403de1c8a9ed744514a80c18db1206d9d2a8198aaaf5c83e61e54ba6be0e633e63935a54aeac8993d8fcf1da57fdbd5fa0ce01f4c71784ce6ad134f3ffdcd6fe8db7bed031ff1fb425dbe4289c7a5af70607beb950c0298206051601cd3f7ad5e350883493ff8c17a14c2a3bec50551a7792d6412fa7fc793cbb2541ff883d30644ef033b3c1b0e86b1bfe8de708afa5d6e5a52e595c5c0998d6493bc1f5e3c47f85f3c88562b0489831a68a20f6f7e4665059939eaaebdf3effe9aad98869fb27591bb94ff191854f95b1858bb7", 0xf8}, {&(0x7f0000005d80)="e241429a8079c10859e4f6b8c60c0a98c0f591f2112cdf78c813a34bb0ee8f57ce40a7e4a893930b3a8d4436689324c3b58300318dbb4ff619871bf2ee28aa9c4f846c918a644fb27333a964b1ae820108e38dce3193a04caeb12b6139c83cfb566dbb1f408fa0f798f5a1751e40ce0e63edef48c77c2d0af77ab737a7e511fb423c9f76ecd7ab66ff759384234c5d38b00288c5045206d43a0ebac7970f47e35f5f64d9541496a8dd6e927b5a2b0bbc473929d4b19f975580ebe5dd6a8a2f4eee7a541476ac965bd5a9809a211480c1b0e5d2193d53f6d3c156d2cf82ac4b600c5f06a7fb106de1cef6287eb22659", 0xef}], 0x9, &(0x7f0000005f40)=[{0xa8, 0x112, 0x0, "5ff42c0c4d77ceddf994d48597a71f0f1e3713a3df51ac4bade10fbf819b78c7e625a53a1cc4403d9836ebc91813fc58ee639a7a88d52e4328bbb28384959454171a85ee747efbf66be695ada886fadaf7fa8acc00edfc1ce710ec5de01f6fbcefd56a1d218e1bf0862b94e0469a413cdd784a75f2f3c0a67808e375106883f89b6581f37b95e91ada4b793489d10ff7b4"}, {0x100, 0x0, 0xffffffff, "53731750a68bfd1e06513aac7d8e42b3ec20e0cdc82ad672da3db30e1063e7ec9399b8c68f39bacbdabd3c0140598009698a73ebc2b36817e60dbeab54332ad27140fe45fbf4191a887f69369343c05afceac3241149578f9ce840f3063312b1b90c09e278d3cd9debb1809fc79ab22e36af1cfb199c25905b3eaa819fa97d3fa095350618cdddea89857f05a70aeba796cbd739bccae924c00f8cc5a0497f84fabf9d1d4ee54700cbe168cded149af0826d406edc8015ac488f384be8fd6ce442590c869116ec79ae422f979c60d2f5b6c4152783fce003de17200e01b20a0ca8593d8ceccc07a143339a"}, {0xd0, 0x1, 0x2, "612e8a45a8fe951aa8969b6f4e10ed02e6dc723d75d2499c70f13ae45e871c7b01540dfe26e9df09de112e8f629e4b42069066d1c948f9d34f9f03df85883a2de5cf08c82fc7ad85c9bd868a01e342ab92a8c4645a23ac35982bdf91d1e6d48269475251cb8a072f3ae54a94940aa48abb20903aeefc4c1a481acabb8f289f853da3df8ae525db5551663208af2294f966a4cb747fd593bef84b3fd9154a16cf272d4e9e9a6e579942fa00bf69ed9da6bc69164930201633c0"}], 0x278}, 0x1000}], 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000006280)={{0xff, @broadcast, 0x4e23, 0x0, 'rr\x00', 0x1, 0x0, 0x40}, {@local, 0x4e21, 0x10002, 0x3, 0x6, 0x2}}, 0x44) ioctl$KDDISABIO(r1, 0x4b37) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000006300)={'filter\x00'}, &(0x7f0000006380)=0x44) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000063c0)={0x4f, 0x8}) r3 = syz_open_dev$sndpcmc(&(0x7f0000006400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x4000) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) getitimer(0x3, &(0x7f0000006440)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000006540)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000006480)="0a5d7d30065d5547ee2ebff76eb94721261baed1709b92220e57adcebcb2813d81e7f2221db019138f11c44048d61e04a5eadc0255fca92c11aef013f8b33271141d67d362706e5cd45fef9d122ad5c0dac8a2b70ec6d3e67a193c8999e8a1ce980cda5dfb2299c16882f89b8f43514b6034e66453b71e686848c6364df70c54e3f502c47177e2bdc2001137871171e04064d7faf1128ec5b3ce46e893658efbefdd", 0xa2, r3}, 0x68) fsetxattr$security_smack_transmute(r1, &(0x7f00000065c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000006600)='TRUE', 0x4, 0x3) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f0000006640)={0x3, 0x0, 0x0, 0x5, 0xff, {0xa5c, 0x80}, 0x1}) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000006680)={'filter\x00'}, &(0x7f0000006700)=0x44) recvmsg(r3, &(0x7f00000069c0)={&(0x7f0000006740)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000006880)=[{&(0x7f00000067c0)=""/65, 0x41}, {&(0x7f0000006840)=""/21, 0x15}], 0x2, &(0x7f00000068c0)=""/251, 0xfb}, 0x40000103) r4 = syz_open_dev$midi(&(0x7f0000006a00)='/dev/midi#\x00', 0x8, 0x2080) readlinkat(r4, &(0x7f0000006a40)='./file0\x00', &(0x7f0000006a80)=""/51, 0x33) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000006ac0)=@assoc_id=0x0, &(0x7f0000006b00)=0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000006b40)={r5, 0x400}, &(0x7f0000006b80)=0x8) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000006bc0)={0x2, 0x3}) listen(r1, 0x4000000000000000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000006c00)={0x0, @bt={0x1, 0x7, 0x1, 0x3, 0x3a3, 0x3ff, 0x8, 0xd415, 0x0, 0xfffffffffffffff8, 0x5, 0x7f, 0x6, 0x0, 0x2}}) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000006cc0)={0x5ca9139, 0x0, 0x1, 0x3e15, 0x7fff, 0xffffffff, 0x51, 0x510e, 0xfff, 0x9, 0x9d, 0xff}) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000006d00)={'mangle\x00', 0x74, "7ddf6793e42a04b9d7ce68a460bf6f351998abf05c685d4c5fdebb6a5f62edc78abadc098d3e8fe439873ba00971896f1976ccc4fc9f7052e0f7bf8eaf7aba7e56401c7fb475ca4f24fdc155d0f71c572f5793c0a684e4cee8b66bff38aa90b2f02c41ef78082a931f3d29c82f887b3087273b8a"}, &(0x7f0000006dc0)=0x98) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000006e00)={0x6, 0x3, 0x8}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000006e40)=0x8) 17:00:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:00:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x4000, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x3, @remote, 0xa}, 0x1c) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000001c0)=0x77e, 0x4) fsetxattr$security_evm(r2, &(0x7f0000000000)='security.evm\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="03000100000098fe00cb8929172238ece8881f1503caa4cb2a760c5fd3e30bcba45fa68956672dd8adc36861e7c62b012c479893939c7729a1070e8a6976af6719b941f7ea990615cca04d814917c816e71bd1d3d9ba168a0d0ec68d4b2c491f665ae4368c9c1c3ab0e5b06f7b8cf429a2619eaca1fc39e555f0588738e44b289dca64186f3e7afc04d7bfcf8afb09f9a4ab33dd61317c6a808abfa353c1cde43ded85630002444c88177475b256aef9dc1a833ec5262e5bf4e9671b7c85cbe13b6a30346ed025ac709b7e43ac2495f7455ac489e4"], 0xd5, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) prctl$PR_CAPBSET_DROP(0x18, 0x22) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x9) sendmmsg(r3, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) 17:00:58 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x9a, 0x0) 17:00:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:00:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x58}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10000013, r0, 0x0) 17:00:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000300)}) 17:00:58 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xc, 0x0) 17:00:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:00:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = userfaultfd(0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$IOC_PR_REGISTER(r7, 0x401870c8, &(0x7f0000000200)={0x7fffffff, 0x2, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000180)={0x7, 0xd, 0x4, 0x8, {r5, r6/1000+30000}, {0x3, 0xf, 0x844, 0x1, 0x246, 0x100000000, "d5b50436"}, 0x1, 0x4, @fd=r7, 0x4}) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000080)=0x4) 17:00:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000300)}) 17:00:58 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x61, 0x0) 17:00:58 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x2, @ipv4={[], [], @multicast2}, 0x20}, r1}}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/hwrng\x00', 0x18c00, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffff800, 0x0, 0x6, 0x19, 0x14, "e23697d63306652b319d047676236a3daeafe8a803d1bba53bc41bc6eaed3656df1876797e0eca574301472a320e09251fc7b90eaf169df219d6b7864f19a927", "2882d0f506549830093084da4748e046087197a02375d7fa8e0dea0ce39b86b3d9d28ee9ee9c98961595eb37797f5a314317967903e7f94bf0c509187b25c5e4", "5e2f2bb36b642af71df8a69b54cbc06d3a9e6d939274416e42e8713ed97571e0", [0x1d8, 0x649]}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) dup2(r2, r2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x3302, 0x0, 0x8, 0x5, 0x400, 0x8}, 0xff}, 0xa) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty}, 0x0) 17:00:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(r1, 0xffffffffffffffff, 0x0) 17:00:59 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) getpid() sendfile(r1, r0, 0x0, 0x7fffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) utimes(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000600)='/dev/vcsa#\x00', 0x9, 0x200000) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000180)={0x40000, 0x0, [0x4, 0x1, 0x2, 0x3, 0x3, 0x60, 0x0, 0x81]}) sendfile(r0, r1, &(0x7f0000000140)=0x20000, 0x8804200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2e4, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x471cbe0f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff00000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x114, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc25}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @local, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @remote, 0x1ff}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}, @TIPC_NLA_BEARER={0x78, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9f8, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}]}]}, 0x2e4}}, 0x4040) fcntl$setlease(r1, 0x400, 0x0) 17:00:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(r1, 0xffffffffffffffff, 0x0) 17:00:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:00:59 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xe8, 0x0) 17:00:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000011000102000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003007465616d3000000000f0ffffffffffff"], 0x34}}, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x28000, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000080)={0xa716, 0x5}) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x80, 0x4, 0x40, 0x200, 0x3, 0x0, 0x9, 0x5e, 0x40, 0x26a, 0x81, 0xd436, 0x38, 0x1, 0x2, 0x3ff, 0x10001}, [{0x1, 0x9, 0x9, 0x80000000, 0x0, 0x1, 0x5, 0x2}], "b4d2bb326581f3da46382c04f51771a45916a50511f16a714524f6242678052ca22332630cca25a63e9b8f21cee7133bccb66d759f37f57004aede41807e23a2f77c2bf8fe168a976d6ddd7cf6135558f7f31ea500bb981b9ba6b36e7c80151305b91b38bff3a459714f344c013cb63bd86c4fd758892e9ba861e1db0bc73231c1292a73409240f59a2b253bb9c3e68d9316201e732df8e790e245d33c38001e65fa00af075ea87e616423797e38eb2095c58452ff999c4d15", [[], [], []]}, 0x431) [ 318.866693] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 318.894045] binder: 10921:10928 got transaction with invalid offsets ptr [ 318.903774] QAT: Invalid ioctl 17:00:59 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x167, 0x0) 17:00:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(r1, 0xffffffffffffffff, 0x0) [ 318.910167] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 318.926223] QAT: Invalid ioctl [ 318.949741] binder: 10921:10928 transaction failed 29201/-14, size 0-12288 line 3016 17:00:59 executing program 2: r0 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000240)="0795ff0000000029810efa0900007ce74fb58ddf0000356317b447d19ee350321ba4220aae9720fe2c59e090b66f8fc48c26002c72a757a85b1000000000000000023f0683a2aaa9", 0xffffffffffffff1e) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) clock_settime(0x5, &(0x7f0000000140)) 17:00:59 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x2, @ipv4={[], [], @multicast2}, 0x20}, r1}}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/hwrng\x00', 0x18c00, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffff800, 0x0, 0x6, 0x19, 0x14, "e23697d63306652b319d047676236a3daeafe8a803d1bba53bc41bc6eaed3656df1876797e0eca574301472a320e09251fc7b90eaf169df219d6b7864f19a927", "2882d0f506549830093084da4748e046087197a02375d7fa8e0dea0ce39b86b3d9d28ee9ee9c98961595eb37797f5a314317967903e7f94bf0c509187b25c5e4", "5e2f2bb36b642af71df8a69b54cbc06d3a9e6d939274416e42e8713ed97571e0", [0x1d8, 0x649]}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) dup2(r2, r2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x3302, 0x0, 0x8, 0x5, 0x400, 0x8}, 0xff}, 0xa) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty}, 0x0) [ 319.024409] binder: undelivered TRANSACTION_ERROR: 29201 17:00:59 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x2, @ipv4={[], [], @multicast2}, 0x20}, r1}}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/hwrng\x00', 0x18c00, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffff800, 0x0, 0x6, 0x19, 0x14, "e23697d63306652b319d047676236a3daeafe8a803d1bba53bc41bc6eaed3656df1876797e0eca574301472a320e09251fc7b90eaf169df219d6b7864f19a927", "2882d0f506549830093084da4748e046087197a02375d7fa8e0dea0ce39b86b3d9d28ee9ee9c98961595eb37797f5a314317967903e7f94bf0c509187b25c5e4", "5e2f2bb36b642af71df8a69b54cbc06d3a9e6d939274416e42e8713ed97571e0", [0x1d8, 0x649]}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) dup2(r2, r2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x3302, 0x0, 0x8, 0x5, 0x400, 0x8}, 0xff}, 0xa) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty}, 0x0) 17:00:59 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xaf, 0x0) 17:00:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:00 executing program 4: accept(0xffffffffffffffff, &(0x7f0000000440)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x31) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000100)) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v1={0x2, "1be91681b1d8d294bebc204a0725ad23872a"}, 0x13, 0x3) 17:01:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:00 executing program 2 (fault-call:4 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:00 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x49, 0x0) 17:01:00 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) flistxattr(r0, &(0x7f0000000080)=""/146, 0x92) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x802c542a, 0x0) 17:01:00 executing program 3: getsockname(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0) mmap(&(0x7f0000a0c000/0x2000)=nil, 0x2000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x500, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) lookup_dcookie(0x49, &(0x7f0000000bc0)=""/17, 0x11) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xfffffffffffffffa, 0x6, 0x100000001, 0x8, 0x0, 0x5c3, 0x200, 0xa, 0x26b, 0x10000, 0x3f, 0x101, 0x2, 0x1, 0x0, 0x1, 0x8000, 0x1, 0x1000, 0x2, 0x293cd721, 0x10001, 0x5, 0x9, 0xff, 0x4, 0x4, 0x9, 0x3, 0x3, 0x0, 0x1ff, 0x0, 0x9, 0x7, 0x6, 0x0, 0x200, 0x1, @perf_config_ext={0xf3, 0x4}, 0x2002, 0x3ff, 0x400, 0x5, 0x4, 0x200, 0x40}, 0x0, 0x2, r1, 0x9) fsetxattr$security_smack_entry(r0, &(0x7f0000000b00)='security.SMACK64MMAP\x00', &(0x7f0000000000)='%^ppp1\x00', 0x7, 0x2) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x3}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000140)={'mangle\x00'}, &(0x7f00000001c0)=0x54) unshare(0x40000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) [ 319.818179] syz-executor4 (10935) used greatest stack depth: 13080 bytes left 17:01:00 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x16, 0x0) 17:01:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 319.905008] FAULT_INJECTION: forcing a failure. [ 319.905008] name failslab, interval 1, probability 0, space 0, times 0 [ 319.982282] CPU: 1 PID: 10984 Comm: syz-executor2 Not tainted 4.20.0-rc6-next-20181214+ #171 [ 319.990927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.000294] Call Trace: [ 320.002933] dump_stack+0x244/0x39d [ 320.006592] ? dump_stack_print_info.cold.1+0x20/0x20 [ 320.011827] should_fail.cold.4+0xa/0x17 [ 320.015920] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 320.021484] ? __lock_acquire+0x62f/0x4c20 [ 320.025750] ? print_usage_bug+0xc0/0xc0 [ 320.029831] ? graph_lock+0x270/0x270 [ 320.033667] ? find_held_lock+0x36/0x1c0 [ 320.037765] ? perf_trace_sched_process_exec+0x860/0x860 [ 320.043263] __should_failslab+0x124/0x180 [ 320.047517] should_failslab+0x9/0x14 [ 320.051341] kmem_cache_alloc_trace+0x2db/0x740 [ 320.056027] ? _raw_spin_unlock+0x2c/0x50 [ 320.060265] binder_get_thread+0x255/0x880 [ 320.064521] ? binder_new_node+0x8d0/0x8d0 [ 320.068779] ? perf_trace_sched_process_exec+0x860/0x860 [ 320.074244] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 320.079800] ? rcu_pm_notify+0xc0/0xc0 [ 320.083713] ? __might_sleep+0x95/0x190 [ 320.087741] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 320.093381] binder_ioctl+0x275/0x194a [ 320.097294] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 320.102936] ? find_held_lock+0x36/0x1c0 [ 320.107021] ? __fget+0x4aa/0x740 [ 320.110492] ? lock_downgrade+0x900/0x900 [ 320.114693] ? check_preemption_disabled+0x48/0x280 [ 320.119733] ? kasan_check_read+0x11/0x20 [ 320.123906] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 320.129197] ? rcu_read_unlock_special+0x370/0x370 [ 320.134153] ? __fget+0x4d1/0x740 [ 320.137628] ? ksys_dup3+0x680/0x680 [ 320.141380] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 320.146331] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 320.151975] do_vfs_ioctl+0x1de/0x1790 [ 320.155888] ? __lock_is_held+0xb5/0x140 [ 320.159972] ? ioctl_preallocate+0x300/0x300 [ 320.164399] ? __fget_light+0x2e9/0x430 [ 320.168389] ? fget_raw+0x20/0x20 [ 320.171863] ? __sb_end_write+0xd9/0x110 [ 320.175956] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 320.181505] ? fput+0x130/0x1a0 [ 320.184803] ? do_syscall_64+0x9a/0x820 [ 320.188790] ? do_syscall_64+0x9a/0x820 [ 320.192783] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 320.197387] ? security_file_ioctl+0x94/0xc0 [ 320.201818] ksys_ioctl+0xa9/0xd0 [ 320.205289] __x64_sys_ioctl+0x73/0xb0 [ 320.209197] do_syscall_64+0x1b9/0x820 [ 320.213101] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 320.218486] ? syscall_return_slowpath+0x5e0/0x5e0 [ 320.223437] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 320.228303] ? trace_hardirqs_on_caller+0x310/0x310 17:01:00 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x600000, 0x0) renameat(0xffffffffffffffff, 0x0, r0, 0x0) symlinkat(&(0x7f0000000200)='./bus\x00', r1, &(0x7f0000000240)='.\x00') write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x400000000000000, 0x20}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0c0084009bb4bcca253eb64faf2357549b03269ccf3d586b6b60aebb6abbe616d45cef25bb47322d35cff5887d59dd283691e7a2cb2fb0825b17eccdb319c197ff0168da114e738a958b10206e89a1edf7524d5aae53d1d9d6f74a6ca1828350e883db124c2cf953a0a1b85826132a6596ff4c35247a85a0dee800000000001300000000c3cb5c863f9ff45ea560476d50916bb3b0"], 0x8c) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000380)='.dead\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r4, &(0x7f00000004c0)='syzkaller\x00', &(0x7f0000000500)='msdos\x00') getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000300)={r3, 0x1f07}, &(0x7f0000000340)=0x8) r5 = socket$inet(0x10, 0x3, 0x10000000000c) sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000003061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 17:01:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(0xffffffffffffffff, r1, 0x0) 17:01:00 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, 0x48) ftruncate(r1, 0x3) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = syz_open_dev$mouse(0x0, 0x4, 0x400) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x0) r3 = socket(0x11, 0x6, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) r4 = accept4(r0, 0x0, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f00000004c0)="9d47ac8a91eee893d7afe00f968663927427e0a2ae006a904ea066a3e768f09b0eef35a485b3479c7233263e7b4da66931a16fbd7b8377a37350960f7a3e0be2dc16963aafcff31fc14a195b8b5431ef542827528ccbd250fc2535f851d7aefcb5ba1a16fe7d85372d56df5a5b53f4d23a07c7ee744e4192dcb14691499ebe49ad895e27318d1d884180df6246f47984eb2067928727782e1156c246c452981fa7849695dd1262bcb95581b0d2dad3f61b84cb8a5208d440be93eb114e879ea76a6126327253de3acc32848acdd229e801e55e1a6c64861772") pkey_free(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x2, 0x1, [0xfffffffffffffe01]}, &(0x7f0000000300)=0xa) io_cancel(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9, 0x300000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 320.233340] ? prepare_exit_to_usermode+0x291/0x3b0 [ 320.236258] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 320.238377] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 320.238404] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 320.238418] RIP: 0033:0x457659 [ 320.238435] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:01:00 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x18b, 0x0) [ 320.238445] RSP: 002b:00007f004a578c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.238466] RAX: ffffffffffffffda RBX: 00007f004a578c90 RCX: 0000000000457659 [ 320.254016] IPVS: ftp: loaded support on port[0] = 21 [ 320.255762] RDX: 0000000020000040 RSI: 00000000c0306201 RDI: 0000000000000003 [ 320.255773] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 320.255783] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f004a5796d4 [ 320.255793] R13: 00000000004beacf R14: 00000000004cf6d8 R15: 0000000000000005 [ 320.258958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 320.289121] binder: 10979:10984 ioctl c0306201 20000040 returned -12 17:01:00 executing program 2 (fault-call:4 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 320.543924] FAULT_INJECTION: forcing a failure. [ 320.543924] name failslab, interval 1, probability 0, space 0, times 0 [ 320.589298] CPU: 1 PID: 11017 Comm: syz-executor2 Not tainted 4.20.0-rc6-next-20181214+ #171 [ 320.597920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.607301] Call Trace: [ 320.609926] dump_stack+0x244/0x39d [ 320.613579] ? dump_stack_print_info.cold.1+0x20/0x20 [ 320.618790] ? graph_lock+0x270/0x270 [ 320.622642] ? __mutex_lock+0x85e/0x16f0 [ 320.626740] should_fail.cold.4+0xa/0x17 [ 320.630828] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 320.635954] ? find_held_lock+0x36/0x1c0 [ 320.640040] ? binder_transaction+0x686/0x7130 [ 320.644648] ? graph_lock+0x270/0x270 [ 320.648467] ? mark_held_locks+0x130/0x130 [ 320.652724] ? save_stack+0xa9/0xd0 [ 320.656373] ? find_held_lock+0x36/0x1c0 [ 320.660479] ? perf_trace_sched_process_exec+0x860/0x860 [ 320.665961] __should_failslab+0x124/0x180 [ 320.670217] should_failslab+0x9/0x14 [ 320.674040] kmem_cache_alloc_trace+0x2db/0x740 [ 320.678724] ? _raw_spin_unlock+0x2c/0x50 [ 320.682906] binder_transaction+0xadf/0x7130 [ 320.687338] ? __lock_acquire+0x62f/0x4c20 [ 320.691593] ? print_usage_bug+0xc0/0xc0 [ 320.695683] ? print_usage_bug+0xc0/0xc0 [ 320.699778] ? binder_translate_handle.isra.39+0xde0/0xde0 [ 320.705437] ? __lock_acquire+0x62f/0x4c20 [ 320.709686] ? print_usage_bug+0xc0/0xc0 [ 320.713773] ? mark_held_locks+0x130/0x130 [ 320.718035] ? mark_held_locks+0x130/0x130 [ 320.722297] ? __lock_acquire+0x62f/0x4c20 [ 320.726545] ? print_usage_bug+0xc0/0xc0 [ 320.730622] ? find_held_lock+0x36/0x1c0 [ 320.734712] ? lock_unpin_lock+0x4a0/0x4a0 [ 320.738979] ? mark_held_locks+0x130/0x130 [ 320.743237] ? graph_lock+0x270/0x270 [ 320.747053] ? find_held_lock+0x36/0x1c0 [ 320.751137] ? graph_lock+0x270/0x270 [ 320.754957] ? mark_held_locks+0xc7/0x130 [ 320.759119] ? graph_lock+0x270/0x270 [ 320.762976] ? print_usage_bug+0xc0/0xc0 [ 320.767069] ? find_held_lock+0x36/0x1c0 [ 320.771157] ? __might_fault+0x12b/0x1e0 [ 320.775236] ? lock_downgrade+0x900/0x900 [ 320.779409] ? lock_release+0xa00/0xa00 [ 320.783401] ? perf_trace_sched_process_exec+0x860/0x860 [ 320.788888] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 320.794450] ? check_preemption_disabled+0x48/0x280 [ 320.799504] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 320.805063] ? _copy_from_user+0xdf/0x150 [ 320.809232] binder_thread_write+0x78a/0x2b30 [ 320.813761] ? trace_event_raw_event_binder_update_page_range+0x3a0/0x3a0 [ 320.820707] ? mark_held_locks+0x130/0x130 [ 320.825023] ? is_bpf_text_address+0xd3/0x170 [ 320.829594] ? kernel_text_address+0x79/0xf0 [ 320.834041] ? graph_lock+0x270/0x270 [ 320.837916] ? __save_stack_trace+0x8d/0xf0 [ 320.842275] ? find_held_lock+0x36/0x1c0 [ 320.846366] ? __might_fault+0x12b/0x1e0 [ 320.850450] ? lock_downgrade+0x900/0x900 [ 320.854646] ? lock_release+0xa00/0xa00 [ 320.858639] ? perf_trace_sched_process_exec+0x860/0x860 [ 320.864131] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 320.869685] ? _copy_from_user+0xdf/0x150 [ 320.873893] binder_ioctl_write_read.isra.42+0x306/0xba0 [ 320.879390] ? kasan_check_read+0x11/0x20 [ 320.883581] ? binder_thread_write+0x2b30/0x2b30 [ 320.888519] ? _raw_spin_unlock+0x2c/0x50 [ 320.892783] ? _binder_inner_proc_unlock+0x3f/0x80 [ 320.897734] ? binder_get_thread+0x1b6/0x880 [ 320.902162] ? binder_new_node+0x8d0/0x8d0 [ 320.906421] ? perf_trace_sched_process_exec+0x860/0x860 [ 320.911893] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 320.917449] ? rcu_pm_notify+0xc0/0xc0 [ 320.921369] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 320.927011] binder_ioctl+0xaba/0x194a [ 320.930927] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 320.936565] ? find_held_lock+0x36/0x1c0 [ 320.940661] ? __fget+0x4aa/0x740 [ 320.944134] ? lock_downgrade+0x900/0x900 [ 320.948298] ? check_preemption_disabled+0x48/0x280 [ 320.953340] ? kasan_check_read+0x11/0x20 [ 320.957509] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 320.962800] ? rcu_read_unlock_special+0x370/0x370 [ 320.967772] ? __fget+0x4d1/0x740 [ 320.971253] ? ksys_dup3+0x680/0x680 [ 320.974995] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 320.979949] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 320.985592] do_vfs_ioctl+0x1de/0x1790 [ 320.989848] ? __lock_is_held+0xb5/0x140 [ 320.993955] ? ioctl_preallocate+0x300/0x300 [ 320.998379] ? __fget_light+0x2e9/0x430 [ 321.002372] ? fget_raw+0x20/0x20 [ 321.005840] ? __sb_end_write+0xd9/0x110 [ 321.009935] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 321.015499] ? fput+0x130/0x1a0 [ 321.019310] ? do_syscall_64+0x9a/0x820 [ 321.023302] ? do_syscall_64+0x9a/0x820 [ 321.027294] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 321.031901] ? security_file_ioctl+0x94/0xc0 [ 321.036330] ksys_ioctl+0xa9/0xd0 [ 321.039803] __x64_sys_ioctl+0x73/0xb0 [ 321.043707] do_syscall_64+0x1b9/0x820 [ 321.047662] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 321.053070] ? syscall_return_slowpath+0x5e0/0x5e0 [ 321.058019] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.062886] ? trace_hardirqs_on_caller+0x310/0x310 [ 321.067926] ? prepare_exit_to_usermode+0x291/0x3b0 [ 321.072960] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.077826] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 321.083031] RIP: 0033:0x457659 [ 321.086235] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 321.105143] RSP: 002b:00007f004a578c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.112864] RAX: ffffffffffffffda RBX: 00007f004a578c90 RCX: 0000000000457659 [ 321.120158] RDX: 0000000020000040 RSI: 00000000c0306201 RDI: 0000000000000003 [ 321.127437] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 321.134721] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f004a5796d4 [ 321.142000] R13: 00000000004beacf R14: 00000000004cf6d8 R15: 0000000000000005 17:01:01 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bond_slave_0\x00', 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 17:01:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(0xffffffffffffffff, r1, 0x0) 17:01:01 executing program 2 (fault-call:4 fault-nth:2): r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 321.268984] binder: 11016:11017 transaction failed 29201/-12, size 0-12288 line 2929 [ 321.282945] binder: undelivered TRANSACTION_ERROR: 29201 17:01:01 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xcf, 0x0) [ 321.366765] FAULT_INJECTION: forcing a failure. [ 321.366765] name failslab, interval 1, probability 0, space 0, times 0 [ 321.393937] CPU: 0 PID: 11039 Comm: syz-executor2 Not tainted 4.20.0-rc6-next-20181214+ #171 [ 321.402585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.404002] IPVS: ftp: loaded support on port[0] = 21 [ 321.411957] Call Trace: [ 321.411988] dump_stack+0x244/0x39d [ 321.412029] ? dump_stack_print_info.cold.1+0x20/0x20 [ 321.412053] ? __kernel_text_address+0xd/0x40 [ 321.412171] ? unwind_get_return_address+0x61/0xa0 [ 321.419852] should_fail.cold.4+0xa/0x17 [ 321.419882] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 321.419905] ? save_stack+0x43/0xd0 [ 321.419916] ? kasan_kmalloc+0xcb/0xd0 [ 321.419929] ? kmem_cache_alloc_trace+0x154/0x740 [ 321.428896] ? binder_transaction+0xadf/0x7130 [ 321.428911] ? binder_thread_write+0x78a/0x2b30 [ 321.428925] ? binder_ioctl_write_read.isra.42+0x306/0xba0 [ 321.428943] ? do_vfs_ioctl+0x1de/0x1790 [ 321.428957] ? ksys_ioctl+0xa9/0xd0 [ 321.428976] ? __x64_sys_ioctl+0x73/0xb0 [ 321.438417] ? do_syscall_64+0x1b9/0x820 [ 321.438436] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 321.438463] ? mark_held_locks+0x130/0x130 [ 321.447615] ? save_stack+0xa9/0xd0 [ 321.447639] ? find_held_lock+0x36/0x1c0 [ 321.447678] ? perf_trace_sched_process_exec+0x860/0x860 [ 321.455189] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 321.455219] __should_failslab+0x124/0x180 [ 321.455240] should_failslab+0x9/0x14 [ 321.464652] kmem_cache_alloc_trace+0x2db/0x740 [ 321.464672] ? __lockdep_init_map+0x105/0x590 [ 321.464704] binder_transaction+0xbe3/0x7130 [ 321.474982] ? __lock_acquire+0x62f/0x4c20 [ 321.475004] ? print_usage_bug+0xc0/0xc0 [ 321.475026] ? print_usage_bug+0xc0/0xc0 [ 321.475057] ? binder_translate_handle.isra.39+0xde0/0xde0 [ 321.482733] ? __lock_acquire+0x62f/0x4c20 [ 321.482750] ? print_usage_bug+0xc0/0xc0 [ 321.482775] ? mark_held_locks+0x130/0x130 [ 321.490892] ? mark_held_locks+0x130/0x130 [ 321.490917] ? __lock_acquire+0x62f/0x4c20 [ 321.490932] ? print_usage_bug+0xc0/0xc0 [ 321.490947] ? find_held_lock+0x36/0x1c0 [ 321.490967] ? lock_unpin_lock+0x4a0/0x4a0 [ 321.490991] ? mark_held_locks+0x130/0x130 [ 321.500571] ? graph_lock+0x270/0x270 [ 321.500588] ? find_held_lock+0x36/0x1c0 [ 321.500615] ? graph_lock+0x270/0x270 [ 321.607748] ? mark_held_locks+0xc7/0x130 [ 321.611908] ? graph_lock+0x270/0x270 [ 321.615698] ? print_usage_bug+0xc0/0xc0 [ 321.619751] ? find_held_lock+0x36/0x1c0 [ 321.623819] ? __might_fault+0x12b/0x1e0 [ 321.627915] ? lock_downgrade+0x900/0x900 [ 321.632052] ? lock_release+0xa00/0xa00 [ 321.636014] ? perf_trace_sched_process_exec+0x860/0x860 [ 321.641456] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 321.646987] ? check_preemption_disabled+0x48/0x280 [ 321.652016] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 321.657558] ? _copy_from_user+0xdf/0x150 [ 321.661703] binder_thread_write+0x78a/0x2b30 [ 321.666193] ? trace_event_raw_event_binder_update_page_range+0x3a0/0x3a0 [ 321.673112] ? mark_held_locks+0x130/0x130 [ 321.677343] ? is_bpf_text_address+0xd3/0x170 [ 321.681828] ? kernel_text_address+0x79/0xf0 [ 321.686227] ? graph_lock+0x270/0x270 [ 321.690019] ? __save_stack_trace+0x8d/0xf0 [ 321.694348] ? find_held_lock+0x36/0x1c0 [ 321.698404] ? __might_fault+0x12b/0x1e0 [ 321.702456] ? lock_downgrade+0x900/0x900 [ 321.706608] ? lock_release+0xa00/0xa00 [ 321.710593] ? perf_trace_sched_process_exec+0x860/0x860 [ 321.716067] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 321.721596] ? _copy_from_user+0xdf/0x150 [ 321.725736] binder_ioctl_write_read.isra.42+0x306/0xba0 [ 321.731180] ? kasan_check_read+0x11/0x20 [ 321.735322] ? binder_thread_write+0x2b30/0x2b30 [ 321.740084] ? _raw_spin_unlock+0x2c/0x50 [ 321.744221] ? _binder_inner_proc_unlock+0x3f/0x80 [ 321.749149] ? binder_get_thread+0x1b6/0x880 [ 321.753558] ? binder_new_node+0x8d0/0x8d0 [ 321.757788] ? perf_trace_sched_process_exec+0x860/0x860 [ 321.763229] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 321.768757] ? rcu_pm_notify+0xc0/0xc0 [ 321.772658] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 321.778279] binder_ioctl+0xaba/0x194a [ 321.782162] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 321.787778] ? find_held_lock+0x36/0x1c0 [ 321.791831] ? __fget+0x4aa/0x740 [ 321.795276] ? lock_downgrade+0x900/0x900 [ 321.799413] ? check_preemption_disabled+0x48/0x280 [ 321.804447] ? kasan_check_read+0x11/0x20 [ 321.808594] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 321.813892] ? rcu_read_unlock_special+0x370/0x370 [ 321.818883] ? __fget+0x4d1/0x740 [ 321.822344] ? ksys_dup3+0x680/0x680 [ 321.826054] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 321.830975] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 321.836606] do_vfs_ioctl+0x1de/0x1790 [ 321.840563] ? __lock_is_held+0xb5/0x140 [ 321.844618] ? ioctl_preallocate+0x300/0x300 [ 321.849048] ? __fget_light+0x2e9/0x430 [ 321.853024] ? fget_raw+0x20/0x20 [ 321.856489] ? __sb_end_write+0xd9/0x110 [ 321.860542] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 321.866066] ? fput+0x130/0x1a0 [ 321.869368] ? do_syscall_64+0x9a/0x820 [ 321.873330] ? do_syscall_64+0x9a/0x820 [ 321.877302] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 321.881913] ? security_file_ioctl+0x94/0xc0 [ 321.886330] ksys_ioctl+0xa9/0xd0 [ 321.889775] __x64_sys_ioctl+0x73/0xb0 [ 321.893657] do_syscall_64+0x1b9/0x820 [ 321.897534] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 321.902908] ? syscall_return_slowpath+0x5e0/0x5e0 [ 321.907840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.912674] ? trace_hardirqs_on_caller+0x310/0x310 [ 321.917698] ? prepare_exit_to_usermode+0x291/0x3b0 [ 321.922749] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.927587] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 321.932762] RIP: 0033:0x457659 [ 321.935944] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 321.954838] RSP: 002b:00007f004a578c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.962542] RAX: ffffffffffffffda RBX: 00007f004a578c90 RCX: 0000000000457659 [ 321.969799] RDX: 0000000020000040 RSI: 00000000c0306201 RDI: 0000000000000003 [ 321.977055] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 321.984314] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f004a5796d4 [ 321.991577] R13: 00000000004beacf R14: 00000000004cf6d8 R15: 0000000000000005 [ 322.015289] binder: 11036:11039 transaction failed 29201/-12, size 0-12288 line 2940 [ 322.028442] binder: undelivered TRANSACTION_ERROR: 29201 17:01:03 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xc9, 0x0) 17:01:03 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x121004, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000003c0)=""/246) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/tcp6\x00') sendto$inet6(r2, &(0x7f00000002c0)="dceb682ccf70a4440ef3d9af6eb059901fb6565657811650cb19ca29da12975456c5e2ddd90df550d7d683bed51f7ff37b4499c7f595322a85c103d8136f9ecfc2", 0x41, 0x40000, &(0x7f0000000340)={0xa, 0x4e21, 0x2, @loopback, 0xfd6}, 0x1c) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000004c0)=0x600210) r3 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/68, 0x44}], 0x2) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r1, r3, 0x0, 0x102002700) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x2, 0x0) 17:01:03 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local}], 0x20) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x3) poll(&(0x7f0000000140)=[{r1, 0x400}, {r1, 0x1000}, {r0, 0x8080}, {r0, 0x20}, {r1, 0xa320}, {r0, 0x1012}, {r0, 0x400}, {r0, 0x20}, {r0}, {r0, 0x201}], 0xa, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='bond0\x00', 0x10) shutdown(r0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) 17:01:03 executing program 2 (fault-call:4 fault-nth:3): r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:03 executing program 3: getsockname(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0) mmap(&(0x7f0000a0c000/0x2000)=nil, 0x2000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x500, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) lookup_dcookie(0x49, &(0x7f0000000bc0)=""/17, 0x11) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xfffffffffffffffa, 0x6, 0x100000001, 0x8, 0x0, 0x5c3, 0x200, 0xa, 0x26b, 0x10000, 0x3f, 0x101, 0x2, 0x1, 0x0, 0x1, 0x8000, 0x1, 0x1000, 0x2, 0x293cd721, 0x10001, 0x5, 0x9, 0xff, 0x4, 0x4, 0x9, 0x3, 0x3, 0x0, 0x1ff, 0x0, 0x9, 0x7, 0x6, 0x0, 0x200, 0x1, @perf_config_ext={0xf3, 0x4}, 0x2002, 0x3ff, 0x400, 0x5, 0x4, 0x200, 0x40}, 0x0, 0x2, r1, 0x9) fsetxattr$security_smack_entry(r0, &(0x7f0000000b00)='security.SMACK64MMAP\x00', &(0x7f0000000000)='%^ppp1\x00', 0x7, 0x2) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x3}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000140)={'mangle\x00'}, &(0x7f00000001c0)=0x54) unshare(0x40000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) 17:01:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(0xffffffffffffffff, r1, 0x0) [ 323.172901] FAULT_INJECTION: forcing a failure. [ 323.172901] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 323.226546] CPU: 0 PID: 11059 Comm: syz-executor2 Not tainted 4.20.0-rc6-next-20181214+ #171 [ 323.235183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.244538] Call Trace: [ 323.247179] dump_stack+0x244/0x39d [ 323.250823] ? dump_stack_print_info.cold.1+0x20/0x20 [ 323.256202] ? __lock_acquire+0x62f/0x4c20 [ 323.260478] should_fail.cold.4+0xa/0x17 [ 323.264592] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 323.269708] ? graph_lock+0x270/0x270 [ 323.273514] ? graph_lock+0x270/0x270 [ 323.277321] ? mark_held_locks+0x130/0x130 [ 323.281684] ? __lock_is_held+0xb5/0x140 [ 323.285804] ? lock_release+0xa00/0xa00 [ 323.289777] ? perf_trace_sched_process_exec+0x860/0x860 [ 323.295240] ? __might_sleep+0x95/0x190 [ 323.299227] __alloc_pages_nodemask+0x366/0xec0 [ 323.303914] ? __alloc_pages_slowpath+0x2dc0/0x2dc0 [ 323.308945] ? lock_acquire+0x1ed/0x520 [ 323.312926] ? binder_update_page_range+0x1612/0x2550 [ 323.318146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.323713] ? check_preemption_disabled+0x48/0x280 [ 323.328759] ? __lock_is_held+0xb5/0x140 [ 323.332832] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 323.338379] alloc_pages_current+0x173/0x350 [ 323.342807] binder_update_page_range+0x41d/0x2550 [ 323.347757] ? binder_shrink_count+0xc0/0xc0 [ 323.352173] ? perf_trace_sched_process_exec+0x860/0x860 [ 323.357667] ? __mutex_lock+0x85e/0x16f0 [ 323.361739] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 323.367026] ? binder_alloc_new_buf+0x94/0x17d0 [ 323.371705] ? rcu_read_unlock_special+0x370/0x370 [ 323.376639] ? unwind_dump+0x190/0x190 [ 323.380537] ? mutex_lock_io_nested+0x1570/0x1570 [ 323.385393] ? mark_held_locks+0x130/0x130 [ 323.389643] ? kernel_text_address+0x79/0xf0 [ 323.394058] ? __kernel_text_address+0xd/0x40 [ 323.398557] ? unwind_get_return_address+0x61/0xa0 [ 323.403494] ? __save_stack_trace+0x8d/0xf0 [ 323.407842] ? save_stack+0xa9/0xd0 [ 323.411485] ? save_stack+0x43/0xd0 [ 323.415143] ? kasan_kmalloc+0xcb/0xd0 [ 323.419031] ? kmem_cache_alloc_trace+0x154/0x740 [ 323.423884] ? binder_transaction+0xbe3/0x7130 [ 323.428469] ? binder_thread_write+0x78a/0x2b30 [ 323.433143] ? binder_ioctl_write_read.isra.42+0x306/0xba0 [ 323.438767] ? binder_ioctl+0xaba/0x194a [ 323.442831] ? do_vfs_ioctl+0x1de/0x1790 [ 323.446900] ? ksys_ioctl+0xa9/0xd0 [ 323.450529] ? __x64_sys_ioctl+0x73/0xb0 [ 323.454598] ? do_syscall_64+0x1b9/0x820 [ 323.458665] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 323.464032] ? mark_held_locks+0x130/0x130 [ 323.468286] ? save_stack+0xa9/0xd0 [ 323.471924] ? graph_lock+0x270/0x270 [ 323.475740] ? find_held_lock+0x36/0x1c0 [ 323.479832] ? find_held_lock+0x36/0x1c0 [ 323.483933] binder_alloc_new_buf+0xcca/0x17d0 [ 323.488548] ? binder_alloc_prepare_to_free+0x2a0/0x2a0 [ 323.493941] binder_transaction+0x123f/0x7130 [ 323.498442] ? __lock_acquire+0x62f/0x4c20 [ 323.502686] ? print_usage_bug+0xc0/0xc0 [ 323.506790] ? binder_translate_handle.isra.39+0xde0/0xde0 [ 323.512436] ? __lock_acquire+0x62f/0x4c20 [ 323.516675] ? print_usage_bug+0xc0/0xc0 [ 323.520761] ? mark_held_locks+0x130/0x130 [ 323.525003] ? mark_held_locks+0x130/0x130 [ 323.529253] ? __lock_acquire+0x62f/0x4c20 [ 323.533495] ? print_usage_bug+0xc0/0xc0 [ 323.537558] ? find_held_lock+0x36/0x1c0 [ 323.541627] ? lock_unpin_lock+0x4a0/0x4a0 [ 323.545885] ? mark_held_locks+0x130/0x130 [ 323.550126] ? graph_lock+0x270/0x270 [ 323.553938] ? find_held_lock+0x36/0x1c0 [ 323.558005] ? graph_lock+0x270/0x270 [ 323.561812] ? mark_held_locks+0xc7/0x130 [ 323.565972] ? print_usage_bug+0xc0/0xc0 [ 323.570041] ? find_held_lock+0x36/0x1c0 [ 323.574115] ? __might_fault+0x12b/0x1e0 [ 323.578188] ? lock_downgrade+0x900/0x900 [ 323.582345] ? lock_release+0xa00/0xa00 [ 323.586322] ? perf_trace_sched_process_exec+0x860/0x860 [ 323.591794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.597378] ? check_preemption_disabled+0x48/0x280 [ 323.602429] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 323.607976] ? _copy_from_user+0xdf/0x150 [ 323.612138] binder_thread_write+0x78a/0x2b30 [ 323.616657] ? trace_event_raw_event_binder_update_page_range+0x3a0/0x3a0 [ 323.623591] ? mark_held_locks+0x130/0x130 [ 323.627832] ? is_bpf_text_address+0xd3/0x170 [ 323.632336] ? kernel_text_address+0x79/0xf0 [ 323.636756] ? graph_lock+0x270/0x270 [ 323.640569] ? __save_stack_trace+0x8d/0xf0 [ 323.644924] ? find_held_lock+0x36/0x1c0 [ 323.649002] ? __might_fault+0x12b/0x1e0 [ 323.653070] ? lock_downgrade+0x900/0x900 [ 323.657228] ? lock_release+0xa00/0xa00 [ 323.661222] ? perf_trace_sched_process_exec+0x860/0x860 [ 323.666702] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 323.672248] ? _copy_from_user+0xdf/0x150 [ 323.676407] binder_ioctl_write_read.isra.42+0x306/0xba0 [ 323.681875] ? kasan_check_read+0x11/0x20 [ 323.686030] ? binder_thread_write+0x2b30/0x2b30 [ 323.690803] ? _raw_spin_unlock+0x2c/0x50 [ 323.694970] ? _binder_inner_proc_unlock+0x3f/0x80 [ 323.699912] ? binder_get_thread+0x1b6/0x880 [ 323.704328] ? binder_new_node+0x8d0/0x8d0 [ 323.708571] ? perf_trace_sched_process_exec+0x860/0x860 [ 323.714029] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 323.719572] ? rcu_pm_notify+0xc0/0xc0 [ 323.723474] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 323.729105] binder_ioctl+0xaba/0x194a [ 323.733011] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 323.738637] ? find_held_lock+0x36/0x1c0 [ 323.742739] ? __fget+0x4aa/0x740 [ 323.746209] ? lock_downgrade+0x900/0x900 [ 323.750375] ? check_preemption_disabled+0x48/0x280 [ 323.755407] ? kasan_check_read+0x11/0x20 [ 323.759581] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 323.764887] ? rcu_read_unlock_special+0x370/0x370 [ 323.769838] ? __fget+0x4d1/0x740 [ 323.773309] ? ksys_dup3+0x680/0x680 [ 323.777036] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 323.781980] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 323.787612] do_vfs_ioctl+0x1de/0x1790 [ 323.791511] ? __lock_is_held+0xb5/0x140 [ 323.795597] ? ioctl_preallocate+0x300/0x300 [ 323.800012] ? __fget_light+0x2e9/0x430 [ 323.803992] ? fget_raw+0x20/0x20 [ 323.807449] ? __sb_end_write+0xd9/0x110 [ 323.811525] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 323.817070] ? fput+0x130/0x1a0 [ 323.820360] ? do_syscall_64+0x9a/0x820 [ 323.824337] ? do_syscall_64+0x9a/0x820 [ 323.828317] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 323.832910] ? security_file_ioctl+0x94/0xc0 [ 323.837325] ksys_ioctl+0xa9/0xd0 [ 323.840831] __x64_sys_ioctl+0x73/0xb0 [ 323.844726] do_syscall_64+0x1b9/0x820 [ 323.848628] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 323.854019] ? syscall_return_slowpath+0x5e0/0x5e0 [ 323.858954] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.863808] ? trace_hardirqs_on_caller+0x310/0x310 [ 323.868832] ? prepare_exit_to_usermode+0x291/0x3b0 [ 323.873857] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.878748] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 323.883937] RIP: 0033:0x457659 [ 323.887142] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 323.906051] RSP: 002b:00007f004a578c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.913768] RAX: ffffffffffffffda RBX: 00007f004a578c90 RCX: 0000000000457659 [ 323.921037] RDX: 0000000020000040 RSI: 00000000c0306201 RDI: 0000000000000003 17:01:04 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x149, 0x0) [ 323.928309] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 323.935581] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f004a5796d4 [ 323.942854] R13: 00000000004beacf R14: 00000000004cf6d8 R15: 0000000000000005 17:01:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(r0, r1, 0x0) 17:01:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={"626f6e6430004040eaffff8000000200", @ifru_names='bond_slave_1\x00'}) signalfd(r0, &(0x7f0000000100)={0x6}, 0x8) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x410400) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x400, 0x3, 0x2, 0x80}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x6}, 0x8) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={"626f6e643000000054000000000100", @ifru_names='bond_slave_1\x00'}) 17:01:04 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x183, 0x0) 17:01:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(r0, r1, 0x0) [ 324.151809] bond0: Releasing backup interface bond_slave_1 [ 324.281074] IPVS: ftp: loaded support on port[0] = 21 17:01:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(r0, r1, 0x0) [ 324.311989] binder_alloc: 11058: binder_alloc_buf failed for page at 0000000012035683 [ 324.348699] binder: 11058:11059 transaction failed 29201/-12, size 0-12288 line 2989 17:01:04 executing program 2 (fault-call:4 fault-nth:4): r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 324.398362] binder: undelivered TRANSACTION_ERROR: 29201 [ 324.720701] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 324.735845] bond0: Releasing backup interface bond_slave_1 [ 325.015069] bond0: Enslaving bond_slave_1 as an active interface with an up link 17:01:05 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x121004, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000003c0)=""/246) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/tcp6\x00') sendto$inet6(r2, &(0x7f00000002c0)="dceb682ccf70a4440ef3d9af6eb059901fb6565657811650cb19ca29da12975456c5e2ddd90df550d7d683bed51f7ff37b4499c7f595322a85c103d8136f9ecfc2", 0x41, 0x40000, &(0x7f0000000340)={0xa, 0x4e21, 0x2, @loopback, 0xfd6}, 0x1c) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000004c0)=0x600210) r3 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/68, 0x44}], 0x2) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r1, r3, 0x0, 0x102002700) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x2, 0x0) 17:01:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:05 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(r0, r1, 0x0) [ 325.137496] binder: 11116:11118 got transaction with invalid offsets ptr [ 325.149025] binder: 11116:11118 transaction failed 29201/-14, size 0-12288 line 3016 [ 325.167264] binder: undelivered TRANSACTION_ERROR: 29201 17:01:06 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x200080, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000bc0)={0x7f, 