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"}) [ 906.131803][T23105] binder: 23103:23105 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x401, 0x201) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xeadb, @empty, 0x80}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0xd}, 0x7fff}, @in6={0xa, 0x4e23, 0x80, @ipv4={[], [], @remote}, 0x7f}, @in6={0xa, 0x4e22, 0x2, @empty, 0x200}], 0x336) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:32 executing program 2: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000007a00000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 906.289155][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 [ 906.310446][T23121] Unknown ioctl 1074048865 22:58:32 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 906.340695][T23124] Unknown ioctl 1074048865 22:58:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x80000001, 0x4040) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:32 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x500000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000003000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:32 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x400000000000000) prctl$PR_SET_UNALIGN(0x6, 0x3) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x5, {0x8a}}, 0x18) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) [ 906.449133][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0, 0x6}, 0x8) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2000) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) write$P9_RXATTRCREATE(r1, &(0x7f0000000280)={0x7, 0x21, 0x1}, 0x7) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000240)=0x800) 22:58:32 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000005000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:32 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000), 0xb5a) r3 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000040)=0x800) [ 906.649815][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:32 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x2, 0x7f, 0xb, 0x1d, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@local, 0x9, 0x14, 0x10}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd2b, 0x3506}, @sadb_address={0x3, 0x6, 0x33, 0x80, 0x0, @in={0x2, 0x4e22, @broadcast}}, @sadb_key={0x11, 0x8, 0x3f0, 0x0, "969ec1cc8676bfd95be8a91c9204cc90e9c7e740c1ebc2b8a973c4f5fb9ae54427d640ddc4326aa17e7cb692c85bfba65e65fb89a496a29978ff3002dbfe47cec79bcf3598bda89f92d24434814dd4c32165ea0f91e87ac70e7fc619e877310a48d11ae808b9df3d1fb3305a27348a1a7cb54beb8ef9ac7a3eb39aa775e5"}]}, 0xe8}}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:58:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) accept4$alg(r1, 0x0, 0x0, 0x800) memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x20000, 0x0, [0x7f, 0x5, 0x4, 0x0, 0x7ff, 0x9, 0x1f2c, 0x1]}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:32 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:32 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x600000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000006000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=@in={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000180)="519efad48498b0388d2a1b18a71fb7624dd3ef03933b8490b08543936c45adb11c8f798f93f884b628226a7f40fe321dc39a186c425ba95090f96ea64a26b2617e875e20fe160a98a7284e52a8539f666800d6978617ebae9d4a681b2fe3", 0x5e}], 0x1, 0x0, 0x0, 0x24008015}], 0x1, 0x40) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x300, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40010) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0xfffffffffffffffd, "648eda93c3c02746676c953283b3d09cd54156bec5c0f972e9072d1fb7d0e7a84ed92904d908db560edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:32 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x0067\x00\x00\x00\x00'], 0x28}}, 0x0) 22:58:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000007000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:32 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000012000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:33 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x700000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:33 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[]}}, 0x0) 22:58:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4100, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f0000000100)) r3 = getgid() r4 = geteuid() getgroups(0x9, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) r7 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) getresgid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=0x0) getresuid(&(0x7f0000000640)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a00), &(0x7f0000000a40)=0x0, &(0x7f0000000a80)) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000ac0)={0x4a0, 0x0, 0x3, [{{0x0, 0x3, 0x7fff, 0x7fffffff, 0x6, 0x8001, {0x4, 0x5, 0x7fffffff, 0x400, 0x3f, 0x401, 0xe000, 0x8000, 0x5, 0x8, 0x100000000, r2, r3, 0x3, 0x36}}, {0x2, 0x6, 0x9, 0x6f5b, '-vmnet1--'}}, {{0x4, 0x3, 0x0, 0x2, 0x0, 0x5, {0x6, 0x0, 0x401, 0x5, 0x8, 0x5, 0xaea, 0x1, 0x80, 0x4, 0x7, r4, r5, 0x7ff, 0x100000001}}, {0x4, 0x3, 0xb, 0x664bc157, '/dev/loop#\x00'}}, {{0x2, 0x3, 0x696c13c, 0x7fff, 0xffffffff, 0x40, {0x4, 0x3, 0xf1, 0x20, 0x8, 0x3d5, 0x8, 0x80, 0x4, 0x5, 0x101, r6, r7, 0x1, 0x5}}, {0x4, 0x1, 0x15, 0x40, 'self%)(@nodevppp0GPL:'}}, {{0x5, 0x3, 0xc8, 0x0, 