0x1000, "228b527c8899a9c33d76edbf00284182d01f07fe94f33b914ce4b2e07892fe8d70cf188a0ba88121917e52b328a00bb904df83b91966a605b80b7f9c3d6e46b54517c3ec68b9e7c2afdf7cac575fd0bf67e2007363a00c94c7f90c2f9e5a1e2ad47c516234b5d1a5f988b51351a91a7a3b9205f9de41c2c4c06676d6aaa97609e03cdaf0f42bc974c8df404fe9da6704e722d16e6e6330df8554fd7aaf0f5f9c652d989cf359b8293805beec8cf7f51b376567828521db144fd5e8525265666a8d84bb4d986b00b7bf95142d9c929e682cc481565f50ae25842d219cd2e5abd4abe383b6d65cb015032af13276629852b6e19ae10acb8cd6f09630a84590272936fdfc1c494e52acd73cc906cfa64a965799a54be529f4be199ca11b6d5042a9c75fcbbee0a9cabf8f3a4e656868b6f485fd6edff5b01821e2fc3936b726f4aa2e7de172c576e5ab2eca7964faf08b63a7bc293baf2438567e021d240b58401db101979ac0444a871432bd06e3cab3c776e1b8e7bee0fc5091d6217327d69aa4899ecf50be0a2cdfb0f38cb2c3a93132862004b64811a1ca810aba084670b0edaf41cbfd2a3b58ac9f4940741b1f14bb82dc8f8aac193c5856238b398ab510d9ef216f378158fbbf92a6bc54c866d870bba67649bf0fb4c9fa286f6208319aeb4f133528926790168a3ae4dc85940dc4fe9b0905ef1a6199dbb8fafd030f664044cd903b4c1814a2d0fb6392275db8301f9b0c21893b974f035551a47a1aa2452de6ef6a2bac848718a2f12c711bbd4ac76a31ccb1e21d21d34459308b6882148c05bcc88f3427cd43357b25bc62458d1dd081c76641a4dd5021753e6f8854aeeff938b2d459e776cd6bc11d4d4ddb113db8ff2b8dfcd6976cc7123699e15724968e6cc38f40028ecfe3894913338f9f840d58e8b76410e4ea3090c920095f764a490c6c702fd451aafdb61167172f17cfafb42e9d37cf20a5ab78decf394ae937d43fc4407ebe35e00b36dce2a52f4b6bf41b4e79441dbc26097d66fe3e70b9ac95976a7489847da93a78583d6f35820e2081a48bc247166a87b594ece53173f19637fd5fa744999f99a486f5f82b9ea6ac4f165c282c6477b84eb5f88ec845b4dae8a58d8af257e41882ee371983cf09af3d4fbbd9d208b43a3ec3121cf0692e4b20072861f8214bc476d09323ba38f626e6c6931c0a186473dec1b5e38b7b8a1aecca15b9ee7c191a2745e4ba1fab4795451edbc91701136f872e6e90f6a2710877e0d558bb65d1ba2c7a9e4fd6dd21046e6174a861e58b091a407007debe1d667f1e5f9c0f3eaf64948abaac6d06337484bc91a9865253c722c26aa834e118674a7573e8bee45262b15ca88201c1cbf0bcfea53dcf500c027e5eb27d4ab8ea3b45da58a523cdafb2bb410f3070f6d9b14cdf7c165405886342bec9ed5de5c3d91eacdfe46ee65faafcd0b400a0b34f8121e4169b009bbc2ad22f3c05d21ac015e3d16f58e8bf0b330d161cd0ff83ec2a24a8b44153ec7f547a8a1fd105d2e23fd7cfb74bf05c439916c3581fe1ef0437510f2289fad3d946c279dffa64ff06876233dfa8beda14c706051e6e13aa17973b7606ac08f1d16bbea25f87ff4d9237ff70cb605130a4049bf84a2bdabe0ca2d428c3f2798fa92bebb7e2216463e2decdfe969c76a41a062ed6a3b595fc8f9e2de55f0379605f24a204130f5b5dff6c265916781f53be14e56f0f45b971991892d771497f2aab65984a3dffa7984f37b44c3ea7cb9e34954b9291421dcec54224fd3e688a0dfd3f7cdc4a6ea6ba40e61ebc0f5067fe033f75aad5f9052d947808bbe4af041391d889cb0affe9d8888f456263d5d1e1a6f306b5d46b503e0fdc635c158c150ec8899a0c558d89ac198494993239bffd27f7adb8fa555413f364e46391fe625be4f82e02a88993d3853c34b0b76723996d7ecdb8720b980aab559dbf5b0c0d3593627dfe94e7b4c785003cc800f804ed09545af5bbe35709fccf87ba4a9d68056ae2c8ae153a94080a2daafd89bb13c55320fb7edb9d595b89c9a4611aa1b4da18f8c7e4ba2e311f167c68429e4e80937a866a87be32bba3f2458a02222e7a32c2454353ff06e72a7910f967302cae51e4d8df379a14ddc99cbe9928f4a08d56a74ed6bc9a6f013a344460839a4ea6397192ca3688b875da2ec4a3af6595a3bac52501e0520ada1e94deed7ba3a29456764334314d0cc0b4c9448deb9f3225dde32551b9321f243b7955b6bb02385ac4c183caa93cc584635d656411af863e47616ab676a5573a17ed1110c44700e5c206e0c9e302493de354a7214b4cb702dfc33fad09be4425591f8e270c1843cb1869a0789acf936ba1f1aaa9f10a54e5834184df7ac7c0b53949d49e3e063bf9ac9f80a620cef62998405b3dcc86838fed0c169ada783f9c5fe2ecfd830ad87bc8a11efee653cdd949b752f26eefa73f51ff3929c90fbd7f4ddaf1b55662735e1e375e3e8d7fdac5f4cd4e39bc5aaabb577cd08fc258ff77bfa76abc2fc46a45a75dd62579722f6b90d8622ac08713ae055e1496de45e4157546551dba2885e961cfab9510250c7b743626b65ec423cd3fbb0e8d7231f5a40fec7d90cb936ad059732fb8e3fc50edea7d9e52f4248d4658043d5f1418e380c44a7b21736216844286d6148c70aa84cf8ff5ccf4734c13769a8fabd4e2ec22c5729a0984201d98a9d3caf582750f83353583eb3c992d5293a103accd27593f84258643db2bca510c7bee3cd9cf1bd4a99e2d38303c6996dea4cd824faa61c9afd5750bf433aa1dfc6bd9cf0ce6114947b580ab5990170e0e2a1f1d93ce07955e4af31bf267f39449a65a2ee5ac67c77c1c61ac00f3cb79c801ff0d54c713e3cf21774bc2776e6f0f77774e6b60b25a01894bcbd6d079445da025bbdfa8a44f820c41a4c80e08a7298cc99c5410008707bad15840e8a3b8aca712ff94170d37f585308ee78b7374b2179b4627860ebe41ce85a6856b20c178a84aeb5252fd8a222fde22ec43cac7b8eacf73e8cd8ebdaf89ee2b870906d14a6787b767964ac919ae7d70709708a38ab9cec1f9e0a2a1ec0aff85a9b646fb7ccf248428a1994afd8aeb3fee75f3f113176bade893acbc9de98998f2616911b2763165e1310a32c1baaef17f30222b9cbe6db08599e8441e56f6c158ac3689e13c19e38d510c6a69d6dd8dc39c5b3077afa3b9ec2639a98708f3e525464c77d5cd85d4f5a662a01050bba0b33bed771849a820db4af0ac232a5e44d246075b7b261152c6aafc123ced86cfd5af4c42e67c9e0c0eac81ed06d4ffb094704e5aa762b693ac12904d61f97027bab447c2ef0ae6a07e6fdc020444beece89146caf182a75e9e27fece65ab8ab46befb0c81f4fcdc45d81be8e6384599ea900f1cf26cd80adb9cce2030305a7a8530cf268a0f5fc98dc7312bfff3f65db359465475e984741f2ee84b28d699bca191487a06fab870780788f83c79bdde0637bbb4cf6517780c6cb147007190bfdfa09e5ac98898bbed58cb6dac2b787a365cc4499c52c69419372bbaeb6b9607ae27545df5cab319b599cd4419fedc21926f0efefd27a5b71e14566bdce0d4ccf10f09859f2c3095fa3117a0b3e3d88ebdd1cd1cb1be6cbf7cb3d14a081993653787c6403c755f51e38d8f444c8bc99df60ecbd5b6d069931da1642e038faeff2188704970001919b4013da0c6ac3a6701a852d0fc3ee173a689252ac237c9081645700564268d112be51810057b1766084e5340e68450aac6c01d0419ba52922adb1a81b5cef69d5bdb953eabdd45de791f7c49e0fb3f591b0eaaa08442fce4c66a809175ffade6fc801acc5801210203639d50048ba96d95a7d02b1b2a5bdc9232d437336c5c55f4e5488c4faf544920601da30132040f2551f55cf883f28f83b6d6fce5294ed62213613a7b8b63e09312871c1ae812f593df3e6d1cc8a2cb08e1ae203073e2743048d0104a758a63f307a024acf2428ea91ae443cc6ed2f081cff486e8989975191b38233f6785a8effae06453fe039837045425d1ba54a5d7cbb1d340a10bf855814bfc9e92bdf153964fed96486d58741a2b4ea5c26635aab08fd46586c0ff384593e75d782c163c76bb37c7c54bb98bdbb63beeedd814b10d1271b8a07511859eeefd7159a55bd92fc0b4f7e128215e84e07b5e42dfb189bd8b9b4a9f55473008decaf4d021cb7ddad73fa9a07587d96c7cf11700bc77c10e701f54f157ff45a190c66360c4467ca15fd6940b7727e2b31578cc9a19e989ff8697b2610b91d6567df550fed1b5d8ca0b5ce679ad6e050a6e8a1115381571db9c8e16c3589b0d1cd76ae6da96a902c4a66d8547ebeed0f19fe091db255a14816269ad45ae2fe77478806f34d9195d460980e9bf3ca2ac34d6138ec57f33c04448d63f1707c921f4487e14bddbf704d6babefaf6582a1cabfd28ed735faf005d1bdf19d6de57998bcaef328e51141777dd3182c2464da3099f9c00e0ed639e02c6f7ad27272f470b1002c7b87bce138cd2c952123382c2f9bce28d1058c6d4596930c500faec229c25a72798b9e169dc9e77da2c12fbc055239102cdd84810ede03b6636b1a17cf17c726c3e76c4c6144f56a3a59c1ecf62b5aa70b602ef21872305a58aa8c30387f1b146127882f8f6496782e1ba1690810702385dd39820695b815c846099ee1fd6c69b42274b791f3ba109b020ee32dd47f29542a738dbe6fbd9d9e19dd0d4298ddf8ff62445ba223463aba154c371dcd1711451b45cc02432feba38956ec60d7f519ef2b61246476053be521c9b9850616536c778d4d8a306fb22dd7a9862eccc379e67d742b6a071c8d15c6587628dcf874e157ed2e40bfec5da1c375f58db2cdf039689cd5e8e771ae5a0bf5e339b20f1bd1c5e4389d550236a6e1a89141ee65b853b01ac5d24470f7922696ef65ddacb798dde5491e9b0f40e9b2b4b41544c81093ed414cecc15b800a1e04d7d332d5b50344337c1d895f7f718c721bdae6027041601ec1ee24c1ae6ddbc0747e3f3400425d3f24074918406e838ea2f6f4c0bd26a294172f7a90531c21c4a065b00fdd747b9e849f93e909261af669fd3a3ab53698913ea3bcd8fe541098093e9924a6999dfbe3530b9e6c4a7332b29ffc2326fe6179d26db81196857969a7934978066d70837fde2d5771716ed19a86fcb583fdd708ba97f109c430ecc5b99f2dd5e12c3c1ebd4191a2f0e8f7c4d0beb0e2ecc272edc18fd8cd87506cee3942eeebb9472ca5a11a754a621ed69e1527c0945af8903532a44844b19c28827350147c3cee4ea1209690360d65779f2eac13d0d59caa1e5cc7f2b33c654d8ce54e0e05d71e692721785c3b2df37d127488d35f503dc0256c49491f81a3aab9a1b7a90ed375cece6357823012be1b9ee936d9b2ae8be073ddedefc6bb019e3f94f53004ec9baa23a3f53330f3be363893b72dd7d2c4e0c700c894fd2463e806ed9457e14515648baab0d31631a8e141d0885aae86cd22cd8a47ea84cd88ecdd3ac20f20a80438e37f6826cddadd8f184ba4ffb32d29e1281473983ef3747f52ff6f052609ae7165c629558ea8de0ef907517c25d5437197c0e088cb5c05352ee29dd6c12807083fef05bec47110a6594e113708dbe4a9500a1820b13084e890241c3e1400d286dec06313fb728846afb13f148e63b9637a0b28b31e4bd3bdeec70ba588b12c89d85e1cb34f55ffdb421a981bff3e40bb3f0f08e90a9639e8604c2797ee3015"}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000005, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000005200)=[{{&(0x7f0000002700)=@can, 0x80, &(0x7f0000004b80)=[{&(0x7f0000002780)=""/152, 0x98}, {&(0x7f0000002840)=""/49, 0x31}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/34, 0x22}, {&(0x7f00000048c0)=""/150, 0x96}], 0x6, &(0x7f0000004c40)=""/65, 0x41}}], 0x1, 0x0, &(0x7f0000005440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) r4 = dup2(r3, r3) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x12b, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x1, 0x62, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 17:01:06 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x42, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x10000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x4, {0x1, 0x200, 0x8, 0xe4d3, 0x0, 0x4}, 0x4, 0x3}, 0xe) syz_read_part_table(0x9, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000000)="08f1ac7a0ab91acc9f6d36cb3d9c02e2768aecbcfbeaa6441b53a2ec21f45ededab894fbb3e8c76fe23799713e109549f4ef6d8c86570f6f135d3e5a56213b30a55f57dadc982416295393cb448acec9d709e39d6e4d1cfb0e8615b7b1ec344adca2589e21c69a41ae624f0ad010f00e19119bdf631bdfbb3f935ad6ebb2ca0e7c57b12f88ba0b0244a65e2be9da2fc31859f70f49adac7aa0036f3f4c141eb13afec47f6fe223c272bc40ff8f9a8ebc5d7277bb92b79a18ae9efa821b1e", 0xbe, 0x2}, {&(0x7f0000000200)="b7d39cc84b2d1f67f0584a75bdf7f5aa52d953bd7010fa9f2d00642fd04299a84bd6086fa42e4c8e8ec3a5600a687014eebf3b98fec1a2e7e13beff6559e6af38edb8a9f075b5a88bc0f1e853dd9c20c9c5a3ac39ff13cee6c37cf5995be0e0bfd71bb247d1e51c56941b32845e07a2880fbb25e7f1b7f7ea3112b659516b59ef1578fc9a54cd1fa16fc7737dd1f1d268d504dc46b2ffa2f76d6e6869090a55d0f861d10e811b2812760e4a4170a22af2c2a5aa8545ca81cbf389ea6d7127e72f3c7a91670e5c23a4eef850597c4143a06376d39a6", 0xd5, 0xffffffff80000001}]) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) 17:01:06 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x90, 0x0) 17:01:06 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(r0, r1, 0x0) 17:01:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84000, 0x80) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000000c0)={0x8, 0x2, 0xff}) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 326.129407] binder_alloc: binder_alloc_mmap_handler: 11129 20001000-20004000 already mapped failed -16 [ 326.153622] binder: BINDER_SET_CONTEXT_MGR already set 17:01:06 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x130, 0x0) [ 326.177617] binder: 11129:11130 ioctl 40046207 0 returned -16 17:01:06 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(r0, r1, 0x0) 17:01:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:06 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x200080, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000bc0)={0x7f, 0x1000, "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"}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000005, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000005200)=[{{&(0x7f0000002700)=@can, 0x80, &(0x7f0000004b80)=[{&(0x7f0000002780)=""/152, 0x98}, {&(0x7f0000002840)=""/49, 0x31}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/34, 0x22}, {&(0x7f00000048c0)=""/150, 0x96}], 0x6, &(0x7f0000004c40)=""/65, 0x41}}], 0x1, 0x0, &(0x7f0000005440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) r4 = dup2(r3, r3) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x12b, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x1, 0x62, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) [ 326.250280] __loop_clr_fd: partition scan of loop1 failed (rc=-22) 17:01:06 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xd0, 0x0) 17:01:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffdc2}, 0x1000000000000000) 17:01:06 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 326.386740] binder_alloc: binder_alloc_mmap_handler: 11167 20001000-20004000 already mapped failed -16 [ 326.422802] binder: BINDER_SET_CONTEXT_MGR already set 17:01:06 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x15d, 0x0) 17:01:06 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r0, 0x0, 0x2, &(0x7f00000001c0)='^\x00'}, 0x30) syz_open_procfs(r2, &(0x7f0000000240)='statm\x00') ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) r3 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000000180)) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) syz_open_dev$ndb(0x0, 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) sendfile(r1, r3, &(0x7f00000ddff8), 0x102002700) getgid() syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x2, 0x0) 17:01:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306258, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 326.451888] XFS (loop4): Invalid superblock magic number [ 326.457837] binder: 11167:11169 ioctl 40046207 0 returned -16 17:01:06 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000000)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), &(0x7f0000000100)=0xc) 17:01:07 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x1) 17:01:07 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 326.593830] binder: 11199:11200 ioctl c0306258 20000040 returned -22 17:01:07 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xd1, 0x0) [ 326.675336] binder_alloc: binder_alloc_mmap_handler: 11199 20001000-20004000 already mapped failed -16 17:01:07 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 326.741257] binder: 11199:11205 ioctl c0306258 20000040 returned -22 [ 326.742364] binder: BINDER_SET_CONTEXT_MGR already set [ 326.754018] binder: 11199:11200 ioctl 40046207 0 returned -16 17:01:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:07 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x5b, 0x0) 17:01:07 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x0, 0x0, &(0x7f0000000100), 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x220200, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000000c0), &(0x7f00000002c0)=0xfffffffffffffeb0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000001c0)={0x0, r1}) r3 = socket$inet6(0xa, 0x3, 0x7) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0xffffffffffffffea) futex(&(0x7f0000000200)=0x1, 0x1, 0x2, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)=0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000180)={0x2, r1, 0x7}) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0xfdffffff}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) getpeername$packet(r3, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000600)={'vcan0\x00', r4}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0xfffffffffffffffa}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={r5, 0x3ff, 0x0, 0x8, 0x8}, &(0x7f00000003c0)=0x18) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 326.862024] binder_alloc: binder_alloc_mmap_handler: 11222 20001000-20004000 already mapped failed -16 17:01:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(r0, r1, 0x0) [ 326.949151] binder: BINDER_SET_CONTEXT_MGR already set [ 326.956280] binder: 11222:11223 ioctl 40046207 0 returned -16 17:01:07 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score\x00') ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000180)=0x9) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c6956c0106c6f7765720000723d2e3a66696c6511"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r1, 0x400000000000000, 0x0) 17:01:07 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x78, 0x0) 17:01:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 327.118498] overlayfs: unrecognized mount option "iVÀlower" or missing value [ 327.153332] binder_alloc: binder_alloc_mmap_handler: 11247 20001000-20004000 already mapped failed -16 [ 327.172514] overlayfs: unrecognized mount option "iVÀlower" or missing value 17:01:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(r0, r1, 0x0) 17:01:07 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x20000800, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000380)={0x7, 0x6d, 0x4}, 0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x7fff, 0x1, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x100000001}, &(0x7f0000000180)=0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000000100)=']\x00') ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x0, 0x200, 0x7}) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x6c00000000000000, 0x4200000000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f00000000c0)) 17:01:07 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x2a, 0x0) 17:01:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100), 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x84, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@loopback}, 0x14) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0x8, 0x4) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2000) syz_mount_image$ceph(&(0x7f0000003100)='ceph\x00', &(0x7f0000006ec0)='./file0\x00', 0xfffffffffffffffd, 0x5, &(0x7f0000007200)=[{&(0x7f0000006f00)="fc3c738f0f1f79b13415e6000c2dc6c6108d627edfd4337b0e648450f015e25274def3de5f4702871da148498c03febeca4d7f96017d4bf9785f06c15a61e719e3a6d0191b6ff28780d1e7", 0x4b, 0xfffffffffffffffd}, {&(0x7f0000006f80)="a473746a440f0ad02e3e984df531a32ae56eeeeb00c0e44afe26bf520483166855fc734a1ba94e7ff052859a93f36110d367d2237b96f84ad6a59deff966f09a9dc4d6b44d7335da5ebb78df260be0920c4f3f8f62abcdb7e82f177cc553cd02111e16ee4d3f7c37e9f5d2397a6b9ef0e3b70a1fb711107fa04335f5dab77b55a35dcfb7af297192cc1f08b8b8ebc36165a780e7883fe21181c7df61dbe8fcca863c2f", 0xa3, 0xffffffff80000001}, {&(0x7f0000007040)="4ca0947c81c8e23b363226849e8a10fe38bbe98949e73017946b192d546919d7db1b0ef679c635", 0x27, 0x2086}, {&(0x7f0000007080)="76f854d68322ce6cd47f0d5202dbe85a44b681c9d8eef719f292f1d1c8a9689dace13429f64a59d824a3484b960c379578faafd23f550f8bb71f8b272e412cdd06c07c18f5ab0dec64a8dae3d15063439aa6694fcb13d6c89d", 0x59, 0x7}, {&(0x7f0000007100)="de22f99764eaebb7d5a46a7e8bbfa09c8170010d2e0614bb4f2f559a621da8767f6b4cc45d823b8684e1c144a8aac32dd55873985446193c2cbbaa74d7a1aff7821524ce3ec5137423f87949d2c58d44e485db7d30936ff161bfcf6a6aa753156be06916da036ecefcd9367beafe7414960be0cd3074457de2a58b61883e45c4755273daacd61230a89e7e832df12dc55694582c38ebf24088d122dee5a0bed7c0e9d83cd1f27b0ad2ae57e0c103e80536c542ea6615f38a55010c89283eff45a30e57ddf01079ce1e1029451c", 0xcd}], 0x10000, &(0x7f0000007280)='\x00') sendmmsg(r1, &(0x7f0000006c80)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x1, 0x1, 0x0, {0xa, 0x4e21, 0x2fe2, @mcast1, 0x100000001}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000280)="a270b2d433a6df063b9c3913be0b769b0d9142c69ab8b1092d8e136398d68263da0755ca3be4767e95e55d72a0ac5e1c60c1cc72d126689eced82af048cbbe84edae18d0d6636e5a92c25a05b7e19a7c722365", 0x53}, {&(0x7f0000000000)="ffb40c2444a27e2f24c91a4018", 0xd}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="b79f065b4c4ac2670dca097a41cffdd1b1d30b38fce35edb718e4096d3fe2642c4b01f00cd3f88f0d62296447ffa6df90c805d02f5c6d8c88397a42cb9d9bcbb0ec060d49f4d5228896c457d99f1d744c4bef99e9183903f3c1127310518a851c38deb8669540b067e60f280288d3e47b2669ed98fe3b8c2a84ec3bf3db29932f1c8bef11bd5261d47299a228ce6876eefb4867901b6e2f5dc267c0ff2b1301844993c1ebe465c36cc09a75691c6bf60f01c5652a3a361b9496be1353c331b9adbbed1419f8ae2666ae0b42af0065bc1c6f30245c9c3a734d3fa5e15c25bfee828447078cb792b5e16", 0xe9}, {&(0x7f0000001400)="b249f1966185c8253185656d03b588044c5d86d1324707f1bbbc39581c57afb50169d1cfc6341bb5d135525084eb8f9283367571fa3d482118df0d0577a2b35218e9f2a5dcf3e64c8b5a0ecb72ce19c21ca76e33ae34c52eae431c0b442d669385a77d61e4555ec191182bd0814cc1940dd996990a57835f4b7d2357ce2159c72b7c216c286310231c27b84f8687cc99d071f15a561aad9bc45465b712c12df7f040f688f4a9d92d5f8bebbe7b6f075d73039e42", 0xb4}, {&(0x7f00000014c0)="11eab8b66accb642cabf75f162a43e4f8eb4c6025c59c10c1a8d2000afec8497bc19728a9fafd62bc96a6709382f3ff2213be9cd001afe4c31ed089f627de68a70fbc09ae9f2a30e25f2999c0d0a12edf1658e58f5d163f2bf9afc57f30987ffd786e971430e84ba9d20adc6297a13b6e638f13422269e683814d4", 0x7b}], 0x6, &(0x7f00000015c0)=[{0xe8, 0x11, 0x5, "447009c9e91a9d9b9a9c21d521f39591a38155b4da568b70206f541308a16412a3dd8fd3554604b9ec28fcf43974d4f67b8b5950913400eab1aa0c5480389b8bc603630baa486c15907f42a95894e50fb72dc652bfe51d4764de63a5178e721ccb4b933d6bfddbb31ca2629d1de94eb6eee7d0acfb0448557d797bb2b4742ac0eca14e4a48620023980d957bf7f27cf4e747e368c7b5ef90c4b8e3bfcc81bc4c4235a7cc68b2168a5d27a0d13432ee7396697b0499fa01ed300ef662061529b420d91874778e17045f8c26deb5770f6fb201d622b2e1a6"}, {0x98, 0x111, 0xc9f, "5a5c470f60daa37be8a3bbaeefbaf6d03c47a1e84b5455701a579f02dac8583f6f96a6d05e4b65898bbdb0bc92ed06cb08b2115e0d1365154d333809994656ca464b3cdc539551f4ba810c57ec17ef3a15a5878e0caba8e4364d56cb83ac7cf52b1f58681ca082df5fa404242a1d4939d97ca486b436a85f4fafcf379961d016b8f79bd90394"}, {0x18, 0x112, 0x9, 'q'}], 0x198}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001780)="748f4e0ee05aa7170f91a68236c1eb54fa7ae5e453ba8482e38ab8d2c613d6bc13c405d5ef18ffb3e1df9c0f520888e512a79826becdc326227b058846f41c6a86a9718c8ea4db1a909a", 0x4a}, {&(0x7f0000001800)="84301294ddb6b6a18792164a44dc49822d51397276c884561ff5d5e5723a1d1de70c9246a4860a48cca71cf31506885391dab8255dd97477e0db6d903e3e1a719d4f0cb661ded2148d5bcf47262474af54cbb8dfa06716bc234cff79f36e43059bfc59e152223a54c4db2b1c3b66fd8f90128a379d003f1f9a44f2e399195874f4", 0x81}, {&(0x7f00000018c0)="51d5087b5e04e3840bbd20d8dc689a271323f31a402050587e81434461db1ab785f00e830cf972e9034113d59d00686ebb484876d31ec9debf1ff37c599140a3c421820eca0b51236312de1dc187eeb805252d50684a04c48de24db8d5cb03826684ebf2377dde1786f72b816fd4d3795012960272e96688c099eed7fde2043b33a476d5e3215596424e564a4271d261df2519b7c41fa0abc53ccfc57715991ddb3d7d74e6e3aeb8a43fbbda6929413a130d3920d32acebdc5493876c628433429", 0xc1}, {&(0x7f00000019c0)="6411e964f245534326be28242ad86ce919ece7f625dc9c841f07cc8f025248bd0254f8373ab793437d5480df3caf6a49b49e7fa604de21ac7e4b095a73e5a2276bee9a63fdf1b85a4fbd8dfb30e87cd8daa96a6d0fc86edd6bca6f6630c5345228548666a5b2b94ddea731e5fdd02cead6a24b67a384", 0x76}, {&(0x7f0000001a40)="b4f0a38361cfd7827ec6ad140c75bf00050e35cfe479ea2b6a8e318208170248dfd1289282cab4059ff363143db28452379b193a5e20c4f6cc6d1688f782880c4ebcc67ac22cc8a354b44c0868fb048b475794894185d07dfa31e73cc4851736976c4c46c379d43b46032a649702e29c33295e22b02d96749ac58d55b492c4634f3ce9d23acb06e4fa4d4ac24e902d9331afeda6b68578527fa1834613c6d874385206dbe179f47c2f362cd26e5fcad6587a425887a968b2d7396b7158d57b4f109b", 0xc2}, {&(0x7f0000001b40)="f836f0d19194ad8c31b38637706634e85c8302d97fd9a1186255aa5b73eeda02fc0934a9f090928478c2a824aa0fcd4681579e27cd79d4e8b75449388984083824f0c602be86", 0x46}, {&(0x7f0000000080)="de7d4cec8ea4c281691c756260c76c8169f3bcc7", 0x14}], 0x7, &(0x7f0000001c40)=[{0x80, 0x0, 0x1f, "e306e44b869d0ad456f771e45882135f6dee200a49e12cbe69b570579ccd1f8975bc780ec33800e66c32746cfbe55496cceb1bb50c504fdccf1e94f91ae2469f245072727414e11e3f0b910db150d8ad9fb58fe20ea3641352b14b858035029837c88dfc693c3ef04a830d"}, {0x1010, 0x10b, 0x8, "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"}, {0xd0, 0x13f, 0x4, "0aa139d1a740ec7b7cfd7c3b7758c09bd1b66c911a8a333677602f242b79b0aeb251b347e2df0b7dcd647811839bc617435234bb954913640da1dc47e99d4c6cd4c40ca8ea813b4de1b2a4f9b12ae8010c483a2618230868004b37bc47a63ca6fc08908e2883a6e47af7b2007678c9d6d0e7c2b7d54481d9de0ca5a8972e3349169530fb245b0ccb7e8669dea093be1a985b34f893e804ed29683296aad0a431e45321fbe8766389e1e8023ad96a3c69006aa31e4d7b87fa63322a4c"}, {0x70, 0x187, 0x0, "b6bb3b43bc476b79f69f768b47456e0150c2fe70a40529fe52e8ad439baeed845ed7ec592428c3a18d3ef97e02a39a45e312f7bf2504e61cff73d6ba2fefd51bebae583d1ae93ba56bd5a1db89156ff41af515accb44ac2ac30863"}], 0x11d0}, 0x8}, {{&(0x7f0000002e40)=@ax25={0x3, {"1c007bae03179d"}, 0x10001}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002ec0)="5d0e013f6f7f25e09d0356e84fb8f545f51a6df743d373ad48814d2c8f9233f6b7d89ed6163d7df2d0ed7cdbc537615401f25be158411e39b8521a0d70b8fa31c471af0948055dc096f1db568174d811fb9a4b5ee961590a2c24bb936b1d55740561a53acd3fd651d4574117f8d85b56", 0x70}], 0x1, &(0x7f0000002f80)=[{0xb0, 0x112, 0xfffffffffffffc9e, "41faf93a594ef3dc23d1498cf03f22d5bbf9e6ffc8148397ff6389ce6122dff1796da91da890381cd1aebb55c892c9954f9d354f5b33c7f3be8b0a0746eb0c9c9689f8ea57d54cdc8a26c420ce9e7e16b6be353c2d2ce7d9c5f9bd127c732bdfaf655edb12027fc5d64eecc0aca70a114f37e453fcd75f8cef79a080a953b101c834ed68789b3d11d28c4f59097a385fbff03e8d68a1f32e815057917400e62e"}, {0xd0, 0x0, 0x9, "c4854f2e04ad2369b9614974f453ff11a75575e514a6b4393dc064bfeb9e31649da837cf3e84f82d45525c696b617239c4f4cee1add5084336df25ae3abcd01e6dbd531f62bd3f88bd5ed5a7d79d0c1489bd357f585f2fbd3be2729271cebdd7435f58b1e7370c57163e7a13385a9984ba007cd506d553d1df55f2cb479aec769ff648e8f97d13e90d55ad0bd1f86ab37c7f5f87ace5ea90371499d83c1bc92d97f546714655b0bbe30480e5ba087728a923a65313257db3299d8e4589"}], 0x180}, 0x1000}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000003100)}, {&(0x7f0000003140)="135341c446f3f2eaaafaf2be92d3924181363678489dc9444be0f0fb46379002be7e4f0992b25440267aac357a202d63848da287be6b41cd1a6cbcd0c79e4e9e430aa0d9698fcafb58c8", 0x4a}], 0x2, &(0x7f0000003200)=[{0x88, 0x111, 0xdf, "60c3aacbd61509c2c03ee403944482a82c4c85379cc4773d066eb85a887cea13d6c74200860953d2f7bc0afdad00f04ad63a5b169efbdbc878c519e7d9c01f89814aba10167d01ab4bc3e8ca48fb598a7559e7159f1c9c3aa92a35f0062fd98dd1a120b1bb41aefcf86b5580e2bd4cbcee5b224eb64c"}, {0x60, 0x129, 0x8d, "5ce50a6fe313e9afbc720d96bbe696aab41d5eced8972c49713613e575e9e076992966a2c821e2069ed717275de7e238fe585434823025ef7f9bbc84b33f4a90f4e12ec60875f4c18350"}, {0x60, 0x104, 0x101, "9a0976ceb380f2be3c306b6bb64d5a4a5e529b44d1e7b4f8f91b212fa3b0511e08e0efc62a3c72056a17ed6cb710d89bf6ee19eb6769c428628bdfb93f8da4ffd2117052ed4efce18c0c76762a2d19"}], 0x148}, 0x5}, {{&(0x7f0000003380)=@l2={0x1f, 0x1, {0x3, 0x5, 0x8, 0x2, 0x101}, 0x0, 0x1}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003400)="cb970e6d862d67fc85089c1b63f9e4d5108663d9e45691e1f0e9b9c88ac33d35ddae792ee3e0ac8cf4039cec3dc33fe1d53315559a342cce777b3ea0eb2d0e1523f4cec83eade92f319628721be649ee0c1abbc9bbc0cc8cf5ae3db59781fde7c010a471d0ef8eac64262dede3a26fdf2368699ecf81a48dba6be2d1a38cb7c9", 0x80}, {&(0x7f0000003480)="01a35a7e7416496ec6c3", 0xa}], 0x2, &(0x7f0000003500)=[{0x110, 0x0, 0x8, "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"}, {0x48, 0x100, 0x0, "e9ac5a7b7ef9b28984709cc5f81ff411336970acc500fd4cae22076ff4cb4f4cc2a03cc725b7881d8cefc500070393f2879b69fc9e"}, {0x40, 0x0, 0x5, "c5aa57a399ecb1a7f92d3ee5fed80ff96f00805ca7e00472d8051ea6d872a32e0e5b0d9bc0fff0d59ceebe38"}, {0xd0, 0x10e, 0x6, "ba9a9b7e3dd03d9ed3aa19f20984f10a1c4d1ef96ac1675f280767bae3ec01fe1220b72832a31e924935f12478ae8ceabd694a5770e49f75106529949b8c01c9372bee1bc44067acdeb4f400ae07d3e345da4f8e07f6245846f727a9dfb7a0320c58f26342b6a45672af1cf81ddd4fa76c1431be47308d2aaf70cd7cac9fdf9615fade2a3b3e6af8907522b92f45504e9588a9736b61fc815923f6c6154539b97f16791eda7a8fa1f1f9f47a151d95f08bf91249355cd76dbe2c"}, {0x58, 0x100, 0x9, "5ba7d2aa904bbc49c773fd427611c619ef1d58aadf5e1f5d37b228a10203273abc3bc68255c14acf3ac5a552c8a6d80b6b7dd17055f21422812ef719805dedb7ca61913ef48d"}, {0xd8, 0x11f, 0xfffffffffffffff9, "7ad88d69984778a2c0dad09f3d7d16d41bef72119ac27cf499755276513802f1972f77e226309312378d23252da75cf6bf29308b768e5cd71169ec46f2c02477d3ddece442acf7d42413db055d6c11ce16e00ef785910b92f10cd909057cdc19a12fd0e1f322d182f3699e86fc04a3ae0fdb24fa7d0590484375a16962a99e21f815bb06e5232e181bf38434cac31f977c9fd382f1bfb0bbf99f67386daf09e03b9da3e7dcdd1d2d45a457999ccc676508c22f4e084d219fdca7e3da73530a8f10"}], 0x398}, 0x5}, {{&(0x7f00000038c0)=@sco={0x1f, {0x0, 0x1, 0x8, 0x800, 0xfffffffffffffffa, 0x20}}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000003940)="4821bc189250e9a6e680360c4db2b7d26525307c29cacb3e35981a5876b36fcece5357386413c53e119174b687bfb3df99ac7e9630c2cf778372c79b9b71e7f6a55f940f8c582e67b8c31f524b894df2e2025481e03216990e3049f77390a7", 0x5f}, {&(0x7f00000039c0)="93cf90c5e770d54dc944f31e7e9d6dbc951835d0c4faf983a42c4a193e7c2898c5120ac5a87f6ddddf3bcd4bda8326711509d8a377b1fb463dbc375e39e1d10f875315f9c3c2dac8680867aafa7a58220a16be267e8b2223cc09ae5de11dddc422b8fd33ba80368449315f03eb8726c77bd733846fce2d9e631c7e07e221446be47fb2c94b0d29623e239862756bcd38c2", 0x91}, {&(0x7f0000003a80)="8e1ef0655a4100919e7a44fbac8d7ca6d09995b62d988a1215d737b5e0e9fe9bf74f9c1fade053a8598a7cf571edc6f03ec880abaae07266d1c878aeb276959cc6eee013949cf043fa7962ee6dc8656a8775ca4b199fa606efb966fb51a8310e86258038200c0916ebdf31d690b6507f4b1c6164024dd45a33356964520da81e2e7fb74ef08a1fc3bdbb1b8390b007a8e15ebd76783da19d9090b52a8a5d4182a7cfaf01ef17c9f170072a8367d532082fed3f581e4e2523a52ca2f6865a3002dd066fd19d8d1b43af57e769f020f6cc1e04", 0xd2}], 0x3}, 0x8000}, {{0x0, 0x0, &(0x7f0000004fc0)=[{&(0x7f0000003bc0)="cd15ada308073d9bfe8ae78cca768ab3577fecd4bde7a691207145cbe38ddc956ed03130577b5a161d963f2eecd03fa193547fdea12154e067ca0c294edce72a208dad77b2e3733de1abb2a39e1be8ac2de9ff9dbdbf8a883782cddd868581098dc952721b9b99ea7b3688315777bdef6e5271c90b990861f0f85534f6779983e1694d176ac3e280216537da2313e4f91bb46da5b7456dbec1e850056252b9811bbe80b47cbc780044290189c09cb7216d5d3f102c047749d2a257689919c073d72065d1841113af889336ef493917b56fea6092ce543ba016e3520a7f04480849a23e1e884f91df", 0xe8}, {&(0x7f0000003cc0)="bd35c6171f1772b354391690ab99e01c147c8226f0bbc71788c15a00d754048e7f60cce989904c828a", 0x29}, {&(0x7f0000003d00)="887581b059a1d34e2e2a087a3311791e04cb0142545236a3d55831aaf9985fe3051098ef6139038e66201f77a3aaaacfb1c185a7d14c06d91be5a0c431c0e443762868d2791f764e6d1bfc169e00d93d916b59c638c106374a559af2b4b13e33fc5fe603c1f45a37907e8d43d7244d9a9aff6a3d50e184f33f537aff0344034df495f89dedbb0c117ff06b508c53979915184b6446764f18aabfe43e2c5f5d2edfd10da2af3b373254e75b3d53a5c9f5bb444c0545d6617e2bfa4ceab1ea24b8199e41fa3141f26b253c956b98b3db5d518cf615", 0xd4}, {&(0x7f0000003e00)="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", 0x1000}, {&(0x7f0000004e00)="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", 0xfa}, {&(0x7f0000004f00)="cf2c00c4d58aa255dfbf8a0c7dc1de98fd3608c38f9942711c36767bad78472eb3092cb1b631476e7a06596a82d6aeeb515761a2ac8222ef1d6e954a6685b48f5191bf22d99f5e5722c0e713d1d8db4909e88e8af826151abbf4baf61987e0c73d0b69c112054a43a665f8f1d803af97786c3a03da22dd9166d2fe2b57790afb89f6d2559202e7d89b3383f6695fae4664d586d5553daf966896c37b57", 0x9d}], 0x6, &(0x7f0000005040)=[{0xd0, 0x102, 0x800, "6a9bee509ed63bb945938ca1cbdc356a0f9137fd3d2c7b19ba453e20cdcc4868501daaed34a8940060bdb5a56a22f88a1b4fe5900d874e0b29ab0fdc8b4758bf92ed6a1fc798a33ebd2fd2596256216e4c59d7a9e99af3435a047926ae73471c3d66a82929de75e2481b447aa51f4ed6e246c555414caff3a5ec5e00c6cb51cbdd3ecb0c82bca9fe8c856b171bb21e3dc5e030eab89d3444e1916bab0177e84b89ce627e1300618899a3b3e22e5f28721f2570679795045e020361e7"}, {0xe8, 0x11f, 0x1f, "fd6f97555f1c9eb009d37f051b25ee2048f400aaaff46e541d1da6c797aecafb502844d6b4f962df4e8c07068bd3464a433d416908923489dea9c718891d4faacfc01cbc3027c7a09c15a33478589e8b100e6899f9712b6f96e21e583f8357414479a57dc12a39ada48d6435d18c8a9dc7f711ccae9af1c14d370915430ba418c1ec6fe0d2c1bbc43c5e5e068e821d59aa1c1b0597308bb71d0685d475c633e10c08da596f08caa6d52200e7051912580241081ec8c8f968e2f9862623dc65ab126c7577eb4255c9b8ca46f16cac50d45d11"}, {0xc8, 0x115, 0x1, "edeefe004d3f00255e234608c1edea35efe0040964cd9dc7ee9c45d2036f56513ba75be7a01d822d3641c77ba0476e2e0ad860bd4ec6f8f70c9fc0a02642145081aaa3af9985bfcd8994ccab3fdd8ddb6886a5445910d361ac1f77fa0981c1fda45b26118149ab2a1a987fcc840fc00a6120fe41482c57bf0a49a43203e7a15fd0d1a98699043bef8b7413483215a24ea9e20588a84f2c521668e9440c2328b028669b65732f5f8e56d63ef42dc9c67fdef9f4b7"}, {0x30, 0x115, 0x3f, "b91a96d69734bfdc6eac84ea4fed2592702116b49ddab92cbe7010f71a8b0355"}], 0x2b0}, 0x7f}, {{&(0x7f0000005300)=@pptp={0x18, 0x2, {0x2, @rand_addr=0x200}}, 0x80, &(0x7f00000068c0)=[{&(0x7f0000005380)="b43ec683fabef805e9e6784651fc8bc63f7e1a961828dfc3224940a29eeb270fc4cd7cb536455513c142b44c9d0c9e553b338f07b3dea34a1b0eb3a258e22dbe85340f3ac2185b830ada89774ac1170f8e9e1fe429b7b0fb0e58703c76fa0a6850ac01d9ed3cd95d6fd6650d07b0d9de0ff0115e483a67fcc9bbaa27bdc0e24997c2bc341e6dd99d8c735dba5278b10803c74ef01a9e8644b3305ddf9230eefaad5018a5322ecd7f0326b4f6b6754b13aefbf673aad8a6dc37f1c3dfb4e7bb4552e4cf89c9b5d4545850ed07ea72334d0d21b5abca28ff7091a6eb4c058ea3428f717cd4b59abc315e05f3da", 0xec}, {&(0x7f0000005480)="2cec178df2c59a76563eae3935250cfd3e94515d280872e28be375f0df510c8a167a365b1f2e17d9fd9c19722f635882603b05b2fca2200238332b13e777c1ec0f15dddfd4b8774d74dc893c1d2e9692c47817993b1920531b355e637d5a22281e2b3185e398d4bde7f7d705d78fc9e458c37c8c", 0x74}, {&(0x7f0000005500)="f7b1206c7cb64438e8f59d408c05e2520a77255d73aae00b202f2f4a986d45e857e92afffc71a25e085178a19b1cf16d34d29498121e5b79bac6598571f1a0b42346113cc52a8ad10e7bd615d7bde98c3ea0e1b0462bf0bff60d1053571d842b225207528943ac39f67b50b405cdcb11e22b146399923a", 0x77}, {&(0x7f0000005580)="acddf35f31642c3b5f1c1bff9438a446903953825c5eeae884756ddd1e6f209cdd157d285839c9d6e59585772952d6c4be734b51e0a19a0bb149c34d6e6ba1522c9af075b604af0ebd79871fb44da77085ce76d31357bedcf25fe984f76edc77126bdb8239420762bc5162111058e8d97d895d1fadc4300651507311a9690edc5cf1b47fa190d9a6ce701d56d41b9023d7de12a445c43b19fb610e1aa26c48acc219f5c34b3866ccbadaaa10b77f605c63bf514b4ce93273f7dda15453d01c8d8587dc5e354df13fac1d105ddf72884964786a9ba8", 0xd5}, {&(0x7f0000005680)="9e82783b2595395f27d7eec4fac3eaad7746be4ddcca9e05fe22b19f58eb28eb0db17947048f828e3e0ce8243aa4ae6f9e", 0x31}, {&(0x7f00000056c0)="0becf65d9cfbcd0dfdb8a9e06cbcfcad3082325197a9de86b029ddee0f386c24526a82cf98d4882801ff1501c8a9743a5fe59828a88dfd1406b4f5f35b9e50aec0a2b8ae74e246bb9eb67440b5a9c58cad588f37e101a22c6ecf881de1e5394c816c9bc88e9f5ea11cb0994610f686871e0e977d2adab16691904f137b422fc51e337f8913b811e3977b8e76c041a080ae577bcb298adbb4c547fc6e440f4886db8e7c5e8aa1edad3b99ad4256f6f7d9a64944d973fdfa6b6ba00568d25b5afc767bef48bf0a6a7432f234e816b1f5a027c4ca4cc5f0954f129f03d09e1b39bd730d8ad79fb4ddd117053b", 0xeb}, {&(0x7f00000057c0)="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", 0x1000}, {&(0x7f00000067c0)="9ad5995e3ae11ab45834afb2802b37ea8436dface3e40bbd8a6b2045cab7b46d70ee51ecb0d79834c13a5f139d61a5c1aee15dcd5d66e58806577e004265ec92d6eb7cf567c20ebed2bceefe1a019553b552d634e77dfd35f6d03137e0d5bc76ce09225d3cf3f3ef3874e249122a6cba6c049b6cb417205af42ccd657926c3a12d8f6e311f12323f9bfcd83d0a2e7101714dd721e5b2f7e97adc4c4a366783a0dcfeb72979a93cc8e7b5ad35209bd5e899594dc9255aa5a42f51027cea312c84f8b643201957b07599fa56b70f", 0xcd}], 0x8, &(0x7f00000072c0)=ANY=[@ANYBLOB="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"], 0x1d0}}, {{&(0x7f0000006b40)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x80, &(0x7f0000006c40)=[{&(0x7f0000006bc0)="3e57ccfcaf83c17e0467348be325411633a55c621278d8059dcfb28c692f381f61dcc0c7ef2c034a62ee9b2aa87f046f591ce68e1ac8b5b30b9c982b99405990009e701675e8d3db32701d78d5bef758e4f4d6f97577fae4a2e12e8d9babcee251badaab1db8f48a7c87e6fca5dae2c30bbc76997a4dea065e", 0x79}], 0x1}, 0x50}], 0x9, 0x40) sendmmsg(r0, &(0x7f00000000c0), 0x182, 0x0) [ 327.483746] binder: 11261 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 327.483762] binder: 11261:11262 ioctl c018620c 20000040 returned -22 [ 327.490836] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 327.521459] binder_alloc: binder_alloc_mmap_handler: 11261 20001000-20004000 already mapped failed -16 17:01:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(r0, r1, 0x0) 17:01:07 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xb0, 0x0) 17:01:08 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x0, 0x0, &(0x7f0000000100), 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x220200, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000000c0), &(0x7f00000002c0)=0xfffffffffffffeb0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000001c0)={0x0, r1}) r3 = socket$inet6(0xa, 0x3, 0x7) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0xffffffffffffffea) futex(&(0x7f0000000200)=0x1, 0x1, 0x2, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)=0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000180)={0x2, r1, 0x7}) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0xfdffffff}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) getpeername$packet(r3, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000600)={'vcan0\x00', r4}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0xfffffffffffffffa}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={r5, 0x3ff, 0x0, 0x8, 0x8}, &(0x7f00000003c0)=0x18) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 327.563238] ceph: device name is missing path (no : separator in /dev/loop1) [ 327.570724] binder: BINDER_SET_CONTEXT_MGR already set [ 327.578358] binder: 11261:11262 ioctl 40046207 0 returned -16 [ 327.597726] binder: 11261 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 327.597743] binder: 11261:11280 ioctl c018620c 20000040 returned -22 17:01:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(r0, r1, 0x0) 17:01:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 327.702602] ceph: device name is missing path (no : separator in /dev/loop1) 17:01:08 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x0, 0x0, &(0x7f0000000100), 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x220200, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000000c0), &(0x7f00000002c0)=0xfffffffffffffeb0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000001c0)={0x0, r1}) r3 = socket$inet6(0xa, 0x3, 0x7) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0xffffffffffffffea) futex(&(0x7f0000000200)=0x1, 0x1, 0x2, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)=0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000180)={0x2, r1, 0x7}) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0xfdffffff}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) getpeername$packet(r3, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000600)={'vcan0\x00', r4}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0xfffffffffffffffa}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={r5, 0x3ff, 0x0, 0x8, 0x8}, &(0x7f00000003c0)=0x18) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 327.818153] binder_alloc: binder_alloc_mmap_handler: 11300 20001000-20004000 already mapped failed -16 17:01:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(r0, r1, 0x0) 17:01:08 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x6a, 0x0) 17:01:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 328.040274] binder_alloc: binder_alloc_mmap_handler: 11318 20001000-20004000 already mapped failed -16 [ 328.063882] binder: BINDER_SET_CONTEXT_MGR already set [ 328.069679] binder: 11318:11319 ioctl 40046207 0 returned -16 17:01:08 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x20000800, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000380)={0x7, 0x6d, 0x4}, 0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x7fff, 0x1, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x100000001}, &(0x7f0000000180)=0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000000100)=']\x00') ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x0, 0x200, 0x7}) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x6c00000000000000, 0x4200000000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f00000000c0)) 17:01:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(r0, r1, 0x0) 17:01:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:08 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x110, 0x0) 17:01:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8000000000002b) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x2) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="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", 0x52d}], 0x1}, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000180)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40000, 0x0) getpeername$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10) socket$inet6(0xa, 0x800, 0x800) 17:01:08 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) sysinfo(&(0x7f00000007c0)=""/154) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6, 0x3}) ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x20000004e23, @dev}, 0x10) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000480)=0x1c) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000340)='ip6gre0\x00') ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x8) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xc9, 0x5, 0x42fe}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000009f00000018029ea690858bfb92c4925e59511d2128a26cae33f48d67b991621df681c0e5e56f5704d56fb1cf1f353403e8df243529848fc1c7e807f2889a8aeda146e9c9a8ce6ad1a0a4b9de624c47f7837459c49f9f888d2705c886dc49d79c50731b87fb47babed83fbad8ac5119c18f5909e69eeb39a623e4b9c7e95df08502364c64f024ad67e0fd9d1ecdc1eaa681ef0ce5bf93a03c5f9cc2d545da96849f1caa"], 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) gettid() write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12) openat$zero(0xffffffffffffff9c, &(0x7f0000000500)='/dev/zero\x00', 0x0, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r4 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000002fe4)={0xa, 0x0, 0x0, @empty, 0xc}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r6 = add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_persistent(0x16, r5, r6) [ 328.486225] binder_alloc: binder_alloc_mmap_handler: 11328 20001000-20004000 already mapped failed -16 17:01:08 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x16b, 0x0) [ 328.561796] binder: BINDER_SET_CONTEXT_MGR already set 17:01:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x8000, 0x8, 0x3f6}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x21b242955bc8f, 0xe, 0x0, 0x1af) 17:01:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 328.585712] binder: 11328:11329 ioctl 40046207 0 returned -16 17:01:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:09 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0049d13d339c3a83b57716ee817c892fe57dda6e3ac07858a088ca4db18e363c2dea8bdb564a22c9bc8faf6c532aaab9b6ba0630f11c15b164a12d3e48f3fd"}, 0x60) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @local, 0x0}, &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', r3}) getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f0000000300)=""/177, 0xe2bee) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs(r4, &(0x7f00000000c0)='net/snmp\x00') 17:01:09 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x72, 0x0) [ 328.800394] binder_alloc: binder_alloc_mmap_handler: 11365 20001000-20004000 already mapped failed -16 [ 328.845760] binder: BINDER_SET_CONTEXT_MGR already set [ 328.883567] binder: 11365:11367 ioctl 40046207 0 returned -16 17:01:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:09 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x3d, 0x0) 17:01:09 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$gfs2(&(0x7f0000000980)='gfs2\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0xffffffffffffffff}}]}) execve(&(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)=[&(0x7f0000000100)='statfs_quantum', &(0x7f0000000140)='\'vboxnet0\x00', &(0x7f0000000180)='statfs_quantum'], &(0x7f0000000340)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)='bdev\x00', &(0x7f0000000280)='statfs_quantum', 0xfffffffffffffffe, &(0x7f00000002c0)='statfs_quantum', &(0x7f0000000300)='em1/(\x00']) 17:01:09 executing program 4: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, {0x3ff}}, 0x8) listen(r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x42240) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/133, 0x85) prctl$PR_SET_PDEATHSIG(0x1, 0x4000000039) 17:01:09 executing program 1: pselect6(0xad, &(0x7f0000000080)={0x0, 0x400, 0x0, 0x0, 0x0, 0xffffffff80000000}, &(0x7f00000000c0)={0x0, 0x4}, 0x0, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) getdents(r0, &(0x7f0000000100)=""/228, 0xe4) r1 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x2000c2604110, &(0x7f0000000080)) [ 329.142472] binder: BINDER_SET_CONTEXT_MGR already set 17:01:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$RTC_PIE_OFF(r0, 0x7006) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001d80)={"74756e6c3000000000000000e0002000", 0x0}) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, r4}, 0x58) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r5, 0x40047459, &(0x7f00000005c0)=0x8) close(r0) 17:01:09 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xa0, 0x0) [ 329.170560] binder: 11384:11394 ioctl 40046207 0 returned -16 17:01:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 329.278405] gfs2: statfs_quantum mount option requires a non-negative numeric argument 17:01:09 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x191, 0x0) 17:01:09 executing program 1: r0 = socket$inet6(0xa, 0x20800a2, 0x6) ioctl(0xffffffffffffffff, 0x8a36, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000580)='/dev/input/mice\x00', 0x0, 0x100000002) io_setup(0x800100000001, &(0x7f0000000300)) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)="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", 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) flock(r3, 0xc) socketpair(0x0, 0x4, 0x3ff, 0x0) sendto$llc(r2, &(0x7f0000000180)="046ca1ce994c761534ab1d39114c4e668bea5f4bcdfc9b59a5320b8a4a36a739eb295107443195a34a54be44dc134481eae7d000a57e43c334e0d166c21578b730bf96be6c40258c054b6555cd3cdf1af63954e635ff82102b57ec3fd1", 0x5d, 0x80, &(0x7f0000000100)={0x1a, 0x30f, 0x1, 0xa9, 0x7, 0x4, @random="ad25e8325c5a"}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a45321, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000006c0)) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81bd, 0x0, 0x3f, 0x1, 0x64ca1839, 0x0, 0x8001, 0x7, 0x0, 0x0, 0x7f, 0x0, 0x20, 0x4, 0x7f, 0x9, 0x8, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x5, 0x0, 0x1, 0x0, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x0, 0x1, 0xf87, {}, 0x1, 0x100000000}) io_setup(0x5, &(0x7f0000000000)=0x0) io_pgetevents(r5, 0x1, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c04, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x4e24, @multicast2}}) 17:01:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102801ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f00000002c0)={0x7b, 0x0, [0x81, 0x6, 0xdb8, 0x4]}) shmget$private(0x0, 0x4000, 0x290, &(0x7f0000ff9000/0x4000)=nil) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000500)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000540)=0x0) getpgid(r1) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000240)={0x0, 0xbd, 0x0, 0x6}) write$P9_RXATTRWALK(r0, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x2}, 0xf) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0xe69, @mcast2, 0x81}}, 0x1, 0x9}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x1ff, 0x100000000}, &(0x7f0000000280)=0x8) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000440)={0x80000001, 0x80, 0xf4, &(0x7f0000000340)="be945428a8f11d3f9a61207b3aba4a3a557afaaad3f1bd530341f36433722dcbb1fcf3c7713b333ec73c93e2efad28fbf5bf999ea936636d5b5b5a851e449891c85786e4b12de9b95f4f960f997e37aef499a49cb4b1fdb0739c6ce53f5dea56f1e9f435cc48adf64d771c431424c729afb256a01935e63f338c045bbf6cd456c20f20db2a764b5290b65f83394a7eecb73b2b5840a37b97054805d4256ee0bb0080bd1c72cc634aa703e37b793c5bb2a14acd7760f59b39fd35e7457678ee1c475a8040d14a247b4e44a40ffab725d950b594afa12053d90e20784006c16990805be12313cb2ed49f6934253ce733f0f042089b"}) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f00000004c0)={0x0, 0x5, 0x8, [], &(0x7f0000000480)=0x7fff}) [ 329.346638] gfs2: can't parse mount arguments [ 329.365717] binder: BINDER_SET_CONTEXT_MGR already set [ 329.381448] binder: 11410:11416 ioctl 40046207 0 returned -16 17:01:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 329.458343] gfs2: statfs_quantum mount option requires a non-negative numeric argument 17:01:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 329.499355] gfs2: can't parse mount arguments 17:01:09 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = socket$inet6_sctp(0xa, 0x20, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x3c}}) close(r2) close(r0) 17:01:09 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xc1, 0x0) 17:01:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0x7}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="a926a286000000e2"]) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 329.558383] binder: BINDER_SET_CONTEXT_MGR already set [ 329.578124] binder: 11441:11442 ioctl 40046207 0 returned -16 17:01:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:10 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xc4, 0x0) [ 330.010040] kvm: emulating exchange as write 17:01:10 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xee, 0x0) 17:01:10 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x51, 0x0) [ 330.176390] binder: BINDER_SET_CONTEXT_MGR already set [ 330.192047] binder: 11472:11477 ioctl 40046207 0 returned -16 17:01:10 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x28080, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x7, @loopback, 0x4}}, 0x7f, 0x1}, &(0x7f0000000400)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000440)={r2, 0xfc, "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"}, &(0x7f0000000580)=0x104) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 17:01:11 executing program 1: r0 = socket$inet6(0xa, 0x20800a2, 0x6) ioctl(0xffffffffffffffff, 0x8a36, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000580)='/dev/input/mice\x00', 0x0, 0x100000002) io_setup(0x800100000001, &(0x7f0000000300)) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)="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", 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) flock(r3, 0xc) socketpair(0x0, 0x4, 0x3ff, 0x0) sendto$llc(r2, &(0x7f0000000180)="046ca1ce994c761534ab1d39114c4e668bea5f4bcdfc9b59a5320b8a4a36a739eb295107443195a34a54be44dc134481eae7d000a57e43c334e0d166c21578b730bf96be6c40258c054b6555cd3cdf1af63954e635ff82102b57ec3fd1", 0x5d, 0x80, &(0x7f0000000100)={0x1a, 0x30f, 0x1, 0xa9, 0x7, 0x4, @random="ad25e8325c5a"}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a45321, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000006c0)) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81bd, 0x0, 0x3f, 0x1, 0x64ca1839, 0x0, 0x8001, 0x7, 0x0, 0x0, 0x7f, 0x0, 0x20, 0x4, 0x7f, 0x9, 0x8, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x5, 0x0, 0x1, 0x0, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x0, 0x1, 0xf87, {}, 0x1, 0x100000000}) io_setup(0x5, &(0x7f0000000000)=0x0) io_pgetevents(r5, 0x1, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c04, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x4e24, @multicast2}}) 17:01:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:11 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) unshare(0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) r3 = getpgid(0xffffffffffffffff) sched_getscheduler(r3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:01:11 executing program 3: r0 = socket(0x15, 0x80005, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x4, 0x0) r2 = dup(r0) perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x70, 0xfffffffffffffeff, 0x3, 0x4, 0x81, 0x0, 0x7, 0x1, 0x5, 0xca, 0x7, 0x101, 0x2, 0x1, 0x6, 0xfff, 0x1f, 0x0, 0x0, 0x1, 0x37701007, 0x1, 0xdb10, 0x6, 0x3ef8, 0x664d, 0x1ff, 0x3ff, 0x7, 0x3, 0x9, 0x2, 0x7fffffff, 0x7, 0x5, 0xffff, 0x8, 0x0, 0xfffffffffffff800, 0x5, @perf_bp={&(0x7f0000000040), 0xf}, 0x9003, 0x6, 0x7, 0xf, 0x8, 0x7f, 0x9}, r1, 0xe, r2, 0x4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000180)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000140)=0x81) getsockopt(r2, 0x4, 0x2715, 0xffffffffffffffff, &(0x7f0000000000)) 17:01:11 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x13f, 0x0) 17:01:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 330.778024] binder: BINDER_SET_CONTEXT_MGR already set 17:01:11 executing program 3: r0 = socket$inet6(0xa, 0x20800a2, 0x6) ioctl(0xffffffffffffffff, 0x8a36, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000580)='/dev/input/mice\x00', 0x0, 0x100000002) io_setup(0x800100000001, &(0x7f0000000300)) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)="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", 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) flock(r3, 0xc) socketpair(0x0, 0x4, 0x3ff, 0x0) sendto$llc(r2, &(0x7f0000000180)="046ca1ce994c761534ab1d39114c4e668bea5f4bcdfc9b59a5320b8a4a36a739eb295107443195a34a54be44dc134481eae7d000a57e43c334e0d166c21578b730bf96be6c40258c054b6555cd3cdf1af63954e635ff82102b57ec3fd1", 0x5d, 0x80, &(0x7f0000000100)={0x1a, 0x30f, 0x1, 0xa9, 0x7, 0x4, @random="ad25e8325c5a"}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a45321, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000006c0)) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81bd, 0x0, 0x3f, 0x1, 0x64ca1839, 0x0, 0x8001, 0x7, 0x0, 0x0, 0x7f, 0x0, 0x20, 0x4, 0x7f, 0x9, 0x8, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x5, 0x0, 0x1, 0x0, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x0, 0x1, 0xf87, {}, 0x1, 0x100000000}) io_setup(0x5, &(0x7f0000000000)=0x0) io_pgetevents(r5, 0x1, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c04, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x4e24, @multicast2}}) 17:01:11 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x159, 0x0) [ 330.799195] binder: 11499:11510 ioctl 40046207 0 returned -16 17:01:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306263, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:11 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xed, 0x0) [ 331.140438] binder: 11529:11533 ioctl c0306263 20000040 returned -22 17:01:11 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xe0, 0x0) [ 331.206341] binder_alloc_mmap_handler: 5 callbacks suppressed [ 331.206360] binder_alloc: binder_alloc_mmap_handler: 11529 20001000-20004000 already mapped failed -16 17:01:11 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xd6, 0x0) [ 331.250073] binder: BINDER_SET_CONTEXT_MGR already set [ 331.261254] binder: 11529:11533 ioctl 40046207 0 returned -16 [ 331.311984] binder: 11529:11541 ioctl c0306263 20000040 returned -22 17:01:12 executing program 1: r0 = socket$inet6(0xa, 0x20800a2, 0x6) ioctl(0xffffffffffffffff, 0x8a36, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000580)='/dev/input/mice\x00', 0x0, 0x100000002) io_setup(0x800100000001, &(0x7f0000000300)) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)="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", 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) flock(r3, 0xc) socketpair(0x0, 0x4, 0x3ff, 0x0) sendto$llc(r2, &(0x7f0000000180)="046ca1ce994c761534ab1d39114c4e668bea5f4bcdfc9b59a5320b8a4a36a739eb295107443195a34a54be44dc134481eae7d000a57e43c334e0d166c21578b730bf96be6c40258c054b6555cd3cdf1af63954e635ff82102b57ec3fd1", 0x5d, 0x80, &(0x7f0000000100)={0x1a, 0x30f, 0x1, 0xa9, 0x7, 0x4, @random="ad25e8325c5a"}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a45321, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000006c0)) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81bd, 0x0, 0x3f, 0x1, 0x64ca1839, 0x0, 0x8001, 0x7, 0x0, 0x0, 0x7f, 0x0, 0x20, 0x4, 0x7f, 0x9, 0x8, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x5, 0x0, 0x1, 0x0, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x0, 0x1, 0xf87, {}, 0x1, 0x100000000}) io_setup(0x5, &(0x7f0000000000)=0x0) io_pgetevents(r5, 0x1, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c04, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x4e24, @multicast2}}) 17:01:12 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x9, 0x0) 17:01:12 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0xe2002) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r2 = add_key(&(0x7f0000000180)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="e7a88aa965aa9a9321", 0x9, 0xffffffffffffffff) keyctl$clear(0x7, r2) 17:01:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:12 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3a, 0x801) ioctl$TCXONC(r0, 0x540a, 0xd2f) perf_event_open(&(0x7f000001d000)={0x4000000002, 0x70, 0x69f, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:01:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:12 executing program 4: unshare(0x6c060000) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x80000) r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e) mmap(&(0x7f0000977000/0x2000)=nil, 0x2000, 0x44, 0x10, r0, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x8) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x10000110}, 0x28) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000040)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) 17:01:12 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x87, 0x0) [ 331.684634] binder: 11553:11556 ioctl c0306202 20000040 returned -22 [ 331.709682] binder_alloc: binder_alloc_mmap_handler: 11553 20001000-20004000 already mapped failed -16 17:01:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @loopback}, &(0x7f00000000c0)=0xc) sendmmsg(r0, &(0x7f0000002440)=[{{&(0x7f0000000100)=@rc={0x1f, {0x3f, 0x3, 0x100, 0x80000001, 0x29af4f5b, 0x1}, 0xc}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)="fb127a883164c8fab7d13f18e1fd3b406d2f29", 0x13}, {&(0x7f00000001c0)="fece834781d52c38ca2b92deba575a5393863cd108555d3b2f2ebb5e63ab822e164b9b41aaee14cdde75b2a28daa69a0d6e322b64b50e510a6742ff988c180128641f02048578d9848c2f22737a8be65f90e12d1aa0f94400fa3fa8896af41ad7eadc20e5d4caf617acd31389591f2ed7548f0e0d725fd32", 0x78}, {&(0x7f0000000240)="81025ce36f51717bb520ddaa197c1435659ad2178027c2290d1f4a8dcc83a10eb712c559cca3e65a20a07924", 0x2c}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="0265b943c804e1264d4207deac4c777ff71e56e620af4d52536580d8e0840082ca520d85a4decbb0df1bfaf66a4e1527f8f9c89f0a1d3b8e13ac3086478227c94d2dbb93c7939c58c2ae1c77bb8586520824090745aaea1662840220096cc0be1f7da6", 0x63}, {&(0x7f0000000340)="046ae55567b7c10db51e1343db4e359f6ae2babdda8075f45065385b7db5c06db42cd2d42026009b48b6aa97f3d46a81d0cc09766f447e4893e4fcd5166a972bc30817fb0fee", 0x46}, {&(0x7f0000002540)="fe5025ab4f670d1608eae376b452ca804eb367d35804683ba8f3a754021f", 0x1e}, {&(0x7f0000000400)="14ab11a28c888813e152ecfec800ef62777213ac4688fa6568fcc56f7aaa4ec65f833fda2a644efc8cd7f756cb248b3c5c27317371329f778bbc3962a84bb2738322b9678ea003eda94a432f0b49a0820104a004162a4cb2f60cbb2093cb3da7d7e41ddf96dbc72689183327ca978e2cadcf96dcd72df5c95537d4b4066a8a17f4e259260f988d88ef8d288c9e43508f3ab1afb36df0447e381e231f06d1dfb3df644287def88822639a22203a6763813b6c9a5d4143b8dac6e117899fbe80d75859c2e194df0b6ade6f1d33211316d0e80e5fed8b3cc0e8ad06", 0xda}], 0x8, &(0x7f0000000580)=[{0x50, 0x101, 0xae0c, "8194bd7559a4b8318c38166c662513a46fb02e2cd1e17d1ef345132abdc085cab4c1eb6a44b582f4c542d4d8f9f2f9612dc188b0e28af8559c66d1"}, {0x60, 0x113, 0x400, "edfc0e5d91cce69b5154bb3a7d0aa5de357f8feb27ed370694e1e14365719702586f7729ebdcb6515c8d4bfc667156127fcc4a2a5d1088cf55f8650fbe570be009a4fa11b3559bd53581aa54867a"}, {0xd8, 0x113, 0x9, "fc34b5ce8d7dad26212bf1bedacaf66bd5d815c347ae9098cf63ba4397e3b8f604a30754aa06ece9e766a9a8683d5d908c6e508e5b7b030ba47a7dd2cb86f6685f0cc687cd0514ed8a743037ce19fbe6d9b9a7651ff5f216a4987653226daf26ba1c726c90c742af2f2bf24992ee9c08874836b2d1b834f2edd1f61ad12940a68998bf1667874f973e8ca872e5ffdee68666fd7895023789ed76960ede4f693677a9c1a68586f9f49080606fe94d03f0fa8b80a1311b3015e45b0404f84107803966"}, {0x90, 0x110, 0xffffffff000, "ef566554bcf6ef7714238be083587bd8da7f514befc36f791d9c9a7a31b327227f027aa4bfc593fe32364458a187e9abac67f9c0bd077bb7ede4aed670592c27796b47e62951af3614b5c12fde68250e26771e7898c44c4e95aefaaf6d39a39fd88acfe0af2b8e23cc80c32dcf328071845b24fd7c3c2b11dfe3d170"}, {0x70, 0x11f, 0x8, "4287841d0936a0d0a4a68395dcf58b4191cf2d8cfc254bf409ca8d27b415ac2c11bd42eeacb8ed3d5391343189d1e1b241c9454719966fc04a302b1d971250551c1107997ccd60a361251529367fbce40018e7251a0a42fa5adee2"}], 0x288}, 0x2}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000840)="f5fad5d462a11d71706a1e54acefea95fd74501f7056ef5b9ce6441847a31850bf00ab716cd9655fb97c4a75390841dafcd24d68ceba036bcc24b46caae1a55b9b448b104c203353", 0x48}, {&(0x7f00000008c0)="d046fdbcb4fb3b11209623643ec29746632e0d4c29298fc346396c243958ca44dc6082056a75fe36a260157a44dacb492c6e2e8335f06d839a04d625be3e83871c46badcce5102b69e8e16dba0df353ec558df", 0x53}], 0x2, &(0x7f0000000980)=[{0x32d, 0x118, 0x401, "9ae051e5306874093ed874d84338957334e1a62c38def13036d01c530abd9d2c927d0833f149f70cb1035558d71ba0d50bcfe69c83add5a55c55662b4c3bf6cbafff9cc353b906bd8c7c59ec6c0bbb355a91abd185a98909d5b8c0e840419a86"}, {0xf0, 0x117, 0x1f, "45af00fc85c4e75efcfe61419bc42b9fada190e5c138345ee26f743d08e580ede3c9e75f82cb42f84f1b72541a28a4663661468db774a0f4a824374cf73ad409adce5f239d8c74cade948dc1551436ba9361081f1807d76ac44da791d4a21f5bb2cef52ee477543ffa8facf801eec82fe9d243fb836cb5d0492ec645272e3383407b9ad5cdbaa4833cec4cf90b5db731a0c64ee9d4913d8b4195cc490192443f36d932a59d33c6176eb9ac1118771cc36554e30c344f055eb55d06029cc48e19c12a0fb93345d02cc97cf82b59b4838b6a6ce94b96fabeaaf7a7147cc16d"}], 0x160}, 0x3}, {{&(0x7f0000000b00)=@xdp={0x2c, 0x5, r1, 0x18}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b80)="beeb64edf9fe8489335f2e5701c0fcf4bd6a19f5db740a265e4570bdd0f4137b9311b296b7d632382a6ef189225e4a8819ee302208fe6812fdd32a5adca925667d15168e2d6615f57f5741638bd642111a94a26a4ce6c3f342ccd473bdfccaba393173056d5bdad2e32109ca8a73b0cf240624dc49dc279c8dcac87c4c460f43665bd1ad6d99aad4446d878693b9d5039ce4f999f7753140f477d5e7ee51c7e77aaee3406f8bc47dc9f0deac1acbaaaf", 0xb0}], 0x1, &(0x7f0000002580)=ANY=[@ANYBLOB="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"], 0x1428}, 0x9c4}, {{&(0x7f00000020c0)=@l2={0x1f, 0xe515, {0x7ff, 0x1064, 0x9, 0x8, 0x26b3d220, 0x7fff}, 0x3, 0x3}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002140)="a37c8af02c0a347870681d6d515926a460d229823a31dc1915737ab262", 0x1d}, {&(0x7f0000002180)="1fa04dacf254a0d0ee3e041c11392b7c84c0f651c7350042443883c16872addd206da06c0b5ee36839b6d9bde019a62f0efdac20a6225cb33d3d9f94e26ab392775f917e1ae978b2af283488afa0d8f0942e5da0748246b3d88d8bb123d188e66fbb45e02421f32605f516b4409da88296e8d957335f81b11758ef5cf08e0357e50d0bac9459b704182a76b59731ab985c6e4a3fc6176951d3f01d6ca7dec93caa43b17fe8afe3877d6d1a7d698bc24b98488245f8c826e0f4e4b9364481e685dd882b1d67eb85a89ebfad595f088a7871c524f4f9dc64c6ab6f76fb7a40d743eaf46c6bf67e6d07fbb933d80a9475f7bfd72fedc74e476e9d", 0xf9}, {&(0x7f0000002280)="1cf055a4d8edb98d6667209827edd8c4fc2399739edc39b27e015b3081cfed75298867f15217987d11636875753ce61e073261a0fc02b7d413c20d62273a9d9af4bd3ed2221fcd2d1ffc12aa47e1ee14be42ad7b2614b516", 0x58}, {&(0x7f0000002300)="3b8abc065cef9ef796ce1024acce524a5ffa25e2b9a455149c9285c53a2d8ab88e1a7d289b323bc2393d88ef6b0b3782", 0x30}, {&(0x7f0000002340)="601827b318b2bc377d75f55e2b53851fc904c9559d9e4f46f36f305c0902038191bca4b9b347ea43dfe333f6ce2b54c9d1d105133abae4d70a2ef053c6a430759721a4ba93a60dd0de5ad4e17da20cc20cb055b72083498e5f2b0060797e58247ec58add1156813c28", 0x69}], 0x5}, 0x8}], 0x4, 0x0) [ 331.754899] binder: BINDER_SET_CONTEXT_MGR already set [ 331.769428] binder: 11553:11556 ioctl 40046207 0 returned -16 [ 331.775506] binder: 11553:11572 ioctl c0306202 20000040 returned -22 17:01:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc030624c, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:12 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xa3, 0x0) [ 331.976729] binder: 11580:11584 ioctl c030624c 20000040 returned -22 [ 332.006905] binder_alloc: binder_alloc_mmap_handler: 11580 20001000-20004000 already mapped failed -16 [ 332.013105] IPVS: ftp: loaded support on port[0] = 21 17:01:12 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x10a, 0x0) [ 332.070749] binder: BINDER_SET_CONTEXT_MGR already set [ 332.076051] binder: 11580:11584 ioctl 40046207 0 returned -16 [ 332.104612] binder: 11580:11595 ioctl c030624c 20000040 returned -22 17:01:12 executing program 1: r0 = socket$inet6(0xa, 0x20800a2, 0x6) ioctl(0xffffffffffffffff, 0x8a36, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000580)='/dev/input/mice\x00', 0x0, 0x100000002) io_setup(0x800100000001, &(0x7f0000000300)) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)="2e2f6367726f75702e6370752f73797a3000dd4efd185ee17afee78e8597bae7bbff18bc035b344d091d0600fa3da9d5a2141454bdeacf07e0e0c651928f5d4f4355a25d52a61c037fd12eb3dbf7fdbc5e3e9ebd5e923ee4faa20afacc221c93a92b316dbb228aa1bd95e99a61189187d1a5df06da9be869ba0b891be424093e2f4184c779042d6ec79071a0e36f0b6b63d0b24b9b47b033096daae2f682e12c87982b12bd02a89fb272bda741c4ef4b691dc680d5f6a25105507c07b3d0a1981c6e8508fc6ae7aa8f7444e119084fca89b9969548f7e2a9698fab3a2af0b7e8df0c5b8fb18294407c110ee6690d0d6b2a7b08216deca0a10249d52ed966cd26fc584708eb503388367391", 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) flock(r3, 0xc) socketpair(0x0, 0x4, 0x3ff, 0x0) sendto$llc(r2, &(0x7f0000000180)="046ca1ce994c761534ab1d39114c4e668bea5f4bcdfc9b59a5320b8a4a36a739eb295107443195a34a54be44dc134481eae7d000a57e43c334e0d166c21578b730bf96be6c40258c054b6555cd3cdf1af63954e635ff82102b57ec3fd1", 0x5d, 0x80, &(0x7f0000000100)={0x1a, 0x30f, 0x1, 0xa9, 0x7, 0x4, @random="ad25e8325c5a"}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a45321, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000006c0)) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81bd, 0x0, 0x3f, 0x1, 0x64ca1839, 0x0, 0x8001, 0x7, 0x0, 0x0, 0x7f, 0x0, 0x20, 0x4, 0x7f, 0x9, 0x8, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x5, 0x0, 0x1, 0x0, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x0, 0x1, 0xf87, {}, 0x1, 0x100000000}) io_setup(0x5, &(0x7f0000000000)=0x0) io_pgetevents(r5, 0x1, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c04, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x4e24, @multicast2}}) 17:01:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306204, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:12 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x152, 0x0) 17:01:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-fixed-time)\x00'}, 0x58) truncate(&(0x7f0000000200)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) sendfile(r2, r2, &(0x7f0000000380), 0x8) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58) accept4$alg(r2, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) lsetxattr$security_evm(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='security.evm\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0277145683b2f4bacdd94ff70b00000000f630"], 0x13, 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x2000, 0x0) ioctl$TIOCEXCL(r4, 0x540c) sendto$llc(r3, &(0x7f00000000c0), 0xfffffdea, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) ioctl$TIOCCONS(r1, 0x541d) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) connect$llc(r3, &(0x7f0000000040)={0x1a, 0x338, 0x2, 0x5, 0x7, 0x24d, @local}, 0x10) r5 = gettid() setpriority(0x1, r5, 0xfffffffffffffffa) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b005e3139d225c54dbb7c05809", 0x10) accept4(r0, 0x0, &(0x7f0000000040), 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000140)={0x7}) [ 332.432947] binder: 11607:11610 ioctl c0306204 20000040 returned -22 [ 332.463453] binder_alloc: binder_alloc_mmap_handler: 11607 20001000-20004000 already mapped failed -16 [ 332.477135] binder: BINDER_SET_CONTEXT_MGR already set 17:01:12 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xb1, 0x0) 17:01:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 332.493476] binder: 11607:11615 ioctl c0306204 20000040 returned -22 [ 332.518903] binder: 11607:11610 ioctl 40046207 0 returned -16 17:01:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:13 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0xd000, 0x106000}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x2, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000400000}}}) close(r1) 17:01:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:13 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xdc, 0x0) 17:01:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) getpriority(0x0, r0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x201) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x0) [ 332.812255] binder_alloc: binder_alloc_mmap_handler: 11636 20001000-20004000 already mapped failed -16 17:01:13 executing program 4: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x40, 0xb2, 0x1, 0x4, 0x8}) r1 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) fchdir(r1) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x220, 0x10000000001, 0x7}) readahead(r1, 0x6, 0x4000000) fstatfs(r1, &(0x7f0000000180)=""/245) [ 332.856721] binder: BINDER_SET_CONTEXT_MGR already set [ 332.895589] binder: 11636:11637 ioctl 40046207 0 returned -16 17:01:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) getpriority(0x0, r0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x201) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x0) 17:01:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:13 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xa9, 0x0) 17:01:13 executing program 4: r0 = creat(&(0x7f0000002940)='./bus\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@msize={'msize', 0x3d, 0x900000000000000}}]}}) ioctl$int_in(r0, 0x5473, &(0x7f0000000000)=0x9) 17:01:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) getpriority(0x0, r0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x201) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x0) [ 333.345074] binder: BINDER_SET_CONTEXT_MGR already set 17:01:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffffffffffff8, 0x2, 0x551, 0x7fff, 0x4, 0x4, 0x3}, &(0x7f0000000240)={0x2, 0x6920, 0x7, 0xffffffffffffffa2, 0x3, 0x8, 0x8, 0xfffffffffffffff7}, &(0x7f0000000280)={0x7fff, 0x7, 0x100000000, 0x7, 0x6, 0x1, 0x5, 0x7fffffff}, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000340)={&(0x7f0000000300)={0x1}, 0x8}) mlockall(0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000540)=0xe8) r5 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@mcast1, @in=@empty, 0x4e22, 0x3, 0x4e21, 0x218a58af, 0xa, 0x0, 0xa0, 0x7e, r4, r5}, {0x5, 0x6, 0xed7, 0x7fffffff, 0xffffffff, 0x3, 0x1, 0x100000000}, {0xd6, 0x81, 0x4680}, 0x6, 0x6, 0x0, 0x0, 0x2, 0x3}, {{@in6=@mcast1, 0x4d3, 0x7e}, 0xa, @in6=@remote, 0x3506, 0x1, 0x2, 0xffffffffffffff7f, 0xfffffffeffffffff, 0x5685}}, 0xe8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r0) fanotify_init(0x0, 0x0) 17:01:13 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xb4, 0x0) [ 333.382080] binder: 11661:11663 ioctl 40046207 20000040 returned -16 17:01:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 333.487330] binder_alloc: binder_alloc_mmap_handler: 11661 20001000-20004000 already mapped failed -16 [ 333.530834] binder: BINDER_SET_CONTEXT_MGR already set [ 333.536328] binder: 11661:11663 ioctl 40046207 0 returned -16 17:01:14 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x43, 0x0) [ 333.620229] binder: BINDER_SET_CONTEXT_MGR already set 17:01:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 333.649927] binder: 11661:11686 ioctl 40046207 20000040 returned -16 17:01:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:14 executing program 1: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000002240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x1ff, &(0x7f0000000180), 0x0, &(0x7f00000024c0)=""/206, 0xce}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='comm\x00') r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000600)) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r3, r2, r2}, &(0x7f0000000240)=""/240, 0xf0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xef, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r4 = syz_open_procfs(r0, &(0x7f00000001c0)='net\x00') fstat(r1, &(0x7f0000000340)) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x5, 0x40) keyctl$clear(0x7, 0x0) pwrite64(r4, &(0x7f0000000500)="703ae12e9904db2d2e9b57a66330283fbbd237300e01904af6f7a16a01000000000000003329997e8091b09f31ef07d4b528d26c94a4da7c8ca4ba08d1098b201c4f641e30ef739a3c5a000000000000000000000000000000", 0xffffffffffffff15, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280), &(0x7f00000002c0)=0xc) 17:01:14 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x5, 0x0) 17:01:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 333.912932] binder_alloc: binder_alloc_mmap_handler: 11696 20001000-20004000 already mapped failed -16 17:01:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) getpriority(0x0, r0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x201) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x0) 17:01:14 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x65, 0x0) 17:01:15 executing program 4: rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/68, 0x44}, {&(0x7f0000000480)=""/166, 0xa6}], 0x2, 0x0) r2 = accept4(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x80, 0x80800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0100b1", @ANYRES16=r3, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r4, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) 17:01:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:15 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x11e, 0x0) 17:01:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) getpriority(0x0, r0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x201) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x0) 17:01:15 executing program 1: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000002240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x1ff, &(0x7f0000000180), 0x0, &(0x7f00000024c0)=""/206, 0xce}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='comm\x00') r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000600)) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r3, r2, r2}, &(0x7f0000000240)=""/240, 0xf0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xef, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r4 = syz_open_procfs(r0, &(0x7f00000001c0)='net\x00') fstat(r1, &(0x7f0000000340)) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x5, 0x40) keyctl$clear(0x7, 0x0) pwrite64(r4, &(0x7f0000000500)="703ae12e9904db2d2e9b57a66330283fbbd237300e01904af6f7a16a01000000000000003329997e8091b09f31ef07d4b528d26c94a4da7c8ca4ba08d1098b201c4f641e30ef739a3c5a000000000000000000000000000000", 0xffffffffffffff15, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280), &(0x7f00000002c0)=0xc) 17:01:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 334.894162] binder_alloc: binder_alloc_mmap_handler: 11736 20001000-20004000 already mapped failed -16 17:01:15 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x12b, 0x0) [ 334.972729] binder: BINDER_SET_CONTEXT_MGR already set [ 335.008813] binder: 11736:11739 ioctl 40046207 0 returned -16 17:01:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306225, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:15 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) symlink(&(0x7f0000000180)='./file0/f.le.\x00', &(0x7f00000001c0)='./file0/f.le.\x00') mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) umount2(&(0x7f00000004c0)='./file0/f.le.\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000600)={&(0x7f0000000000), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3940}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xec}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040004}, 0x20000000) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000140)='./file0/f.le./file0\x00', r2, r3, 0x800) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 17:01:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:15 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x8a, 0x0) [ 335.256022] binder: 11761:11762 ioctl c0306225 20000040 returned -22 [ 335.263759] binder_alloc: binder_alloc_mmap_handler: 11761 20001000-20004000 already mapped failed -16 [ 335.312218] binder: BINDER_SET_CONTEXT_MGR already set [ 335.317536] binder: 11761:11762 ioctl 40046207 0 returned -16 17:01:15 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x48, 0x0) 17:01:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x2, 0x4000) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000180)={0x0, 0x4, 0x3, &(0x7f0000000140)=0x101}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)=r3) r4 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0x4000) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x10) socket$tipc(0x1e, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000340)={0x7b, 0x0, [0x277, 0x0, 0x200, 0xfffdfffffffff0ff]}) [ 335.393250] binder: 11761:11774 ioctl c0306225 20000040 returned -22 [ 335.408548] overlayfs: filesystem on './file0' not supported as upperdir 17:01:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:15 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) semop(r0, &(0x7f000001a000)=[{}, {}], 0x2) semtimedop(r0, &(0x7f0000036ff4), 0x1, &(0x7f0000036ff0)={0x77359400}) semctl$IPC_RMID(r0, 0x0, 0x0) semop(r0, &(0x7f0000000000)=[{0x1, 0xfffffffffffffffb, 0x800}, {0x2, 0x5, 0x800}, {0x4, 0x4, 0x1000}, {0x3, 0x800, 0x1800}, {0x4, 0x7, 0x800}, {0x1, 0x0, 0x1800}, {0x3, 0x3f, 0x1800}, {0xdb35ac5f8b659707, 0x80, 0x1800}, {0x4, 0x3ff, 0x800}, {0x0, 0x0, 0x800}], 0xa) 17:01:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:16 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000300)='/dev/amidi#\x00', 0x1, 0x2000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000400)={0x7fff, 0x0, 0x0, 0x7}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66660f3882811344bd85b87f7800000f23c80f21f8350000f0000f23f866ba2100b0faee0f01f70f20c035040000000f22c0360f00d6660f3801a7627a33460f234cb83e0000000f23d00f21f835100000020f23f866baa10066ed", 0x5b}], 0x1, 0x51, &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="2e2e640fc7a80900fdb8e8038ee0f2e053baf80c66b820bbcb8866efbafc0c66b80000000066ef0f95610166b8150000000f23c80f21f86635000040000f23f8b800008ee8640f9a8803003d0000", 0x4e}], 0x1, 0x0, &(0x7f0000000000), 0x0) syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x3, 0x2001c0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000600)) clock_gettime(0x4, &(0x7f0000000500)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x0, 0x0, 0x1}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U+', 0x1}, 0x0, 0x1) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000240)={0x1}) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="2400000052001f0014f9f407002c04000a0007ed07000100feffffff0800000000000000", 0x24) getsockopt$inet6_buf(r1, 0x29, 0x2b, &(0x7f00000006c0)=""/4096, &(0x7f0000000440)=0x1000) 17:01:16 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008913, &(0x7f0000000680)="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") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) exit(0x2) r1 = socket$rds(0x15, 0x5, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x3, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x1d, &(0x7f0000000000), 0x4) 17:01:16 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x137, 0x0) 17:01:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:16 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x15a, 0x0) [ 335.756909] binder: 11800:11802 ioctl c0306203 20000040 returned -22 [ 335.782082] binder_alloc: binder_alloc_mmap_handler: 11800 20001000-20004000 already mapped failed -16 17:01:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 335.838498] binder: BINDER_SET_CONTEXT_MGR already set 17:01:16 executing program 4: mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='posix_acl_accesswlan0keyring/nodev#*md5sumcgroup\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x800, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) read(r0, 0x0, 0x0) [ 335.903394] binder: 11800:11802 ioctl 40046207 0 returned -16 [ 335.933611] binder: 11800:11824 ioctl c0306203 20000040 returned -22 17:01:16 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xdb, 0x0) 17:01:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306209, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:16 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x7, 0x0) 17:01:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1) fcntl$setstatus(r1, 0x4, 0x44003) io_setup(0x3f, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0x7fffffff}) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0x6, 0x4) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 336.107997] binder: 11841:11842 ioctl c0306209 20000040 returned -22 [ 336.122456] binder: BINDER_SET_CONTEXT_MGR already set [ 336.128068] binder: 11841:11845 ioctl c0306209 20000040 returned -22 [ 336.140821] binder: 11841:11842 ioctl 40046207 0 returned -16 17:01:16 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000300)='/dev/amidi#\x00', 0x1, 0x2000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000400)={0x7fff, 0x0, 0x0, 0x7}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66660f3882811344bd85b87f7800000f23c80f21f8350000f0000f23f866ba2100b0faee0f01f70f20c035040000000f22c0360f00d6660f3801a7627a33460f234cb83e0000000f23d00f21f835100000020f23f866baa10066ed", 0x5b}], 0x1, 0x51, &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="2e2e640fc7a80900fdb8e8038ee0f2e053baf80c66b820bbcb8866efbafc0c66b80000000066ef0f95610166b8150000000f23c80f21f86635000040000f23f8b800008ee8640f9a8803003d0000", 0x4e}], 0x1, 0x0, &(0x7f0000000000), 0x0) syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x3, 0x2001c0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000600)) clock_gettime(0x4, &(0x7f0000000500)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x0, 0x0, 0x1}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U+', 0x1}, 0x0, 0x1) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000240)={0x1}) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="2400000052001f0014f9f407002c04000a0007ed07000100feffffff0800000000000000", 0x24) getsockopt$inet6_buf(r1, 0x29, 0x2b, &(0x7f00000006c0)=""/4096, &(0x7f0000000440)=0x1000) 17:01:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, [], 0xd}, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4e21, 0x7ff, 0x4e23, 0x0, 0xa, 0xdacf00241e36338c, 0x0, 0x5c, r3, r4}, {0x1, 0x8, 0x8, 0x200, 0x1, 0xfffffffffffff94f, 0x7f, 0x400}, {0x8001, 0x4c, 0x10001, 0x19}, 0xffffffff, 0x6e6bbc, 0x1, 0x1, 0x2, 0x3}, {{@in6=@ipv4={[], [], @empty}, 0x4d2, 0x33}, 0xa, @in6=@remote, 0x3507, 0x3, 0x3, 0x2, 0x7378, 0x407f, 0xfffffffffffffff7}}, 0xe8) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r1}, &(0x7f0000000440)=""/240, 0xf0, 0x0) 17:01:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:16 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x178, 0x0) 17:01:17 executing program 4: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @random="a29ab0893fde", [], {@ipv6={0x86dd, {0x0, 0x6, '?:T', 0x14, 0x2f, 0x0, @remote, @mcast2, {[], @tcp={{0xffffa888, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = getpid() ptrace$peekuser(0x3, r0, 0x7fffffff) [ 336.633345] binder: 11868:11873 got transaction with invalid offsets ptr [ 336.691964] binder: 11868:11873 transaction failed 29201/-14, size 0-12288 line 3016 17:01:17 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x21, 0x0) [ 336.735935] binder_alloc_mmap_handler: 1 callbacks suppressed [ 336.735951] binder_alloc: binder_alloc_mmap_handler: 11868 20001000-20004000 already mapped failed -16 17:01:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:17 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="64c5"], 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x10000}, 0x8) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='sqQ'], 0x3) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000200)="11eb2435a9ed4608de7ce1bf2f6e2f3ddc498b6ddf383ca1476f16c1268cc97d5b3551d4bf029e34e670f376a049007c3548b0ec248a1a3edd4516b14628e0b843c6f99bbc78c5ebd016ee3eea352661fafcd29ba0d68420049378cfc6b18db0a4ed23b4e5294fda9fa0eeb9ffa79a8a3204930a074d869e499b4db68edb403a53c4987ba6aec828373a25b0703d3c35fcc97b8e8e9b762a886f3522a276e28c45c0e0b4694498cf09bc48aa2bf54aac7058e1f565ce44a2a5e4d47fc8bf744f0a1e61f416ec55bf1fff7d") 17:01:17 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x12e, 0x0) [ 336.874901] binder_alloc: 11868: binder_alloc_buf, no vma [ 336.909633] binder: BINDER_SET_CONTEXT_MGR already set [ 336.944504] binder: 11868:11883 transaction failed 29189/-3, size 0-12288 line 2989 17:01:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:17 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xec, 0x0) [ 337.001902] binder: undelivered TRANSACTION_ERROR: 29201 [ 337.007641] binder: 11868:11892 ioctl 40046207 0 returned -16 [ 337.032423] binder: undelivered TRANSACTION_ERROR: 29189 17:01:17 executing program 3: socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000340)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x100000001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0xffffffff, @loopback, 0x4}}, 0x8001, 0x8, 0x7a0, 0x9, 0x80}, 0x98) read(r1, &(0x7f0000001900)=""/4096, 0x398) ftruncate(r3, 0x90080) sendfile(r2, r3, 0x0, 0x2008000fffffffe) 17:01:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x25, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) 17:01:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:17 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x131, 0x0) 17:01:17 executing program 4: r0 = socket$inet6(0xa, 0x1, 0xfffffffffffffffc) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 17:01:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = dup(r1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000003c0)={0x9d, 0x5d5a, 0x400, "0291e711959c0d476fe24bd382e3b4bf5c5cd5f3c74815727c1c334ba0868df8c234040065c031dd3b368589a59591ac43177f72a3987b2335d8a0d93fd54e9f3813870f3a3790241109806be2a94c7ec0ad96dd857cb968d877a02ff8f7883a3fb665503327894a738679dc3b74251d703024c6e85aa0d21fbee506ab17b092736b31686c6a087eebcf42c7c9f8fd480b8b2f699e4b5eff425911ee27"}) sendto(r0, &(0x7f00000002c0)='u', 0x1, 0x0, 0x0, 0x0) r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, r3) pkey_alloc(0x0, 0x3) recvfrom(r0, &(0x7f0000000080)=""/61, 0x3d, 0x74e, 0x0, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x5, 0x68002) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000240), &(0x7f0000000280)=0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0xffffffffffffffcc, 0x2}, {0x9, 0x4}], r5}, 0x18, 0x3) read(r4, &(0x7f0000000300)=""/150, 0x96) [ 337.338993] binder: 11917:11924 got transaction with invalid offsets ptr [ 337.339624] rtc_cmos 00:00: Alarms can be up to one day in the future 17:01:17 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x36, 0x0) [ 337.380896] binder: 11917:11924 transaction failed 29201/-14, size 0-12288 line 3016 17:01:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000500000000000000000000000000000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000040004000000000000000000000000000000000000000000000000000000000002000100000000000000000000000000050005b5b53e1526a900000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xb0}}, 0x0) 17:01:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 337.429844] binder_alloc: binder_alloc_mmap_handler: 11917 20001000-20004000 already mapped failed -16 17:01:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x400000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000040)={{0x4, 0x8}, {0x361, 0xfff}, 0x88d, 0x4, 0x2}) ioctl$KVM_NMI(r2, 0xae9a) r4 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x12, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 337.486435] binder: BINDER_SET_CONTEXT_MGR already set 17:01:17 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000001680)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0xc, 0x9, 0x9}) [ 337.509177] binder: 11917:11924 ioctl 40046207 0 returned -16 [ 337.540740] binder_alloc: 11917: binder_alloc_buf, no vma 17:01:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 337.565908] binder: 11917:11949 transaction failed 29189/-3, size 0-12288 line 2989 17:01:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:18 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x37, 0x0) 17:01:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{&(0x7f00000011c0)=@generic, 0x80, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1, &(0x7f00000027c0)=""/243, 0xf3}}], 0x500, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) shutdown(r0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x440a}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'dummy0\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) prctl$PR_GET_SECCOMP(0x15) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) [ 337.625029] binder: undelivered TRANSACTION_ERROR: 29189 [ 337.650633] binder: undelivered TRANSACTION_ERROR: 29201 17:01:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={"637263743130646966002b0030dfaa5f282100"}, &(0x7f00000001c0)}) 17:01:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 337.742217] binder: 11965:11969 got transaction with invalid offsets ptr [ 337.754491] binder: 11965:11969 transaction failed 29201/-14, size 0-12288 line 3016 [ 337.765567] binder_alloc: binder_alloc_mmap_handler: 11965 20001000-20004000 already mapped failed -16 [ 337.775944] binder: BINDER_SET_CONTEXT_MGR already set [ 337.781770] binder: 11965:11969 ioctl 40046207 0 returned -16 17:01:18 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x129, 0x0) 17:01:18 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='security.apparmor\x00', &(0x7f0000000240)="63726333322d67656e65726963000000feffff00", 0x14, 0x3) fcntl$getownex(r0, 0x10, &(0x7f0000000480)={0x0, 0x0}) ptrace$setsig(0x4203, r3, 0xff, &(0x7f00000003c0)={0x16, 0x1ff, 0x8}) socket$rds(0x15, 0x5, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r2}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f0000000280)={&(0x7f0000000100)={"63726333322d67656e65726963000000feffff00"}}) r4 = dup(r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000005740)={@dev={0xfe, 0x80, [], 0x17}, 0x10, 0x0, 0x3, 0x1, 0x77, 0x8}, 0x20) [ 337.803894] binder_alloc: 11965: binder_alloc_buf, no vma [ 337.869669] binder: 11965:11970 transaction failed 29189/-3, size 0-12288 line 2989 [ 337.890546] binder: undelivered TRANSACTION_ERROR: 29201 17:01:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x58, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 337.926998] binder: undelivered TRANSACTION_ERROR: 29189 17:01:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:18 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x85, 0x0) 17:01:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={"637263743130646966002b0030dfaa5f282100"}, &(0x7f00000001c0)}) 17:01:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x80, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x0, 0x103}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x4b564d02, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000200)=0x8, 0xffffffffffffff2a) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) [ 338.094405] binder: 11989:11994 transaction failed 29189/-22, size 0-12288 line 2850 [ 338.113312] binder: undelivered TRANSACTION_ERROR: 29189 17:01:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{&(0x7f00000011c0)=@generic, 0x80, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1, &(0x7f00000027c0)=""/243, 0xf3}}], 0x500, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) shutdown(r0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x440a}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'dummy0\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) prctl$PR_GET_SECCOMP(0x15) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) 17:01:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x730000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:18 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x195, 0x0) 17:01:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:18 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0xa) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0x80, 0x4) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000100)=""/249) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x4d0d62de, 0x80000000000800}, 0x18) [ 338.472145] binder_alloc: binder_alloc_mmap_handler: 12017 20001000-20004000 already mapped failed -16 17:01:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 338.532770] binder: BINDER_SET_CONTEXT_MGR already set [ 338.538098] binder: 12017:12018 ioctl 40046207 0 returned -16 17:01:18 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xab, 0x0) 17:01:18 executing program 4: unshare(0x8000400) r0 = memfd_create(&(0x7f0000000140)='uservmnet1\x00', 0x5) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, 0x3, 0x7, 0x0, &(0x7f0000003000/0x2000)=nil, 0x100}) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xa7, 0x84800) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x880, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x5, 0x3, 0x5, 0x4800, r2}) r3 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x71a}) mq_timedreceive(r3, &(0x7f00000021c0)=""/4096, 0x1000, 0x0, &(0x7f00000000c0)={0x77359400}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}]}) 17:01:19 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video35\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) close(r1) 17:01:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x805000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:19 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xa8, 0x0) 17:01:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x5, 0x1, 0x9, 0x3f, 0xa72, 0x2, 0x203, {0x0, @in={{0x2, 0x4e23}}, 0xfffffffffffff435, 0xfffffffffffff246, 0x0, 0x4, 0x2}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={r1, @in6={{0xa, 0x1, 0x0, @loopback, 0x4}}}, 0x84) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557") process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x1}}, 0x0) mlockall(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}}, 0x0) unshare(0x1fffffffffff) [ 338.757523] binder_alloc: binder_alloc_mmap_handler: 12046 20001000-20004000 already mapped failed -16 [ 338.803848] binder: BINDER_SET_CONTEXT_MGR already set [ 338.852062] binder: 12046:12047 ioctl 40046207 0 returned -16 17:01:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{&(0x7f00000011c0)=@generic, 0x80, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1, &(0x7f00000027c0)=""/243, 0xf3}}], 0x500, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) shutdown(r0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x440a}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'dummy0\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) prctl$PR_GET_SECCOMP(0x15) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) 17:01:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:19 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x107, 0x0) 17:01:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0xa000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x5, 0x1, 0x9, 0x3f, 0xa72, 0x2, 0x203, {0x0, @in={{0x2, 0x4e23}}, 0xfffffffffffff435, 0xfffffffffffff246, 0x0, 0x4, 0x2}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={r1, @in6={{0xa, 0x1, 0x0, @loopback, 0x4}}}, 0x84) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557") process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x1}}, 0x0) mlockall(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}}, 0x0) unshare(0x1fffffffffff) [ 339.128983] binder_alloc: binder_alloc_mmap_handler: 12069 20001000-20004000 already mapped failed -16 17:01:19 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xa6, 0x0) 17:01:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0x0, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 339.169231] binder: BINDER_SET_CONTEXT_MGR already set [ 339.231416] binder: 12069:12072 ioctl 40046207 0 returned -16 17:01:19 executing program 4: unshare(0x8000400) r0 = memfd_create(&(0x7f0000000140)='uservmnet1\x00', 0x5) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, 0x3, 0x7, 0x0, &(0x7f0000003000/0x2000)=nil, 0x100}) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xa7, 0x84800) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x880, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x5, 0x3, 0x5, 0x4800, r2}) r3 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x71a}) mq_timedreceive(r3, &(0x7f00000021c0)=""/4096, 0x1000, 0x0, &(0x7f00000000c0)={0x77359400}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}]}) 17:01:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x7000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[]}, 0x1, 0x0, 0x0, 0x4004}, 0x40002) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.opaque\x00', &(0x7f0000000240)='\x00', 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) unshare(0x4000100) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty=0xb0100555}, 0x0) rmdir(&(0x7f0000000480)='./file0\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000100)=0x360) chmod(&(0x7f0000000440)='./file0\x00', 0x24) rt_sigtimedwait(&(0x7f00000003c0)={0x7fffffff}, 0x0, &(0x7f0000000580), 0x8) socket$inet(0x2, 0x7, 0x85) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000340)) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000004c0), 0xe) 17:01:19 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xfb, 0x0) 17:01:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0x0, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)="1f4d9385a2933b4e069b9290035aa6a0", 0x10}], 0x1, 0x0, 0x0, 0x90}, 0x0) recvmmsg(r1, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 17:01:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xe1, 0x0) [ 339.590012] binder_alloc: binder_alloc_mmap_handler: 12094 20001000-20004000 already mapped failed -16 17:01:20 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00') setuid(r2) unlink(&(0x7f0000000080)='./file0\x00') [ 339.647469] binder: BINDER_SET_CONTEXT_MGR already set 17:01:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0x0, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 339.688952] binder: 12094:12095 ioctl 40046207 0 returned -16 17:01:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xae, 0x0) 17:01:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:20 executing program 1: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)=r3) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x40000000) fcntl$setown(r0, 0x8, r3) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) fgetxattr(r2, &(0x7f0000000140)=@known='trusted.overlay.origin\x00', &(0x7f0000000200)=""/114, 0x72) ioctl$sock_ifreq(r1, 0x8936, &(0x7f0000000040)={'tunl0\x00', @ifru_ivalue=0x7fffffff}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x0, 0x2000}, 0x4) lseek(r4, 0x0, 0x2) pipe2(&(0x7f0000000080), 0x0) syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x0, 0x2) clock_gettime(0x8000000000, &(0x7f0000000340)) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000380)=0x3f) times(&(0x7f0000000280)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0xfffffffffffffffd}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x40000, 0x0) [ 339.844367] binder: 12130:12133 unknown command 0 [ 339.859225] binder: 12130:12133 ioctl c0306201 20000040 returned -22 [ 339.883670] binder_alloc: binder_alloc_mmap_handler: 12130 20001000-20004000 already mapped failed -16 [ 339.950248] binder: BINDER_SET_CONTEXT_MGR already set [ 339.955565] binder: 12130:12133 ioctl 40046207 0 returned -16 [ 339.966164] binder: 12130:12136 unknown command 0 [ 339.971066] binder: 12130:12136 ioctl c0306201 20000040 returned -22 [ 340.011536] IPVS: ftp: loaded support on port[0] = 21 [ 340.330792] IPVS: ftp: loaded support