0x1000, 0x200, {0x5, 0x3, 0xd622, 0x4, 0x100000001, 0x1, 0xed, 0xa7, 0x800, 0x8, 0xaf, r8, r9, 0x1, 0x1f}}, {0x2, 0xfb95, 0x4, 0x5, '\x00\x00\x8c\x00'}}, {{0x6, 0x0, 0x5, 0x0, 0x7, 0x3, {0x4, 0x8, 0x101, 0x8000, 0x605, 0xfffffffffffffffc, 0x2, 0x5, 0x1, 0xffffffff, 0x0, r10, r11, 0x40, 0xfffffffffffffff8}}, {0x2, 0x7, 0xb, 0x4, '/dev/loop#\x00'}}, {{0x4, 0x2, 0x6, 0x2, 0x8, 0x7, {0x1, 0x7, 0x3, 0x8, 0x10001, 0x0, 0xff, 0x1, 0x410, 0x23, 0x6, r12, r13, 0xd7, 0xfff}}, {0x1, 0x101, 0xb, 0x8, '/dev/loop#\x00'}}, {{0x3, 0x2, 0x0, 0x23d, 0x6, 0xe0e9, {0x2, 0x9000000000000, 0x800, 0xffffffffffffffc1, 0x9, 0x0, 0x3, 0x3, 0x7, 0x7fffffff, 0x5, r14, r15, 0x7f, 0x1}}, {0x2, 0x1, 0x4, 0x4, '\x00\x00\x8c\x00'}}]}, 0x4a0) r16 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r16) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) r17 = dup(r0) ioctl$sock_inet_tcp_SIOCATMARK(r17, 0x8905, &(0x7f0000000540)) 22:58:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x8) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000020000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:33 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0xc00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:33 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x90, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000048000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:33 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x91, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:33 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x400000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x83, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001bd3e80000005c8e3e457a9af71b9efc279d0a4a7c980a67ded39c5a32e57050867bd152a9c764d10f3a9babef1c0b86ca5ed7443812b2e80b934fe8e809ddda704f64df93725009bae6b6502afd1b1f15f7c5822d7558bedbe659291095964b7224ca97ffc02307340fc24ad1cdfafe773307432ab65a599b08443b0d05af37b582efc0b911819b6b0f210699ea966e6a524d7b898c968cdd5bd8623bfa78e51f783acfedfc7999251c696cf4a9c07784b259105c79b24a51fce62755119de8fce1497698a3806a25b6c483f1a9b54eac224a162612"], 0x28}}, 0x0) 22:58:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000004c000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:33 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x4) r1 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) write$P9_RGETATTR(r2, &(0x7f0000000280)={0xa0, 0x19, 0x2, {0x100, {0x40, 0x1, 0x3}, 0x2, r3, r4, 0xff, 0x5a12, 0x3, 0x3f, 0x3, 0xb13, 0x0, 0x9, 0x1, 0xb75f, 0x5f84, 0x6, 0x2306, 0x4, 0x101}}, 0xa0) 22:58:33 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:33 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x92, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000060000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:33 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r1 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x4, 0x0, 0x80000001}, r1, 0x0, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mmap(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x8, 0x4010, r2, 0x49) 22:58:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0xa, 0x3, 0x2, 0xb24, 'syz0\x00', 0xffff}) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$netlink(r2, 0xfffffffffffffffe, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000068000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:33 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000002c0)=""/56) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000001c0)={0x10d, 0x4}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000240)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000005000000000008001b0000000000"], 0x28}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000080)) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000280)=0x3, 0x4) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0xffffffffffff0000, 0x1ff}) 22:58:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x48000, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x400000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r2, 0xffff, 0x7, 0x9, 0x2, 0x1}, &(0x7f0000000140)=0x14) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000001c0)={0x7, 0x80000080000001}) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000180), 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) 22:58:33 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x2200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:34 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x93, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = semget$private(0x0, 0x3, 0x200) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000000)=""/144) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000006c000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:34 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x2601000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:34 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e21, @multicast1}}) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000000c0)={0x5000000000000000, 0x868, 0x8001, 0xaf, 0x100000000, 0x7e7, 0x7, 0xf3, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x81}, &(0x7f0000000280)=0xab) 22:58:34 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x94, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = getpid() r2 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) mq_timedreceive(r2, &(0x7f0000000440)=""/67, 0x43, 0x7, &(0x7f0000000300)={0x77359400}) ptrace$setregset(0x4205, r1, 0x203, &(0x7f0000000040)={&(0x7f0000000000)="b5067c558b795dd7902e", 0xa}) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x7b, &(0x7f00000001c0)={0xff0f}, &(0x7f0000000200)=0x10) prctl$PR_GET_TSC(0x19, &(0x7f0000000100)) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x3f) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda18d9b9e73f0891b43283b3d09cd54156bec5c4f972e9072d1fb7f0e7a84ed92904d908db3c0edd036eff7f00", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b54125003aff5e4f0000032be124f08175e4079890380f63f70200", [0xfffffffffffffffe, 0x2]}) 22:58:34 executing program 0: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2a400, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x2, 0xff, 0xb, 0x1, 0xa7}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000074000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:34 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x3f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:34 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x95, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:34 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0x80, "4579bda389d0933631dde03170d2c172620bcb9eab4a0eced5bd6440ee765c3b", 0x0, 0x1}) sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:58:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000007a000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00\x00\x8c\x00\xff\xff\xff\xff\xff\xff\xff\xea\x00\x00\x00', 0x1) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000100000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:34 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:34 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x96, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:34 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1900020010000108000000000067c05478bc774d1a93e791e7a60177935d30d85e9b9c70156c874460c47e944a8ac610b1a351c474c7571eb158b6eede1ec7e57275143471a5b5daa2844b8da877c50a292b408888124a89593813", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0) 22:58:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x100, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0x401, 0xb5c3d2ef743d521e, 0x4, 0x100000001, 0xff, 0x6, 0x40}) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x2, 0x1, 0xef, 0x84000, r1}) 22:58:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000200000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x6, 0x400000) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283d516030ac3fe59d9c4f972e90709000000e7a84ed92904ef6bbd600edd036ec80f351b550000000000000200", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000240)={0x2, 0x40, "1830242e8539ed2765b7cd6f4e3c65a24c892f2bf0d9fce93a8a7c0acf633dfaa4197ff5d2cf614cba587280c8e6892b2e13ef733c112e7a5fc0abef9519e224"}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000040)={0xd7c, 0x0, 0x300e, 0x1, 0x2b, 0x1, 0x9c}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x8c6b9d2ce6498661, 0x0) getsockopt$inet6_dccp_int(r2, 0x21, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, 0x1, "f00bf4e7e183c735c8180e267d0d0dd437a7589e16a457bc72c8d686fe6db531bb00ff2ba397cdff00d4726f65c77ed61bd88d7e4071f39866b8c53367b7a233", "b0bd14b70d02938448490c47c942077148ba516763553e74dc651e1083048e82", [0x1000, 0x8001]}) 22:58:35 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x97, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000300000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$erofs(&(0x7f0000000100)='erofs\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x3, &(0x7f0000001200)=[{&(0x7f0000000180)="a49cf0", 0x3, 0x58}, {&(0x7f00000001c0)="653ddc4f9a", 0x5, 0x1}, {&(0x7f0000000200)="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", 0x1000, 0xf94b}], 0xa20000, &(0x7f0000001280)={[{@acl='acl'}, {@fault_injection={'fault_injection', 0x3d, 0x1}}, {@fault_injection={'fault_injection', 0x3d, 0x81}}, {@acl='acl'}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}]}) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x400000) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x3ff, 0x400900) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:35 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80041, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, @bcast, @netrom={'nr', 0x0}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x8, 0x30, 0x7, 0x200}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x4181, 0x30}, &(0x7f0000000200)=0xc) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x10100, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x4e23, 0x2, @loopback}, {0xa, 0x4e22, 0xff, @rand_addr="83c857045d171b21dba70526661ebff6", 0x7fff}, 0xfffffffffffffffe, [0x679fe18d, 0x6, 0x0, 0x5, 0xffff, 0x1ff, 0x769, 0x200]}, 0x5c) r4 = memfd_create(&(0x7f0000000240)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:35 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x4003000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 909.249790][T23383] binder_transaction: 16 callbacks suppressed [ 909.249809][T23383] binder: 23382:23383 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:35 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0xb2, 0x2, 0x29, "4128286ac7b392ab388c6a72036e56bb", "5d77d42e8c2b690ad347514e0412047ec460543d13193b91d9d034915f11cfd0fc25dcbd268da37c8e8bfe473298e2bdef6990b5c2b661774e5d00f81491ec6d29a21ff29197ab955c09d6311f742e96c9ca8e07b54f47eb2de21e49623ab827bed4b0b789ac9e70c452936fe12fb5ada0e7381b69829a5294c0be40ae5e85c0f8146d0a914bdb27a03a529b869399a965e834dd3e8d045a089064f5ef"}, 