on port[0] = 21 17:01:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[]}, 0x1, 0x0, 0x0, 0x4004}, 0x40002) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.opaque\x00', &(0x7f0000000240)='\x00', 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) unshare(0x4000100) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty=0xb0100555}, 0x0) rmdir(&(0x7f0000000480)='./file0\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000100)=0x360) chmod(&(0x7f0000000440)='./file0\x00', 0x24) rt_sigtimedwait(&(0x7f00000003c0)={0x7fffffff}, 0x0, &(0x7f0000000580), 0x8) socket$inet(0x2, 0x7, 0x85) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000340)) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000004c0), 0xe) 17:01:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x18d, 0x0) 17:01:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, 0x0, 0x0) close(r3) dup3(r1, r2, 0x0) 17:01:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x8000000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[]}, 0x1, 0x0, 0x0, 0x4004}, 0x40002) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.opaque\x00', &(0x7f0000000240)='\x00', 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) unshare(0x4000100) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty=0xb0100555}, 0x0) rmdir(&(0x7f0000000480)='./file0\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000100)=0x360) chmod(&(0x7f0000000440)='./file0\x00', 0x24) rt_sigtimedwait(&(0x7f00000003c0)={0x7fffffff}, 0x0, &(0x7f0000000580), 0x8) socket$inet(0x2, 0x7, 0x85) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000340)) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000004c0), 0xe) 17:01:20 executing program 1: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)=r3) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x40000000) fcntl$setown(r0, 0x8, r3) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) fgetxattr(r2, &(0x7f0000000140)=@known='trusted.overlay.origin\x00', &(0x7f0000000200)=""/114, 0x72) ioctl$sock_ifreq(r1, 0x8936, &(0x7f0000000040)={'tunl0\x00', @ifru_ivalue=0x7fffffff}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x0, 0x2000}, 0x4) lseek(r4, 0x0, 0x2) pipe2(&(0x7f0000000080), 0x0) syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x0, 0x2) clock_gettime(0x8000000000, &(0x7f0000000340)) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000380)=0x3f) times(&(0x7f0000000280)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0xfffffffffffffffd}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x40000, 0x0) 17:01:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[]}, 0x1, 0x0, 0x0, 0x4004}, 0x40002) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.opaque\x00', &(0x7f0000000240)='\x00', 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) unshare(0x4000100) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty=0xb0100555}, 0x0) rmdir(&(0x7f0000000480)='./file0\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000100)=0x360) chmod(&(0x7f0000000440)='./file0\x00', 0x24) rt_sigtimedwait(&(0x7f00000003c0)={0x7fffffff}, 0x0, &(0x7f0000000580), 0x8) socket$inet(0x2, 0x7, 0x85) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000340)) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000004c0), 0xe) [ 340.589363] binder_alloc: binder_alloc_mmap_handler: 12151 20001000-20004000 already mapped failed -16 [ 340.607263] IPVS: ftp: loaded support on port[0] = 21 17:01:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, 0x0, 0x0) close(r3) dup3(r1, r2, 0x0) 17:01:21 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xb8, 0x0) 17:01:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x60, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:21 executing program 4: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x0, 0xfffffffffffffffc, 0x9917, 0x80000000}, 0x0) sched_setattr(0x0, &(0x7f0000000280), 0x0) 17:01:21 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x126, 0x0) 17:01:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[]}, 0x1, 0x0, 0x0, 0x4004}, 0x40002) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.opaque\x00', &(0x7f0000000240)='\x00', 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) unshare(0x4000100) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty=0xb0100555}, 0x0) rmdir(&(0x7f0000000480)='./file0\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000100)=0x360) chmod(&(0x7f0000000440)='./file0\x00', 0x24) rt_sigtimedwait(&(0x7f00000003c0)={0x7fffffff}, 0x0, &(0x7f0000000580), 0x8) socket$inet(0x2, 0x7, 0x85) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000340)) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000004c0), 0xe) 17:01:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, 0x0, 0x0) close(r3) dup3(r1, r2, 0x0) [ 341.084197] binder_alloc: binder_alloc_mmap_handler: 12181 20001000-20004000 already mapped failed -16 17:01:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xaec2) r1 = syz_open_procfs(0x0, &(0x7f0000002f80)='net/tcp6\x00') preadv(r1, &(0x7f0000000000), 0x0, 0x200000000001f6) 17:01:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x1200000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:21 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)) r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000480)='./file0\x00', 0x42042, 0x9) name_to_handle_at(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)={0x7f, 0x0, "c462c575d70d00fbba0152703adc403dd8cb742b5ae1bf1478bf5496e7160a1d97038fa0f17be61c9c581610b93f405e636407e55b9b690d60ebd98c671f317500bdb8aee8f1c92246c70c8f57d0ba56ce44da3e88cdb37af67e31568eaaa7d792b5d233f9f2409fc4837c413d44acc5715a26a253904b"}, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r2, &(0x7f0000000400)='./file0\x00', 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0x0) readahead(0xffffffffffffffff, 0x2, 0x0) write(r2, &(0x7f0000000840)="fc015002a2a55e34dab67b7517766f3188a613b48bef6d2a2999d8da9474917335f8e2f9da2a75722ec004a5e6e244499c012b7a80b129b96d8fa518fef1eecc7743f4d9e96018d4ded15ff21514c13fa444e6f7fee6c2516c91723bf3646a5803887e502f26fc7cfd736ef2c59317e90d8a27ddc1a9d9510b306ede2aaafb95abbc44f0033f7e63c88beb46c697412d60", 0x91) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendfile(r2, r2, &(0x7f00000000c0)=0x2, 0x8080ffffff10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) 17:01:21 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xf8, 0x0) 17:01:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(0xffffffffffffffff) dup3(r1, r2, 0x0) 17:01:21 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x80000, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xffff, 0x101000) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x10, 0x4000000003, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x3f, 0x0, 0xffffffffffff8000, 0xfffffffffffffffc, 0xcc67}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x1e}, 0x40}}, 0x9, 0x9565, 0x20, 0x4, 0x60}, 0x98) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000220007031dff39d5fd760500000000000000fd21fe1c4095421ba3a20400ff7e", 0x24}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x4000000000000000, &(0x7f0000000380)}, 0x0) [ 341.385212] binder: BINDER_SET_CONTEXT_MGR already set 17:01:21 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xc0, 0x0) [ 341.432839] binder: 12210:12218 ioctl 40046207 0 returned -16 17:01:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(0xffffffffffffffff) dup3(r1, r2, 0x0) 17:01:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x74000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:21 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x80000, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xffff, 0x101000) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x10, 0x4000000003, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x3f, 0x0, 0xffffffffffff8000, 0xfffffffffffffffc, 0xcc67}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x1e}, 0x40}}, 0x9, 0x9565, 0x20, 0x4, 0x60}, 0x98) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000220007031dff39d5fd760500000000000000fd21fe1c4095421ba3a20400ff7e", 0x24}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x4000000000000000, &(0x7f0000000380)}, 0x0) [ 341.699932] binder: BINDER_SET_CONTEXT_MGR already set [ 341.719401] binder: 12237:12240 ioctl 40046207 0 returned -16 17:01:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x7, 0x4) write(r0, &(0x7f0000000400)="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", 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r2, r0}}, 0x18) sendfile(r0, r1, 0x0, 0x10000) syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x2, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 17:01:22 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x1e, 0x0) 17:01:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(0xffffffffffffffff) dup3(r1, r2, 0x0) [ 341.756854] audit: type=1804 audit(1544893282.114:40): pid=12245 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir515157755/syzkaller.16ybxs/151/file0/file0" dev="loop4" ino=3 res=1 17:01:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0xffffff7f, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:22 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000240)=0x6) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4045}, 0x40000) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) sendmsg$key(r2, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 17:01:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)=""/162, &(0x7f00000000c0)=0xa2) futimesat(r1, 0x0, 0x0) [ 341.908824] audit: type=1804 audit(1544893282.154:41): pid=12224 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir515157755/syzkaller.16ybxs/151/file0/file0" dev="loop4" ino=3 res=1 17:01:22 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x6e, 0x0) [ 341.981807] audit: type=1800 audit(1544893282.274:42): pid=12256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16978 res=0 [ 341.992922] binder_alloc_mmap_handler: 2 callbacks suppressed [ 341.992954] binder_alloc: binder_alloc_mmap_handler: 12258 20001000-20004000 already mapped failed -16 17:01:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(0xffffffffffffffff, r1, 0x0) [ 342.046677] audit: type=1804 audit(1544893282.294:43): pid=12256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir648710103/syzkaller.DZ7SAT/164/file0" dev="sda1" ino=16978 res=1 [ 342.058208] binder: BINDER_SET_CONTEXT_MGR already set [ 342.139960] binder: 12258:12259 ioctl 40046207 0 returned -16 17:01:22 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x100000000001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r1}}, 0x10) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000200)) 17:01:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:22 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x600000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0x401, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, 0x1, 0x5}, 0x2c) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x300, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x80000000) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7dc, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) 17:01:22 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x10b, 0x0) [ 342.462451] binder: 12282:12287 unknown command 0 [ 342.511591] binder: 12282:12287 ioctl c0306201 20000040 returned -22 [ 342.552402] binder_alloc: binder_alloc_mmap_handler: 12282 20001000-20004000 already mapped failed -16 [ 342.635142] binder: BINDER_SET_CONTEXT_MGR already set [ 342.651360] binder: 12282:12298 unknown command 0 [ 342.668784] binder: 12282:12298 ioctl c0306201 20000040 returned -22 [ 342.694956] binder: 12282:12287 ioctl 40046207 0 returned -16 [ 342.956360] audit: type=1804 audit(1544893283.314:44): pid=12265 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir648710103/syzkaller.DZ7SAT/164/file0" dev="sda1" ino=16978 res=1 17:01:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x8, 0x400100) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000000c0)={{0x8000, 0x6}, 0x1}, 0x10) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100), 0x10) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000140)={0x9, "03ddc63b155bf7755478da8cf489e54c42c8df6d42f6d6a94bb76d9db76d6bd6", 0x3, 0x1}) r2 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x400, 0x30) chroot(&(0x7f00000001c0)='./file0\x00') write$P9_RSTAT(r1, &(0x7f0000000200)={0xa6, 0x7d, 0x2, {0x0, 0x9f, 0x2, 0x7f, {0x1, 0x1, 0x7}, 0x80000, 0x2, 0x3, 0x7fffffff, 0x56, 'md5sumnodevwlan0securityvboxnet0vboxnet1}!)usereth0cpusetem0%,posix_acl_accessvboxnet0', 0x0, "", 0xc, '/ppp0)}wlan0', 0xa, '/dev/dsp#\x00'}}, 0xa6) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RMKNOD(r1, &(0x7f00000002c0)={0x14, 0x13, 0x1, {0x10, 0x4, 0x4}}, 0x14) setsockopt(r0, 0xb2, 0x401, &(0x7f0000000300)="b801f9f54425e7217f28a4d39388c82d9b439264a426f123f4f221ed2cb0dfeada26cb90fc5b946bafb99b471bbe67f6873054a7156ff07a77cec093d980b8694736bf07e39cd11702665fe9f14fe70784501a1362f0a24ac5f74e640912a25f36d11eaa41e74afc0bff6c3e6f4d808c62d905bee67c92cb37d630b39167f98e2348ad6367adae92a64b0068061b6b458e815c2e4da72e68a643cb8758719fd659f2704913a43a62eae136b9b31e55954b640428fee0602f51b36f240c9de6386b5e2b3af141866fdb0d14916d67c7ef758d4b11f1d1a43dac60cd60e9a4", 0xde) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000400)={0xfffffffffffffff8, 0x2}) mq_unlink(&(0x7f0000000440)="cf2476626f786e6574312600") chroot(&(0x7f0000000480)='./file0\x00') ioctl$TIOCNOTTY(r1, 0x5422) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x6, 0x1, 0x7fffffff, 0x66, 0x1, 0x401, 0x5, 0xff, 0x4, 0x3, 0x4, 0x6, 0x5, 0x3, 0x800, 0x4], 0xf000, 0x2}) getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f0000000580)=""/169, 0xa9) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x200408c5) write$input_event(r2, &(0x7f0000000780)={{0x77359400}, 0x2, 0x9, 0x4}, 0x18) syz_open_dev$video(&(0x7f00000007c0)='/dev/video#\x00', 0x200, 0x10000) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000800)=0x800) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xf4, r4, 0x21, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe93}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27cd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000a40)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000a80)={r5, 0xc}) exit(0x6) r6 = getpid() getpgid(r6) 17:01:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0xffffffffffffffda, 0x3}, 0x10) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x2, 0x8, 0x0, 0xfffffffffffffffc}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0x80000) write(r0, &(0x7f0000000400)="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", 0x200) ioctl$TCFLSH(r0, 0x540b, 0x9) sendfile(r0, r1, 0x0, 0x10000) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x3, {0xa, 0x4e23, 0x0, @mcast2, 0x4000000000000000}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000240)=0x8, 0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) connect$tipc(r0, &(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x40}, 0x3}}, 0x10) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f00000003c0)={0x6, &(0x7f0000000380)=[0x3, 0x7, 0x9, 0x4, 0x5, 0x3f]}) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x8001, @remote, 0x1f}}}, 0x84) mmap(&(0x7f00002e5000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x0) 17:01:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:23 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x14c, 0x0) 17:01:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000), r1, 0x0, 0x80004, 0x0) 17:01:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(0xffffffffffffffff, r1, 0x0) [ 343.125234] binder: 12306:12307 unknown command 64 [ 343.169672] audit: type=1800 audit(1544893283.534:45): pid=12314 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="file0" dev="sda1" ino=16987 res=0 [ 343.189583] binder: 12306:12307 ioctl c0306201 20000040 returned -22 [ 343.215758] audit: type=1804 audit(1544893283.544:46): pid=12314 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir698125145/syzkaller.9eu6w2/145/file0" dev="sda1" ino=16987 res=1 [ 343.258165] binder_alloc: binder_alloc_mmap_handler: 12306 20001000-20004000 already mapped failed -16 17:01:23 executing program 4: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000000c0)) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) [ 343.275904] audit: type=1800 audit(1544893283.544:47): pid=12314 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="file0" dev="sda1" ino=16987 res=0 [ 343.283556] binder: 12306:12319 unknown command 64 [ 343.300750] binder: 12306:12319 ioctl c0306201 20000040 returned -22 [ 343.303331] binder: BINDER_SET_CONTEXT_MGR already set 17:01:23 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x58, 0x0) [ 343.358213] binder: 12306:12307 ioctl 40046207 0 returned -16 17:01:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:23 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x173, 0x0) [ 343.560509] block nbd0: Receive control failed (result -22) [ 343.581822] block nbd0: Device being setup by another task [ 343.647044] binder_alloc: binder_alloc_mmap_handler: 12333 20001000-20004000 already mapped failed -16 [ 343.677709] block nbd0: shutting down sockets [ 343.692302] binder: BINDER_SET_CONTEXT_MGR already set [ 343.700603] binder: 12333:12334 ioctl 40046207 0 returned -16 17:01:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x400000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:24 executing program 4: r0 = getpid() r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x80000000000000, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000140)=""/21, 0x15}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x3f) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @multicast2}, &(0x7f00000003c0)=0xc) r6 = getuid() setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast1, @in6=@mcast1, 0x4e23, 0x2, 0x4e22, 0x0, 0x2, 0x80, 0x80, 0x7f, r5, r6}, {0x100, 0x7fff, 0x418, 0x4, 0x100, 0x3, 0x8, 0xf7b}, {0x4000000000, 0x9, 0x3, 0x8}, 0x4, 0x6e6bb8, 0x2, 0x0, 0x1, 0x1}, {{@in=@loopback, 0x4d6, 0x3f}, 0xa, @in6=@remote, 0x3502, 0x0, 0x0, 0x80000000, 0x6, 0x2, 0x4}}, 0xe8) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x0, r0}) recvmsg(r3, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) r7 = dup2(r2, r3) dup3(r7, r1, 0x0) tkill(r0, 0x15) [ 343.979091] binder_alloc: binder_alloc_mmap_handler: 12344 20001000-20004000 already mapped failed -16 [ 343.992005] binder: BINDER_SET_CONTEXT_MGR already set [ 344.027984] binder: 12344:12346 ioctl 40046207 0 returned -16 [ 344.152154] audit: type=1804 audit(1544893284.514:48): pid=12321 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir698125145/syzkaller.9eu6w2/145/file0" dev="sda1" ino=16987 res=1 17:01:24 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x8001, 0x46b, 0x3, 0x5, 0x1}) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) [ 344.191620] audit: type=1800 audit(1544893284.534:49): pid=12321 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="file0" dev="sda1" ino=16987 res=0 17:01:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x102, 0x4) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000300), &(0x7f00000000c0)=0xfe18) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x3fc, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000180)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x99) exit(0x7fffffffbffefffd) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r4 = getpgid(0xffffffffffffffff) setpriority(0x1, r4, 0x5) r5 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r1, 0x0, 0xf, &(0x7f0000000240)='wlan0\\}md5sum#\x00'}, 0x30) accept(r2, &(0x7f0000000380)=@ipx, &(0x7f00000002c0)=0x80) setpgid(r5, r6) vmsplice(r3, &(0x7f00000008c0)=[{&(0x7f0000000800)="50e005e6815dc6b00b10002c519c66795de0d52fc076f1eb6a9c58cde88a6eef0093b24a178e84740aa6d1618e2033d38d4aea0fb17cda768820a83864ac14405192e4549c3ad33fca5d187507c5a984d6a0c72683e7af2d4a070000000000000005b6d0dce139e4c627395426a1f6fc0b416f7163eb07000000d9e0203181735ccac1e530c361262a0a5e0a98e9ca3d17f2f2f0c116fa9fbdbe757d93e323d17f29", 0xa2}], 0x1, 0xf) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0xa1, 0x40001) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @local}, 0x10) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000200)={0x6d, 0x7fff, 0x400, 0x40, 0x4}) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x2fb, &(0x7f0000000d80)}}], 0x4000000000001b4, 0x40400d4) 17:01:24 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x104, 0x0) 17:01:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(0xffffffffffffffff, r1, 0x0) 17:01:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x930000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:24 executing program 3: r0 = socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xbc, 0x80) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d00)='memory.current\x00', 0x0, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r2, 0x50, &(0x7f0000000500)={0x0, 0x0}}, 0xffffffffffffff44) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000008c0)="f850b1d37b0db7399ec4ddc4f2f2695367a94404c4fbc7d86596596d943d4512cfde3bebaeedf5c026768a69d5326f9c1d6e38be2d2512f1c2083193f24d1bad3b86fccdf827e258b080ee07929136d0689446cd5951bd2431e1b957352ff2f43fd67edc37d5bf5bb7137c8196112e62bbe7a052c622680f71b6eea5969e012a42befc6a447b55f5d30f41a59307d011195d37b62e747d21a6561ed12a4e4bcfa884ca2a8e8511462f4e6cb91ed47a93ad7cab664b", 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000980)={0x2, 0x70, 0x7f, 0x0, 0xef, 0x400, 0x0, 0x7, 0x1, 0xa, 0x2, 0x40, 0x5, 0x0, 0x3, 0x7, 0xffffffffffffc9bb, 0x1, 0x0, 0x80, 0x4, 0x7, 0x403b, 0x2, 0x0, 0x5, 0x7, 0xffffffff, 0x5, 0x4, 0x6, 0x0, 0x0, 0xfffffffffffff61f, 0x8ae, 0x3, 0x20, 0x7a, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x7d37cd19b00dfb54, 0x9, 0xffffffffffffffe0, 0xf, 0x7f, 0x5}, 0x0, 0xd, 0xffffffffffffffff, 0x2) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0) gettid() r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)={r3, r6}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x501, 0x0) getpid() perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)=r4, 0x4) getsockname(r0, &(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x80) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000000c0)={r6, r7}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={"737a03006c6c6572300000001e00"}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000440)="6c6f00966fd651b959a9644a2c00d2970403dc0d") ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)="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") [ 344.508037] binder_alloc: binder_alloc_mmap_handler: 12365 20001000-20004000 already mapped failed -16 17:01:24 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xda, 0x0) [ 344.571829] binder: BINDER_SET_CONTEXT_MGR already set [ 344.587659] binder: 12365:12368 ioctl 40046207 0 returned -16 17:01:25 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x115, 0x0) 17:01:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0xffffffff00000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 344.668573] device lo entered promiscuous mode [ 344.774279] binder_alloc: binder_alloc_mmap_handler: 12387 20001000-20004000 already mapped failed -16 [ 344.797438] binder: BINDER_SET_CONTEXT_MGR already set [ 344.812164] binder: 12387:12388 ioctl 40046207 0 returned -16 17:01:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x710000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 344.942204] binder_alloc: binder_alloc_mmap_handler: 12393 20001000-20004000 already mapped failed -16 [ 344.960072] binder: BINDER_SET_CONTEXT_MGR already set 17:01:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 344.994264] binder: 12393:12394 ioctl 40046207 0 returned -16 [ 345.096997] binder: 12399:12400 unknown command 16448 [ 345.102727] binder: 12399:12400 ioctl c0306201 20000040 returned -22 [ 345.129607] binder_alloc: binder_alloc_mmap_handler: 12399 20001000-20004000 already mapped failed -16 [ 345.167853] binder: BINDER_SET_CONTEXT_MGR already set [ 345.190483] binder: 12399:12400 ioctl 40046207 0 returned -16 [ 345.212158] binder: 12399:12401 unknown command 16448 [ 345.234509] binder: 12399:12401 ioctl c0306201 20000040 returned -22 17:01:27 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0xed6480babd87dd0b, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000000, {0x0, 0x0, 0x0, 0xb00020000000000}}, 0xfffffefd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x6}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000280)={r4, 0x6d, "98909fefdf77ca88735540b5ec4688678c8bd233fc232be57ed6f27b03a2fc5fb278a8fa49cfa3bc359386b2cdb3f6af688b390657db7b05d026758bf6daed3d438019f574796c1ad09fef6e1c5ef1bc7c172209cf7c6b7148de5ecff13518a2ee808632751e25e8999fc432cc"}, &(0x7f0000000300)=0x75) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000000c0)=0x7f, 0x4) sendmmsg(r2, &(0x7f0000001880)=[{{&(0x7f0000001900)=@rc={0x1f, {0x10000, 0x2, 0x1, 0x3e, 0xfffffffffffffff8, 0x6}, 0x6}, 0x0, &(0x7f0000001600)=[{&(0x7f0000000440)="e7dc37cf20614628999974a7317bf8335ffb24712575df458803e6"}, {&(0x7f0000000480)="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"}, {&(0x7f0000001480)="2ba74053ab97507353e2ad209595c900ba2e73297a0697688ac04dd26e9eda9e516b94de6a84888f82801291ec92c64768584060ba19fd434fce84b90a151f2a85db651e1e2feb232f65bfc01686ba4380f3c6b5a95093f33baef1"}, {&(0x7f0000001500)="10334202996de22a8dbbeb030a1e02"}, {&(0x7f0000001540)="5546da6caf2e2649cedf5fc6d7970629f1c13f3c890f1bbeab53aaa9e7c77a7c39a2c9625daf714bc5fb1fdb3d0b0847fb0cb78296b66855ba38aa708fc7ded4ef14f789acb6fb975f2d5c775a057cb93f84ee5359"}, {&(0x7f00000018c0)="4cff5163960115b249754c99ee59c5b049ad8b2b94fe540080d716c7b17c9caa5b192232daf996fb"}], 0x0, &(0x7f0000001680)=[{0x0, 0x117, 0x80000001, "a14ced97806678c47bdcfe59e1dd7a2db4f3497380a8cca28ce35fec26ea1fca0a19424a2052717a85155e2bd5f7bb528eac39fde600"}, {0xabf3e06d521f65fb, 0x0, 0x3, "9cb86369161c966ab814c367f85e2bb9c70d0cb5b5a3b1b9b5ee862e352253a75d61b8ee187a36091f27b9689b221c"}, {0x0, 0x11f, 0x4, "e03cd79c45d5117c751d383660dee5fe1ab2328acadcc10bfa4f76a9c40b45f0c0addedc9ddd6815b3f27a13f78104beebf4cb8ebd7594130ab4ee605524073939ae9e0ae628c25acb117d41bf8c61a05bef9f34065a388d9d0c4f19d18ec41a1973030660cc09aa0797cb6960db6d3f6103d7145ef77a9b9ce082"}, {0x0, 0x105, 0x100000000, "dc3ca4696aa82c783e1a315afa4090b4b54eb7e74f7c98e621a5036787a252f918fabdba247e8b022bb2ac9b1cc441bfb3b7af68deca226f181597d337f3a90126eb0a6967e696649ffad56c73d5bbcebc0756e6122238b3f6084f480a294269dc55b7e9705e1be66141f53ca087b179b66d90badb03ea94c28b4edff68575a238c76772021f049e1572368f1b7c852e639e0930d25c10a541e02a2a3b99d92acb05074667225d90a41dbf03856e4ea672341ffa05fed1c00f02f53542aa4b592f253b3705f35f2c022e0afa37c60f9fec2877f2f6c825"}]}, 0x358}], 0x5bb, 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@empty, r5}, 0x14) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U-', 0x2292}, 0x28, 0x3) dup2(r0, r1) 17:01:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0xfdfdffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, 0xffffffffffffffff, 0x0) 17:01:27 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x190, 0x0) 17:01:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0x402c0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000000)={0x6000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:01:27 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r1 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x100000000, 0x400) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000340)={0x1fa, 0x1}, 0x2) tee(r0, r0, 0x96c7, 0x6) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) fstatfs(r2, &(0x7f0000000040)=""/108) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in=@remote, @in=@empty, 0x4e23, 0x6, 0x4e20, 0xfffffffffffffffb, 0xa, 0x20, 0x80, 0x0, r3, r4}, {0x0, 0x5181, 0xffffffffffffffff, 0x0, 0xd6ae, 0x6, 0x78e7, 0x78d}, {0xf10, 0x8, 0x2f83b004, 0x6}, 0xb9, 0x6e6bc0, 0x3, 0x1, 0x3}, {{@in6=@mcast1, 0x4d6, 0x6c}, 0xa, @in=@remote, 0x3507, 0x1, 0x2, 0x4, 0xfffffffffffffffd, 0x40, 0x1}}, 0xe8) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r2, r0}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r2, r0}) r5 = dup2(r2, r0) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000200)={0x1f, 0x2d, &(0x7f00000001c0)="b3a82b01f03e3e060adb672a5feadef08bee6d108f636001e44c0f84d883806e4af7cb829de4dd6bc318491629"}) [ 346.936219] binder_alloc: binder_alloc_mmap_handler: 12421 20001000-20004000 already mapped failed -16 17:01:27 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x4839565ca215982d) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000140)=@md0='/dev/md0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='pipefs\x00', 0x0, &(0x7f0000000240)='\x00') getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000180)=0x4) socket$can_bcm(0x1d, 0x2, 0x2) [ 346.995784] binder: BINDER_SET_CONTEXT_MGR already set 17:01:27 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xad, 0x0) [ 347.027446] binder: 12421:12426 ioctl 40046207 0 returned -16 17:01:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8970, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x1b, 0x4}}) close(r2) close(r1) 17:01:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x6c00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:27 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x46, 0x0) 17:01:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x400000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 347.178084] binder_alloc: binder_alloc_mmap_handler: 12448 20001000-20004000 already mapped failed -16 [ 347.190607] binder: BINDER_SET_CONTEXT_MGR already set [ 347.202771] binder: 12448:12449 ioctl 40046207 0 returned -16 [ 347.302572] binder_alloc: binder_alloc_mmap_handler: 12458 20001000-20004000 already mapped failed -16 [ 347.314363] binder: BINDER_SET_CONTEXT_MGR already set [ 347.321149] binder: 12458:12462 ioctl 40046207 0 returned -16 17:01:28 executing program 4: io_setup(0x400, &(0x7f0000000000)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ptmx\x00', 0x8000, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) io_submit(r0, 0x7, &(0x7f0000000740)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x7, r1, &(0x7f0000000080)="eb0084438fbc0e25ff6319f2632837c7205ae2e691a9feda4927768003144c61d5910cc8cc400ab3d32ee505729ae74fd314b09981849b06", 0x38, 0x1, 0x0, 0x1, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x9, 0x396, r2, &(0x7f0000000100)="1ff6032a66891bbaacdceea3dee37d8d8e57d03ede12c549f39adf18c1c80f4c1ead64a82010750bdb26de2a3ed6e9c88f3484942d2c7da46a70ec2863d081d40f6213d44bc871a8784c433098a5f59e07dbaa7dc0a4e7d494c48d56ec180a15f81ae1bd8a5da818485e82ca0098331ae63d47fbc994a57db9b121b29efc092d198b0da5224fa1055962a4756c13d9ef8f4336dded7f203e049ec2bb7bb151aa1f8de8bf5dcdcfb839515fc68e13593fe64667d16c1c79feb5d3e670f2fc8d3ab543e498957011a1f331f22c6e39b2ceb13237e9372c114917606cdb78", 0xdd, 0x8000, 0x0, 0x1, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x9, 0x0, r2, &(0x7f0000000240)="769a93fe", 0x4, 0x7fff, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f00000002c0)="5eada085e4756af3769208ce983ca4085a2ba56404081ec2c30772b70017c766dcb88c5758490f877fc1ef08f34967729d0508493c816433d9e9dee4df0768bfb5c60893a837ad068d66e5c7febfff263017e30f1d3f82031a1b01c5d84ce4f118a60b673ae14246cc89a3a773eff3cbfef72b2f69519001054f51cf0f54996b850cff02678239fe03b5199555b1c6d07fa0e9beac007a680061623bc0f05a76f5ea0fa2bc535286e1d7cb7630071cbe73e6dc6aa9507f0a7740fd62c827de78a3bd6c", 0xc3, 0x100, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x2, r2, &(0x7f0000000400)="00e3a6be7bdc8696545e588025a714e1f6926dd50026e4dbac67a4aec7289311bdf0b12d882b019f96735e3a076810715f23c7a7a38a11929189ba6cda86fca862290f266b70da7e4cb8073a813b9297c4683cb24ad675fd30ace2273f40accbbcf4a48bc0cdab46a2335497eb78758c1852b0d861ddd7c1ee3f6302bc81e7a3148f27dcecb67722c8026e9a9cbe766f734a2d0d176018579b80cb3b917d25dbca76f8ca1c528431107aab07dd11fffaa2eb89ae59e208b3e989b5e2d98dbd05", 0xc0, 0x7ff, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6b18a3551b46dfd9, 0x20, r2, &(0x7f0000000500)="5a184557c46c9d4b8c7cadfc499b3905dbf12698427f748640bab2293031e0da9f96f95999445bc2a8d868522b20dafcdc79e15b92614d7993e1980ec40940a95107336106f25352145e3555e0fe11ca3ece39c88df5067aa320d6c6bbd769435ded74ffad001e397832b307ed74877c352e41c3763ba4def5e64c055088e8fe8e19664e4ac4ad4b9415a6cab09d2a6e97e40a35a5119109f442b9380d566cec1f", 0xa1, 0x1, 0x0, 0x0, r2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x60000000000, r2, &(0x7f0000000600)="ab46f631635321577ed2b55da3c908bcf6b0fec5a85ad7d184113af8190d533e8b188c6188b3876d590938cacd99d3215b91d720c76e52f87d34d30119903fd7224a1ba4be2dc8751b1cb9b1e6ad7d4786b8fbf0ace855ab5ed822578c7e147e82993cbaf5867c490850f3262a785e29aa99e13c02d1ba49f4ba51acb77b24a57da6bcd3a8ef1263ae20c060704c415f4314b7ea4f6afc89e56bf71081649ab0f85be2b2d172f68198856f81aec31fe738a92f847c355a94e2959d61e4176c117c34875fdcedbda0fdd1f83d4e6772ac656adf90fcef66752e9f59b338c36df243afe75e", 0xe4}]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) write$FUSE_ENTRY(r2, &(0x7f00000008c0)={0x90, 0x0, 0x4, {0x2, 0x0, 0x200, 0x1ff, 0xb8e4, 0x0, {0x1, 0x7, 0x3, 0xff, 0x5, 0x0, 0x5, 0x6b7, 0x9, 0x40, 0x2, r3, r4, 0x80, 0x3ff}}}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 17:01:28 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xd8, 0x0) 17:01:28 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) open(&(0x7f0000000500)='./file0\x00', 0x3, 0x100) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'wrr\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1f) r6 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000640)=0x10010001, 0x164629922c591845) r7 = fcntl$dupfd(r0, 0x406, r4) ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000480)=0xffffffffffffeffd, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00'}, 0x18) sendfile(r4, r4, &(0x7f0000000400), 0x6) pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x3, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8}) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) signalfd4(r6, &(0x7f00000003c0)={0x4}, 0x8, 0x80800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x7fd, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r8 = socket(0x1, 0x80003, 0xcc8) ioctl(r8, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x8180, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:01:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x2000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, 0xffffffffffffffff, 0x0) [ 347.913542] binder_alloc: binder_alloc_mmap_handler: 12471 20001000-20004000 already mapped failed -16 17:01:28 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xba, 0x0) [ 347.959051] binder: BINDER_SET_CONTEXT_MGR already set [ 347.967649] binder: 12471:12476 ioctl 40046207 0 returned -16 17:01:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x400, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @local}, 0x8, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000080)='irlan0\x00', 0x0, 0x800000000000000, 0x7}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_newroute={0x1c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffff7f}}, 0x1c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x5000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x200000002f, 0x829, 0x0, 0x0, {0x4}, [@nested={0x18, 0x0, [@typed={0x14, 0x9, @ipv6=@loopback={0x6000000000000000}}]}]}, 0x2c}}, 0x0) 17:01:29 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x13a, 0x0) 17:01:29 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) open(&(0x7f0000000500)='./file0\x00', 0x3, 0x100) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'wrr\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1f) r6 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000640)=0x10010001, 0x164629922c591845) r7 = fcntl$dupfd(r0, 0x406, r4) ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000480)=0xffffffffffffeffd, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00'}, 0x18) sendfile(r4, r4, &(0x7f0000000400), 0x6) pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x3, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8}) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) signalfd4(r6, &(0x7f00000003c0)={0x4}, 0x8, 0x80800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x7fd, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r8 = socket(0x1, 0x80003, 0xcc8) ioctl(r8, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x8180, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:01:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, 0xffffffffffffffff, 0x0) [ 349.076012] binder_alloc: binder_alloc_mmap_handler: 12505 20001000-20004000 already mapped failed -16 17:01:29 executing program 4: socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) sendfile(r0, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x8001, 0x4) sendmmsg(r0, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 17:01:29 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x40000000000015, 0x8000000000000010, 0xe68}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000440), &(0x7f0000000500), 0x100000000000000}, 0x20) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1000) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000040)={0x800000000000000, 0x6000, 0x5, 0x4, 0xa}) r2 = dup2(r0, r0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) fcntl$setlease(r2, 0x400, 0x1) [ 349.145441] binder: BINDER_SET_CONTEXT_MGR already set [ 349.161538] binder: 12505:12508 ioctl 40046207 0 returned -16 17:01:29 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x23, 0x0) 17:01:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x6800000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:29 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000140)=0x1ff) r1 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x1, 0x400800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x4a}) r2 = dup2(r0, r0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r3}}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x101}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100), 0x28) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x5, 0x8000) sendmmsg(r4, &(0x7f0000005f00), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) socket$inet6(0xa, 0x3, 0x3c) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x10000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) 17:01:29 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) open(&(0x7f0000000500)='./file0\x00', 0x3, 0x100) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'wrr\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1f) r6 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000640)=0x10010001, 0x164629922c591845) r7 = fcntl$dupfd(r0, 0x406, r4) ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000480)=0xffffffffffffeffd, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00'}, 0x18) sendfile(r4, r4, &(0x7f0000000400), 0x6) pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x3, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8}) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) signalfd4(r6, &(0x7f00000003c0)={0x4}, 0x8, 0x80800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x7fd, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r8 = socket(0x1, 0x80003, 0xcc8) ioctl(r8, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x8180, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:01:29 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x7b, 0x0) 17:01:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4bb2, 0x42) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000001c0)={0x2, 0x0, [0x0, 0x0]}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000180)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 349.335358] binder_alloc: binder_alloc_mmap_handler: 12532 20001000-20004000 already mapped failed -16 [ 349.362481] binder: BINDER_SET_CONTEXT_MGR already set [ 349.379562] binder: 12532:12533 ioctl 40046207 0 returned -16 17:01:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x4000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:29 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x14b, 0x0) [ 349.559985] binder_alloc: binder_alloc_mmap_handler: 12555 20001000-20004000 already mapped failed -16 [ 349.580417] XFS (loop1): Mounting V4 Filesystem [ 349.589822] binder: BINDER_SET_CONTEXT_MGR already set [ 349.603028] XFS (loop1): empty log check failed 17:01:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 349.604609] binder: 12555:12558 ioctl 40046207 0 returned -16 [ 349.611920] XFS (loop1): log mount/recovery failed: error -5 [ 349.621764] XFS (loop1): log mount failed [ 349.751920] binder: 12571:12572 unknown command 0 [ 349.756802] binder: 12571:12572 ioctl c0306201 20000040 returned -22 [ 349.766905] binder_alloc: binder_alloc_mmap_handler: 12571 20001000-20004000 already mapped failed -16 [ 349.776905] binder: BINDER_SET_CONTEXT_MGR already set [ 349.782846] binder: 12571:12572 ioctl 40046207 0 returned -16 [ 349.789196] binder: 12571:12575 unknown command 0 [ 349.794071] binder: 12571:12575 ioctl c0306201 20000040 returned -22 17:01:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x400000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:30 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x184, 0x0) 17:01:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4bb2, 0x42) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000001c0)={0x2, 0x0, [0x0, 0x0]}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000180)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 17:01:30 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) open(&(0x7f0000000500)='./file0\x00', 0x3, 0x100) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'wrr\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1f) r6 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000640)=0x10010001, 0x164629922c591845) r7 = fcntl$dupfd(r0, 0x406, r4) ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000480)=0xffffffffffffeffd, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00'}, 0x18) sendfile(r4, r4, &(0x7f0000000400), 0x6) pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x3, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8}) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) signalfd4(r6, &(0x7f00000003c0)={0x4}, 0x8, 0x80800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x7fd, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r8 = socket(0x1, 0x80003, 0xcc8) ioctl(r8, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x8180, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:01:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x4000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 349.898220] binder_alloc: binder_alloc_mmap_handler: 12577 20001000-20004000 already mapped failed -16 [ 349.943731] binder: BINDER_SET_CONTEXT_MGR already set [ 349.967580] binder: 12577:12582 ioctl 40046207 0 returned -16 [ 350.058381] XFS (loop1): Mounting V4 Filesystem [ 350.097199] XFS (loop1): empty log check failed [ 350.104816] XFS (loop1): log mount/recovery failed: error -5 [ 350.115017] XFS (loop1): log mount failed 17:01:30 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000140)=0x1ff) r1 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x1, 0x400800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x4a}) r2 = dup2(r0, r0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r3}}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x101}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100), 0x28) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x5, 0x8000) sendmmsg(r4, &(0x7f0000005f00), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) socket$inet6(0xa, 0x3, 0x3c) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x10000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) 17:01:30 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xa2, 0x0) 17:01:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x7a00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:30 executing program 5 (fault-call:8 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:30 executing program 3: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)={0x2, 0xffffffffffffff9c}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x40000) fallocate(r0, 0x11, 0x8009, 0x4000008003) fallocate(r0, 0x11, 0xb7, 0x1000) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x4, 0x0, [{0xbff, 0x0, 0x2}, {0x863, 0x0, 0x5}, {0xbff, 0x0, 0x80}, {0xbe3, 0x0, 0xffffffff8e9bfdfd}]}) write$9p(r0, &(0x7f0000000040)="af265607ed9b064ae83ef64d59d6d80d94e4b4778967b93451d09b80fa0099f2eb6bfa7417fdbb5a73ed96a7", 0x2c) 17:01:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffff0000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@local, @in, 0x0, 0x0, 0x3, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in6=@ipv4={[], [], @local}, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 350.297440] binder_alloc: binder_alloc_mmap_handler: 12615 20001000-20004000 already mapped failed -16 17:01:30 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x62, 0x0) [ 350.341528] binder: BINDER_SET_CONTEXT_MGR already set [ 350.360469] binder: 12615:12616 ioctl 40046207 0 returned -16 17:01:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0xf0ffffff7f0000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:30 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x135, 0x0) [ 350.506657] binder_alloc: binder_alloc_mmap_handler: 12636 20001000-20004000 already mapped failed -16 [ 350.551685] binder: BINDER_SET_CONTEXT_MGR already set [ 350.566549] binder: 12636:12637 ioctl 40046207 0 returned -16 17:01:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x6c00, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:31 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x145, 0x0) [ 350.789675] binder: BINDER_SET_CONTEXT_MGR already set [ 350.822442] binder: 12653:12655 ioctl 40046207 0 returned -16 17:01:31 executing program 4: socket$pppoe(0x18, 0x1, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f00000001c0)={0x1}) 17:01:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet6(0xa, 0x3000000000002, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x40000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x9) r3 = getpgrp(0xffffffffffffffff) ptrace$setsig(0x4203, r3, 0x3, &(0x7f0000000380)={0x26, 0x4, 0x2}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000001c0)={@dev, @broadcast, 0x0}, &(0x7f0000000200)=0xc) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000480)='team\x00') getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000023c0)={@empty, 0x0}, &(0x7f0000002400)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000002600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002440)={0x158, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xf4, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', r4}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000000c0)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@loopback, @in=@local}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000340)=0xffffffc3) r8 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x88110, r2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0x100, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000540)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x108, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x48, &(0x7f00000002c0)=[@ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x1, 0x3, 0x8}, @fda={0x66646185, 0x9, 0x2, 0x16}, @ptr={0x70742a85, 0x0, &(0x7f0000000280), 0x1, 0x4, 0x18}], &(0x7f00000008c0)=[0x18, 0x30, 0x20, 0x78, 0x58, 0x18, 0x48, 0x38, 0x40]}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, &(0x7f00000004c0), &(0x7f0000000500)=[0x28, 0x18, 0x40, 0x48]}}, @exit_looper, @increfs_done={0x40106308, r8, 0x2}, @clear_death={0x400c630f, 0x0, 0x3}, @release={0x40046306, 0x3}, @increfs={0x40046304, 0x4}, @enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000580)=[@flat={0x776a2a85, 0x100, r9, 0x2}], &(0x7f00000005c0)=[0x78, 0x48, 0x48]}}], 0x2e, 0x0, &(0x7f0000000740)="b6c70975525150968af5cdc1cf7008f17cdc5e576db0d3dde47ba13caf7dee083ff6e8a44bb318817a749f222ee0"}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={[], [], @broadcast}, r7}, 0x14) 17:01:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffff0000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@local, @in, 0x0, 0x0, 0x3, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in6=@ipv4={[], [], @local}, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:01:31 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x5e, 0x0) 17:01:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x1200, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x11, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 351.164409] binder: BINDER_SET_CONTEXT_MGR already set 17:01:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x707000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 351.189958] binder: 12667:12668 ioctl 40046207 0 returned -16 17:01:31 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x17c, 0x0) 17:01:31 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r1, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000500)={0x1d, r2}, 0x10) r3 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x7, 0x400) ioctl$VT_DISALLOCATE(r3, 0x5608) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x12) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x202002, 0x0) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000200)) 17:01:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$rds(0x15, 0x5, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = dup2(r1, r0) semget(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000000)={0x3, "ed3cae"}, 0x4) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000140)) bind$rds(r2, &(0x7f00000000c0), 0xc) 17:01:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0x64, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 351.429047] binder: BINDER_SET_CONTEXT_MGR already set 17:01:31 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xd7, 0x0) [ 351.468844] binder: 12689:12690 ioctl 40046207 0 returned -16 17:01:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x730000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:31 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x0) 17:01:31 executing program 4: syz_mount_image$hfs(0x0, &(0x7f0000000300)='.