0xb2, 0x1) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:58:35 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x98, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000400000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000040)=""/44, &(0x7f0000000080)=0x2c) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdc5, 0x1, 0x0, 0x12, 0x40, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200", [0x1000000000, 0xffffffffffffffff]}) 22:58:35 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000108000094000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000ffffffff96f4c8e63edc8d99ea39c39dc87314910b2ada2c43623b0795fab1ab2ff93e8a877c3d6a63a90ed1ab0206ebdf747078a35a9722609a266ab3000000000000e708d7060000000f0e36a1635b03b87d6e401596d4"], 0x28}}, 0x0) 22:58:35 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x99, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 909.506550][T23407] binder: 23404:23407 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000500000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x20080, 0x0) write$rfkill(r1, &(0x7f0000000100)={0x6, 0x9, 0x3, 0x1, 0x1}, 0x8) shutdown(r0, 0x0) accept4$x25(r0, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x4, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x280, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040)=0x3, 0x4) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200", [0x3]}) 22:58:35 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x4400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 909.622375][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 909.642471][T23419] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 22:58:35 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:35 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000005140)='/dev/hwrng\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000051c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000005440)={&(0x7f0000005180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005400)={&(0x7f0000005200)={0x1ec, r2, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffff1560}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x79}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0x10c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x236}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @remote, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1f, @ipv4={[], [], @empty}, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x21d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbf14}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x1ec}}, 0x0) [ 909.752435][T23431] binder: 23427:23431 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x9) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$alg(r3, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) socket$alg(0x26, 0x5, 0x0) 22:58:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000080)='sessionid\x00') shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000600000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:35 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:35 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x7601000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 909.947973][ T7839] binder_release_work: 16 callbacks suppressed [ 909.947982][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:35 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00d03fdf31af139be6001b0000000000"], 0x28}}, 0x0) 22:58:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x2, 0x2100) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) [ 910.083364][T23464] binder: 23459:23464 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 910.119759][T23469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 22:58:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000700000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:36 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 910.191450][T23475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 910.201752][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) [ 910.288452][T23483] binder: 23481:23483 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:36 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x80000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)="f79273546d70cf486e03841355") sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:58:36 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x7c01000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 910.366638][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:58:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x10, 0x0, 0x0, "648ebc93c3c02746676c953283b3bcd54156bec5d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58000000003f4fc55df72c469a998cbc5a430a000000000000000000008400000000000000f4", "b541254156acc7cf0594882be124f08175e4079890380f63f70200", [0x0, 0x5]}) 22:58:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000001200000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e22, 0x8, @rand_addr="2d15b29fcedd33973366a26a9a3994f3", 0x7}}, 0x5, 0xff, 0xfffffffffffffff8, 0x5, 0x40}, 0x98) 22:58:36 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x4, 0x7, 0x28a6, &(0x7f0000000080)={0xffffffffffffffff}) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @null, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x80000000, 