//ile0\x00', 0x6, 0x1, &(0x7f0000000500)=[{&(0x7f00000004c0)="877493c21e625f15c64d2aa7b50e819592d0b0", 0x13}], 0x0, 0xfffffffffffffffd) mkdir(&(0x7f0000000680)='./file1\x00', 0x4) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) kexec_load(0x3, 0x1, &(0x7f0000000440)=[{&(0x7f0000000540), 0x0, 0x3, 0x1ff}], 0x3f0001) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x140, 0x0) syz_open_dev$radio(&(0x7f0000000740)='/dev/radio#\x00', 0x0, 0x2) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000700)={0x2, 0x4e20, @multicast1}, 0x10) r1 = memfd_create(0x0, 0x800020) linkat(r0, &(0x7f0000000280)='./file0/f.le.\x00', r1, &(0x7f0000000780)='.//ile0\x00', 0x1400) syz_open_dev$audion(&(0x7f00000008c0)='/dev/audio#\x00', 0x20, 0x101080) syz_open_dev$usb(&(0x7f00000006c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(r2, &(0x7f0000000240)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') 17:01:31 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/22, 0x16}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc058560f, &(0x7f0000000280)={0x0, 0x9, "2a8f588835fd6618fbaf11b15f24f44d1200", 0x0, 0x0, 0x0, 0x70f000, 0x100000001}) gettid() 17:01:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0x65, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 351.659506] binder: BINDER_SET_CONTEXT_MGR already set 17:01:32 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xfffffde0) r2 = socket$alg(0x26, 0x5, 0x0) sendto$unix(r0, &(0x7f0000000000)="665173c53f709cd83aab856ec9", 0xd, 0x40800, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0xffffff37) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(0x0, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) flistxattr(r1, &(0x7f0000000180)=""/45, 0x2d) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 17:01:32 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xc5, 0x0) [ 351.687457] binder: 12715:12716 ioctl 40046207 0 returned -16 17:01:32 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f00000002c0)=@ethtool_dump={0x3b, 0x2, 0x0, 0x80000}}) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0x2, 0x40, 0x7, 0x5, 0xfffffffffffff1c5, 0x6, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x7, 0x2, 0x39, 0x7, 0x3}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x1d27, 0x6}, &(0x7f00000001c0)=0x8) 17:01:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x500, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0x66, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:32 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x79, 0x0) 17:01:32 executing program 3: clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) utimes(&(0x7f00000006c0)='./file0\x00', &(0x7f00000005c0)={{}, {r0, r1/1000+30000}}) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x17, 0x3e, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa16}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000880)='/dev/snd/pcmC#D#c\x00', 0x80, 0x4000) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000640)) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000740)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000700)='oom_adj\x00') ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000001c0)=0x0) waitid(0x2, r6, &(0x7f0000000280), 0xe000000e, &(0x7f0000000300)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(r5, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000e00)={0x1238, 0x1d, 0x400, 0x70bd2b, 0x25dfdbfe, {0x11}, [@generic="733b9ab7a547bc750e2a0da3a340a1180d4749c3b5077dbef8b28b77730a372c2c1abbda211bbd8485e784482e9ea2990535f0a1197778d78e07aace33b05548e88a8ead8473096a249df94f8fa317e050919a4f", @generic="eaa0eca5ce379cd01f9fc88b0d0fb34d1ba2f1d054fcabee904eb39e1c0495ece822c9b419e5d064a6ef01e380ae9ef55b21e92d8414206fa9e1238bc541f921364aa79313da833051d1be0eea6b2ff14bdb81687214de85f62082cda19d14ccc6a93db3c61a5b250034b7839921196dc71ffc04fbf1f9f4b38e81c557b0bad68ef7e574e97417d6bd5450179adddc5b2f8daecf48ad63427a83dfeb570880eedf3ec507fa7e18cff4cd073425ef420600ad6254c150c18b1469232eec1921918e1ab384", @generic="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", @generic="95c369ed58bfc05d68bfc1f21986e4a53bb5afdc70fc5eb4f804a941463b5ee27dfd20c8aecadd34209376f9f9a27c60e4b04109ecd1ab19baedbacb158e2d87041f1c599ba459a9037e83be9a995ae6bcf1", @nested={0xb4, 0x6, [@generic="f70ab24de132bfb38cd8cfffef3a3dc7d661bfad85fa2259a8dd1e55fe9b28addee16d46c378dba6df30", @typed={0x8, 0x82, @fd=r2}, @generic="724e18dc096f8ae8b06863c2c541065e02d95799be790aafb4bb85cfdf7a3019c66e1cc85af3bf2c6dfe17d0e891dad536f737e04b5df1c18e411777439714f4b5f0625522630b0b332dff8afb8e01513d825fd649c0672c7c075e1063d9f564c3566087d3e8e6d10b58340bb595513c750f74a4508ff8d2e316b7ade063"]}, @generic="ad6544ee8c"]}, 0x1238}, 0x1, 0x0, 0x0, 0x10}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000a00)={"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"}) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000002040)=ANY=[@ANYBLOB="04000000ff995833867ac5c6d8d9c0e232722f3f72779ecb189487f151ddb3fd921891f41d6aa308024a6128b0ca474421d13cbeb256e2a2baae773b3f6e8fa61be9ce4444e6072d6eb7ebb2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000840)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000008c0)={r7, 0x2}, &(0x7f0000000900)=0xc) r8 = socket$packet(0x11, 0xfffffffffffffffe, 0x300) preadv(r5, &(0x7f00000017c0), 0x1fe, 0x400000000000) accept4$packet(r5, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000009c0)=0x14, 0x800) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000180)="478f") setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000200)=0x4, 0x4) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f00000003c0)={[], 0x1, 0x800, 0x13c0, 0x0, 0x1, 0x1f000, 0x2000, [], 0x5c}) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000000780)={0x9, [0x3f, 0x1, 0x3, 0x200000000, 0x8, 0x600000000000000, 0x7, 0x1, 0x2]}) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="95", 0x1, 0x8000, 0x0, 0x0) [ 351.923085] overlayfs: filesystem on './file0' not supported as upperdir [ 351.930474] binder: BINDER_SET_CONTEXT_MGR already set [ 351.935826] binder: 12748:12751 ioctl 40046207 0 returned -16 17:01:32 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00008acff8)=@abs={0x1}, 0x8) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x401, 0x424000) listen(r0, 0x8df6) listen(r0, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00000010c0)={0x5, 0xfffffffffffff801, 0x950, 0xfffffffffffffff9, 0x2}) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000040), &(0x7f0000000080)) getsockopt$netlink(r1, 0x10e, 0x7, &(0x7f00000000c0)=""/4096, &(0x7f0000000040)=0x1000) 17:01:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:32 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x134, 0x0) 17:01:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0x67, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 352.148294] binder: BINDER_SET_CONTEXT_MGR already set [ 352.166047] binder: 12768:12771 ioctl 40046207 0 returned -16 17:01:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000140)={0x0, @speck128}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[], 0xfd2c) write$cgroup_int(r0, &(0x7f0000000080), 0x12) prctl$PR_SVE_SET_VL(0x32, 0x19a1d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x1f00, 0x0) [ 352.295789] kauditd_printk_skb: 4 callbacks suppressed [ 352.295805] audit: type=1804 audit(1544893292.654:54): pid=12785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir648710103/syzkaller.DZ7SAT/180/memory.events" dev="sda1" ino=16721 res=1 [ 352.337499] audit: type=1804 audit(1544893292.664:55): pid=12785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir648710103/syzkaller.DZ7SAT/180/memory.events" dev="sda1" ino=16721 res=1 17:01:33 executing program 1: socketpair$unix(0x1, 0x8000000000006, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="87c8bbed464e8c5aa890ec5d6eac90cc24cba19b669e8f424eb64972963f9bbcbe24bcc04158a959ed96490992e7312ef039fdec6725e575a551fa0a7e6a3f3a32f35e968e26dbd3b994f748650d84d9b0a5690932f6e3b0e55e3f6a092660198a9c99813d84be44d0d3c590f6ed631576825cf66f88d0d742fba7f9d21c"], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x401) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) write$P9_RLOCK(r1, &(0x7f0000000000)={0xfffffddc}, 0x8) truncate(&(0x7f0000000040)='./file0/bus\x00', 0x200000) 17:01:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5437, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000001c0)={0x9d0000, 0x9, 0x1ff, [], &(0x7f0000000180)={0x990964, 0x9, [], @p_u16=&(0x7f0000000140)=0x6}}) close(r1) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f00000000c0)) 17:01:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x4c00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:33 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x16e, 0x0) 17:01:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0x68, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0xffffffffffffffee) recvmmsg(r0, &(0x7f0000002e00), 0x386, 0x22, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x627, 0x2, 0x2, 0x1, 0x2, [{0x7fffffff, 0x2, 0x4, 0x0, 0x0, 0x400}, {0x0, 0x7b70bb32, 0x1, 0x0, 0x0, 0x1001}]}) 17:01:33 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x194, 0x0) [ 352.746177] binder_alloc_mmap_handler: 6 callbacks suppressed [ 352.746197] binder_alloc: binder_alloc_mmap_handler: 12798 20001000-20004000 already mapped failed -16 [ 352.774311] binder: BINDER_SET_CONTEXT_MGR already set 17:01:33 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x200000000003ff) sendfile(r1, r2, 0x0, 0x7fffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x8800000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) [ 352.802659] binder: 12798:12799 ioctl 40046207 0 returned -16 17:01:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x7100, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0xf0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xf0ffff, 0xff66}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0xf59f2bd78d12008a}}, 0x0) 17:01:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xa, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:33 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x82, 0x0) [ 352.961820] binder_alloc: binder_alloc_mmap_handler: 12820 20001000-20004000 already mapped failed -16 17:01:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', &(0x7f00000005c0)={'L+', 0x10001}, 0x28, 0x0) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000780)=@v2={0x2000000, [{0xe24}]}, 0x14, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x1) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000100)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000140)=r2) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x10, 0x1, @in6={0xa, 0x4e22, 0x10000, @loopback, 0xff}}}, 0xa0) ioctl$TCXONC(r1, 0x540a, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18) pivot_root(0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) [ 353.064775] binder: BINDER_SET_CONTEXT_MGR already set [ 353.079480] binder: 12820:12822 ioctl 40046207 0 returned -16 17:01:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x60ff, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) mkdir(0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 17:01:33 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xe6, 0x0) 17:01:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr=0x4000000000000000}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x3, 'queue1\x00'}) ftruncate(r0, 0x2) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) 17:01:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=0xffffffffffffffff) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') r2 = memfd_create(&(0x7f0000000140)='trusted.overlay.metacopy\x00', 0x4) getsockname$netlink(r2, &(0x7f0000000180), &(0x7f0000000200)=0xc) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r1, 0x1) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) setsockopt$inet6_udp_int(r2, 0x11, 0x6f, &(0x7f00000002c0)=0x2, 0x4) [ 353.296480] binder_alloc: binder_alloc_mmap_handler: 12851 20001000-20004000 already mapped failed -16 [ 353.427474] binder: BINDER_SET_CONTEXT_MGR already set 17:01:33 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x10f, 0x0) [ 353.460646] binder: 12851:12857 ioctl 40046207 0 returned -16 17:01:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0xa00, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 353.578452] binder_alloc: binder_alloc_mmap_handler: 12879 20001000-20004000 already mapped failed -16 17:01:34 executing program 3: r0 = socket$inet(0x2, 0x800, 0x1ff) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00100900000009000200070000000004060007003f005e2c8aa75039d646a1ace532bcbeec13dee9b6de17920b0e46a932f5ef23329c1a80e025ec414b0dd28c1a3883b39a7127edacc1ca05a28717790a123d10e955e150422ac6d66ca001c55b5591c6809640e772"], &(0x7f00000000c0)=0x1a) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={r1, 0x7fffffff}, &(0x7f0000000140)=0x8) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x200, 0x400) r4 = add_key$keyring(&(0x7f0000001300)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$chown(0x4, r4, r3, r5) 17:01:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr=0x8000000000000000}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 353.626437] binder: BINDER_SET_CONTEXT_MGR already set 17:01:34 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x80, 0x101000) write$P9_RWRITE(r0, &(0x7f0000000140)={0xb, 0x77, 0x1, 0x1}, 0xb) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000100)) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000440)) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/109, &(0x7f0000000240)=0x6d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x73, @local, 0x2}, 0x1c) socket$tipc(0x1e, 0x5, 0x0) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="d30f3077104cb41a30a6391196e32aee1b2a32c3bf91be2d831d2ae58a184ff978ae0c4efdd03bb40578006721fcf47fe94d493205f90336241223bb03a44c16d259f5eb75e808b7b8961aec4b3b68101155ff7528b3812a0d0cbd3350b1caba289bfeba9b29dc058857d301d7dbffc3c8848b006377be7e6bfd99048b2c0469ade339ff23cd44f30b972410c1d4e34782548bb2cb2a0985f910b5b6b5d781e201ce4311ceb2041867a333a7582bac7f303c3dbe3606908b1efbc46ea45d788cfc646e16a0e2fe4f45156bde2845c26f2685ec7367ec97ba8f0a5017ad1aa3b4411e506b5d303a159b4b1466015b70", 0xef}, {&(0x7f0000000380)="38c1e94a9b0b7dcf5dec1c4bb19e9dec5651d688626235d80682dcf830113318d251300470781673", 0x28}], 0x2}, 0x40) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x400000000000224, 0x101d0) 17:01:34 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xf0, 0x0) 17:01:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000340), 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x18, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da15}, [@nested={0x4, 0x27}]}, 0x18}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x40, &(0x7f0000000300)=[@vmwrite={0x8, 0x0, 0xfff}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 353.679449] binder: 12879:12880 ioctl 40046207 0 returned -16 17:01:34 executing program 3: r0 = socket(0x1, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) getsockopt(r0, 0x114, 0x2711, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x19a) 17:01:34 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xb9, 0x0) 17:01:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x700, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 17:01:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr=0x1000000}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 353.964705] netlink: 'syz-executor1': attribute type 39 has an invalid length. [ 353.989698] binder_alloc: binder_alloc_mmap_handler: 12915 20001000-20004000 already mapped failed -16 [ 354.023773] binder: BINDER_SET_CONTEXT_MGR already set 17:01:34 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x98, 0x0) [ 354.061807] binder: 12915:12917 ioctl 40046207 0 returned -16 17:01:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x930000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 354.115950] netlink: 'syz-executor1': attribute type 39 has an invalid length. 17:01:34 executing program 3: socketpair(0xd, 0x80000, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='illinois\x00', 0x9) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x8000, 0x4) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7f, 0x80000) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000040)={0xffffffffffff280a, 0xcc, "3ae92ca3fe915297dd26836958a077f6ebdeda2dbe8d025456c88bf7b1c9b7fb8312eae3df82e9b75e07bd86b0567e506afa86657725dfb6bf06182daddce85bc89bf6bb91982f2684ebbaf2081b40a06131646ba58f88118edaa0d231a843ca26174cdeda397945086fc3ba953728a42af8ed69940076e288c8a770c39a9aa8d6fb86ac740b42eb9003ce41d00392abd7f5f3e36ec727d27b0392d1aa98b7598beee466956e7e7146fa53eeab8ec967e90d00ef2eb0d73560bb8ba1f97eaedac8b8256030f3886caaa0faef"}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r3, 0x29, 0x3, 0x0, &(0x7f00000012c0)) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000300)={'nat\x00', 0xa6, "b9a441e1382193dfb22fcf74a656f687383f969c5fe322f00b1301c521540c9d5d56fa8a7262cca9239c501353a0bca665f82a603835b7a131fc5bf21cbffd737a175ee8f5dd27ad60a03241e59201cd30ef954db9d9930ea519b4aed4ab487647b990fa009b3b102fc494cd7feb85b57552d9e8725e4ce0c67dc18874cb86fa444aabf6db339f4a65b4134dcfb9d62b3cb80c69a9351ff02b6f5791c793e7fe4f789f47125b"}, &(0x7f00000002c0)=0xca) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) 17:01:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr=0x2000000}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 354.280291] binder_alloc: binder_alloc_mmap_handler: 12941 20001000-20004000 already mapped failed -16 17:01:34 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x120, 0x0) 17:01:34 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x80, 0x101000) write$P9_RWRITE(r0, &(0x7f0000000140)={0xb, 0x77, 0x1, 0x1}, 0xb) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000100)) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000440)) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/109, &(0x7f0000000240)=0x6d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x73, @local, 0x2}, 0x1c) socket$tipc(0x1e, 0x5, 0x0) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="d30f3077104cb41a30a6391196e32aee1b2a32c3bf91be2d831d2ae58a184ff978ae0c4efdd03bb40578006721fcf47fe94d493205f90336241223bb03a44c16d259f5eb75e808b7b8961aec4b3b68101155ff7528b3812a0d0cbd3350b1caba289bfeba9b29dc058857d301d7dbffc3c8848b006377be7e6bfd99048b2c0469ade339ff23cd44f30b972410c1d4e34782548bb2cb2a0985f910b5b6b5d781e201ce4311ceb2041867a333a7582bac7f303c3dbe3606908b1efbc46ea45d788cfc646e16a0e2fe4f45156bde2845c26f2685ec7367ec97ba8f0a5017ad1aa3b4411e506b5d303a159b4b1466015b70", 0xef}, {&(0x7f0000000380)="38c1e94a9b0b7dcf5dec1c4bb19e9dec5651d688626235d80682dcf830113318d251300470781673", 0x28}], 0x2}, 0x40) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x400000000000224, 0x101d0) [ 354.338980] binder: BINDER_SET_CONTEXT_MGR already set [ 354.358893] binder: 12941:12942 ioctl 40046207 0 returned -16 17:01:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f00000005c0)='reiserfs\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6772706a71756f74613d6b9208000000b6544c5df8bf1996db910c3cbb14e7b64662fbb919cd7515737ef56058fa4f5023d0"]) 17:01:34 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x80, 0x101000) write$P9_RWRITE(r0, &(0x7f0000000140)={0xb, 0x77, 0x1, 0x1}, 0xb) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000100)) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000440)) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/109, &(0x7f0000000240)=0x6d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x73, @local, 0x2}, 0x1c) socket$tipc(0x1e, 0x5, 0x0) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="d30f3077104cb41a30a6391196e32aee1b2a32c3bf91be2d831d2ae58a184ff978ae0c4efdd03bb40578006721fcf47fe94d493205f90336241223bb03a44c16d259f5eb75e808b7b8961aec4b3b68101155ff7528b3812a0d0cbd3350b1caba289bfeba9b29dc058857d301d7dbffc3c8848b006377be7e6bfd99048b2c0469ade339ff23cd44f30b972410c1d4e34782548bb2cb2a0985f910b5b6b5d781e201ce4311ceb2041867a333a7582bac7f303c3dbe3606908b1efbc46ea45d788cfc646e16a0e2fe4f45156bde2845c26f2685ec7367ec97ba8f0a5017ad1aa3b4411e506b5d303a159b4b1466015b70", 0xef}, {&(0x7f0000000380)="38c1e94a9b0b7dcf5dec1c4bb19e9dec5651d688626235d80682dcf830113318d251300470781673", 0x28}], 0x2}, 0x40) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x400000000000224, 0x101d0) 17:01:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x74, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:34 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x13, 0x0) 17:01:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr=0xff0f0000}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 354.510771] binder_alloc: binder_alloc_mmap_handler: 12964 20001000-20004000 already mapped failed -16 17:01:35 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xbb, 0x0) [ 354.603365] binder: BINDER_SET_CONTEXT_MGR already set [ 354.612942] REISERFS warning (device loop1): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 354.641014] binder: 12964:12977 ioctl 40046207 0 returned -16 17:01:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x4800000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:35 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x76, 0x0) [ 354.769984] REISERFS warning (device loop1): super-6515 reiserfs_parse_options: journaled quota format not specified. 17:01:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr=0x2}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x18, 0x0, 0x2, 0x3, 0x0, 0x2000, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x38, 0x18040) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x400, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}], [{@smackfsroot={'smackfsroot'}}]}}) [ 354.867909] binder_alloc: binder_alloc_mmap_handler: 12993 20001000-20004000 already mapped failed -16 17:01:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x3) r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xffffffffffffffff, 0x80800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @local}, &(0x7f0000000280)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000002c0)={@remote, 0x77, r2}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x800000000002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x1132}) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000780)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3dad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88bc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e57e43a3e36bd48d2a85bf4fd4a804e83f2f3cf378a435af5e287d4e27337b4ada11b26219832ec6b2b38446b3b95fe3771e9f42ca30fb21e12f0a3d8bc2d85454af9fcc0232d8fd909448b01f46c593d31ea1c926465e35a4199079c3ca41128b17cb01fbf5b522be0fd02022ada37fecc14b6c8c8831883b85a1106f2f867020d529f17a350f20dd3bf51a98cfda70c2e3638a483fd3f87940bb478b07c4c110394c0093d17955089f2ca97bbe075124c9b1ff6500d536a95d96f03d48596e008bf0a028b539cec796cec9bf585eb80fe3e0d26") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) r6 = getpgrp(0x0) ptrace$setregset(0x4205, r6, 0x207, &(0x7f0000000180)={&(0x7f0000000940)="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", 0x1000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'veth1\x00', 0x4000}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$cgroup_int(r5, &(0x7f0000000100), 0x10f) [ 354.965637] binder: BINDER_SET_CONTEXT_MGR already set [ 355.034674] binder: 12993:12994 ioctl 40046207 0 returned -16 17:01:35 executing program 4: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r1, 0x29, "a2ead3", "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"}}, 0x110) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x1a1) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000100)=0x6) r3 = creat(&(0x7f0000000340)='./bus\x00', 0xfffffffffffffffd) getgid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f2) r4 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x200) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x9}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={r5, @in={{0x2, 0x4e24, @empty}}, 0x8, 0xff, 0x2dcdd420, 0x3, 0x21}, 0x98) sendfile(r3, r4, &(0x7f00000004c0), 0x8000fffffffe) 17:01:35 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x64, 0x0) 17:01:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) r3 = accept(r1, 0x0, &(0x7f0000000000)) bind$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x3}}, 0x10) recvmmsg(r2, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="020b0000000000007200000000f10000"], 0x10}, 0x8}, 0x0) 17:01:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0xffefffffff7f0000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr=0x100000000000000}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) r3 = accept(r1, 0x0, &(0x7f0000000000)) bind$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x3}}, 0x10) recvmmsg(r2, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 355.230998] binder_alloc: binder_alloc_mmap_handler: 13024 20001000-20004000 already mapped failed -16 [ 355.269666] binder: BINDER_SET_CONTEXT_MGR already set 17:01:35 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x11b, 0x0) 17:01:35 executing program 1: socket$xdp(0x2c, 0x3, 0x3f000000) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffffc, 0x10000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 355.276239] audit: type=1800 audit(1544893295.634:56): pid=13031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor4" name="bus" dev="sda1" ino=17047 res=0 [ 355.310093] binder: 13024:13026 ioctl 40046207 0 returned -16 17:01:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr=0x40000000}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 355.365754] audit: type=1800 audit(1544893295.724:57): pid=13044 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor4" name="bus" dev="sda1" ino=17047 res=0 17:01:35 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xf4, 0x0) 17:01:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x6000000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = semget$private(0x0, 0x6, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) semtimedop(r2, &(0x7f0000000080)=[{0x3, 0x5}, {0x3}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}) prctl$PR_GET_SECCOMP(0x15) setitimer(0x3, &(0x7f0000000040)={{0x0, 0x7530}}, &(0x7f00000000c0)) tkill(r1, 0x1000000000016) 17:01:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) r3 = accept(r1, 0x0, &(0x7f0000000000)) bind$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x3}}, 0x10) recvmmsg(r2, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:35 executing program 1: io_setup(0xfff, &(0x7f00000002c0)=0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x10, 0x933e57576f65b5ef) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000380)="690b06c00100acae9193c94cb5412d7cb57b4f0a5b8d3bd7ab44d91979d6889fdd59810d1aacb8ebf404d25f70296e873b0609419c61f679fcec8d81d3ae34682d3c86115999436535b90368c03540c3e763ce50ccea50362e88c1b9e6351c56c92b", 0x62, 0xfff, 0x0, 0x2}, &(0x7f0000000440)) rt_sigaction(0x20, &(0x7f0000000100)={&(0x7f0000000000)="430f187ee0f20f38f1a5008000004431562d660ff30a660ffe02c421fd6fb5d42f0000c4a27d5aa1376a0000c40201045785c4c3094946005e653e430f01d7", {0x5}, 0x0, &(0x7f0000000040)="c46259be4cae0ef0862fc4810dfd162e66f2450f1af1652666460f51f43e66460fe28fffefffff263e66410f380835f5ffffff0fe463a2c461a171f7ff460f57a841de8820"}, 0x0, 0x8, &(0x7f0000000140)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip_tables_targets\x00') ioctl$TCSETAF(r3, 0x5408, &(0x7f00000004c0)={0x8, 0x1f, 0x4, 0x0, 0xd6, 0x8, 0x0, 0x2497, 0x3, 0x81}) pwritev(r2, &(0x7f0000000280)=[{&(0x7f00000001c0)="752e81210d9a3fe7eff4dc5b6bf71a22218440e33a27dad1b02dea6cd6060d1e3dc31e790403b9e85a19796337deca03e63ee217bd7cde5bf1b785e0dd66adb9f8fd76642910c57e44143c1930d61d25ec229cedef200a352b888543cb765a88052b6d304fe77842c9300134742c6de26198e77856db605c58b519e1e6fa27a07cd2a7ffdb7e5bf404cf5b9c5b667169bf16b19018848ac6e3c849358dd6cacbd61140865828cb01f81221cad73afd67e12f3cc7b3c0bc43662d72ef6ed18c21", 0xc0}], 0x1, 0x10) rt_sigaction(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x3, &(0x7f00000000c0)) fcntl$addseals(r3, 0x409, 0x0) 17:01:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr=0x4000}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:35 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x12c, 0x0) [ 355.573020] binder_alloc: binder_alloc_mmap_handler: 13058 20001000-20004000 already mapped failed -16 17:01:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) r3 = accept(r1, 0x0, &(0x7f0000000000)) bind$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x3}}, 0x10) recvmmsg(r2, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:36 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f0000000080)='X', 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x4000000000000000) pipe(&(0x7f0000000100)) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000005b0f00000000000000000000000000000000000000007d44b0cfde3a41d77c4590000000000600000000000000000000000000000000"], 0x3f) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) [ 355.642495] binder: BINDER_SET_CONTEXT_MGR already set [ 355.676721] binder: 13058:13062 ioctl 40046207 0 returned -16 17:01:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x200000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000140)={0x1, 0x0, 0x9, 0x5, 0x3, 0x6, 0x9, 0x9, 0xa275, 0x8, 0x0, 0x7fffffff}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r6, 0xfffffffffffffffc, 0x2, r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000015c0)={r6, 0x0, 0x2}) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) semget(0x0, 0x2, 0x226) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') 17:01:36 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x71, 0x0) 17:01:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr=0xff0f}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) accept(r1, 0x0, &(0x7f0000000000)) recvmmsg(r2, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x9300, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x20802) ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x0, 0x7417}) r3 = dup3(r2, r0, 0x0) write$UHID_INPUT(r3, &(0x7f0000001640)={0x8, "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", 0x1000}, 0x1006) sendmsg$nfc_llcp(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x27, 0x1, 0x1, 0x7, 0x0, 0x3ff, "34c477d3c2ccfe45ac56a83667c81cddc7c37310d4578deb3be66f0967cfe870883cb8f7012e465d0c19bfb4079b0c693565b0b8297df920cfaa05d3f1cc25", 0x16}, 0x60, &(0x7f0000000480)=[{&(0x7f0000000140)="8d0dd3b81c0aae2e4030bce389ef4f3c6676230222eeed6c99350fa8c2f1f88621f5e3ebe039919bc4262ec29c47cb1284ab61a7e2f67562ced85c18c58793b000c152e67fea112cd5a85e54737fa4291daa28cc25df552044f03ce02a88d3f7c73ec5d08b9c4b9652dff338c38530954a51d37bb40d46010d42a121e8b9", 0x7e}, {&(0x7f00000001c0)="7c9bef3245b5827a3ad997b2599c35bb73c644023fc9e4ba0e34e164cf22dd50c6609fde5166841936e1806d4e0e3d98d0af94149a943fac48e0c3d94d8abb7a75920f2e4d23d11a3f4fa10100b6e3fe14b35ee21717934004c3b242624e8a074040a24c0625ffd6611b9f2d2a5be5d3195bc9ab8e2618d751fee88026252b9e2bbd9db901dac1b8b3a3a587336f43152b60ce0ac2edc0fa19ed7c7c72b63a330b50f49ef5aa8168008743eb53cd1619629bc0e50d5b9ae86ae1646185e973ea2122ac2d9916676b", 0xc8}, {&(0x7f00000002c0)="b6b8c54d59a3ed7efce1b8a62514c7700602734676882f7f38b9cc3ba0f6392314145499e6c2a896eff3a802cadea2abb1fee18e5eeea8b80bcc237c7352ce1197eed1f432769e40c339dc15aa1ce22c1e1a0c247fda8224b13cd6fc676ab89ed2a69c199f45ddfcca66284495bb068ca8c4a8d4568df29fb4581a0047d90d8123b179b1649abaa707bdcd0d83d70927f12a5d505367687bf0089021bcaab2c241cdd49e307ae6ff3e2c5bb37cf2e7376d3e407191dfa407fc32265671df086169e4edb3d9efe02722eec552947b7fa2ea338a187a7cf37cacd28661d0cf717b67b75926449adb3864263162786a2fcda1f86c8ccb21fea8", 0xf8}, {&(0x7f00000003c0)="0b5212e8db843130ef46dbee47fdc1bc8decb6cbe1425036535a2c5c0a89ab0ff9d6e1f85160563edabd9a8b516d25266570b09ffc140d9b768fc9ad88d0818f6c29f8a03ef27c11663ac0968bae812ef154d06a94982b9fd2b6845d1e2bd566b2be087055abc34429cea8a6a804065d1aeca4", 0x73}, {&(0x7f0000000440)="a59e64586415699915fd7b2489f4ca11d959f2252a09a6adfb592742e8fbf63be694422eff89", 0x26}], 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="d000000000007b3e852700fb055d4118c759c734a5c90000170100009c050000b9ed4a30f08b169164aa2465901ac550a4b174e95e7354867c7bd9424173f39f68286cfe27de0f7446c0e092e41c80a3a117882c2edbd693c365c7669381b4ddb5426166863c283f892508c394095df7fddd40a527eaa9364f334b5d51fb6901a95cce1a0479a749d8837440905c5215b1934b7fbbfa66cd776b0a12c45d74c3169171e50d8f294718a78e2a8a93952b1b78d70b5cd68dc9dff3463e5da802c4dcf0fb525c6cc324c5e899ac1fc8204d5e780000000077cc7a11fa93e50c00000000000000000000"], 0xd0, 0x80}, 0x40044) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 355.972938] binder: BINDER_SET_CONTEXT_MGR already set 17:01:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:36 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x161, 0x0) [ 356.054612] binder: 13104:13105 ioctl 40046207 0 returned -16 17:01:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x4c00, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:36 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x4) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) prctl$PR_SET_TSC(0x1a, 0x3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="e46b8f0000000092a845a6c5d6ff05e4763c381904c6293b1f6bf2", 0x2d8e980f}], 0x1, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) syz_open_pts(r2, 0x10000) [ 356.283429] binder: BINDER_SET_CONTEXT_MGR already set 17:01:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr=0x200000000000000}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:36 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xe2, 0x0) [ 356.320543] binder: 13126:13128 ioctl 40046207 0 returned -16 17:01:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x600, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:36 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x12, 0x1, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x1f, 0x1000, 0x7, 0x5e, 0x4, 0x2, 0xbe8}, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 17:01:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 356.503521] binder: BINDER_SET_CONTEXT_MGR already set 17:01:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr=0xff0f000000000000}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:36 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x189, 0x0) [ 356.538501] binder: 13141:13154 ioctl 40046207 0 returned -16 17:01:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:37 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x12, 0x1, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x1f, 0x1000, 0x7, 0x5e, 0x4, 0x2, 0xbe8}, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 17:01:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(0xffffffffffffffff, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 356.745667] binder: BINDER_SET_CONTEXT_MGR already set [ 356.791314] binder: 13176:13178 ioctl 40046207 0 returned -16 17:01:37 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) open$dir(&(0x7f0000000000)='./file0\x00', 0x2000, 0x174) r2 = dup2(r1, r1) write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14}, 0x14) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) prctl$PR_SET_FPEMU(0xa, 0x2) 17:01:37 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x2f, 0x0) 17:01:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr, @rand_addr=0xff0f000000000000}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:37 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x12, 0x1, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x1f, 0x1000, 0x7, 0x5e, 0x4, 0x2, 0xbe8}, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 17:01:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x7ffffffff000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 357.355078] binder: BINDER_SET_CONTEXT_MGR already set [ 357.368994] binder: 13198:13203 ioctl 40046207 0 returned -16 17:01:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) socket$l2tp(0x18, 0x1, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:37 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xbc, 0x0) 17:01:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x2000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:37 executing program 4: ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000880)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400}) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f0000000640)='/dev/mixer\x00', 0x1fffd, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000900)=""/184) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9}}], 0x48, 0xfffffffffffffffd}, 0x0) 17:01:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr, @rand_addr=0x8000000000000000}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 357.553929] binder: BINDER_SET_CONTEXT_MGR already set 17:01:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 357.584160] binder: 13218:13224 ioctl 40046207 0 returned -16 17:01:38 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x3) dup2(r1, r0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') write$sndseq(r0, &(0x7f0000042f70)=[{0x95ffffff, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) 17:01:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x300000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:38 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x67, 0x0) 17:01:38 executing program 4: ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000880)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400}) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f0000000640)='/dev/mixer\x00', 0x1fffd, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000900)=""/184) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9}}], 0x48, 0xfffffffffffffffd}, 0x0) 17:01:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 357.770806] binder_alloc_mmap_handler: 6 callbacks suppressed [ 357.770823] binder_alloc: binder_alloc_mmap_handler: 13245 20001000-20004000 already mapped failed -16 17:01:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000040)) setsockopt(r0, 0x10e, 0x400000000b, &(0x7f0000000000), 0x0) fchdir(r0) 17:01:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr, @rand_addr=0x100000000000000}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 357.836979] binder: BINDER_SET_CONTEXT_MGR already set [ 357.845430] binder: 13245:13246 ioctl 40046207 0 returned -16 17:01:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x48000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:38 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x118, 0x0) 17:01:38 executing program 1: r0 = socket(0x10, 0xa, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@local, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@deltfilter={0x140, 0x2d, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, r1, {0x8, 0x7dda6c5b3e40971c}, {0xffff, 0xffff}, {0x9, 0xfff2}}, [@filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x100, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xd3, 0x4, 0x8001}, {0x81, 0x6d1, 0xb1}, 0x2e, 0x3, 0x4}}, @TCA_RSVP_ACT={0xb4, 0x6, @m_tunnel_key={0xb0, 0x1e, {{0x10, 0x1, 'tunnel_key\x00'}, {0xc, 0x2, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}]}, {0x8c, 0x6, "14b6b8c15c4b14e4de42e2b1f4d052147155e8d0a42d2d372d00aa918c550a3ec923a6dcc5fa65cdb3a1c21a181f03b560cd875deefb732eb12f30175c1c9686f2e9350a453a26b5e6efc403b86355cedaa3dadc7da8ebb9e158e4da0feeb8da98a3973e5ddc254a4fb96a11eaafdcbe9cc64f1dd61921aef249adebcae42b1ce72c91eddc"}}}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x0, 0xffffffff}, {0x3ff, 0x7fff, 0x8}, 0x29, 0x7, 0x5}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0xd}}]}}, @TCA_CHAIN={0x8, 0xb, 0xfff}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) r2 = socket$can_raw(0x1d, 0x3, 0x1) shutdown(r2, 0x0) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x20000250) personality(0x800000) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000000)=0xb, 0x4) [ 358.016363] binder_alloc: binder_alloc_mmap_handler: 13273 20001000-20004000 already mapped failed -16 [ 358.045844] binder: BINDER_SET_CONTEXT_MGR already set [ 358.060807] binder: 13273:13277 ioctl 40046207 0 returned -16 17:01:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB='C^\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00'], 0x24}}, 0x0) 17:01:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) close(r1) fchdir(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x2, 0x1, 0x2, 0x6, 0xff, 0x1, 0x4, 0x100000001, r2}, &(0x7f00000001c0)=0x20) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f9", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r3, &(0x7f0000000680), 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000300)=0x4) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, 0x8) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000500)=""/239, &(0x7f0000000340)=0xef) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000640)=""/4096) fdatasync(r4) accept$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) sendmsg$can_bcm(r0, &(0x7f00000026c0)={&(0x7f0000000440)={0x1d, r5}, 0x10, &(0x7f0000000480)={&(0x7f0000002640)={0x3, 0x829, 0x2, {0x77359400}, {}, {0x3, 0x6f, 0x10001, 0x8}, 0x1, @can={{0x3, 0x33, 0x401, 0x8}, 0x3, 0x3, 0x0, 0x0, "d62b69d19c50e7ff"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 17:01:38 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r0, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x6c000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:38 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xfc, 0x0) 17:01:38 executing program 4: r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x400000000001a) r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0xffffffffffffffff, 0x20000) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000200)={0x33, 0x6, 0x0, {0x2, 0x2, 0xa, 0x0, '/dev/vcs#\x00'}}, 0x33) ptrace$cont(0x18, r0, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x101000) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x8, 0x3, 0x9, 0xe0e, 0x0, 0x0, 0x2, 0x1, 0x2, 0x6, 0x6, 0x7, 0xc683, 0x2, 0x8, 0x3f, 0x1, 0x3ff, 0x8, 0x3, 0x3, 0x3f, 0x7, 0x8, 0x7fffffff, 0x2, 0x6611, 0xffffffff, 0x9, 0x8e9, 0x2, 0xeeef, 0x100000001, 0xb766, 0x0, 0x7fffffff, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x4288, 0x8fa3, 0xd3, 0x4, 0x3f0, 0x800, 0x7f}, r0, 0x5, r3, 0x8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@remote, @empty, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0xfb}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 17:01:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr, @rand_addr=0x4000000000000000}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 358.313805] binder_alloc: binder_alloc_mmap_handler: 13300 20001000-20004000 already mapped failed -16 [ 358.329603] block nbd0: shutting down sockets [ 358.335176] binder: BINDER_SET_CONTEXT_MGR already set 17:01:38 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x127, 0x0) 17:01:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x8c9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x401) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x3}) fcntl$getown(r1, 0x9) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x2, 0x4000) ioctl$NBD_DO_IT(r3, 0xab03) 17:01:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr, @rand_addr=0x1000000}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 358.383011] binder: 13300:13303 ioctl 40046207 0 returned -16 17:01:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 358.581753] FAT-fs (loop1): bogus number of reserved sectors [ 358.592857] FAT-fs (loop1): Can't find a valid FAT filesystem [ 358.677617] block nbd0: Device being setup by another task [ 358.692042] block nbd0: shutting down sockets 17:01:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) close(r1) fchdir(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x2, 0x1, 0x2, 0x6, 0xff, 0x1, 0x4, 0x100000001, r2}, &(0x7f00000001c0)=0x20) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f9", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r3, &(0x7f0000000680), 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000300)=0x4) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, 0x8) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000500)=""/239, &(0x7f0000000340)=0xef) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000640)=""/4096) fdatasync(r4) accept$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) sendmsg$can_bcm(r0, &(0x7f00000026c0)={&(0x7f0000000440)={0x1d, r5}, 0x10, &(0x7f0000000480)={&(0x7f0000002640)={0x3, 0x829, 0x2, {0x77359400}, {}, {0x3, 0x6f, 0x10001, 0x8}, 0x1, @can={{0x3, 0x33, 0x401, 0x8}, 0x3, 0x3, 0x0, 0x0, "d62b69d19c50e7ff"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 17:01:39 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x840, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000080)=0x7e) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0x100000001) 17:01:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:39 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x193, 0x0) 17:01:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr, @rand_addr=0x4000}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r1 = memfd_create(&(0x7f0000000000)="ac0000", 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xde93, 0x0) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000300)={{0xffffffffffffffff, 0x3, 0x9, 0x0, 0x8}, 0x6, 0x52ed, 'id0\x00', 'timer1\x00', 0x0, 0x3, 0xffff, 0x0, 0x3}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syncfs(r3) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000002c0)={0x80000001, 0x80, 0x5, 0xd9, &(0x7f0000000400)=""/217, 0x27, &(0x7f0000000040)=""/39, 0x33, &(0x7f0000000100)=""/51}) write$sndseq(r0, &(0x7f00000001c0)=[{0x6, 0x200, 0xc3c, 0x81, @time={0x0, 0x989680}, {0x7f, 0x7fffffff}, {0x5, 0x90000000000000}, @ext={0x41, &(0x7f0000000140)="4c540eea4caacd5dc9347b39ed75742000cdbdfbcff8f6d8a5f33e948984ad247804bd758492721969b2e94af4511133651da0c44d916d999d7fe010b175a0c14c"}}, {0x6, 0x6, 0x3a7, 0x100, @tick=0x1, {0x20, 0x8000}, {0x7, 0x4}, @control={0x3, 0x0, 0x1}}, {0x7, 0xfff, 0x2, 0x6, @tick=0x8e68, {0x8, 0x4}, {0x0, 0x80000000}, @note={0x9, 0x1, 0xe47b, 0x1, 0x79c9}}, {0x3ff, 0x1, 0xfffffffffffffff9, 0x2, @time, {0x20}, {0x9828, 0x100000001}, @raw32={[0x9, 0x2, 0xfffffffffffffffa]}}, {0x8e, 0x7, 0x5, 0x0, @tick=0x9f5e, {0xa14a, 0x8}, {0x15a249f9, 0x400}, @raw32={[0x1, 0xfffffffffffffc00, 0x9]}}], 0xf0) 17:01:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 358.809721] binder_alloc: binder_alloc_mmap_handler: 13344 20001000-20004000 already mapped failed -16 17:01:39 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x111, 0x0) [ 358.857925] binder: BINDER_SET_CONTEXT_MGR already set [ 358.876388] block nbd0: shutting down sockets [ 358.885325] binder: 13344:13354 ioctl 40046207 0 returned -16 17:01:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x6000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 358.960248] FAT-fs (loop1): bogus number of reserved sectors 17:01:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr, @rand_addr=0x2}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 359.011356] FAT-fs (loop1): Can't find a valid FAT filesystem [ 359.059650] binder_alloc: binder_alloc_mmap_handler: 13379 20001000-20004000 already mapped failed -16 [ 359.111649] binder: BINDER_SET_CONTEXT_MGR already set [ 359.125422] binder: 13379:13381 ioctl 40046207 0 returned -16 17:01:39 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x1, &(0x7f0000346fc8)=@raw=[@ldst={0x1}], &(0x7f0000000240)='GPL\x00', 0x2, 0xfb, &(0x7f0000000000)=""/251}, 0x48) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U+', 0x29}, 0x28, 0x2) 17:01:39 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x73, 0x0) 17:01:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x60ffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01ab", 0x18) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr, @rand_addr=0x200000000000000}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f", 0x1c) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 359.268114] binder_alloc: binder_alloc_mmap_handler: 13398 20001000-20004000 already mapped failed -16 17:01:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x8e, &(0x7f0000000040)="6e65742f697076365f726f757465004c6808979c42a7f889d3a24294a27efbe01cc85821b814685e554d5f06c29e09d883e882092c6fbc0c69972fcb9c918614c9500b065cd7ed7ad82b0337b6655421d0b6bd8bb026ad780f54923207db1d589f5e28feabd2651f6c047300c88b6b2ce8edca2c753f6cb7098296c5559e144f5d9d923a85699e6a2f2d9e0af521", 0xffffffffffffffff}, 0x30) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_notify(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, @thr={&(0x7f0000000340)="212a4196db23d490f97dc5d1746d1c87c284b584fe759090c9b43db938b1032c7b48d698bf605ddfe4151c085136883278752cf5120b67f12af1e70554a95d5d5d99ed0909f77f6fac5a9ca2cb45a72fff362bfc86b41ac79a2c8f5439497e2132884f4b8ba776fe9a9a8a3c540e1dae5e1e3a4d20203b1a04b15ca6da848c8aa22b6352d044b320ea588eef212e59d8dbb5a4fcc66f0f7d7bb3d0c045c41df1c5f3157236bf2c831bdb5a9a6082dcb102e0fd8a50ae363e2f17806676e57422e95ce785742d41fff0906e", &(0x7f0000000240)="0152b1908198126b71a227b476e045df1e5e41528bd42104c3e908a49481276c7f45b5f7f40c35ac177e81d27571a06d6643dbae91bf6c24c7c011400e4efe8eb523ccf2479edb83813a3980fcc1445fe3f46e8a0796eaeb298cfdeafa90512b02b8b48fe17a5e85d22cbb9009905ee295405fad"}}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r4, 0x0) getsockname$packet(r2, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002740)=0x14) connect(r2, &(0x7f00000002c0)=@pptp={0x18, 0x2, {0x3, @rand_addr=0xf8c5}}, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000000100)="6e65742f697076365f726f757465004c6808979c42a7f889d3a24294a27efbe01cc85821b814685e554d5f06c29e09d883e882092c6fbc0c69972fcb9c918614c9500b065cd7ed7ad82b0337b6655421d0b6bd8bb026ad780f54923207db1d589f5e28feabd2651f6c047300c88b6b2ce8edca2c753f6cb7098296c5559e144f5d9d923a85699e6a2f2d9e0af521") ptrace(0x4217, r1) sendfile(r3, r5, 0x0, 0x800000bf) 17:01:40 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x160, 0x0) 17:01:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x600000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000400)='erofs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x80, &(0x7f0000000740)=ANY=[@ANYBLOB='acl,n']) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x3, 0x100}]}, 0xc, 0x1) 17:01:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a90", 0x1e) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr, @rand_addr=0x2000000}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 359.764507] binder_alloc: binder_alloc_mmap_handler: 13424 20001000-20004000 already mapped failed -16 [ 359.787442] erofs: read_super, device -> /dev/loop1 17:01:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a9061", 0x1f) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:40 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x13b, 0x0) [ 359.809751] binder: BINDER_SET_CONTEXT_MGR already set [ 359.822527] erofs: options -> acl,n [ 359.838068] binder: 13424:13425 ioctl 40046207 0 returned -16 [ 359.850477] erofs: cannot find valid erofs superblock 17:01:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = epoll_create1(0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000000c0)={0x0, 0x4, [0x7]}) r2 = epoll_create1(0x0) close(r1) r3 = inotify_init() getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r4 = inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) inotify_rm_watch(r3, r4) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0xa0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100)={0x1}) 17:01:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr, @rand_addr=0x40000000}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0xfdfdffff00000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:40 executing program 1: r0 = socket$kcm(0x10, 0x20000, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="23000000140081ae00002c000500018701546fabca1b4e7d06a6580eebb3556b3d5df5", 0x23}], 0x1}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000080)={0x7ff, 0x4}) 17:01:40 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xa1, 0x0) 17:01:40 executing program 4: r0 = socket$inet6(0xa, 0x4000000000002, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000040)="ff55d36cffba04365d0000000000000101000000", 0x14) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="ff55d36cffba04365d0000000000000101000000", 0x14) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0), 0x4) 17:01:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 360.083511] binder_alloc: binder_alloc_mmap_handler: 13459 20001000-20004000 already mapped failed -16 [ 360.099256] binder: BINDER_SET_CONTEXT_MGR already set [ 360.105441] binder: 13459:13465 ioctl 40046207 0 returned -16 17:01:40 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='ip6tnl0\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000002c0)={{0x1}, 'port0\x00', 0xa1, 0x41040, 0x4, 0x8, 0x3, 0x4b9, 0xfffffffffffffe8c, 0x0, 0x7, 0x400}) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:01:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x100000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:40 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x55, 0x0) 17:01:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr, @rand_addr=0xff0f0000}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 360.275682] binder_alloc: binder_alloc_mmap_handler: 13484 20001000-20004000 already mapped failed -16 [ 360.300982] rpcbind: RPC call returned error 22 [ 360.301097] binder: BINDER_SET_CONTEXT_MGR already set [ 360.324575] rpcbind: RPC call returned error 22 17:01:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:40 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000003d00)='/dev/input/mice\x00', 0x0, 0x2) readv(r0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/112, 0x70}], 0x1) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) 17:01:40 executing program 1: syz_emit_ethernet(0x18, &(0x7f0000000100)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x4001, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c8d1f6", 0xffff, "071ccd"}, "c1188f869a380ebca23c09903661233c6227b94859beea48a6f2c0f1fa8318c20f8b50dabbec7066539b69049834b843944f835743ab82457fb0f3c14d"}}}}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U-', 0x5}, 0x28, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000300)={0x1, 0xffffffffffffffff, 0x4, 0x6, 0x1a70000, 0x7ff, 0x2, 0x9, 0xf, 0xffffffff80000000, 0x4, 0x6}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0xf67a, 0x0, 0x10003, 0x9}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000280)={r1, 0x6}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000200)=0x8, 0x4) setxattr(&(0x7f0000000500)='./file0\x00', &(0x7f00000003c0)=@known='system.posix_acl_default\x00', &(0x7f0000000400)="fb227313227d1121868fa6a207f9d847cb2dd41cc62ad4d2ebd62dfa9aa5ca64d70315963592fc7d0b5baaf3d2f5524db8eb415f6c6d688964d7a8a962d0d778110000000000000000000000000000704484aa32d49da0515dd7339a8075ceab9390a4664984073194d29e7e458c35ffb0340130d982dc532a85617198cf5e1c23f431db7c3ddd74322e52cc4c96ae88fab0573223570c2d2927bbc9adc6ff7afc32130af4d293dc80b1da7fc8ba9d91428b872f", 0xb4, 0x3) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0xdada}, @void, @eth={@local, @dev={[], 0x1e}, [{[], {0x8100, 0x3, 0x1, 0x3}}], {@canfd={0xd, {{0x3, 0x1, 0x9, 0x100}, 0x12, 0x3, 0x0, 0x0, "64e8d3364ffb29e89481b816e9d807bf1fbd8db6817e18e5df68ed0e0b0d81a884b0664848326f1dc498ad0321c9237c017ec2ad4460fd86ad58e3c5e8664feb"}}}}}, 0x5e) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000340)={0x2}) [ 360.351262] binder: 13484:13488 ioctl 40046207 0 returned -16 17:01:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x70700000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:40 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x182, 0x0) 17:01:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr, @rand_addr=0xff0f}, 0x6) close(r3) dup3(r1, r2, 0x0) 17:01:40 executing program 1: futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x20000000c, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 360.521529] binder_alloc: binder_alloc_mmap_handler: 13513 20001000-20004000 already mapped failed -16 [ 360.559556] binder: BINDER_SET_CONTEXT_MGR already set 17:01:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 360.580236] binder: 13513:13516 ioctl 40046207 0 returned -16 17:01:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x20000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:41 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x70, 0x0) 17:01:41 executing program 4: syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x2, 0x0) fanotify_mark(r1, 0x80, 0x40000000, r2, &(0x7f00000003c0)='./file0\x00') r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80800) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000400)) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x5, 0x0, 0x3}]}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r1, &(0x7f0000000500)="30bc4360c51618641a72b8af5da7cd3f467d604746caf7df23bcefd7ee30a0b56fdaedd91a3b026e33d9946c8c461f5c89405a7af1fe2ca3ecb0c81928614783130543a054f4a4f1", &(0x7f0000000580)=""/66}, 0x18) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000180)={0xe0005, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x2e4) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000240)=0x0) unlink(&(0x7f0000000640)='./file0\x00') ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000280)=0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x200000, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r4, &(0x7f0000000300)={r8, r4, 0x3ff}) [ 360.715881] binder: BINDER_SET_CONTEXT_MGR already set 17:01:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x3) close(r3) dup3(r1, r2, 0x0) 17:01:41 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xde, 0x0) [ 360.761433] binder: 13530:13541 ioctl 40046207 0 returned -16 17:01:41 executing program 1: r0 = socket$inet6(0xa, 0x800, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x348) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000580)=0x400, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r1, 0xb4) 17:01:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x7400, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:41 executing program 4: socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="94bea93e7f21258dced99de916c442bb69588b754b358b980aee3421aa7d9c69302d03bddd38220201bd470c01", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) 17:01:41 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x35, 0x0) [ 360.996252] binder: BINDER_SET_CONTEXT_MGR already set 17:01:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x9) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 361.037891] binder: 13560:13562 ioctl 40046207 0 returned -16 17:01:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x4800, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)) r1 = memfd_create(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r2, @ANYBLOB="100028bd7000fcdbdf250e0000002c00030008000300040000000800030002000000080008001b00000008000700007f0000080007004e240000080006008e04000034000100080002006f000000080006006c64000014000300ffffffff0000000000000000000000000c0007000800000028000000340002000800050001010000080006001800000008000500a9050000080002004e210000080002004e220000080002004e2100003c0002000800080001000000084385000300000008000200602200000800040007000000080002004e2300000800060005000000080007000100000008000400030000000800040003000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) 17:01:41 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x100000001, 0x44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x5452, 0x0) 17:01:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:41 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x185, 0x0) [ 361.224449] binder: BINDER_SET_CONTEXT_MGR already set [ 361.239895] binder: 13588:13589 ioctl 40046207 0 returned -16 17:01:41 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x5, 0x200) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02012cbd7000fbdbdf25060000000c00010008000100020000001400030008000100861fd6d00800040004000000080005006a07000008000400ff7fffff08000500ffffffff0c0002000800060001000080"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = syz_open_pts(0xffffffffffffff9c, 0x210400) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x1, 0x1a8, [0x20000480, 0x0, 0x0, 0x200004b0, 0x200004e0], 0x90, 0x0, &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, 'dummy0\x00', 'team_slave_0\x00', 'syzkaller0\x00', 'rose0\x00', @dev, [], @link_local, [], 0x70, 0xe0, 0x118}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x48}]}, @snat={'snat\x00', 0x10}}]}]}, 0x220) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x59e) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 17:01:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) r4 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x20042) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) dup3(r1, r2, 0x0) 17:01:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:41 executing program 1: dup2(0xffffffffffffff9c, 0xffffffffffffff9c) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x9, 0x8, 0xd, 0x20, r0, 0xffffffffffffffff}, 0x2c) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0xbd9, 0x3f, 0x40, 0x401, 0xffff, 0x7}, 0x1}, 0xa) 17:01:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:41 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x192, 0x0) [ 361.456342] binder: 13615:13620 unknown command 0 [ 361.466182] binder: 13615:13620 ioctl c0306201 20000040 returned -22 17:01:41 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r0, 0x0, 0x3cceb664, 0x0) 17:01:41 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r0) sendmsg$unix(r1, &(0x7f0000000180)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)="4f0521fae47452d752768cd47b", 0xd}, {&(0x7f00000000c0)="a52cacd7386f5ef6fe9d9108264737c2ea67f73965d92102968774d00b11901007eaaa9e4549fc4b910d439707e3f4c26d1510508ace5f8f5756be69453ee5472b73b9b4fed08ad093c1cdcb8922fa342892bfdde9baffac1ec80b786736e90b7365", 0x62}], 0x2, 0x0, 0x0, 0x40000}, 0x0) tkill(r0, 0x9) [ 361.516192] binder: BINDER_SET_CONTEXT_MGR already set 17:01:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xffffffff, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'tunl0\x00'}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) dup3(r1, r2, 0x0) [ 361.568261] binder: 13615:13620 ioctl 40046207 0 returned -16 17:01:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x7fffffffefff, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:42 executing program 4: r0 = socket$nl_generic(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x101) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x16) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 17:01:42 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xf6, 0x0) 17:01:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@local, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0x34a) setreuid(0x0, r1) r2 = mq_open(&(0x7f00000002c0)='eth1\x00', 0xc0, 0x80, &(0x7f0000000300)={0x4, 0x0, 0x7, 0x7, 0x8, 0x8, 0x1000, 0x9}) fcntl$dupfd(r2, 0x0, r0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000000c0)={0x4, {{0xa, 0x0, 0xffffffffffffffe0, @mcast1, 0x4}}}, 0x88) syz_read_part_table(0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) [ 361.712963] binder: BINDER_SET_CONTEXT_MGR already set 17:01:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000040)={{0x2, 0x4e20}, {0x1, @local}, 0x40, {0x2, 0x4e23, @multicast1}, 'sit0\x00'}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e20, @local}, {0x307}, 0x16, {0x2, 0x4e22, @remote}}) write$binfmt_misc(r2, &(0x7f00000001c0)={'syz1', "ea107dc5d286f2be2479843b1f73b945f7906e"}, 0x17) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r1) dup3(r1, r2, 0x0) [ 361.749068] binder: 13650:13653 ioctl 40046207 0 returned -16 17:01:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x2000000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:42 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) r0 = epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0xfff, 0x1, 0x6}) unshare(0x400) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, 0x4000000000}, 0x0, &(0x7f0000000380)={0x83}, &(0x7f0000000400), 0x0) 17:01:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216"}, 0x46) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:42 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x4c, 0x0) [ 361.869490] Dev loop1: unable to read RDB block 1 [ 361.880611] loop1: unable to read partition table [ 361.899592] loop1: partition table beyond EOD, truncated [ 361.921564] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 361.949024] binder: BINDER_SET_CONTEXT_MGR already set [ 361.968560] binder: 13675:13676 ioctl 40046207 0 returned -16 17:01:42 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt(r0, 0x6, 0x7f, &(0x7f0000000140)=""/98, &(0x7f00000000c0)=0x62) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000740)=0x5, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) keyctl$set_reqkey_keyring(0xe, 0x4) 17:01:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216"}, 0x46) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x7400000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:42 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x4b, 0x0) [ 362.006099] __loop_clr_fd: partition scan of loop1 failed (rc=-22) 17:01:42 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt(r0, 0x6, 0x7f, &(0x7f0000000140)=""/98, &(0x7f00000000c0)=0x62) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000740)=0x5, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) keyctl$set_reqkey_keyring(0xe, 0x4) [ 362.090288] Dev loop1: unable to read RDB block 1 [ 362.127107] loop1: unable to read partition table [ 362.156318] loop1: partition table beyond EOD, truncated 17:01:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216"}, 0x46) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 362.198063] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 17:01:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = dup2(r2, r0) bind$llc(r3, &(0x7f0000000100)={0x1a, 0x32b, 0x68, 0x2, 0x4, 0x2, @broadcast}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 362.349641] __loop_clr_fd: partition scan of loop1 failed (rc=-22) [ 362.382441] binder_thread_release: 5 callbacks suppressed [ 362.382448] binder: release 13718:13719 transaction 226 out, still active [ 362.394983] binder: unexpected work type, 4, not freed [ 362.395578] binder_alloc: 13718: binder_alloc_buf, no vma [ 362.400740] binder_release_work: 5 callbacks suppressed [ 362.400745] binder: undelivered TRANSACTION_COMPLETE [ 362.406716] binder: 13718:13719 transaction failed 29189/-3, size 0-0 line 2989 [ 362.426369] binder: BINDER_SET_CONTEXT_MGR already set [ 362.431875] binder: 13718:13719 ioctl 40046207 0 returned -16 [ 362.431912] binder_alloc: 13718: binder_alloc_buf, no vma [ 362.443531] binder: 13718:13720 transaction failed 29189/-3, size 24-8 line 2989 [ 362.451376] binder: undelivered TRANSACTION_ERROR: 29189 [ 362.457186] binder: release 13718:13719 transaction 226 in, still active [ 362.457371] binder: 13718:13719 got transaction to invalid handle [ 362.465179] binder_send_failed_reply: 5 callbacks suppressed [ 362.465186] binder: send failed reply for transaction 226, target dead [ 362.470775] binder: 13718:13719 transaction failed 29201/-22, size 0-0 line 2850 [ 362.476943] binder: undelivered TRANSACTION_ERROR: 29189 [ 362.496847] binder: undelivered TRANSACTION_ERROR: 29201 [ 362.651092] FAULT_FLAG_ALLOW_RETRY missing 30 [ 362.655692] CPU: 1 PID: 13671 Comm: syz-executor5 Not tainted 4.20.0-rc6-next-20181214+ #171 [ 362.664269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.673613] Call Trace: [ 362.676213] dump_stack+0x244/0x39d [ 362.679834] ? dump_stack_print_info.cold.1+0x20/0x20 [ 362.685022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.690629] handle_userfault.cold.30+0x47/0x62 [ 362.695327] ? userfaultfd_ioctl+0x55d0/0x55d0 [ 362.699901] ? mark_held_locks+0x130/0x130 [ 362.704124] ? __switch_to_asm+0x40/0x70 [ 362.708205] ? __schedule+0xa49/0x21e0 [ 362.712100] ? __sched_text_start+0x8/0x8 [ 362.716242] ? userfaultfd_ctx_put+0x830/0x830 [ 362.720840] ? match_held_lock+0x850/0x8d0 [ 362.725088] ? print_usage_bug+0xc0/0xc0 [ 362.729153] ? graph_lock+0x270/0x270 [ 362.732977] ? find_held_lock+0x36/0x1c0 [ 362.737035] ? __handle_mm_fault+0x4d19/0x5b70 [ 362.741611] ? lock_downgrade+0x900/0x900 [ 362.745757] ? kasan_check_read+0x11/0x20 [ 362.749894] ? do_raw_spin_unlock+0xa7/0x330 [ 362.754303] ? do_raw_spin_trylock+0x270/0x270 [ 362.758939] ? fault_dirty_shared_page.isra.87+0x320/0x320 [ 362.764566] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 362.769576] __handle_mm_fault+0x4d26/0x5b70 [ 362.773976] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 362.778883] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 362.783995] ? print_usage_bug+0xc0/0xc0 [ 362.788063] ? futex_wait+0x5ec/0xa50 [ 362.791869] ? print_usage_bug+0xc0/0xc0 [ 362.795923] ? graph_lock+0x270/0x270 [ 362.799711] ? graph_lock+0x270/0x270 [ 362.803504] ? find_held_lock+0x36/0x1c0 [ 362.807571] ? handle_mm_fault+0x42a/0xc70 [ 362.811810] ? lock_downgrade+0x900/0x900 [ 362.815987] ? check_preemption_disabled+0x48/0x280 [ 362.821010] ? kasan_check_read+0x11/0x20 [ 362.825146] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 362.830415] ? rcu_read_unlock_special+0x370/0x370 [ 362.835361] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 362.840891] ? check_preemption_disabled+0x48/0x280 [ 362.845900] handle_mm_fault+0x54f/0xc70 [ 362.849949] ? __handle_mm_fault+0x5b70/0x5b70 [ 362.854547] ? find_vma+0x34/0x190 [ 362.858078] __do_page_fault+0x5f6/0xd70 [ 362.862132] do_page_fault+0xf2/0x7e0 [ 362.865920] ? vmalloc_sync_all+0x30/0x30 [ 362.870060] ? error_entry+0x76/0xd0 [ 362.873760] ? trace_hardirqs_off_caller+0xbb/0x310 [ 362.878776] ? find_held_lock+0x36/0x1c0 [ 362.882851] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 362.887801] ? trace_hardirqs_on_caller+0x310/0x310 [ 362.892810] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 362.897657] page_fault+0x1e/0x30 [ 362.901111] RIP: 0010:__get_user_4+0x21/0x30 [ 362.905521] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 40 ee 01 00 48 3b 82 18 14 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 [ 362.924453] RSP: 0018:ffff888182c37c40 EFLAGS: 00010202 [ 362.929806] RAX: 0000000020013ff7 RBX: 0000000020013ff4 RCX: ffffc9000fe3a000 [ 362.937061] RDX: ffffffffffffffff RSI: ffffffff81b2fa73 RDI: 0000000000000282 [ 362.944317] RBP: ffff888182c37c80 R08: 1ffff11030586f65 R09: 0000000000000008 [ 362.951573] R10: 0000000000000001 R11: ffff8881c26b81c0 R12: 000000000000000b [ 362.958840] R13: ffff8881cd8a9040 R14: 0000000000000006 R15: 0000000000000011 [ 362.966124] ? __might_fault+0x1a3/0x1e0 [ 362.970227] ? udp_lib_setsockopt+0x8b/0xa20 [ 362.974671] ? udp_v6_send_skb.isra.31+0x14b0/0x14b0 [ 362.979770] udpv6_setsockopt+0x95/0xa0 [ 362.983783] sock_common_setsockopt+0x9a/0xe0 [ 362.988275] __sys_setsockopt+0x1ba/0x3c0 [ 362.992413] ? kernel_accept+0x310/0x310 [ 362.996465] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 363.001037] ? trace_hardirqs_on+0xbd/0x310 [ 363.005352] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.010703] ? trace_hardirqs_off_caller+0x310/0x310 [ 363.015798] __x64_sys_setsockopt+0xbe/0x150 [ 363.020201] do_syscall_64+0x1b9/0x820 [ 363.024079] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 363.029446] ? syscall_return_slowpath+0x5e0/0x5e0 [ 363.034362] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 363.039207] ? trace_hardirqs_on_caller+0x310/0x310 [ 363.044225] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 363.049234] ? prepare_exit_to_usermode+0x291/0x3b0 [ 363.054243] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 363.059091] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.064268] RIP: 0033:0x457659 [ 363.067456] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.086370] RSP: 002b:00007f0b8d57ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 363.094086] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457659 17:01:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000100), 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v2={0x3, 0x2, 0xc, 0x8001, 0x4f, "ebb95af6cd2141beee2372341ab71204905d5781026d9ac7716dc2df1f89a5cfa418221e95b0d7b7a7cb931af043c7c6884e45b20716e24a7c0a1ddc32cccb841faec8bc8863e4f68d4bdd455ab0b9"}, 0x59, 0x1) dup3(r1, r2, 0x0) 17:01:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0xa00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:43 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab02, 0x400) fallocate(r0, 0x2, 0x8, 0x1ff) 17:01:43 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x19e, 0x0) 17:01:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab9"}, 0x64) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:43 executing program 1: r0 = socket$inet(0x10, 0x2, 0x9) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000340)=@add_del={0x2, &(0x7f0000000300)='vcan0\x00'}) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xff, 0x2, &(0x7f0000000180)=[{&(0x7f0000000080)="0a9892bce0bb396434da6531c69a646a0ad76353b7f377573afeddac", 0x1c, 0x1}, {&(0x7f00000000c0)="e135b5ed575dec2542e298eb01e0b214f5ec5380dd7ca61285d2e3a1fd74bb047c4bbc77fd9a88e4e3287b764f7188184d06adad887e70762efc4a9863f060345d0d4ce2f45d3f9b5558efcccecce7c1d5f14c7fe06a850b88f02387ceb445299b5393ab000ee1a89fe16f1c1b0cb84ee458c8165c1e4cc6990b5597c01e95d5b645a69414f62f85207eadcd02940630aadc27676a6c7d70", 0x98, 0x9}], 0x400, &(0x7f00000001c0)={[{@data_journal='data=journal'}, {@user_xattr='user_xattr'}, {@nouser_xattr='nouser_xattr'}, {@journal_dev={'journal_dev', 0x3d, 0xcba9}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc='auto_da_alloc'}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@i_version='i_version'}, {@noauto_da_alloc='noauto_da_alloc'}], [{@subj_role={'subj_role', 0x3d, 'md5summd5sum'}}, {@permit_directio='permit_directio'}, {@fsname={'fsname', 0x3d, '-'}}, {@audit='audit'}, {@pcr={'pcr', 0x3d, 0x11}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, 'wlan0-!'}}]}) [ 363.101343] RDX: 000000000000000b RSI: 0000000000000088 RDI: 0000000000000007 [ 363.108602] RBP: 000000000072bf00 R08: 0000000000000006 R09: 0000000000000000 [ 363.115895] R10: 0000000020013ff4 R11: 0000000000000246 R12: 00007f0b8d57b6d4 [ 363.123153] R13: 00000000004c4c0a R14: 00000000004d8240 R15: 00000000ffffffff [ 363.202359] binder_alloc_mmap_handler: 8 callbacks suppressed [ 363.202433] binder_alloc: binder_alloc_mmap_handler: 13725 20001000-20004000 already mapped failed -16 [ 363.234208] binder: BINDER_SET_CONTEXT_MGR already set [ 363.244837] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 17:01:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab9"}, 0x64) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:43 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x3}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x7ffd, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x84, @dev={0xfe, 0x80, [], 0xb}, 0xfffffffffffffffe}, {0xa, 0x4e22, 0xfffffffffffffff7, @dev={0xfe, 0x80, [], 0xc}}, r2, 0xfffffffffffffffb}}, 0x48) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x40) 17:01:43 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xf2, 0x0) [ 363.251792] binder: 13725:13731 ioctl 40046207 0 returned -16 17:01:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x68000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r5, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8055) close(r4) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114, 0x0) dup3(r2, r3, 0x0) 17:01:43 executing program 1: syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x96, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e63707500609fb8ab74b0f30ef7048e470929889a2605dc92ffa1937e27b84b5d3511d2e95cccfd6656e1e43257e640083198770e5dab3441b5", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x12) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x64) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x101000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x100, 0x12, 0x1, r2}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x20, 0x4, 0x20, 0x80000001, 0x0, 0x0, 0x7}, 0xb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x20) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000580)) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)=r5) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000480), 0x4) 17:01:43 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x177, 0x0) [ 363.455083] binder_alloc: binder_alloc_mmap_handler: 13756 20001000-20004000 already mapped failed -16 17:01:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab9"}, 0x64) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:43 executing program 4: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440)='tls\x00', 0x2fa) r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000340)=""/225) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100), 0x28) getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0xfffffffffffffffd}, 0x50) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x600080, 0x0) sendmmsg(r1, &(0x7f0000000a40), 0x400000000000224, 0x0) accept4(0xffffffffffffffff, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]}}], 0x1, 0x0) connect(0xffffffffffffffff, &(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @dev}, 0x80) [ 363.503050] binder: BINDER_SET_CONTEXT_MGR already set [ 363.531822] binder: 13756:13761 ioctl 40046207 0 returned -16 17:01:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000800)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/201, 0xc9}, {&(0x7f0000000200)=""/175, 0xaf}, {&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f0000000340)=""/201, 0xc9}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f00000004c0)=""/136, 0x88}, {&(0x7f0000000580)=""/59, 0x3b}, {&(0x7f00000005c0)=""/54, 0x36}, {&(0x7f0000000600)=""/153, 0x99}], 0x9, &(0x7f0000000780)=""/90, 0x5a}, 0x40000000) dup3(r1, r2, 0x0) [ 363.582300] Unknown ioctl -1072150272 17:01:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204"}, 0x73) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x6800, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:44 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x74, 0x0) 17:01:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204"}, 0x73) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 363.908927] Unknown ioctl -1072150272 17:01:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0xfffffffffffffffc) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) setsockopt$inet_mreqsrc(r3, 0x88, 0x26, &(0x7f0000013ff4)={@remote}, 0xc) close(r3) dup3(r1, r2, 0x0) r4 = getuid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r5) 17:01:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204"}, 0x73) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:44 executing program 4: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440)='tls\x00', 0x2fa) r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000340)=""/225) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100), 0x28) getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0xfffffffffffffffd}, 0x50) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x600080, 0x0) sendmmsg(r1, &(0x7f0000000a40), 0x400000000000224, 0x0) accept4(0xffffffffffffffff, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]}}], 0x1, 0x0) connect(0xffffffffffffffff, &(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @dev}, 0x80) 17:01:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x68, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:44 executing program 1: syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x96, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e63707500609fb8ab74b0f30ef7048e470929889a2605dc92ffa1937e27b84b5d3511d2e95cccfd6656e1e43257e640083198770e5dab3441b5", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x12) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x64) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x101000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x100, 0x12, 0x1, r2}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x20, 0x4, 0x20, 0x80000001, 0x0, 0x0, 0x7}, 0xb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x20) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000580)) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)=r5) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000480), 0x4) 17:01:44 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x17e, 0x0) 17:01:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac5"}, 0x7a) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 364.202161] binder_alloc: binder_alloc_mmap_handler: 13815 20001000-20004000 already mapped failed -16 17:01:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x5, {0x2, 0x8, 0x800, 0xa7}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000140)={0x1, "b0d5009d914c4f571049e29867e49fa1ec5e5bdd85f90f5e048edd0481a7b40c", 0x41, 0x0, 0x5, 0x10, 0x3}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) r5 = dup3(r1, r2, 0x0) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f00000000c0)=0x3f, &(0x7f0000000100)=0x4) 17:01:44 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xa, 0x0) [ 364.282686] binder: BINDER_SET_CONTEXT_MGR already set [ 364.292331] binder: 13815:13818 ioctl 40046207 0 returned -16 [ 364.311185] Unknown ioctl -1072150272 17:01:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac5"}, 0x7a) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:44 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x19c, 0x0) 17:01:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x508000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x8000000000, 0x10000) sendmsg(r1, &(0x7f00000007c0)={&(0x7f0000000400)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)="90f2dcb74690b99d4d8b4886c44a07782311434cf6352e930baf2df8e8dc364d2728e92e06b0eb9838ec134df6e26108e80178aae5fa5c1619730a4c96c224fb3f439bfba171e1e6053009292c6eb8bb1d23a8294cedc5946819e2950fd349cc96f95fb894d270ccbef5a9736217d3fe25f2caeb976b1c277b862d43df2381f791506f9066982da10f24fa61b427b3f9b6", 0x91}], 0x1, &(0x7f0000000580)=[{0x88, 0x102, 0x2, "186dc24f241a40aaf33b4f0c23b2d9acc6d1f7198f13929aa8757e639df5165b64d6e59086dce87a8f85b82e759e0548450aacedb8e8726917709dd4d7f388088eaf05bfbafc4dfa532639557e8d5f8852351c362ee18f3770e17463b6a5adbbf8458db4d97de77ba4047b2b7ef6a81ff30188ad08"}, {0xa0, 0x19d, 0x1f, "77638858418f8d322df1f41684d9be2fa34237e790fd5c308f4946a88aedd605c37f5526777899299b44ccb04c9a5d0bbca83ae94ea61151555d7c66c5f9ee5a8cddb35efa57e179405aab72ebdd950baf9432a054cdfabc8cbe3845432b3ffaaa7a40eb21b814cf8a043078bdf2b70a75911067aae00a1de977bcdc25e16a30fcb9e500f8d12ce69249d5b7129522"}, {0x88, 0x10c, 0x2, "b4228c128a8dd4df52c83c5e36092ffce645249e61414f51557e73f253b671463189fd73594ae3608d3c8869c5dc163d0b7d81bc0f143a1ca8385df1a705ff74621d58b903767351f4bb3328c6c2f214b7c26d333de348e69aaaefad3f7b35e13d274c4c987c0a7633b2b2b2f3d00471ce"}, {0x90, 0x115, 0x0, "4b1ae59463d0487965901a77f029931c16a58250059c67b8f9f158e654861a29ae61632cd4be8c03e0edc55af5c531d56a5c59ce818ea911f0248920e9638bf23fbdaf8e82d45c19e445f648cc1fb3a2c4dc1e94a73abdee113a56c193b3f56d4fd7f486447313b99428eb5c974071d40d78d6a594df844e2e58"}], 0x240}, 0x40) fcntl$setsig(r0, 0xa, 0x18) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x100000000001}) r5 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x0) setsockopt$inet_mreqsrc(r5, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @rand_addr, @remote}, 0xc) close(r3) ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f0000000240)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc2020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x300, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xf1ae}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) dup3(r1, r2, 0x0) [ 364.526531] binder_alloc: binder_alloc_mmap_handler: 13841 20001000-20004000 already mapped failed -16 17:01:44 executing program 1: syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x96, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e63707500609fb8ab74b0f30ef7048e470929889a2605dc92ffa1937e27b84b5d3511d2e95cccfd6656e1e43257e640083198770e5dab3441b5", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x12) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x64) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x101000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x100, 0x12, 0x1, r2}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x20, 0x4, 0x20, 0x80000001, 0x0, 0x0, 0x7}, 0xb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x20) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000580)) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)=r5) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000480), 0x4) [ 364.619485] binder: BINDER_SET_CONTEXT_MGR already set [ 364.624826] binder: 13841:13846 ioctl 40046207 0 returned -16 [ 364.730165] Unknown ioctl -1072150272 17:01:45 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x20001, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x7fff) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000000c0)={0x1000000000000000, 0xf5}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000100)={0x8}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x0, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r1, 0x12, "da7d46", "c4ca0ef8f4acafcc29cbdd93cc4518d47de8e9985d0fed7cf96a0a28cd60b84d459a06cc1be09752807f14e8573c12aa0504f49e29a93d98d5e961c649558d489524ea27db8ac260dfdf1bb92fa0a5c92fc2aedcb6f5853b04abcb43c7d82808b427cfa6b9802c85a457330b57a92d5c57fee8a455fe9b124bf1fd94c9ebaf257955f028ecbe19a730935f293ea725292c1cba62325909b182e5d59d40425c54887c6992e83f2e6e037013ae7bfadb6e79730ff530f8a0ece78c175276dba23c7cfa18acbf3e8bf140510d151048255239bc3c117c5a7e196341184f19f8ddf685933cecef4e4883b5c81dc1bb7d5ad8de26fa362a40c9809deef12b80a37065"}}, 0x110) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000300)=0x7) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000340)='./file0\x00', r2, r3, 0x1000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x480180}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe4, r4, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb87a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x85a8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000780)={0x52a6, 0x6, 0xffff, 0x6, 0x9, 0xe69}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) recvmsg(r0, &(0x7f0000001900)={&(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000840)=""/51, 0x33}, {&(0x7f0000000880)=""/7, 0x7}], 0x2, &(0x7f0000000900)=""/4096, 0x1000}, 0x40010002) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000001940)={0x1, 0x7, 0xfffffffffffffc01, {0x77359400}, 0x100000001, 0x10001}) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000019c0)={0x1, 0x9}) fgetxattr(r0, &(0x7f0000001a00)=@random={'btrfs.', '\x00'}, &(0x7f0000001a40)=""/118, 0x76) ioctl$TIOCNXCL(r0, 0x540d) exit(0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001ac0)={0x0, @in6={{0xa, 0x4e22, 0x3ff, @loopback, 0x4}}, 0x1000, 0x100, 0x3ff, 0x20, 0x9}, &(0x7f0000001b80)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001bc0)={r5, 0x40, 0x5f}, 0x8) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000001c00)) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000001c80)={0x0, 0xff, 0x2, &(0x7f0000001c40)=0xfffffffffffffffe}) ioctl$KDSKBLED(r0, 0x4b65, 0x8) fcntl$setsig(r0, 0xa, 0x1c) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000001cc0)={0x8, @pix_mp={0xfffffffffffffffc, 0x3, 0x38303553, 0x2, 0x6, [{0x400, 0x7}, {0x9, 0x3}, {0xda53, 0x724f}, {0x1, 0x6ae}, {0x3, 0x100000001}, {0x7f, 0x8}, {0x7, 0x9}, {0x8, 0xd60b}], 0x0, 0x7, 0x7, 0x1, 0x7}}) lsetxattr$trusted_overlay_upper(&(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00)='trusted.overlay.upper\x00', &(0x7f0000001e40)={0x0, 0xfb, 0x1015, 0x3, 0x9, "e64e484d741d4ae41e267f3a7b5e987d", "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"}, 0x1015, 0x2) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000002e80)=0x8, 0x4) 17:01:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac5"}, 0x7a) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000040)=""/106, &(0x7f00000000c0)=0x6a) r3 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x62e6fdf4, 0x40602) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000140)={{0x3, 0x0, 0x80000000, 0x2, 0x4}, 0xfff, 0x7fff, 0xb6e}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) dup3(r1, r2, 0x0) 17:01:45 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x15b, 0x0) 17:01:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x4c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:45 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x18c, 0x0) 17:01:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000040)=0x8, 0x4) close(r3) dup3(r1, r2, 0x0) 17:01:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589"}, 0x7e) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 364.944627] binder_alloc: binder_alloc_mmap_handler: 13871 20001000-20004000 already mapped failed -16 17:01:45 executing program 1: syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x96, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e63707500609fb8ab74b0f30ef7048e470929889a2605dc92ffa1937e27b84b5d3511d2e95cccfd6656e1e43257e640083198770e5dab3441b5", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x12) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x64) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x101000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x100, 0x12, 0x1, r2}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x20, 0x4, 0x20, 0x80000001, 0x0, 0x0, 0x7}, 0xb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x20) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000580)) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)=r5) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000480), 0x4) 17:01:45 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x198, 0x0) 17:01:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 364.989248] binder: BINDER_SET_CONTEXT_MGR already set [ 365.004530] binder: 13871:13879 ioctl 40046207 0 returned -16 17:01:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589"}, 0x7e) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 365.147280] Unknown ioctl -1072150272 17:01:46 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x171, 0x0) 17:01:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x60000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589"}, 0x7e) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000140)={@empty, @broadcast, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bridge\x00', r3}) r4 = socket$inet6(0xa, 0x5, 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) dup3(r1, r2, 0x0) epoll_create(0x3) 17:01:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)=ANY=[@ANYBLOB="17c9"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x222002, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0xa366, 0x1, [0x1f]}, &(0x7f00000000c0)=0xa) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000100)={r4, 0x7}, &(0x7f0000000140)=0x8) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:01:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x1, 0x0) r4 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000280)={0x1, 0x1}, 0x2) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x40000, &(0x7f0000000500)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@dont_appraise='dont_appraise'}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r6}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f7570311881e9", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000640)={r8, @in={{0x2, 0x4e20, @loopback}}, 0x7ff, 0xf2e, 0x3ff, 0xfff, 0x9}, 0x98) utimes(&(0x7f0000000440)='./file0\x00', 0x0) [ 365.827035] l2tp_ppp: tunl 4: set debug=464c457f [ 365.837847] binder_alloc: binder_alloc_mmap_handler: 13914 20001000-20004000 already mapped failed -16 17:01:46 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x4f, 0x0) 17:01:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448f"}, 0x80) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 365.875340] binder: BINDER_SET_CONTEXT_MGR already set [ 365.890788] binder: 13914:13922 ioctl 40046207 0 returned -16 [ 365.896874] l2tp_core: tunl 4: closing all sessions... [ 365.958810] l2tp_core: tunl 4: closing... 17:01:46 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/softnet_stat\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$notify(r3, 0x402, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup3(r1, r3, 0x80000) ppoll(&(0x7f00000000c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0x2, 0x5, 0x5}) 17:01:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x700000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) r4 = socket$inet6(0xa, 0x803, 0x7f) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0) dup3(r2, r3, 0x0) 17:01:46 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x89, 0x0) 17:01:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448f"}, 0x80) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 366.123534] binder_alloc: binder_alloc_mmap_handler: 13946 20001000-20004000 already mapped failed -16 17:01:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0xfffffffffffffffc) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000080)={0xc9, 0xffffffffffffff81, 0x0, 0x1, 0x8000, 0x401}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) dup3(r2, r3, 0x0) [ 366.196127] binder: BINDER_SET_CONTEXT_MGR already set [ 366.213048] binder: 13946:13947 ioctl 40046207 0 returned -16 17:01:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448f"}, 0x80) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x6000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x5, 0x4) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x38) recvmsg(r0, &(0x7f0000000400)={0x0, 0x943c4b1c5a1f3685, 0x0, 0xffffffffffffff0c, 0x0, 0x22}, 0x10000) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000040)) 17:01:46 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x9f, 0x0) 17:01:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x30}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x80000000, 0x30}, &(0x7f0000000100)=0xc) close(r3) dup3(r1, r2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x0, 0x4, 0x800, 0x1004000}) [ 366.391669] binder_alloc: binder_alloc_mmap_handler: 13970 20001000-20004000 already mapped failed -16 17:01:46 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x4000000002, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$llc(r0, &(0x7f0000000040), 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000007c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000740)="5213849abc8b0abaf714440926690daeaf6914032b8954ffb4566ea94f6e8da3106ba600b4f4b1a8d5365a572172756d7b0dd123e99ea18cf30b5665b43af49e00b372f6852c76c72bdc5f4ec11f03a772e140f2a4d3c3b7da3b2ec6a2c2b07e7672b7eac977316d9034c524", 0x6c, r1}, 0x68) openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/nullb0\x00', 0x0, 0x0) recvmsg(r2, &(0x7f0000000480)={&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/80, 0x50}], 0x1, &(0x7f00000003c0)=""/187, 0xbb}, 0x40) getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000700), &(0x7f0000000500)=0x4) r4 = fcntl$getown(r1, 0x9) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000840)=r4) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000004c0)=0x3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000b00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b40)={'team0\x00', r5}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000540)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000580)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f00000005c0)='-\\\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x5, &(0x7f0000000640)='syz0\x00'}, 0x30) r6 = fcntl$getown(r2, 0x9) r7 = creat(&(0x7f00000008c0)='./file0\x00', 0x100) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000940)={r5, 0x5, 0x8, 0x100, 0x1f, 0x25e498ff, 0x6}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000900)=0x3ff) r8 = getpgrp(r6) r9 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x65d, 0x200) write$UHID_CREATE(r9, &(0x7f0000000140)={0x0, 'syz0\x00', "73797a31000000000000000000000000008000", 'syz1\x00', &(0x7f0000000080)=""/45, 0x2d, 0xff, 0xffffffff, 0x1, 0x7ff, 0x2}, 0x120) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r9) getpgid(r8) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000880)) 17:01:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) close(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000580)="6f6f6d5f73636f72655f61646a009fc5720e384adb40f8bf6a31e8ce88025eb2f468545232f1891e7e6d19c96c475e6c136337f7247f3f393e62e82f3cdb6a3e3ad91004721815dc2910493cd03a0f18ec00c2778a3043f8a9ea61168ce643f5cbdc1cea609ce18edd8eaa1ff4afa35abf174d1affb18d505d3c9ee1425b79e6aee949db299bcba3576c74e9a9fcf8def05d0aa553161d6888c5eacfca35d22e93fd09902368710d9b3b83dd0f738012c68e7ed4efc73aee346375b203d5d529c9f12fea955f27fbb9a934ca9ef3fbc9d67ed5b77d42e52e86bfbb23b9f74eb3fe3f78cc585e16627a228aa4351074bbb7caa7ccde5fdcabf2b8c7b3d32624bb348109bbe3bf42286c6ebce9453c36248f29b01ac9e318a6d97a6b945aed96ade25ccb2c21130d762972f10045cc636772bfd475429fa58c38e4440fd356746489c85614173dd9cf2ac8c7b7cc18322f4a6d8c359314fd0227e3c9127ec310b7c7aecf4182337cfdba32bdc62de0455f78c7698d56d95c5f6cfbd878582e4e9b6491d5c1a1ba684c957746137bfdc8541fe1296807e8576e5de4") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28}, 0x10) sendfile(r3, r0, 0x0, 0x7fff) sendfile(r0, r1, &(0x7f0000000080), 0x800) 17:01:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(0xffffffffffffffff, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0x7ffff000}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x3000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:47 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x187, 0x0) 17:01:47 executing program 4: r0 = syz_open_dev$radio(&(0x7f00000010c0)='/dev/radio#\x00', 0x3, 0x2) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001100)={@in6={{0xa, 0x4e20, 0xffff, @ipv4={[], [], @broadcast}, 0x3f}}, 0x0, 0xc70, 0x0, "935d867cb272ce11050519181ab78c5a620abdbd628891c88f7a1a12de95ffb03c4fe23b60c136ee7e477491a5efeec7a9ee5eb2c60d3a19443a22333ca216f01f22a41f10f06eef0504f4431aaba3f2"}, 0xd8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xd5c, 0x4400) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x18, 0x1, "a83c0794b7be5fddd46728f42c75effcad45f178121c11e06010e0ba8c11abb6631c98049af59a76dea972bf0202ed41de168c488ff7211d3875a245257e31b8", "2798941fdd37e4f4976c20ce16b4ae01da775f8e009ec32baca3a78c5d7ff033", [0x100000001, 0x81]}) r2 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)=""/4096) ioctl$KVM_SMI(r2, 0xaeb7) recvmmsg(r2, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) 17:01:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x848c1, 0x12) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x40}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000002c0)={r6, @in={{0x2, 0x4e21, @multicast2}}, 0x1, 0x1}, 0x90) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) dup3(r2, r3, 0x0) 17:01:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @loopback, @mcast2, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 366.957947] syz-executor1 (14010): /proc/14010/oom_adj is deprecated, please use /proc/14010/oom_score_adj instead. [ 366.969257] binder_alloc: binder_alloc_mmap_handler: 13998 20001000-20004000 already mapped failed -16 17:01:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f000000a500)) 17:01:47 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xfd, 0x0) [ 367.002797] binder: BINDER_SET_CONTEXT_MGR already set 17:01:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5fc7e12a, 0x600000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f00000000c0)={r3, 0x1}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000002000)) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r5, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r5) dup3(r1, r4, 0x0) 17:01:47 executing program 4: getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000004c0)={r0, 0x8}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0xffffffffffffffd9, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000500)) r2 = socket$inet6(0xa, 0x2, 0xb46000000000000) close(r2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@dev}, &(0x7f0000000540)=0x14) r3 = syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0x6, 0xa483) write$UHID_CREATE(r3, &(0x7f0000000800)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000700)=""/249, 0xf9, 0x7f, 0x39, 0xbf3, 0x600000000000, 0x5}, 0x120) open_by_handle_at(r1, &(0x7f0000000580)={0xbd, 0x0, "f097268b9bce2a246ce1583a7e4c8015244774b4e85880cc46bf5614afbf5ab201f5b91e36daf578fd81897b5fe5ba917328720e3c9166980617dd4abe8959323b16709fda10f59de28213eba36b6032dd53ebfee183d2044e8270294e629a1619c718269dcb3ed87faa61fdb58c8347a69f4ca9cb490617bca66d8e8672e93cc819633133c83ef73284d2fa3a931a8fe9848cb38e24a5633f37cfe43aed1db9c97e4401abc31a810a7858a31ae72a89262351323d"}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f00000003c0)='security.SMACK64IPOUT\x00', &(0x7f0000000240)='*wlan0\x00', 0x7, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x2012}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) write$P9_RXATTRCREATE(r6, &(0x7f0000000140)={0x7}, 0x7) write$P9_RSETATTR(r6, &(0x7f0000000040)={0x7}, 0x7) sendfile(r2, r6, &(0x7f0000d83ff8), 0x800000000024) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x50, &(0x7f00000000c0)}, 0x10) ioctl$DRM_IOCTL_DROP_MASTER(r7, 0x641f) [ 367.057999] binder: 13998:14008 ioctl 40046207 0 returned -16 17:01:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f000000a500)) 17:01:47 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'team_slave_1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="34000000000000000000a14f869c341e26bedb8dfaca14abe60000000000000000140000e300000000000000000000000000000000"]}) 17:01:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x30000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffff9c, 0x50, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r3, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000300)=0x1e) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x41}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r5, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x80000, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xffffffffffffffba, 0x6, 0x2, 0xbc, 0x0, 0x4, 0x402, 0xa, 0x7fffffff80000, 0x3, 0x9, 0x10000, 0x3, 0x100000001, 0xfff, 0x5, 0x5, 0x101, 0x890b, 0x0, 0x5291, 0xac1, 0x1000, 0x6, 0x6, 0x10000, 0xffffffffffffffc1, 0x0, 0x0, 0xfffffffffffffff8, 0x8000, 0x3f, 0x9, 0xfffffffffffffffd, 0x4000000000, 0x6, 0x0, 0xdf, 0x1, @perf_config_ext={0x3, 0x5}, 0x400, 0x5, 0x8, 0x0, 0xfffffffffffffffb, 0x9, 0x7fffffff}, r6, 0x8, r7, 0x3) dup3(r1, r2, 0x0) 17:01:47 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x14e, 0x0) 17:01:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f000000a500)) 17:01:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={r2}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=[@increfs={0x40046304, 0x1}]}) [ 367.330668] binder_alloc: binder_alloc_mmap_handler: 14039 20001000-20004000 already mapped failed -16 [ 367.358970] binder: BINDER_SET_CONTEXT_MGR already set [ 367.375752] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 367.393189] binder: 14039:14045 ioctl 40046207 0 returned -16 17:01:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280), 0x0, 0x0, &(0x7f000000a500)) [ 367.434548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 367.443243] binder: BINDER_SET_CONTEXT_MGR already set [ 367.453383] binder_alloc: 14057: binder_alloc_buf, no vma 17:01:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x80500000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 367.480743] binder: 14057:14058 ioctl 40046207 0 returned -16 [ 367.490762] binder: 14057:14060 transaction failed 29189/-3, size 24-8 line 2989 17:01:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280), 0x0, 0x0, &(0x7f000000a500)) [ 367.536920] binder: undelivered TRANSACTION_ERROR: 29189 [ 367.553463] binder: send failed reply for transaction 244 to 14057:14058 17:01:47 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa93aaaa0067907800000000ff000000000007000000450000000000000000000000ac14ffbbe0000001"], &(0x7f0000000040)={0x0, 0x2, [0x0, 0xaeb]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r1, 0xffffffffffff0000}, &(0x7f0000000180)=0x8) fanotify_init(0x40, 0x40002) [ 367.597071] binder: BINDER_SET_CONTEXT_MGR already set [ 367.624140] binder: 14067:14071 ioctl 40046207 0 returned -16 [ 367.624318] binder: undelivered TRANSACTION_COMPLETE [ 367.642627] binder: undelivered TRANSACTION_ERROR: 29189 [ 367.668307] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 367.697834] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 367.725803] IPv6: ADDRCONF(NETDEV_UP): wlan2: link is not ready [ 367.800746] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:01:48 executing program 4: sched_setaffinity(0x0, 0xfffffffffffffe38, &(0x7f00000000c0)=0x80009) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000480)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) r1 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bcsf0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/userio\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @broadcast, @loopback}, &(0x7f00000006c0)=0xc) r3 = getpgrp(0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000002000)='/dev/audio\x00', 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x113) process_vm_readv(0x0, &(0x7f0000001c00)=[{&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000001780)=""/110, 0x6e}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/105, 0x69}, {&(0x7f0000001980)=""/166, 0xa6}, {&(0x7f0000001b80)=""/117, 0x75}], 0x6, &(0x7f0000000440)=[{&(0x7f0000001cc0)=""/176, 0xb0}], 0x1, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) ptrace$poke(0x5, r1, &(0x7f00000004c0), 0x7fffffff) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000280)={0x1, 0x0, {0x2e, 0x2d, 0x10, 0x9, 0x2, 0xfffffffffffffffa, 0x1, 0xf2, 0xffffffffffffffff}}) close(0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x28, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8}]}, 0x28}}, 0x0) socket(0x8, 0xb, 0x1) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') process_vm_readv(r3, &(0x7f0000000100)=[{&(0x7f0000001d80)=""/85, 0x55}], 0x1, &(0x7f0000002100)=[{&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002080)=""/114, 0x72}], 0x2, 0x0) 17:01:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x7a000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280), 0x0, 0x0, &(0x7f000000a500)) 17:01:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6368616e67656861742030f8303030303030303030303030303030305e"], 0x1d) 17:01:48 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x113, 0x0) 17:01:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x3, 0x2, 0xfb}, 0x4}, 0x20, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x4110, r2, 0x0) r3 = userfaultfd(0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000180)) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x20}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x2, 0x8000) setsockopt$inet_mreqsrc(r5, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r0) r6 = dup3(r2, r3, 0x0) close(r6) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000000c0)={0x5}) 17:01:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sigaltstack(&(0x7f0000012000/0x6000)=nil, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000380)="81fb0e009b103745fd53eeb8c90928ad6eb7428ffd7424b68be3676b47caacb5fe9e8988329fc9a2563a9eb5789add11eb5f971a4b4ed2e6f608975b5d27122fdbb71ebdcda03415c8b798be4cda170254420b722d4abf523af1abfdbb4bd30f8e3fea7c7e9b3fb40b3b1ceeff118e1ba5b645b17e0ead12b07cbffa334c10a145d2df7440b78acdc40c5763c0557c6a37ba9634c80e305b5fe156d90a43b2be5f33b16dbdb7d5651bee81f7de2d1ee626c4de6b92b8c6b8ea76899176cde09309a2f69cdeff49ee4fbdb3a53106c2205dbb5a8a92e8c0e2c644e75022bd75f0b23fda3cf9f94f2c1989a139eb917544bc5065e00deaffffffffffffff00") r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) dup3(r2, r0, 0x0) [ 368.272236] AppArmor: change_hat: Invalid input '0ø0000000000000000^' [ 368.291632] binder_alloc_mmap_handler: 1 callbacks suppressed [ 368.291652] binder_alloc: binder_alloc_mmap_handler: 14085 20001000-20004000 already mapped failed -16 [ 368.336743] binder: BINDER_SET_CONTEXT_MGR already set 17:01:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0xd}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6368616e67656861742030f8303030303030303030303030303030305e"], 0x1d) 17:01:48 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x33, 0x0) 17:01:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x7300, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 368.396502] binder: 14085:14090 ioctl 40046207 0 returned -16 [ 368.528058] BUG: sleeping function called from invalid context at mm/slab.h:421 [ 368.536116] in_atomic(): 1, irqs_disabled(): 0, pid: 14111, name: syz-executor3 [ 368.543691] 1 lock held by syz-executor3/14111: [ 368.548388] #0: 0000000028cc3eb7 (sk_lock-AF_ALG){+.+.}, at: skcipher_recvmsg+0xbb/0x1420 [ 368.551665] binder_alloc: binder_alloc_mmap_handler: 14112 20001000-20004000 already mapped failed -16 [ 368.556989] Preemption disabled at: [ 368.557013] [] kernel_fpu_begin+0x16/0x260 [ 368.572835] binder: BINDER_SET_CONTEXT_MGR already set [ 368.576215] CPU: 0 PID: 14111 Comm: syz-executor3 Not tainted 4.20.0-rc6-next-20181214+ #171 [ 368.576225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.576231] Call Trace: [ 368.576256] dump_stack+0x244/0x39d [ 368.576281] ? dump_stack_print_info.cold.1+0x20/0x20 [ 368.583784] binder: 14112:14116 ioctl 40046207 0 returned -16 [ 368.590166] ? vprintk_func+0x85/0x181 [ 368.590186] ? kernel_fpu_begin+0x16/0x260 [ 368.590208] ___might_sleep.cold.86+0x221/0x254 [ 368.590226] ? perf_trace_sched_process_exec+0x860/0x860 [ 368.590251] __might_sleep+0x95/0x190 [ 368.590273] __kmalloc+0x2da/0x760 [ 368.590295] ? trace_hardirqs_off+0xb8/0x310 [ 368.646896] ? kasan_check_read+0x11/0x20 [ 368.651061] ? do_raw_spin_unlock+0xa7/0x330 [ 368.655564] ? skcipher_walk_next+0x7f9/0x17f0 [ 368.656223] binder_alloc: binder_alloc_mmap_handler: 14120 20001000-20004000 already mapped failed -16 [ 368.660170] skcipher_walk_next+0x7f9/0x17f0 [ 368.660198] ? skcipher_register_instance+0x220/0x220 [ 368.660217] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 368.660237] ? trace_hardirqs_on+0xbd/0x310 [ 368.660256] ? sock_kfree_s+0x29/0x60 [ 368.660274] ? trace_hardirqs_off_caller+0x310/0x310 [ 368.660296] skcipher_walk_first+0xff/0x3a0 [ 368.660311] ? sock_kfree_s+0x29/0x60 [ 368.660332] skcipher_walk_skcipher+0x541/0x700 [ 368.670374] binder: BINDER_SET_CONTEXT_MGR already set [ 368.674206] skcipher_walk_virt+0x58/0xd0 [ 368.674289] chacha_simd_stream_xor+0xb3/0xa40 [ 368.674313] ? af_alg_wmem_wakeup+0x7d0/0x7d0 17:01:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x4c000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 368.682664] binder: 14120:14121 ioctl 40046207 0 returned -16 [ 368.684074] ? chacha_4block_xor_ssse3+0x8d0/0x8d0 [ 368.684111] ? refcount_dec_checked+0x70/0x70 [ 368.684163] ? sock_cmsg_send+0x2e0/0x2e0 [ 368.684178] ? preempt_count_add+0xbc/0x1b0 [ 368.684198] chacha_simd+0xd8/0x110 [ 368.756008] skcipher_recvmsg+0xcc9/0x1420 [ 368.760342] ? aa_af_perm+0x5a0/0x5a0 [ 368.764174] ? skcipher_sendmsg_nokey+0x140/0x140 [ 368.769108] ? apparmor_socket_recvmsg+0x29/0x30 [ 368.773914] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.779461] ? security_socket_recvmsg+0x9c/0xc0 [ 368.784210] ? skcipher_sendmsg_nokey+0x140/0x140 [ 368.789046] sock_recvmsg+0xd0/0x110 [ 368.792759] ? __sock_recv_ts_and_drops+0x420/0x420 [ 368.797793] ___sys_recvmsg+0x2b6/0x680 [ 368.801801] ? mark_held_locks+0x130/0x130 [ 368.806046] ? ___sys_sendmsg+0x930/0x930 [ 368.810184] ? alloc_pages_current+0x17b/0x350 [ 368.814774] ? af_alg_sendmsg+0x7fe/0x1260 [ 368.819012] ? fget_raw+0x20/0x20 [ 368.822487] ? graph_lock+0x270/0x270 [ 368.826306] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 368.831900] ? poll_select_set_timeout+0x156/0x240 [ 368.836845] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 368.842410] do_recvmmsg+0x303/0xb90 [ 368.846143] ? ___sys_recvmsg+0x680/0x680 [ 368.850299] ? lock_release+0xa00/0xa00 [ 368.854278] ? perf_trace_sched_process_exec+0x860/0x860 [ 368.859729] ? lock_downgrade+0x900/0x900 [ 368.863919] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 368.869478] ? _copy_from_user+0xdf/0x150 [ 368.873635] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.879171] ? put_timespec64+0x10f/0x1b0 [ 368.883353] __sys_recvmmsg+0xe5/0x2a0 [ 368.887741] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 368.892076] ? trace_hardirqs_on+0xbd/0x310 [ 368.896440] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.901848] ? trace_hardirqs_off_caller+0x310/0x310 [ 368.907016] __x64_sys_recvmmsg+0xe6/0x140 [ 368.911290] do_syscall_64+0x1b9/0x820 [ 368.915171] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 368.920532] ? syscall_return_slowpath+0x5e0/0x5e0 [ 368.925463] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 368.930337] ? trace_hardirqs_on_caller+0x310/0x310 [ 368.935432] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 368.940494] ? prepare_exit_to_usermode+0x291/0x3b0 [ 368.945528] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 368.950395] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.955598] RIP: 0033:0x457659 [ 368.958803] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 368.977711] RSP: 002b:00007f6ab2af4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 368.985451] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457659 [ 368.992745] RDX: 0000000000000001 RSI: 000000002000a280 RDI: 0000000000000004 [ 369.000019] RBP: 000000000072bf00 R08: 000000002000a500 R09: 0000000000000000 [ 369.007304] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ab2af56d4 [ 369.014585] R13: 00000000004c3b77 R14: 00000000004d6770 R15: 00000000ffffffff 17:01:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0xd}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x3000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:49 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x158, 0x0) 17:01:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0xd}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:49 executing program 4: sched_setaffinity(0x0, 0xfffffffffffffe38, &(0x7f00000000c0)=0x80009) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000480)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) r1 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bcsf0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/userio\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @broadcast, @loopback}, &(0x7f00000006c0)=0xc) r3 = getpgrp(0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000002000)='/dev/audio\x00', 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x113) process_vm_readv(0x0, &(0x7f0000001c00)=[{&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000001780)=""/110, 0x6e}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/105, 0x69}, {&(0x7f0000001980)=""/166, 0xa6}, {&(0x7f0000001b80)=""/117, 0x75}], 0x6, &(0x7f0000000440)=[{&(0x7f0000001cc0)=""/176, 0xb0}], 0x1, 0x0) mount(&(0x7f00008deff8), &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) ptrace$poke(0x5, r1, &(0x7f00000004c0), 0x7fffffff) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000280)={0x1, 0x0, {0x2e, 0x2d, 0x10, 0x9, 0x2, 0xfffffffffffffffa, 0x1, 0xf2, 0xffffffffffffffff}}) close(0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x28, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8}]}, 0x28}}, 0x0) socket(0x8, 0xb, 0x1) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') process_vm_readv(r3, &(0x7f0000000100)=[{&(0x7f0000001d80)=""/85, 0x55}], 0x1, &(0x7f0000002100)=[{&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002080)=""/114, 0x72}], 0x2, 0x0) [ 369.145910] binder_alloc: binder_alloc_mmap_handler: 14127 20001000-20004000 already mapped failed -16 17:01:49 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x124, 0x0) [ 369.194462] binder: BINDER_SET_CONTEXT_MGR already set [ 369.200534] binder: 14127:14128 ioctl 40046207 0 returned -16 [ 369.246975] FAULT_FLAG_ALLOW_RETRY missing 30 [ 369.252414] FAULT_FLAG_ALLOW_RETRY missing 30 [ 369.253010] CPU: 1 PID: 14103 Comm: syz-executor5 Tainted: G W 4.20.0-rc6-next-20181214+ #171 [ 369.266907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.276703] Call Trace: [ 369.279309] dump_stack+0x244/0x39d [ 369.282954] ? dump_stack_print_info.cold.1+0x20/0x20 [ 369.288155] ? finish_task_switch+0x1f4/0x910 [ 369.292675] handle_userfault.cold.30+0x47/0x62 [ 369.297399] ? userfaultfd_ioctl+0x55d0/0x55d0 [ 369.302011] ? mark_held_locks+0x130/0x130 [ 369.306263] ? __switch_to_asm+0x40/0x70 [ 369.310338] ? __switch_to_asm+0x34/0x70 [ 369.314415] ? __switch_to_asm+0x40/0x70 [ 369.318487] ? __switch_to_asm+0x34/0x70 [ 369.322558] ? __switch_to_asm+0x40/0x70 [ 369.326633] ? __switch_to_asm+0x34/0x70 [ 369.330706] ? __switch_to_asm+0x34/0x70 [ 369.334781] ? __switch_to_asm+0x40/0x70 [ 369.338854] ? __switch_to_asm+0x34/0x70 [ 369.342940] ? __switch_to_asm+0x40/0x70 [ 369.347014] ? __switch_to_asm+0x34/0x70 [ 369.351093] ? __switch_to_asm+0x40/0x70 [ 369.355229] ? __schedule+0xa49/0x21e0 [ 369.359159] ? userfaultfd_ctx_put+0x830/0x830 [ 369.363778] ? __sched_text_start+0x8/0x8 [ 369.367939] ? check_preemption_disabled+0x48/0x280 [ 369.372984] ? print_usage_bug+0xc0/0xc0 [ 369.377066] ? graph_lock+0x270/0x270 [ 369.380892] ? try_to_wake_up+0x11c/0x1440 [ 369.385147] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 369.390267] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 369.395391] ? find_held_lock+0x36/0x1c0 [ 369.399477] ? __handle_mm_fault+0x4d19/0x5b70 [ 369.404078] ? lock_downgrade+0x900/0x900 [ 369.408259] ? kasan_check_read+0x11/0x20 [ 369.412417] ? do_raw_spin_unlock+0xa7/0x330 [ 369.416835] ? do_raw_spin_trylock+0x270/0x270 [ 369.421442] ? fault_dirty_shared_page.isra.87+0x320/0x320 [ 369.427089] __handle_mm_fault+0x4d26/0x5b70 [ 369.431527] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 369.436385] ? lock_downgrade+0x900/0x900 [ 369.436406] ? print_usage_bug+0xc0/0xc0 [ 369.436428] ? kasan_check_read+0x11/0x20 [ 369.448822] ? print_usage_bug+0xc0/0xc0 [ 369.452921] ? graph_lock+0x270/0x270 [ 369.452938] ? graph_lock+0x270/0x270 [ 369.452965] ? find_held_lock+0x36/0x1c0 [ 369.460565] ? handle_mm_fault+0x42a/0xc70 [ 369.468854] ? lock_downgrade+0x900/0x900 [ 369.468884] ? check_preemption_disabled+0x48/0x280 [ 369.468906] ? kasan_check_read+0x11/0x20 [ 369.468922] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 369.468938] ? rcu_read_unlock_special+0x370/0x370 [ 369.468958] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 369.468979] ? check_preemption_disabled+0x48/0x280 [ 369.487535] handle_mm_fault+0x54f/0xc70 [ 369.487557] ? __handle_mm_fault+0x5b70/0x5b70 [ 369.487581] ? find_vma+0x34/0x190 [ 369.503051] __do_page_fault+0x5f6/0xd70 [ 369.503077] do_page_fault+0xf2/0x7e0 [ 369.523088] ? vmalloc_sync_all+0x30/0x30 [ 369.527265] ? error_entry+0x76/0xd0 [ 369.530998] ? trace_hardirqs_off_caller+0xbb/0x310 [ 369.536032] ? find_held_lock+0x36/0x1c0 [ 369.540108] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.544966] ? trace_hardirqs_on_caller+0x310/0x310 [ 369.550013] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.554883] page_fault+0x1e/0x30 [ 369.558349] RIP: 0010:__get_user_4+0x21/0x30 [ 369.562765] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 40 ee 01 00 48 3b 82 18 14 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 [ 369.581795] RSP: 0018:ffff8881828c7c40 EFLAGS: 00010202 [ 369.587169] RAX: 0000000020013ff7 RBX: 0000000020013ff4 RCX: ffffc9000fe3a000 [ 369.594475] RDX: ffffffffffffffff RSI: ffffffff81b2fa73 RDI: 0000000000000282 [ 369.601767] RBP: ffff8881828c7c80 R08: 1ffff11030518f65 R09: 0000000000000008 [ 369.609046] R10: 0000000000000001 R11: ffff8881b5e68440 R12: 000000000000000b [ 369.616328] R13: ffff8881c3a64840 R14: 0000000000000006 R15: 0000000000000011 [ 369.623641] ? __might_fault+0x1a3/0x1e0 [ 369.627754] ? udp_lib_setsockopt+0x8b/0xa20 [ 369.632196] ? udp_v6_send_skb.isra.31+0x14b0/0x14b0 [ 369.637350] udpv6_setsockopt+0x95/0xa0 [ 369.641349] sock_common_setsockopt+0x9a/0xe0 [ 369.645885] __sys_setsockopt+0x1ba/0x3c0 [ 369.650066] ? kernel_accept+0x310/0x310 [ 369.654154] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 369.658755] ? trace_hardirqs_on+0xbd/0x310 [ 369.663098] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.668480] ? trace_hardirqs_off_caller+0x310/0x310 [ 369.673615] __x64_sys_setsockopt+0xbe/0x150 [ 369.678047] do_syscall_64+0x1b9/0x820 [ 369.681943] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 369.687318] ? syscall_return_slowpath+0x5e0/0x5e0 [ 369.692257] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.697115] ? trace_hardirqs_on_caller+0x310/0x310 [ 369.702155] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 369.707198] ? prepare_exit_to_usermode+0x291/0x3b0 [ 369.712230] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.717114] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.722323] RIP: 0033:0x457659 [ 369.725528] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 369.744440] RSP: 002b:00007f0b8d57ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 369.752211] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457659 [ 369.759491] RDX: 000000000000000b RSI: 0000000000000088 RDI: 0000000000000007 [ 369.766771] RBP: 000000000072bf00 R08: 0000000000000006 R09: 0000000000000000 [ 369.774053] R10: 0000000020013ff4 R11: 0000000000000246 R12: 00007f0b8d57b6d4 [ 369.781359] R13: 00000000004c4c0a R14: 00000000004d8240 R15: 00000000ffffffff [ 369.795801] CPU: 1 PID: 14108 Comm: syz-executor5 Tainted: G W 4.20.0-rc6-next-20181214+ #171 [ 369.805833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.815220] Call Trace: [ 369.817855] dump_stack+0x244/0x39d [ 369.821520] ? dump_stack_print_info.cold.1+0x20/0x20 [ 369.826729] ? __switch_to_asm+0x34/0x70 [ 369.830830] ? __switch_to_asm+0x40/0x70 [ 369.834935] handle_userfault.cold.30+0x47/0x62 [ 369.839603] ? userfaultfd_ioctl+0x55d0/0x55d0 [ 369.844202] ? mark_held_locks+0x130/0x130 [ 369.848469] ? graph_lock+0x270/0x270 [ 369.852273] ? userfaultfd_ctx_put+0x830/0x830 [ 369.856876] ? print_usage_bug+0xc0/0xc0 [ 369.860941] ? graph_lock+0x270/0x270 [ 369.864736] ? lock_acquire+0x1ed/0x520 [ 369.868714] ? __might_sleep+0x95/0x190 [ 369.872704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.878237] ? find_held_lock+0x36/0x1c0 [ 369.882296] ? __handle_mm_fault+0x4d19/0x5b70 [ 369.886887] ? lock_downgrade+0x900/0x900 [ 369.891046] ? kasan_check_read+0x11/0x20 [ 369.895184] ? do_raw_spin_unlock+0xa7/0x330 [ 369.899584] ? do_raw_spin_trylock+0x270/0x270 [ 369.904161] ? fault_dirty_shared_page.isra.87+0x320/0x320 [ 369.909799] __handle_mm_fault+0x4d26/0x5b70 [ 369.914202] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 369.919035] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 369.924221] ? print_usage_bug+0xc0/0xc0 [ 369.928274] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 369.933368] ? futex_wake+0x304/0x760 [ 369.937165] ? graph_lock+0x270/0x270 [ 369.940956] ? graph_lock+0x270/0x270 [ 369.944749] ? find_held_lock+0x36/0x1c0 [ 369.948817] ? handle_mm_fault+0x42a/0xc70 [ 369.953064] ? lock_downgrade+0x900/0x900 [ 369.957202] ? check_preemption_disabled+0x48/0x280 [ 369.962212] ? kasan_check_read+0x11/0x20 [ 369.966348] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 369.971633] ? rcu_read_unlock_special+0x370/0x370 [ 369.976560] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 369.982099] ? check_preemption_disabled+0x48/0x280 [ 369.987114] handle_mm_fault+0x54f/0xc70 [ 369.991169] ? __handle_mm_fault+0x5b70/0x5b70 [ 369.995740] ? find_vma+0x34/0x190 [ 369.999276] __do_page_fault+0x5f6/0xd70 [ 370.003362] do_page_fault+0xf2/0x7e0 [ 370.007151] ? vmalloc_sync_all+0x30/0x30 [ 370.011298] ? error_entry+0x76/0xd0 [ 370.015007] ? trace_hardirqs_off_caller+0xbb/0x310 [ 370.020039] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.024880] ? trace_hardirqs_on_caller+0x310/0x310 [ 370.029902] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.034754] page_fault+0x1e/0x30 [ 370.038197] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 370.043844] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 370.062754] RSP: 0018:ffff88817c68fd08 EFLAGS: 00010206 [ 370.068128] RAX: ffffed102f8d1fb2 RBX: 0000000000000018 RCX: 0000000000000003 [ 370.075399] RDX: 0000000000000000 RSI: 0000000020012000 RDI: ffff88817c68fd78 [ 370.082670] RBP: ffff88817c68fd40 R08: ffffed102f8d1fb2 R09: ffffed102f8d1faf [ 370.089947] R10: ffffed102f8d1fb1 R11: ffff88817c68fd8f R12: 0000000020012018 [ 370.097258] R13: 0000000020012000 R14: ffff88817c68fd78 R15: 00007ffffffff000 [ 370.104597] ? _copy_from_user+0x10d/0x150 [ 370.108938] __x64_sys_sigaltstack+0xf1/0x3b0 [ 370.113429] ? __do_compat_sys_sigaction+0x5c0/0x5c0 [ 370.118542] ? trace_hardirqs_on+0xbd/0x310 [ 370.122854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.128393] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.133760] ? trace_hardirqs_off_caller+0x310/0x310 [ 370.138900] do_syscall_64+0x1b9/0x820 [ 370.142778] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 370.148135] ? syscall_return_slowpath+0x5e0/0x5e0 [ 370.153058] ? trace_hardirqs_on_caller+0x310/0x310 [ 370.158068] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 370.163126] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 370.169821] ? __switch_to_asm+0x40/0x70 [ 370.173887] ? __switch_to_asm+0x34/0x70 [ 370.177943] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.182794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.187974] RIP: 0033:0x457659 [ 370.191157] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 370.210060] RSP: 002b:00007f0b8d559c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 370.217771] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457659 [ 370.225031] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020012000 [ 370.232307] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 370.239582] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0b8d55a6d4 17:01:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x778) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) syz_open_dev$media(&(0x7f00000007c0)='/dev/media#\x00', 0x6, 0x40) dup3(r2, r3, 0x0) 17:01:50 executing program 1: socketpair$unix(0x1, 0x10000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="356cb7eea5585bda38d1b86d41cd29ee076a378fb81f6cc60fcb136f8e501aaa31a46ddc5420f761991064270648185be06f1c237f9060d94beaee28ad9d2b1ffa9667aff46e20a94a62835aa2cce05686d9b841613515f8a25921c57f0000000000000000000000000000"], 0x1) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x20000) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) write$cgroup_pid(r2, &(0x7f0000000000), 0xfffffea6) 17:01:50 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x440001, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000280)={@un=@file={0x0, './file0\x00'}, {&(0x7f0000000140)=""/253, 0xfd}, &(0x7f0000000040)}, 0xa0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000240), 0x1cb) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e22, @rand_addr=0x7}, 0x100, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='gretap0\x00', 0x9, 0x6, 0x1}) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x30600, 0x0, 0xf, @dev={0xfe, 0x80, [0x0, 0xdb02]}}, 0x80, &(0x7f0000000340), 0x25d, &(0x7f0000000380)}, 0x0) 17:01:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0xd}, {&(0x7f0000002100)=""/209, 0xd1}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:50 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xc8, 0x0) 17:01:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x300, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 370.246855] R13: 00000000004c5010 R14: 00000000004d9248 R15: 00000000ffffffff [ 370.323004] binder_alloc: binder_alloc_mmap_handler: 14154 20001000-20004000 already mapped failed -16 [ 370.324697] BUG: sleeping function called from invalid context at mm/slab.h:421 [ 370.340617] in_atomic(): 1, irqs_disabled(): 0, pid: 14162, name: syz-executor3 [ 370.348082] 1 lock held by syz-executor3/14162: [ 370.352876] #0: 0000000014bcd1cd (sk_lock-AF_ALG){+.+.}, at: skcipher_recvmsg+0xbb/0x1420 [ 370.361413] Preemption disabled at: [ 370.361436] [] kernel_fpu_begin+0x16/0x260 [ 370.362396] binder: BINDER_SET_CONTEXT_MGR already set [ 370.365085] CPU: 0 PID: 14162 Comm: syz-executor3 Tainted: G W 4.20.0-rc6-next-20181214+ #171 [ 370.365095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.365101] Call Trace: [ 370.365130] dump_stack+0x244/0x39d [ 370.365153] ? dump_stack_print_info.cold.1+0x20/0x20 [ 370.372061] binder: 14154:14165 ioctl 40046207 0 returned -16 [ 370.376229] ? vprintk_func+0x85/0x181 [ 370.376247] ? kernel_fpu_begin+0x16/0x260 [ 370.376268] ___might_sleep.cold.86+0x221/0x254 [ 370.376288] ? perf_trace_sched_process_exec+0x860/0x860 [ 370.425673] __might_sleep+0x95/0x190 [ 370.434927] __kmalloc+0x2da/0x760 [ 370.438485] ? trace_hardirqs_off+0xb8/0x310 [ 370.442916] ? kasan_check_read+0x11/0x20 [ 370.442936] ? do_raw_spin_unlock+0xa7/0x330 [ 370.451482] ? skcipher_walk_next+0x7f9/0x17f0 [ 370.456082] skcipher_walk_next+0x7f9/0x17f0 [ 370.460531] ? skcipher_register_instance+0x220/0x220 [ 370.465743] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 370.470340] ? trace_hardirqs_on+0xbd/0x310 [ 370.474737] ? sock_kfree_s+0x29/0x60 [ 370.478557] ? trace_hardirqs_off_caller+0x310/0x310 [ 370.483683] skcipher_walk_first+0xff/0x3a0 [ 370.488024] ? sock_kfree_s+0x29/0x60 [ 370.491876] skcipher_walk_skcipher+0x541/0x700 [ 370.496558] skcipher_walk_virt+0x58/0xd0 [ 370.500724] chacha_simd_stream_xor+0xb3/0xa40 [ 370.500747] ? af_alg_wmem_wakeup+0x7d0/0x7d0 [ 370.500768] ? chacha_4block_xor_ssse3+0x8d0/0x8d0 [ 370.514795] ? refcount_dec_checked+0x70/0x70 [ 370.514826] ? sock_cmsg_send+0x2e0/0x2e0 [ 370.514843] ? preempt_count_add+0xbc/0x1b0 [ 370.514874] chacha_simd+0xd8/0x110 [ 370.514898] skcipher_recvmsg+0xcc9/0x1420 [ 370.535700] ? aa_af_perm+0x5a0/0x5a0 [ 370.539529] ? skcipher_sendmsg_nokey+0x140/0x140 [ 370.544395] ? apparmor_socket_recvmsg+0x29/0x30 [ 370.549186] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.554754] ? security_socket_recvmsg+0x9c/0xc0 [ 370.559526] ? skcipher_sendmsg_nokey+0x140/0x140 [ 370.564387] sock_recvmsg+0xd0/0x110 [ 370.568111] ? __sock_recv_ts_and_drops+0x420/0x420 17:01:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0xa, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x181080) r5 = inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0x20) inotify_rm_watch(r4, r5) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0x28, &(0x7f0000013ff4)={@remote}, 0xc) close(r3) r6 = dup3(r1, r2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000080)={0x27135fe4, 0x6, 0x2, {0x6, @win={{0x101, 0x5, 0x1, 0x26a3}, 0x0, 0x10001, &(0x7f0000000040)={{0x100000001, 0x4, 0x7f, 0x7ff}}, 0x7ff, &(0x7f0000002040)="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", 0x8000}}}) 17:01:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0xffffffffff600000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:50 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x132, 0x0) 17:01:50 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x3, 0x0) [ 370.573149] ___sys_recvmsg+0x2b6/0x680 [ 370.577145] ? mark_held_locks+0x130/0x130 [ 370.581406] ? ___sys_sendmsg+0x930/0x930 [ 370.585569] ? alloc_pages_current+0x17b/0x350 [ 370.590184] ? af_alg_sendmsg+0x7fe/0x1260 [ 370.594440] ? fget_raw+0x20/0x20 [ 370.597930] ? graph_lock+0x270/0x270 [ 370.601792] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 370.607346] ? poll_select_set_timeout+0x156/0x240 [ 370.612307] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 370.617877] do_recvmmsg+0x303/0xb90 17:01:51 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xd4, 0x0) [ 370.621619] ? ___sys_recvmsg+0x680/0x680 [ 370.625806] ? lock_release+0xa00/0xa00 [ 370.629798] ? perf_trace_sched_process_exec+0x860/0x860 [ 370.635264] ? lock_downgrade+0x900/0x900 [ 370.639448] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 370.645000] ? _copy_from_user+0xdf/0x150 [ 370.649171] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.652853] binder: 14174:14183 ioctl c0306201 20000040 returned -14 [ 370.654731] ? put_timespec64+0x10f/0x1b0 [ 370.654757] __sys_recvmmsg+0xe5/0x2a0 [ 370.654777] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 370.654793] ? trace_hardirqs_on+0xbd/0x310 [ 370.654817] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.678300] binder_alloc: binder_alloc_mmap_handler: 14174 20001000-20004000 already mapped failed -16 [ 370.683338] ? trace_hardirqs_off_caller+0x310/0x310 [ 370.683364] __x64_sys_recvmmsg+0xe6/0x140 [ 370.683387] do_syscall_64+0x1b9/0x820 [ 370.683405] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 370.683428] ? syscall_return_slowpath+0x5e0/0x5e0 [ 370.711342] binder: BINDER_SET_CONTEXT_MGR already set 17:01:51 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x69, 0x0) [ 370.711470] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.726504] ? trace_hardirqs_on_caller+0x310/0x310 [ 370.728980] binder: 14174:14183 ioctl 40046207 0 returned -16 [ 370.731534] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 370.731554] ? prepare_exit_to_usermode+0x291/0x3b0 [ 370.731578] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.731604] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.731618] RIP: 0033:0x457659 17:01:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0xfffffdfd, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 370.731642] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 370.742242] binder: 14174:14185 ioctl c0306201 20000040 returned -14 [ 370.742538] RSP: 002b:00007f6ab2af4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 370.793846] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457659 [ 370.801165] RDX: 0000000000000001 RSI: 000000002000a280 RDI: 0000000000000004 [ 370.808455] RBP: 000000000072bf00 R08: 000000002000a500 R09: 0000000000000000 [ 370.808470] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ab2af56d4 [ 370.823012] R13: 00000000004c3b77 R14: 00000000004d6770 R15: 00000000ffffffff [ 370.872114] binder_alloc: binder_alloc_mmap_handler: 14192 20001000-20004000 already mapped failed -16 [ 370.914738] binder: BINDER_SET_CONTEXT_MGR already set [ 370.933886] binder: 14192:14195 ioctl 40046207 0 returned -16 17:01:51 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x250402, 0x0) r1 = geteuid() fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000200)={0xa0, 0x0, 0x8, {{0x2, 0x0, 0x6b32, 0x0, 0x2, 0x80000000, {0x3, 0x4, 0x2, 0x4, 0x2182d165, 0x530a, 0x0, 0xe2, 0x5, 0x100000001, 0x980, r1, r2, 0x9, 0x1}}, {0x0, 0x4}}}, 0xa0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0xfffffffffffffd16, 0x0, &(0x7f0000000040)=[0xffffffff, 0x800, 0x7, 0xce, 0x80000000, 0x1, 0xffffffff], &(0x7f0000000200), 0x0) 17:01:51 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x93, 0x0) 17:01:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:51 executing program 5: r0 = add_key(&(0x7f0000000500)='logon\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="1f3c39e0c4819dd9633debb15eeb011587581ea7dcefdb0318d9b619dc842bff4ca1a902c2ac429820f9adbadc413016f7e6682f183416d7494d0f1062d1006f80ccab29ee853dad78e13694d4b47736cab796d6aabafeff8255158038bb5a7fc95f41569cc9f12baa0a2d62ff35febc689f358d4dba8dcf19b0d7c99f6f10ca606a03dde97451cafc01db6ccc64eb904106e7bb9efe6fabb7844c5f9ffdb15d8fd0af8a97bf2746e07f746fcdccec2498d9972ed5978020ac2d1e6eb83ff8f877ab8e61fb73a887234544568ace621b3c999ce7705b9331", 0xd8, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000680)='encrypted\x00', 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000004c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000002000)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0xffffffffffffffff) r6 = getpid() syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x7, &(0x7f00000003c0)=[{&(0x7f00000000c0)="4bb5174cd9c2582891cd2076a85410d82a96d6", 0x13, 0x4}, {&(0x7f0000000100)="39db3b38daf00ad934da26ab6347263dd53e609d11988d0c901bedf7db28e3a52223984d6cd9f41e30fa4dd5582b20408c5e89068735f0b30bb9fe62eda5790bd2aeaa9324a4b75a5610097c230062e90a13a458ea22efd06634d292f7a100e2b4615301fd5a9fbf414e925b93e0f7216540b902246204ffa1cbee05bfeb425987601096ef5c81a1ba43edd168159e65fcf1f69a1fc37a337e69d9307e7ee721e81211e2", 0xa4}, {&(0x7f00000001c0)="92c53e94087b0ce732d4869add17639e03977ad8cd831c2033aad2c6a86b61bf6706a38293262bc0b831c74f", 0x2c, 0x2}, {&(0x7f0000000200)="df7960a5d7473c26cb8943b18eff0737a8b485bae4e42143d8cf0c32de5df0fba9c4bf7676d970f1bbfbfe962b86a7c0a3e1", 0x32, 0x7}, {&(0x7f0000000240)="7cb7634909941a2d2da3bb11d89ae17676fefb72ba12cc66a42e76fed4131a9ce76d2db8dfa5984450525080959fafeaec5ffc81f068e7e369685c2d7812a0a272ca9081211d6e6beaa195547d579b1d9e9c96c00dfb2b8a90387c042e305faeb50ac9d09709996d", 0x68, 0x10000}, {&(0x7f00000002c0)="c3dfdeaf416df1e3a1c351cbe65fe01876cc0ec9e0d21529b1d89b8ed9afa17ef8cb067aed2e189c47a9edcaa1bb436855eeaa2118fd4a1dc7ac88239638ed8d9fdd0d73a3e1466d36f41c67cd2d966db6b08447c5c06005e50ed832efc0ac2c230b79ed231b0be04d8cf429d168a387eb983597f303e32e957c420b5ded2cf8696194fee1cf700d5b15f5f6920dec507ea9dd0bd6859dd79ee73bc8702d377b66428f536b464d509c70624c53ce91ad25e7c604ba3d1493894a892b6775", 0xbe, 0x3}, {&(0x7f0000000380)="eca46228aa2c755dfd05626a9594a2", 0xf, 0x4000000000000000}], 0x120000, &(0x7f0000000480)='\x00') r7 = getpid() kcmp(r6, r7, 0x3, r5, r4) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r5, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r5) dup3(r3, r4, 0x0) 17:01:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000240)=0x4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4600b300000000000000000000000000000000003800000000000000000000000000200000000000"], 0x2b) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x35, 0x8800) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0x4, 0x3f, 0x0, 0x2, 0x10001, 0x7, 0x6, 0x2, 0x500, 0x6, 0x81, 0x811, 0xffffffffffff7fff, 0x3, 0x8}}) 17:01:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x200000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 371.177411] sg_write: data in/out 45788/1 bytes for SCSI command 0x0-- guessing data in; [ 371.177411] program syz-executor4 not setting count and/or reply_len properly [ 371.181146] binder_alloc: binder_alloc_mmap_handler: 14208 20001000-20004000 already mapped failed -16 17:01:51 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x143, 0x0) 17:01:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x300000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 371.221675] binder: BINDER_SET_CONTEXT_MGR already set [ 371.235753] binder: 14208:14209 ioctl 40046207 0 returned -16 [ 371.248822] sg_write: data in/out 45788/1 bytes for SCSI command 0x0-- guessing data in; [ 371.248822] program syz-executor4 not setting count and/or reply_len properly 17:01:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bridge0\x00\x00\x00\x00\b\x00', {0x2, 0x0, @multicast2}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'bridge0\x00', {0x2, 0x0, @local}}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'nr0\x00', 0x4}, 0x18) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x400, 0x0) fanotify_mark(r1, 0x80, 0x48000002, r2, &(0x7f0000000140)='./file0\x00') 17:01:51 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xface47887a422ca4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180), &(0x7f0000000100)=0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x5, 0x4a8, 0x1e8, 0x0, 0x0, 0x2b8, 0x1e8, 0x410, 0x410, 0x410, 0x410, 0x410, 0x5, &(0x7f00000001c0), {[{{@ip={@rand_addr=0x4, @multicast1, 0xffffffff, 0xffffffff, 'bcsh0\x00', 'bridge0\x00', {}, {0xff}, 0x0, 0x2, 0x10}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xb, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @port=0x4e23, @port=0x4e21}}}}, {{@uncond, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x6, [0x28e9, 0x1, 0x0, 0x40, 0x7fffffff, 0xffffffffffffff00], 0xffd6, 0xffffffffffff52dc}, {0x7, [0x8000, 0x3, 0x3, 0xffff, 0xe7, 0x5], 0xffff, 0x7}}}}, {{@ip={@loopback, @rand_addr=0x4, 0xffffffff, 0xffffffff, 'gretap0\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x5e, 0x1, 0x11}, 0x0, 0x98, 0xd0}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0x9, @multicast2, @port=0x4e23, @gre_key=0xff}}}}, {{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@unspec=@limit={0x48, 'limit\x00', 0x0, {0x285b8fc0, 0x8, 0x9, 0x10001, 0x1, 0xfb, 0x7}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0xc48, 0x8}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@dev={0xfe, 0x80, [], 0xb}, @gre_key=0x1, @gre_key=0x101}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') write$FUSE_POLL(r1, &(0x7f0000000080)={0x18, 0x0, 0x5, {0x9}}, 0x18) preadv(r2, &(0x7f00000017c0), 0x1d0, 0x0) 17:01:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x20040, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x6, 0x3eb4, 0x401}}, 0x30) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffff9c, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e21, 0x8, @mcast1, 0xfff}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r6}}, 0x18) dup3(r1, r2, 0x0) [ 371.411754] binder_alloc: binder_alloc_mmap_handler: 14234 20001000-20004000 already mapped failed -16 17:01:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:51 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x2b, 0x0) [ 371.457627] binder: BINDER_SET_CONTEXT_MGR already set [ 371.502417] binder: 14234:14236 ioctl 40046207 0 returned -16 17:01:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x7a00, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0xd}], 0x1}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0xd}], 0x1}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:52 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xface47887a422ca4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180), &(0x7f0000000100)=0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x5, 0x4a8, 0x1e8, 0x0, 0x0, 0x2b8, 0x1e8, 0x410, 0x410, 0x410, 0x410, 0x410, 0x5, &(0x7f00000001c0), {[{{@ip={@rand_addr=0x4, @multicast1, 0xffffffff, 0xffffffff, 'bcsh0\x00', 'bridge0\x00', {}, {0xff}, 0x0, 0x2, 0x10}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xb, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @port=0x4e23, @port=0x4e21}}}}, {{@uncond, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x6, [0x28e9, 0x1, 0x0, 0x40, 0x7fffffff, 0xffffffffffffff00], 0xffd6, 0xffffffffffff52dc}, {0x7, [0x8000, 0x3, 0x3, 0xffff, 0xe7, 0x5], 0xffff, 0x7}}}}, {{@ip={@loopback, @rand_addr=0x4, 0xffffffff, 0xffffffff, 'gretap0\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x5e, 0x1, 0x11}, 0x0, 0x98, 0xd0}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0x9, @multicast2, @port=0x4e23, @gre_key=0xff}}}}, {{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@unspec=@limit={0x48, 'limit\x00', 0x0, {0x285b8fc0, 0x8, 0x9, 0x10001, 0x1, 0xfb, 0x7}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0xc48, 0x8}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@dev={0xfe, 0x80, [], 0xb}, @gre_key=0x1, @gre_key=0x101}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') write$FUSE_POLL(r1, &(0x7f0000000080)={0x18, 0x0, 0x5, {0x9}}, 0x18) preadv(r2, &(0x7f00000017c0), 0x1d0, 0x0) 17:01:52 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0xe9, 0x0) 17:01:52 executing program 4: r0 = socket$packet(0x11, 0x80000000000803, 0x300) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000100)={0x0, @aes256}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) r1 = dup2(r0, r0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000180)=0x10c000, 0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x1, 0x0) linkat(r1, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x1400) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback}, 0x80, &(0x7f0000000080)}}], 0x1, 0x0) [ 371.770899] binder_alloc: binder_alloc_mmap_handler: 14263 20001000-20004000 already mapped failed -16 17:01:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) r5 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x7, 0x8, 0x4}, 0x10) dup3(r2, r3, 0x0) 17:01:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0xd}], 0x1}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:52 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x150, 0x0) [ 372.008190] binder: BINDER_SET_CONTEXT_MGR already set 17:01:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) nanosleep(&(0x7f0000000040), &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x3, 0x8000000000000000) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000400)={@dev={0xfe, 0x80, [], 0x13}, 0x80, r4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) setsockopt$inet_mreqsrc(r3, 0x88, 0x2f, &(0x7f0000013ff4)={@remote}, 0xd2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x6) close(r3) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000100)={0xb, @capture={0x1000, 0x1, {0x60000000000, 0x3ff}, 0x7cd2}}) dup3(r1, r2, 0x0) [ 372.055307] binder: 14288:14291 ioctl 40046207 0 returned -16 17:01:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0xd}, {0x0}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:52 executing program 1: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7fffffff, 0x100) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000080)={0xf000004, 0x0, 0x5, [], &(0x7f0000000040)={0x98090f, 0x5, [], @value=0x19f}}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000140)) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2b}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 17:01:52 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x6d, 0x0) 17:01:52 executing program 4: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x110) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000540)) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)) getuid() lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x2}, {}], {0x4, 0x1}, [], {}, {0x20, 0x2}}, 0x34, 0x3) r1 = msgget(0xffffffffffffffff, 0x100) msgctl$IPC_RMID(r1, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000840)) write$P9_RMKDIR(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0xd8, 0x0, &(0x7f0000000440)="b933ca2caa3da63296e72f579888fe84daadcf51925572b8e0d9bb820cb72cd8a78a5ee1faf0b2e7fffe6e03c4c214d807d01b3468724e0a8ba3ae00dbd7982bb652becab28f3345d25fdc3b729998a89e307b7d49c7a5174721dc1977d91b7007a6dffd48457da061f305fe3156aa41ac5a9dd871edd5eb122936b42449ab385cb7ce81d99c23cdf1fc65984143e6b4fc2cdcb7492860c4984c1bbcd10e89156e5e043bd138bfba42fdd73c7636a44c7a9d23bd7350c60984550567134a94eea16bb092f0155f955523e6280c60a3dee838bd516d316e95", 0x0, 0x1}, 0x28) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x800, 0x4, [0x0, 0x0, 0x400, 0x9]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000700)={0x6, 0x6, 0x1f36, 0x3f, r2}, &(0x7f0000000740)=0x10) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") keyctl$assume_authority(0x10, 0x0) [ 372.228328] binder: 14303:14307 unknown command 0 [ 372.268057] binder: 14303:14307 ioctl c0306201 20000040 returned -22 [ 372.302463] binder: BINDER_SET_CONTEXT_MGR already set [ 372.318928] binder: 14303:14324 unknown command 0 17:01:52 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x181, 0x0) 17:01:52 executing program 1: r0 = creat(&(0x7f0000000080)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000500)) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @local}, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000004c0)="0a5c2d0240316285717070") futimesat(r1, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={{0x0, 0x7530}, {0x77359400}}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x110, r1, 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') renameat2(r1, &(0x7f00000001c0)='./file0/file0/file0\x00', r0, &(0x7f0000000340)='./file0/file0/../file0\x00', 0x5) [ 372.344244] binder: 14303:14307 ioctl 40046207 0 returned -16 [ 372.372236] binder: 14303:14324 ioctl c0306201 20000040 returned -22 17:01:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0xd}, {0x0}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) close(r1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x57, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req={0x4, 0x3, 0x4, 0x1}, 0x1e8616a1c9af54a9) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r2, 0x0) [ 372.401546] 9pnet_virtio: no channels available for device 127.0.0.1 17:01:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 372.450286] ceph: device name is missing path (no : separator in ./file0) [ 372.563192] binder: 14345:14349 unknown command 0 17:01:52 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x2, 0x0) 17:01:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x101040, 0x50) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000180)={{0x2, 0xf000, 0x0, 0x3, 0x20, 0x38b, 0x54e8da15, 0x1, 0x401, 0x24, 0x0, 0x10000}, {0x2001, 0x2, 0xf, 0x3, 0x9, 0x1f, 0x6, 0x100000001, 0xff, 0x2, 0x2, 0x8}, {0x3000, 0x5e48dcdb16a588a3, 0xa, 0x5, 0x64b, 0x1f, 0x1f, 0x2, 0x3, 0x6, 0x9, 0x401}, {0x7000, 0x2004, 0xd, 0x4, 0x7, 0x5, 0x80000000, 0x2, 0x815, 0x7, 0x7, 0x5}, {0x5000, 0x1004, 0x10, 0x38, 0x5, 0x0, 0x6, 0x57, 0xa9d, 0x2, 0xffffffff, 0x80}, {0x113000, 0x2, 0xa, 0x40, 0x5, 0x7f, 0x655c, 0x3, 0x1, 0x22f3, 0x0, 0x3ff}, {0x2000, 0x1f000, 0x9, 0x0, 0x3, 0x5, 0x4, 0x7ff, 0x7, 0x7ff, 0x4, 0x1}, {0x10000, 0x7000, 0x8, 0x3, 0x6, 0x4, 0x66, 0x100000001, 0x8, 0x1, 0x1295, 0xd0}, {0x5000, 0x4000}, {0x2, 0xd002}, 0x20000004, 0x0, 0x102001, 0x600, 0xd, 0x101, 0x2, [0x100000000, 0x800, 0x6ca1, 0x6]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000012000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [0x48d]}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x3f4e8775799f3130, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000080)={0x56, 0x8, 0x7, {0x7, 0x38}, {0x5, 0x6}, @period={0x59, 0x1, 0x4, 0xc3, 0x6b39, {0x3, 0x0, 0x1, 0xac5}, 0x1, &(0x7f0000000040)=[0xd6bd]}}) 17:01:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/13, 0xd}, {0x0}], 0x2}}], 0x1, 0x0, &(0x7f000000a500)) [ 372.586797] ceph: device name is missing path (no : separator in ./file0) [ 372.605796] overlayfs: filesystem on './file0' not supported as upperdir [ 372.608406] binder: 14345:14349 ioctl c0306201 20000040 returned -22 17:01:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x7}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000100)) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r4) r5 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000000c0)={0x894, 0x5, 0x3ff, 0xffffffffffffffe0, "46ea676ba5e9097a81a4a4b5036dfa0a95f33e66aa50e7da9aa5a7b6a00bc3c6"}) dup3(r2, r3, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000140)={0x6}) getsockopt$inet_int(r5, 0x0, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 17:01:53 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x800000001, 0x84) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000040)={0xc, @pix_mp={0x20, 0x8, 0x34325258, 0x9, 0x6, [{0xb476, 0x4}, {0x8, 0xa5b}, {0x0, 0xffffffff}, {0x800, 0x8}, {0x96, 0x7cb}, {0xa3, 0x2}, {0x6, 0x10000}, {0x4, 0x3}], 0xff, 0x8001, 0x3, 0x1}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac141413}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000001c0)=0x10) [ 372.698193] binder: BINDER_SET_CONTEXT_MGR already set [ 372.698205] binder: 14345:14357 unknown command 0 [ 372.698223] binder: 14345:14357 ioctl c0306201 20000040 returned -22 [ 372.747210] binder: 14345:14349 ioctl 40046207 0 returned -16 17:01:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002100)=""/209, 0xd1}], 0x1}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:53 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x166, 0x0) 17:01:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x404800) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000000c0)={0x3, 0x8000, 0x1}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0f7932ccd66398ae424e74ccbbf16e216af653147ed202bf82e1bf40994a9be16316d9447337a08f5994e77eb7c165a8f942c4cff2b263cdbbcaf01d20d92ad7dd444386a2b5b75a18622bc5f677e542"], 0x47) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x200000, 0x0) r3 = userfaultfd(0x4000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@loopback}, 0xc) close(r4) dup3(r1, r3, 0x0) 17:01:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0xffffff7f00000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) dup3(r1, r1, 0x0) 17:01:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{0x0}], 0x1}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x80081, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) accept$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r2) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)=r1) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) [ 373.003153] binder: BINDER_SET_CONTEXT_MGR already set [ 373.017822] binder: 14384:14385 ioctl 40046207 0 returned -16 17:01:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0xff600000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:53 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x108, 0x0) 17:01:53 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x800000001, 0x84) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000040)={0xc, @pix_mp={0x20, 0x8, 0x34325258, 0x9, 0x6, [{0xb476, 0x4}, {0x8, 0xa5b}, {0x0, 0xffffffff}, {0x800, 0x8}, {0x96, 0x7cb}, {0xa3, 0x2}, {0x6, 0x10000}, {0x4, 0x3}], 0xff, 0x8001, 0x3, 0x1}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac141413}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000001c0)=0x10) 17:01:53 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) getpeername(r1, &(0x7f0000000080)=@ax25, &(0x7f0000000100)=0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf8, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x69}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f8ea10c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x98, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x78}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb553}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0x0, 0x2) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000001480)={0x7, 0x3b5, &(0x7f0000000380)="5409077e2e77c8454e14298bfc2fa72929a9f79612688991adcd28e6e96cdca8564630a8a03a6013220378c14391ae5cb1137c81db101fdc367aad1a82acf0bfab77c07a46768e3dc0961b4b0ffa3281a5a68e039a6a35300c71312ae44067fd1ea47d04a01b86622eb9a9a63f4569fada1db5ec5a5eeb7d51f056bd08928582b271dd1282d2e3cb58e9daaa70ff984f6c06b9d49bc354b797c7a67dcc7b629cbd1f46f4fe6b5a8b74ae2bdd27b6a52be9ed9752a0d3301fefde8f5322347788f5b10ceaf47545b5a9f424d2a986dcc4aef5bd10c4b7ca8222864820f655e628367d", &(0x7f0000000480)="6c265b5b6cbef604f687e500ee991f9fa2e2e8318521802896cdd14fefdc782d7203e2e8bfce241ccf6494b8efe9652da36928bcdb4a567034a693dc680ecc7b1a6b0ed53773a6c34f08db680cad0570a05ee564ae97573c67ce9dc474239f20e0e110970db1c8763ed14e880e03335457a8b76ce8083ca4fde45b60e3714e4ef0bbb24a1d649fad35a2000bdf470966414caf1b02f92859a9163ebd9591081527ffee5ce643022987dea4e30323ddcfc21d817408c42eb221546652d716d9f24cf012464dfbe3d3ef1565bc7fac72a0f21bb168cbebbf679a9861d53c08d99121266ff68d8c21b08e2f15b4c6c039829df9376dac5310d9d300536b9f7f1e1ddf136e2901fcb52e1c888e6dfb765afe879a25fca33366f30908bd13c0e85b632c9ac8e9dc3150730e8c6715301056de337cb33af3db824385df887f2575f7a11af8374faf9a1d82984a8de6140b45082138a1bfdb190d89ff4a3db2e1a17d1d3340d8c5867575c881985877f1d14511ce8cfdf69c05e1947c202558908c31ab1d9df7cb9673046b4b270d04577a83b6d881697f73034d0b89def8463b88e844c7546fb294c43db90805c75239166d19340335690901c5ae1a47891ba37e69535d00de179053d329e4a2fa0ce0dbb144277cfc837877e0243bed34093a844c8d27554a6b11722a05d194737e8a2863387c9e785f4d4a94b33510e18691d9430b656852204856c30f71236d5a25731ae17197ab35cf7fc93190b946aeb3f075c658120ed328815b1c9835f2aaaa13882e944c89a678305484ea978119221a04cb24e825a85fc585091f498e7e3c353aae6b9c1abd97cf917269c0810b796b48b22f7d940e7ed11d0410e44b2b4b004020ff1b725ee7079e0b9652e8475469feb715b074bcc4c021b0f810d91541f5bad5144559d216ece43912df03761324f69d22e656a1f319c69d14654705f441f889a2acb91d49ec00a588a6ca3c76d8374dfb449b431ad177038068cf981fd7d2c1fc146dc620ccf7d10d3f02dd7e2f2aa100d9c719e7172416c63bf8135143eb8edad6714d653accd41b0f520810933d8a376bfa5fa350741c91daf3e5a96fa80629e7dc5be57708e564d7754571fe6567d183ddf831b352b847f575c65a269067e20a7bdabee8e8f6b5fa0b2eb383a4a9550442173399e0e2b4ff4b48da5b9ca1c55b56d1fb6f9f590973b52dfd5a521ac2dac61cba4dfdadfbf82d7c81d469d04c547a3742e5c4270dcef80c14a7646dbac8054f90377aad98fd671957aa483133c8ea68984703a6908190fe8b3897d4ce4c95086d336f7d839fc51782582c17d6c4a631ba01a2c6e7511728a7725e2cc97b724093beb5823de01ebb0dbbea05d9f83a3748fc66f424a5c160245082ef5ff3e0033a243843f81b445a5801e6022369593a1d3522aef4bf82339b3988b2e34a880611a2f4d5d9e3628b1f7ead718e6dd4046068fe8e631bf6976313c3050708ff6caeb8a0ed875ee4552022438de4ce07557011d88da57bffb04aa7b4b8bd2d768d4de9edb98a2979965716bb2048cd639061c84d16f39585dd221d67020a177c9f28bf7f107c77cddaa1183cc4b16d0f969b837f8e6642a6e16cf69bc1e35a27a2b99d025d5cff79a21f9dd5f9b9446f7d7fe4bc6444191689335c766c1a5871492e1e5023ef1e00cc34c6e70271e90a2dd8ffa6d83d05ab3e82ca0b5c956bd32503d705b3ab337d6329e7925e473cda594832ca4bd4262872250c73ffb54eb5fff76aad5f05febb0256df269735b8c5f6f01f5e4a22fc91577e4e9f08e9790b4c54e4d236133cc5777494c32a5e9d67d2f212487c7ca320d86456cba8b62ab0efd6d86c7ef733b3156e36d5bf1a74ce1f39a689ad2d8a3c62854bc44367ace8ef6d95289ec99d8e50f435358e8e2e7adbc819bd09c9dd31892a94a1f28c432d07e0d6e4def0e77b2f4cca2490eae772611631a4e3e8f1bc3ed907800e488f66414aee3cc684dc080007fd5e7dcc5e35e68aa293b758672e2c25c4472bfdfc5ba21760c670648f62f1e4d0fe3bc8712a6cb9cd775a97a44cfd2787e0a9dc3805c47bd6aca2d06b812c13eb9b57b00fa2150ac8fe1381a340910a8e554c264d8b6a91c2df62493c3f7f1d6d3ea7c8a0b64e47fb113ee095fd473bedb4f4e4cac1332a5f9ce2eae71313b0ab6676cd90abc54df7abba882b646ce9d3c08da6d0ddfb91a794855c9a5f2e934e5ba5a1f161f9eb3dcc9024b893d866f12534b2fa78094471e982c971e594646b4ee7acc0e705248f431c5e4cd12a8a7ce719d917348c7ebcef97ed2b685107d706306060478d6fdf6448fae77ede420fd02c98e9542119b61e2c41cd47dc611c9464dd4fe5d652227ce241838c52a8bbb51bab42ec82cf785c1ee1d1fd8543e1e58ff8618dbd6a6476b906ea6d840e4bd308534410522c39ddf3d1657fee16644b9216eccea148fa6413e4774dee23aead7eb2d7b25cb30c265b12fa465f2fe0870e9095ca0b4f4d27247c5fc673dc94d9590039eae46c981e015ce162310d22f025ddeef89932d138dae7952696debb07fbe1a0b5af9d53aa56ed058e8e547b3208c9812a262d5bf269ac840d843b074e11f456f15864999cd28ee0baeab78d895bed78f16828a2bc0c7e5bc964e304733761b80c3beaf7c6575824c346bf4da746b640e9279fc6386b3b0e04cca7d380bd5a114f1e65db5e5c7cadfded1517cfeba067088dc7a3644bb77d2fcc28255ffc11c53f526c7ac14680d0d48088de4a444a261db49c8d8226fb135b271ae4d471d226686d934f4367a08119b94f33dcbdf0c6a52783d11cc6e48da458f5967393217d2d198f84c1e8f0ec7855eb812c79dce7bd3cfe46c47ec240276b24760b840bec38e26b16bd8bb4de50ab44dacfa1ca2aa6a4b1e3f2b6a6a9df8ab9eecbcd5de3b2736fdf73094568c23a827913b70b84b5bf779c662cfa2d97991ca9c8585554ecbbe80dbd3ba5ec042bf179ae16b2aaa5385375d77d678b27f6d76b816d25aeab1bc7c585a6f4926e7a0f497b40c70d7d5a3395b14f83bd90ad1980da4d17943c7ace334c95059a3d981a037921aebb0b3b5b326c8214108664df3a4b82e618714dfeb1262dbd9d129437760d0cbcf8cb64e2b097209251fb5efd6ff7235b7fb29c708b247051646463ff201434d11ab3d74df8983d4f1f605cc9205f75a644e7bfdda2fe5e932c6a05748afb50e30653803b0b66036c7d3f2011a19cd7bcc9698db55b65a54fc0c66a4d090504e598a9a247e1d0c37621635ff717e323e6db7dd3dd8fd7c41b2597f5ef0480e2b92c84fa6ed4f258819357e5e830f7c68fbde168cc9df77927408dc679a3b758ee205f3b091032399b6c5fe1bfcbd3ae4f9d8f12d07277345ecabd3518c7915f5c1e48dded009f6c3b1b284d3517455ce07cbc1baddeec9f54114be4294b89a4cf41ba6ad6c09df81a131f789f68156e78a0146fd4f704fb62cffa3ef1689638fad7819af0babda4888601f599abae6ec4c834b55ba807f0445697bbaca4b6ae6445a65162a9f65f7e56300c377fde6e45213819b3ab5414eb4c0d7573990b00dcafd1af6342edb5dcc3f8932bd4860d152258c0fbfc51e6d340fdc7fe5be5e7fed97d051a378161b9aae8e04e217ad72a4d053df28b4971458fdbb393d3d5d3e98b0201a4fa55bc52c07d8d8c6298a25fe746137f2fbde344f9e8436614a9d4ad4dfadfaf901bbab94eacb13c8528c2442603cb52c69ce718ec17a3bc8f6d9ed9f64241f5c3281ddd3d547623e494ef430f91b8bc6009e5d5fe55abc749cf51e1963c33b7140be7cdecaa688df1a4dff8bbfda37893fc43e51f3e10f24e7fc8191ed868e5ac746c878ac5d1aa73d6bce7a6f3495f7561b237f700113f14ec767b4223674b0df78aadd404b13b86f2cd42a1c07585af3ffcfabbee4b0fb0a18d2a505d934b202e692472b0ecafbf1bf1194dfdd0618970ab53ee57300938e04305e1873a70921de438cf9ffb37f67f4167b075ee913fa7d3c51d0de80063564bf1de2553368ac99890a5eba5d3f2487b18d04ae0a3a259e8e8bdc5f21888b27ca8b368811fe5322960841af9e403ec659e17dbaf3a15366b7b80b9faba42890d5beec94bac228a12087c4c0ebb9fb2537957c91fd1cd8844437533437ba4c64e1cc709ff8cafb88a782ce33ddbbf0f5e0ec2fe08d1af8d32285ab2240c454a930058f606b3aacd97af4400fddbc5fccf65a830a9da5ce0d33645c0dd983cd332da2f84e049fee29dcd604536288471cdf3375dd04638ac4c9cf9b92dfcc52ac10ffc0b963523a7591019348db4251e1a2d3ec0328a4f1b91381eb0a15446f815c89ae7ed8b1f2ef83154e4f1dbb8a6a50c3997e2e37883613acf8a4b9feda4e4860d02d897889f2629f6294567dfd19c6d2af7d9fe8b9eb5e49d1a5f3edef3252be980ad22915835abe150f1c79f95c89f0173637e71cc066a5e4b1955caeaea3f1b1df5e6bc76ef166460071b3519b45b612bbcd6f693cfa1e42fdfe290739bde7c586d1a2689db04c003bfa51447263662db892f4992fd84616f49528594bcac09a2ae99ed694781d40cefa934088fba032348cd5091e683c7e8bc8c4963d6c5a7ea266d037abe108bbbe4c12d2b16416be7414153e3b79b220b0c7ff8d552632f6b15e5511f79384761471fa1a4237c0ca0832931668c784e2a26db33ed373806a6a6deffbca31bfeef5b142a02dfbcbce34763ecd165f032652305c82e22e82fa1e2efdb0331363f80c6d291bbe68546828887d68599e2174139f5086cfceccabd42f92cf4c3279589ca1e5ad00c7228bae137923cab2403115a29a8e29aa9263ce3f69b5604d50a59830fd50b529bb50aae348e8f3c0d244c616b72810b9281b46246a08e24748d8a03d12a0c8c6c295dfc10730f7298cab31c485890efd99ee4fb6e6173f3819e5a544c3feb32d487b8ddc3cf59e5c73acfc7313342637d834fd06b57629a63d0d5a35c3e9cdd2d8ec7bbf3f548bd3444ce3788887b47de4b6b74f1f9de5be47e60e6cb8e57e41462373dc4728347d4eb6b6d8d6a34a47c7312532ef7c916d1794c06ebd80252e068af8102bed2f2e8dbdb8897e75ddc0f409c2c4545899ec535698ea77696215a4600e71a9c289f2aef6c7d8bfc53cae391dcb8ab2f3095b316a5f55e1422993aadfc489215bd2de1d837de10167099a65a164500658b6e0008f4ed12d04deed440081f5b79fd91d46055f871b4b992609e8ea236d3b4b8323769b3403d0eee36895bb2ede55573c28eecc9e2c4503875ecd77f8d68a9bb53e9bb7abbdd2030f14d01626d3b68de51cdb7b01f372a2a4ef17d9f993abf6f492742ebfc4be79ec4a94026c7fe27047f93afb733d0da7b5986fce1e27dd04d7e3704744ccfaeb1aabad49abd83f762bc54c7b36b5f4b03edb611d02a2eb9051ce1da15a295f9eea8a0bcdfa4bfde4dddb936d94f4faec8faca8e1c857d7de37da4bf9db6c2fe9f48f782dd8028fd25c0d042e9877dc9f951c65be5383a1660e78c378c1e2f20cfd7831406ea12bca9e3de3c80284c4c5b9fe153db484eb8d92bd1334b0912f62c5589a17931d2cb7ca1662bfab540f2351e7523f8fb5faa33d05526278a2c9b3fd9e2261578bb6d97d073705fbcac39fbb9f3cc54dfe2a87c094c580a23b2d1c3602fce0e12ca14cdbe6543e4229e78c9562d31f8fec33f3ee8aa51c7852b89c6e058a0b12e2876cc939588ad5d7d57791f780b86c656239b91099681e2405c46", 0xe2, 0x1000}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001500)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x28, r4, 0x210, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}}, 0x24004014) r5 = getuid() getresgid(&(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680)=0x0) fchown(r3, r5, r6) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x58, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) ioctl$RTC_WIE_ON(r1, 0x700f) readlinkat(r1, &(0x7f0000001800)='./file0\x00', &(0x7f0000001840)=""/64, 0x40) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000001880)=0x6, &(0x7f00000018c0)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000001900)={0x0, 0xb6}, &(0x7f0000001940)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000001980)={r7, 0x5}, 0x8) lookup_dcookie(0x3, &(0x7f00000019c0)=""/51, 0x33) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001a00)={0x4ac, 0x3, 0x5552, 0x56bd, r7}, &(0x7f0000001a40)=0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001a80)={r1}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000001ac0)={[{0xaa0, 0x0, 0x9, 0x7ff, 0x97, 0xffffffff, 0x48000000, 0x3, 0xffff, 0x5, 0xfffffffffffffffa, 0x0, 0x7}, {0x81, 0x100000000, 0x3, 0xa9, 0x7, 0x1000, 0x9, 0x40, 0x3, 0x7, 0x8, 0x5, 0x1}, {0xe12f, 0x100000001, 0x9, 0x4, 0x249e, 0x1f, 0x4, 0x7c, 0xffffffffffffffff, 0x505, 0xff, 0x0, 0x6}], 0x4}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000001b40)={0x2, "f3d6"}, 0x3) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000001b80)={0xa, [0x5, 0x10000, 0x0, 0x7, 0x6, 0x8001, 0x8629, 0x4, 0x5, 0x6]}, 0x18) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x24, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x80000000}}, ["", "", "", "", ""]}, 0x24}}, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000001cc0)={0x5, 0xc, [0x100000001, 0x1, 0x7]}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000001d00)=""/228) fchdir(r8) write$P9_RCREATE(r1, &(0x7f0000001e00)={0x18, 0x73, 0x2, {{0x40, 0x3}, 0x4}}, 0x18) [ 373.229669] binder: BINDER_SET_CONTEXT_MGR already set 17:01:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{0x0}], 0x1}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:53 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x11c, 0x0) [ 373.252354] binder: 14403:14406 ioctl 40046207 0 returned -16 17:01:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x4000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:53 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x800000001, 0x84) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000040)={0xc, @pix_mp={0x20, 0x8, 0x34325258, 0x9, 0x6, [{0xb476, 0x4}, {0x8, 0xa5b}, {0x0, 0xffffffff}, {0x800, 0x8}, {0x96, 0x7cb}, {0xa3, 0x2}, {0x6, 0x10000}, {0x4, 0x3}], 0xff, 0x8001, 0x3, 0x1}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac141413}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000001c0)=0x10) 17:01:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="8e7b21a7cce5fae0f5753c55505aa5bf3b85611a8be00411886593e74f5f8d35f4eb233550138728479d00e7d261d1c6b152cd4ad5a0264ea5af39935a7656d6d3ef273b6f303c03ac1096ff076d159962f7a1f967af843220f081542a993b13d7ce6e178957b154e74fa0a025429ead09a0e8c5e2f2a1a01b1d64efb76b424333c0d8ec245899ad07f9cdb6e398f0d154ac2c2c57d0b7b598350aee43ca6f1914111c175f9220a0ed0b6c41db5c411e723f02ec19a2cb038315e6e7b3ee1b7582d91a613a089c434a130d00000000a71c33d0e749a5e141"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 373.409085] binder_alloc_mmap_handler: 5 callbacks suppressed [ 373.409104] binder_alloc: binder_alloc_mmap_handler: 14418 20001000-20004000 already mapped failed -16 [ 373.909129] FAULT_FLAG_ALLOW_RETRY missing 30 [ 373.913718] CPU: 0 PID: 14390 Comm: syz-executor5 Tainted: G W 4.20.0-rc6-next-20181214+ #171 [ 373.923685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.933047] Call Trace: [ 373.935635] dump_stack+0x244/0x39d [ 373.939254] ? dump_stack_print_info.cold.1+0x20/0x20 [ 373.944504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 373.950041] handle_userfault.cold.30+0x47/0x62 [ 373.954703] ? userfaultfd_ioctl+0x55d0/0x55d0 [ 373.959290] ? mark_held_locks+0x130/0x130 [ 373.963514] ? __switch_to_asm+0x40/0x70 [ 373.967575] ? __schedule+0xa49/0x21e0 [ 373.971461] ? __sched_text_start+0x8/0x8 [ 373.975600] ? userfaultfd_ctx_put+0x830/0x830 [ 373.980181] ? match_held_lock+0x850/0x8d0 [ 373.984404] ? print_usage_bug+0xc0/0xc0 [ 373.988484] ? graph_lock+0x270/0x270 [ 373.992284] ? find_held_lock+0x36/0x1c0 [ 373.996369] ? __handle_mm_fault+0x4d19/0x5b70 [ 374.000938] ? lock_downgrade+0x900/0x900 [ 374.005099] ? kasan_check_read+0x11/0x20 [ 374.009262] ? do_raw_spin_unlock+0xa7/0x330 [ 374.013670] ? do_raw_spin_trylock+0x270/0x270 [ 374.018257] ? fault_dirty_shared_page.isra.87+0x320/0x320 [ 374.023907] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 374.028922] __handle_mm_fault+0x4d26/0x5b70 [ 374.033324] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 374.038153] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 374.043245] ? print_usage_bug+0xc0/0xc0 [ 374.047401] ? futex_wait+0x5ec/0xa50 [ 374.051192] ? print_usage_bug+0xc0/0xc0 [ 374.055268] ? graph_lock+0x270/0x270 [ 374.059070] ? graph_lock+0x270/0x270 [ 374.062869] ? find_held_lock+0x36/0x1c0 [ 374.066925] ? handle_mm_fault+0x42a/0xc70 [ 374.071176] ? lock_downgrade+0x900/0x900 [ 374.075330] ? check_preemption_disabled+0x48/0x280 [ 374.080338] ? kasan_check_read+0x11/0x20 [ 374.084475] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 374.089739] ? rcu_read_unlock_special+0x370/0x370 [ 374.094664] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 374.100239] ? check_preemption_disabled+0x48/0x280 [ 374.105400] handle_mm_fault+0x54f/0xc70 [ 374.109453] ? __handle_mm_fault+0x5b70/0x5b70 [ 374.114024] ? find_vma+0x34/0x190 [ 374.117555] __do_page_fault+0x5f6/0xd70 [ 374.121628] do_page_fault+0xf2/0x7e0 [ 374.125434] ? vmalloc_sync_all+0x30/0x30 [ 374.129573] ? error_entry+0x76/0xd0 [ 374.133279] ? trace_hardirqs_off_caller+0xbb/0x310 [ 374.138303] ? find_held_lock+0x36/0x1c0 [ 374.142356] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.147189] ? trace_hardirqs_on_caller+0x310/0x310 [ 374.152204] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.157043] page_fault+0x1e/0x30 [ 374.160492] RIP: 0010:__get_user_4+0x21/0x30 [ 374.164893] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 40 ee 01 00 48 3b 82 18 14 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 [ 374.183792] RSP: 0018:ffff8881721efc40 EFLAGS: 00010202 [ 374.189193] RAX: 0000000020013ff7 RBX: 0000000020013ff4 RCX: ffffc9000fe3a000 [ 374.196456] RDX: ffffffffffffffff RSI: ffffffff81b2fa73 RDI: 0000000000000282 [ 374.203715] RBP: ffff8881721efc80 R08: 1ffff1102e43df65 R09: 0000000000000008 [ 374.210974] R10: 0000000000000001 R11: ffff8881842e2140 R12: 000000000000000b [ 374.218235] R13: ffff8881c41ca800 R14: 0000000000000006 R15: 0000000000000011 [ 374.225518] ? __might_fault+0x1a3/0x1e0 [ 374.229581] ? udp_lib_setsockopt+0x8b/0xa20 [ 374.233981] ? udp_v6_send_skb.isra.31+0x14b0/0x14b0 [ 374.239077] udpv6_setsockopt+0x95/0xa0 [ 374.243062] sock_common_setsockopt+0x9a/0xe0 [ 374.247562] __sys_setsockopt+0x1ba/0x3c0 [ 374.251702] ? kernel_accept+0x310/0x310 [ 374.255757] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 374.260346] ? trace_hardirqs_on+0xbd/0x310 [ 374.264683] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 374.270068] ? trace_hardirqs_off_caller+0x310/0x310 [ 374.275165] __x64_sys_setsockopt+0xbe/0x150 [ 374.279566] do_syscall_64+0x1b9/0x820 [ 374.283442] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 374.288818] ? syscall_return_slowpath+0x5e0/0x5e0 [ 374.293754] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.298623] ? trace_hardirqs_on_caller+0x310/0x310 [ 374.303634] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 374.308649] ? prepare_exit_to_usermode+0x291/0x3b0 [ 374.313664] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.318501] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 374.323677] RIP: 0033:0x457659 [ 374.326864] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 374.345759] RSP: 002b:00007f0b8d57ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 374.353466] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457659 17:01:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000040)={0x3, 0x0, [{}, {}, {}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000002000)) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r5, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r5) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10080, 0x0) dup3(r3, r4, 0x0) 17:01:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{0x0}], 0x1}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x12000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:54 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x84, 0x0) 17:01:54 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x800000001, 0x84) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000040)={0xc, @pix_mp={0x20, 0x8, 0x34325258, 0x9, 0x6, [{0xb476, 0x4}, {0x8, 0xa5b}, {0x0, 0xffffffff}, {0x800, 0x8}, {0x96, 0x7cb}, {0xa3, 0x2}, {0x6, 0x10000}, {0x4, 0x3}], 0xff, 0x8001, 0x3, 0x1}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac141413}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000001c0)=0x10) 17:01:54 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x2fffc) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x1ff) [ 374.360738] RDX: 000000000000000b RSI: 0000000000000088 RDI: 0000000000000007 [ 374.368003] RBP: 000000000072bf00 R08: 0000000000000006 R09: 0000000000000000 [ 374.375292] R10: 0000000020013ff4 R11: 0000000000000246 R12: 00007f0b8d57b6d4 [ 374.382562] R13: 00000000004c4c0a R14: 00000000004d8240 R15: 00000000ffffffff [ 374.450422] binder_alloc: binder_alloc_mmap_handler: 14444 20001000-20004000 already mapped failed -16 17:01:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002100)=""/209, 0xd1}], 0x1}}], 0x1, 0x0, 0x0) 17:01:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80000, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x80}) [ 374.496746] binder: BINDER_SET_CONTEXT_MGR already set 17:01:54 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x75, 0x0) [ 374.518866] binder: 14444:14446 ioctl 40046207 0 returned -16 17:01:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x500000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:54 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x800000001, 0x84) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac141413}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000001c0)=0x10) 17:01:55 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x44, 0x0) 17:01:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) r4 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x2, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000300)=0x7) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000200)=0x106) prctl$PR_SET_UNALIGN(0x6, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r5, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={r3, 0xffffffff, 0x40, 0x18000000000000, 0x6, 0x6}, &(0x7f0000000240)=0x14) close(r5) r6 = dup3(r1, r2, 0x80000) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) 17:01:55 executing program 3 (fault-call:5 fault-nth:0): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002100)=""/209, 0xd1}], 0x1}}], 0x1, 0x0, &(0x7f000000a500)) [ 374.690887] binder_alloc: binder_alloc_mmap_handler: 14472 20001000-20004000 already mapped failed -16 17:01:55 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xc0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0xb5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000040)) getegid() clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="3a3a2c2e3a6e756c6c623a00b0eecb5c4fadfd84eec9be182fb26fefb56714a9f9d55290f6a9001723d72a527acc1737a7cf1982d986b85acc7bba8f3f2c3b00000000"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x40000000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair(0x28, 0x2, 0x0, &(0x7f0000000000)) [ 374.759376] binder: BINDER_SET_CONTEXT_MGR already set [ 374.771569] binder: 14472:14473 ioctl 40046207 0 returned -16 [ 374.791123] FAULT_INJECTION: forcing a failure. [ 374.791123] name failslab, interval 1, probability 0, space 0, times 0 [ 374.854092] CPU: 0 PID: 14481 Comm: syz-executor3 Tainted: G W 4.20.0-rc6-next-20181214+ #171 [ 374.864130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.873498] Call Trace: [ 374.876115] dump_stack+0x244/0x39d [ 374.879783] ? dump_stack_print_info.cold.1+0x20/0x20 [ 374.885007] should_fail.cold.4+0xa/0x17 [ 374.889319] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 374.889357] ? graph_lock+0x270/0x270 [ 374.889390] ? mark_held_locks+0x130/0x130 [ 374.889415] ? __lock_acquire+0x62f/0x4c20 [ 374.906768] ? mark_held_locks+0x130/0x130 [ 374.911013] ? find_held_lock+0x36/0x1c0 [ 374.911034] ? __lock_is_held+0xb5/0x140 [ 374.911063] ? perf_trace_sched_process_exec+0x860/0x860 [ 374.924640] ? print_usage_bug+0xc0/0xc0 [ 374.928725] __should_failslab+0x124/0x180 [ 374.932987] should_failslab+0x9/0x14 [ 374.936811] __kmalloc+0x2e4/0x760 [ 374.940371] ? sock_kmalloc+0x15a/0x1f0 [ 374.944384] sock_kmalloc+0x15a/0x1f0 [ 374.948218] ? sock_cmsg_send+0x2e0/0x2e0 [ 374.952383] ? trace_hardirqs_on+0xbd/0x310 [ 374.956715] ? lock_release+0xa00/0xa00 [ 374.960831] ? lock_sock_nested+0xe2/0x120 [ 374.965093] ? trace_hardirqs_off_caller+0x310/0x310 [ 374.970223] af_alg_alloc_areq+0x83/0x280 [ 374.974452] ? alg_accept+0x60/0x60 [ 374.978098] ? __local_bh_enable_ip+0x160/0x260 [ 374.982208] libceph: parse_ips bad ip '::,.:nullb' [ 374.982795] skcipher_recvmsg+0x354/0x1420 [ 374.982812] ? aa_af_perm+0x5a0/0x5a0 [ 374.982840] ? skcipher_sendmsg_nokey+0x140/0x140 [ 375.000659] ? apparmor_socket_recvmsg+0x29/0x30 [ 375.005432] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.010984] ? security_socket_recvmsg+0x9c/0xc0 [ 375.015754] ? skcipher_sendmsg_nokey+0x140/0x140 [ 375.016895] libceph: parse_ips bad ip '::,.:nullb' [ 375.020759] sock_recvmsg+0xd0/0x110 [ 375.020776] ? __sock_recv_ts_and_drops+0x420/0x420 [ 375.020793] ___sys_recvmsg+0x2b6/0x680 [ 375.020811] ? mark_held_locks+0x130/0x130 [ 375.020834] ? ___sys_sendmsg+0x930/0x930 [ 375.046808] ? graph_lock+0x270/0x270 [ 375.050618] ? lock_release+0xa00/0xa00 [ 375.050635] ? perf_trace_sched_process_exec+0x860/0x860 [ 375.050660] ? __fget_light+0x2e9/0x430 [ 375.050677] ? fget_raw+0x20/0x20 [ 375.050694] ? get_pid_task+0xd6/0x1a0 [ 375.050713] ? lock_downgrade+0x900/0x900 [ 375.050737] ? check_preemption_disabled+0x48/0x280 [ 375.075584] ? graph_lock+0x270/0x270 [ 375.075606] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.075627] ? poll_select_set_timeout+0x156/0x240 [ 375.094933] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.100501] do_recvmmsg+0x303/0xb90 [ 375.104266] ? ___sys_recvmsg+0x680/0x680 [ 375.108430] ? lock_release+0xa00/0xa00 [ 375.112412] ? perf_trace_sched_process_exec+0x860/0x860 [ 375.117889] ? kasan_check_write+0x14/0x20 [ 375.122147] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 375.127138] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.132699] ? _copy_from_user+0xdf/0x150 [ 375.136878] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.142451] __sys_recvmmsg+0xe5/0x2a0 [ 375.146355] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 375.150688] ? trace_hardirqs_on+0xbd/0x310 [ 375.155026] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 375.160405] ? trace_hardirqs_off_caller+0x310/0x310 [ 375.165527] __x64_sys_recvmmsg+0xe6/0x140 [ 375.169783] do_syscall_64+0x1b9/0x820 [ 375.173687] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 375.179066] ? syscall_return_slowpath+0x5e0/0x5e0 [ 375.184011] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 375.188890] ? trace_hardirqs_on_caller+0x310/0x310 [ 375.193916] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 375.198981] ? prepare_exit_to_usermode+0x291/0x3b0 17:01:55 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x800000001, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac141413}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000001c0)=0x10) 17:01:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x710000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 17:01:55 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac141413}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000001c0)=0x10) 17:01:55 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x800000001, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac141413}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000001c0)=0x10) [ 375.204018] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 375.208891] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 375.214092] RIP: 0033:0x457659 [ 375.217304] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 375.236216] RSP: 002b:00007f6ab2af4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 375.243938] RAX: ffffffffffffffda RBX: 00007f6ab2af4c90 RCX: 0000000000457659 17:01:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)}], 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}) setxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000440)={0x3, 0x1, [0x7, 0x3, 0x200, 0x9, 0x0, 0x7, 0x7]}) getdents(r1, &(0x7f0000000180)=""/191, 0xbf) 17:01:55 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x800000001, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac141413}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000001c0)=0x10) 17:01:55 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x6f, 0x0) 17:01:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup3(r2, r0, 0x80000) setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$VIDIOC_G_ENC_INDEX(r5, 0x8818564c, &(0x7f0000000140)) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) move_pages(r6, 0x1, &(0x7f0000000080)=[&(0x7f000000f000/0x3000)=nil], &(0x7f00000000c0)=[0x1f80000000, 0x8], &(0x7f0000000100)=[0x0], 0x6) close(r4) dup3(r2, r3, 0x0) [ 375.251228] RDX: 0000000000000001 RSI: 000000002000a280 RDI: 0000000000000004 [ 375.258519] RBP: 000000000072bf00 R08: 000000002000a500 R09: 0000000000000000 [ 375.265833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ab2af56d4 [ 375.273137] R13: 00000000004c3b77 R14: 00000000004d6770 R15: 0000000000000005 17:01:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09631040000000000000000000000000000000000000000000000000000000000000000000000000000000000030"], 0x0, 0x0, 0x0}) [ 375.382846] FAT-fs (loop1): bogus number of reserved sectors [ 375.415497] FAT-fs (loop1): Can't find a valid FAT filesystem 17:01:55 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x800000001, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac141413}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000001c0)=0x10) [ 375.479280] binder: 14524:14527 BC_ACQUIRE_DONE u0000000000000000 no match 17:01:55 executing program 3 (fault-call:5 fault-nth:1): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002100)=""/209, 0xd1}], 0x1}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:55 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x3a, 0x0) 17:01:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0xb, &(0x7f0000013ff4)={@remote}, 0x6) close(r3) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x80, 0x0) dup3(r1, r2, 0x0) [ 375.544602] binder: 14524:14527 unknown command 0 [ 375.553293] FAT-fs (loop1): bogus number of reserved sectors [ 375.553744] binder: 14524:14527 ioctl c0306201 20000040 returned -22 17:01:56 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x800000001, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac141413}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000001c0)=0x10) [ 375.603498] binder_alloc: binder_alloc_mmap_handler: 14524 20001000-20004000 already mapped failed -16 [ 375.610358] FAT-fs (loop1): Can't find a valid FAT filesystem [ 375.656723] binder: 14524:14539 BC_ACQUIRE_DONE u0000000000000000 no match [ 375.656727] binder: BINDER_SET_CONTEXT_MGR already set [ 375.656745] binder: 14524:14527 ioctl 40046207 0 returned -16 [ 375.678142] FAULT_INJECTION: forcing a failure. [ 375.678142] name failslab, interval 1, probability 0, space 0, times 0 17:01:56 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x25, 0x0) [ 375.706947] CPU: 1 PID: 14546 Comm: syz-executor3 Tainted: G W 4.20.0-rc6-next-20181214+ #171 [ 375.716939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.721898] binder: 14524:14539 unknown command 0 [ 375.726298] Call Trace: [ 375.726328] dump_stack+0x244/0x39d [ 375.726354] ? dump_stack_print_info.cold.1+0x20/0x20 [ 375.726389] should_fail.cold.4+0xa/0x17 [ 375.735707] binder: 14524:14539 ioctl c0306201 20000040 returned -22 [ 375.737407] ? kasan_kmalloc+0xcb/0xd0 17:01:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='Lc@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 375.737429] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 375.737445] ? do_recvmmsg+0x303/0xb90 [ 375.737459] ? __sys_recvmmsg+0xe5/0x2a0 [ 375.737479] ? __x64_sys_recvmmsg+0xe6/0x140 [ 375.774510] ? do_syscall_64+0x1b9/0x820 [ 375.778589] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 375.783977] ? mark_held_locks+0x130/0x130 [ 375.788231] ? find_held_lock+0x36/0x1c0 [ 375.792295] ? graph_lock+0x270/0x270 [ 375.796099] ? graph_lock+0x270/0x270 [ 375.799901] ? find_held_lock+0x36/0x1c0 [ 375.803972] ? __lock_is_held+0xb5/0x140 [ 375.808060] ? perf_trace_sched_process_exec+0x860/0x860 [ 375.813547] ? rcu_read_lock_sched_held+0x14f/0x180 [ 375.818559] __should_failslab+0x124/0x180 [ 375.822796] should_failslab+0x9/0x14 [ 375.826595] __kmalloc+0x2e4/0x760 [ 375.830139] ? af_alg_make_sg+0x550/0x550 [ 375.834292] ? sock_kmalloc+0x15a/0x1f0 [ 375.838286] sock_kmalloc+0x15a/0x1f0 [ 375.842099] ? sock_cmsg_send+0x2e0/0x2e0 [ 375.846271] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 375.851289] ? af_alg_count_tsgl+0x1bc/0x250 [ 375.855710] skcipher_recvmsg+0x4fa/0x1420 [ 375.859957] ? aa_af_perm+0x5a0/0x5a0 [ 375.863754] ? skcipher_sendmsg_nokey+0x140/0x140 [ 375.868589] ? apparmor_socket_recvmsg+0x29/0x30 [ 375.873349] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.878893] ? security_socket_recvmsg+0x9c/0xc0 [ 375.883643] ? skcipher_sendmsg_nokey+0x140/0x140 [ 375.888521] sock_recvmsg+0xd0/0x110 [ 375.892268] ? __sock_recv_ts_and_drops+0x420/0x420 [ 375.897303] ___sys_recvmsg+0x2b6/0x680 [ 375.901286] ? mark_held_locks+0x130/0x130 [ 375.905514] ? ___sys_sendmsg+0x930/0x930 [ 375.909661] ? graph_lock+0x270/0x270 [ 375.913480] ? lock_release+0xa00/0xa00 [ 375.917448] ? perf_trace_sched_process_exec+0x860/0x860 [ 375.922895] ? __fget_light+0x2e9/0x430 [ 375.926877] ? fget_raw+0x20/0x20 [ 375.930320] ? get_pid_task+0xd6/0x1a0 [ 375.934212] ? lock_downgrade+0x900/0x900 [ 375.938360] ? check_preemption_disabled+0x48/0x280 [ 375.943390] ? graph_lock+0x270/0x270 [ 375.947187] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.952716] ? poll_select_set_timeout+0x156/0x240 [ 375.957639] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.963165] do_recvmmsg+0x303/0xb90 [ 375.966897] ? ___sys_recvmsg+0x680/0x680 [ 375.971049] ? lock_release+0xa00/0xa00 [ 375.975011] ? perf_trace_sched_process_exec+0x860/0x860 [ 375.980465] ? kasan_check_write+0x14/0x20 [ 375.984701] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 375.989634] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.995171] ? _copy_from_user+0xdf/0x150 [ 375.999314] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.004875] __sys_recvmmsg+0xe5/0x2a0 [ 376.008768] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 376.013091] ? trace_hardirqs_on+0xbd/0x310 [ 376.017401] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.022753] ? trace_hardirqs_off_caller+0x310/0x310 [ 376.027846] __x64_sys_recvmmsg+0xe6/0x140 [ 376.032082] do_syscall_64+0x1b9/0x820 [ 376.035960] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 376.041313] ? syscall_return_slowpath+0x5e0/0x5e0 [ 376.046243] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 376.051092] ? trace_hardirqs_on_caller+0x310/0x310 [ 376.056097] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 376.061105] ? prepare_exit_to_usermode+0x291/0x3b0 [ 376.066165] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 376.071001] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.076185] RIP: 0033:0x457659 [ 376.079401] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 376.098291] RSP: 002b:00007f6ab2af4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 17:01:56 executing program 3 (fault-call:5 fault-nth:2): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002100)=""/209, 0xd1}], 0x1}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)}], 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}) setxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="00fbb502e42904b22c819c01e88a1f1c0942086d54fce2d701bdb8824161128cc9c009e1c8fedad38b20096d08c4db82a918e1d5830a504b7681adb9e6ccf1ac9eba226994eb714d8338f9c0f0cba6f4611b8bbde27f04207f2ca0643e52c2263f9219af3ca59eb67519b2fff8da19e7e7df4dd718cf7ddcaaec8ab97860b8e683762b832ad0db4210b33fbe4293baf06663e31d4d4b4e543d9945fb06bd7c030fce98a07f9d804d9eef3adc05ede99ec1d967abb9f16724ebeda8827afc78725737310891b5a6e81d6e7cd238f5dccefbd33285ddc3d31b6badc7ba913565a279f139d38c8c336a866323e883649ca2789853380a9a4bb65b551f73ce64a98e39c6dfb91c4f430fce73301e2a86c519c25f6236e749eb6d284c85783d7a1839f4fe63eb8c3b2e34da2217057b1b0db3a86d735dc629515ae57ef8236bd41a811ed4a65d97e1ca20496aaecb5f2cd1e077ab497af1808410cfd18975e9577c0a08b1d45909e16dcb6cc4767e274d31a95d96f5311cc40148f80dcfe9b2272ad915907aaa2715ee58"], 0x1, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000440)={0x3, 0x1, [0x7, 0x3, 0x200, 0x9, 0x0, 0x7, 0x7]}) getdents(r1, &(0x7f0000000180)=""/191, 0xbf) 17:01:56 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x800000001, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac141413}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000001c0)=0x10) [ 376.106016] RAX: ffffffffffffffda RBX: 00007f6ab2af4c90 RCX: 0000000000457659 [ 376.113273] RDX: 0000000000000001 RSI: 000000002000a280 RDI: 0000000000000004 [ 376.120527] RBP: 000000000072bf00 R08: 000000002000a500 R09: 0000000000000000 [ 376.127782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ab2af56d4 [ 376.135043] R13: 00000000004c3b77 R14: 00000000004d6770 R15: 0000000000000005 [ 376.226893] binder: 14562:14564 unknown command 1077961548 [ 376.275543] binder: 14562:14564 ioctl c0306201 20000040 returned -22 [ 376.290442] FAT-fs (loop1): bogus number of reserved sectors 17:01:56 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000140), 0x32, 0x0) 17:01:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "62fc15bbb69c3193b6da50da27003b387ed4bac156e2846e7d20d43bf074a19f62f028475b5bc8ec8bb09ee77e024ff6a747f20afc8111f4851216383be51243d3d7c10fd36fcfe62c2fb989589b852f9d236b72b1722aaab99544300370aa746cac2dfbf7c9c204aec6eb8fcc9ac58a0de589448fe9"}, 0x81) recvmmsg(r1, &(0x7f000000a280)=[{{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002100)=""/209, 0xd1}], 0x1}}], 0x1, 0x0, &(0x7f000000a500)) 17:01:56 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x800000001, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac141413}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000001c0)=0x10) [ 376.315959] FAT-fs (loop1): Can't find a valid FAT filesystem [ 376.334876] binder_alloc: binder_alloc_mmap_handler: 14562 20001000-20004000 already mapped failed -16 [ 376.380631] binder: BINDER_SET_CONTEXT_MGR already set 17:01:56 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000580)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000005c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000600)={r2, r3}) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a075f1dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x402001}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14c, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x108, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc04}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf576}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40e}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x32}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4818}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x5}, 0x10) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhci\x00', 0xc000, 0x0) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x168, r4, 0x73b, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xd0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc38a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'teql0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x204000000}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xae3c}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x80}, 0x40000) [ 376.420120] binder: 14562:14564 ioctl 40046207 0 returned -16 [ 376.423367] binder: 14562:14585 unknown command 1077961548 [ 376.488377] binder: 14562:14585 ioctl c0306201 20000040 returned -22 [ 376.496093] FAULT_FLAG_ALLOW_RETRY missing 30 [ 376.500831] CPU: 0 PID: 14550 Comm: syz-executor5 Tainted: G W 4.20.0-rc6-next-20181214+ #171 [ 376.505574] QAT: Invalid ioctl [ 376.510843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.510851] Call Trace: [ 376.510919] dump_stack+0x244/0x39d [ 376.510958] ? dump_stack_print_info.cold.1+0x20/0x20 [ 376.511008] handle_userfault.cold.30+0x47/0x62 [ 376.518563] QAT: Invalid ioctl [ 376.523595] ? userfaultfd_ioctl+0x55d0/0x55d0 [ 376.523616] ? mark_held_locks+0x130/0x130 [ 376.523637] ? update_load_avg+0x387/0x2470 [ 376.523668] ? userfaultfd_ctx_put+0x830/0x830 [ 376.523695] ? rb_erase+0x3710/0x3710 [ 376.523712] ? match_held_lock+0x850/0x8d0 [ 376.523733] ? print_usage_bug+0xc0/0xc0 [ 376.572731] ? graph_lock+0x270/0x270 [ 376.576556] ? find_held_lock+0x36/0x1c0 [ 376.580668] ? __handle_mm_fault+0x4d19/0x5b70 17:01:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#!