0x20800) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) [ 910.588169][T23507] binder: 23506:23507 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:36 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008001b0000000000"], 0x28}}, 0x0) 22:58:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000002000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:36 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) write$sndseq(r1, &(0x7f0000000440)=[{0x40, 0x7f, 0xf1, 0x3, @tick=0x200, {0xe26, 0x7}, {0x0, 0x7}, @note={0x8001, 0x42680000, 0xffffffff, 0x7f, 0x1ff}}, {0x7fff, 0x400, 0xf1c, 0x4, @time={0x77359400}, {0x49, 0x3}, {0x2, 0x4b}, @ext={0x8f, &(0x7f0000000040)="44f68bccc908c8cac6e39d4197a1009495d2ce30fce667f7ebbe6e67f7ba4c8540d1af21a95291a964e6a3941918d53507ca4622f9361e61459c2e716449f5de6cb3f285951c1bb7fdca7fb773a71e78d27067baf7fe350c42a63763ac57a29ec80e37688e6b3d70a33e2efa75477a193bfe9c755ec48fa4aad28c024dd39adea2e892e5a2e894d97cc7a67f715809"}}, {0x3, 0xa18, 0x9, 0x8, @tick=0x60c, {0xc3, 0x1}, {0x2, 0x7}, @ext={0xd7, &(0x7f0000000180)="c0e9e98ecfdb6be7db8cb75b3d1460d2d26be00e692bf528d95ed34986a976a18ab2c8b0d89f14b88a9fd19a87fa221b5ac0217b305705a9006ae39649ac785ff77662d95a36aeb7211ec28ff1ee6d630ff6d006c8b74a58d7f1fe5e38ecdffeb4e1a85e6c778620719c27ce9fd4d3fcaab2d119e58fe43c3dd065988f217693b35e19492586b58f8fcc55b11bb6df85570fb0f6fcf5d62a7d52309bc7b6b3d22459041a2e0744f494e5b9cc57e596c7cb25d594ca3db68f91bd58005d12398d5c5db34fcb6905cebbff14fa502619e7b26987f0f810f4"}}, {0x4, 0x100, 0x8001, 0x8000, @time={0x0, 0x989680}, {0x8, 0x1}, {0x3f, 0x6000000000}, @ext={0x48, &(0x7f0000000280)="cf4fd378b3121d05e28a369e03753ab9d265bf2481d6ac5bac96068bb79c58d72e2231e9b183971492353a9bc841011b60de8c13838a0914abe6e9ca02b2467e99a5fd6a22c51fbe"}}], 0xc0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0xfffffffffffffffd, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d000004ed92904d908db3c0edd036ec80f351b55000000000500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882bc324f08175e40798000000000000000200", [0x1, 0x7e67]}) [ 910.700534][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:58:36 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 910.768160][T23528] binder: 23527:23528 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000004800000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:36 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 910.918571][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='-vmnet1{{\x00', 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dlm-control\x00', 0x1010c0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={r2, 0x6, 0x1, 0x97a, &(0x7f00000008c0)=[0x0, 0x0], 0x2}, 0x20) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x129) r4 = fcntl$getown(r0, 0x9) sendmsg$nl_netfilter(r3, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[@ANYBLOB="bc0600000303100029bd7000fcdbdf25020000030803460008005800fe09908020d85e0a578d857a0c1bd2693aa2aaba4fe3b0fcb2f5e0249a4d679015c141ec705a8b63966ae8632175521c6fe9555c446ee2079a8d34be4350ce170183560e3400d6fa5f98274534289fe578d62a18ba928185420b361609787a301a2ee0454b8838c6cc29611b79d722fbd362fc837b2deb7e4f9c8090a6fecca348bc7b024ebc82a2506d6369e9965205e6392fdb9df6d7fb5854249b957ceff7ee944a882c53ad5ec3835ca13b597d1ae6b373e86a4be1ebbd581a88", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB='\x00'], 0x6bc}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r5 = getpgrp(0xffffffffffffffff) fcntl$lock(r1, 0x27, &(0x7f00000009c0)={0x0, 0xffffffffffffffff, 0x2, 0x6, r5}) 22:58:36 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[0x6]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 910.971653][T23551] binder: 23549:23551 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x0, @remote, 0xfffffffffffffffa}, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x14}, 0x2}, @in6={0xa, 0x4e20, 0x5, @local, 0x3}, @in6={0xa, 0x4e21, 0x6, @remote, 0xffffffffffffffc0}], 0x70) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x3, 0x560, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200005e8], 0x0, &(0x7f0000000040), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x11, 0x5e, 0xf7, 'nr0\x00', 'gretap0\x00', 'veth1_to_hsr\x00', 'bond_slave_1\x00', @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @link_local, [0xfc6ee4aced5d4f29, 0x0, 0x484709fb4c97ecaf, 0x0, 0xff, 0xff], 0x70, 0x1a0, 0x1d8}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x5, 'system_u:object_r:public_content_t:s0\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[], 0xa}}}}}, {{{0x9, 0x10, 0x8884, 'ip_vti0\x00', 'rose0\x00', 'team0\x00', 'hsr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @remote, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0xc0, 0xf8, 0x130, [@nfacct={'nfacct\x00', 0x28, {{'syz1\x00', 0x40000000000}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}]}, @arpreply={'arpreply\x00', 0x10, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x5, 0x56, 0x888e, 'nr0\x00', 'veth0_to_hsr\x00', 'vxcan1\x00', 'ip6erspan0\x00', @dev={[], 0x28}, [0xff, 0x0, 0xff, 0xff], @random="150b7e311ea4", [0xff, 0x0, 0xff], 0x120, 0x190, 0x1c8, [@arp={'arp\x00', 0x38, {{0x338, 0x88be, 0xb, @rand_addr=0x6, 0x0, @rand_addr=0x7, 0xff, @broadcast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @link_local, [0x0, 0x0, 0xff, 0xff], 0x2c, 0xa0}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00', 0x7b}}}]}, [@arpreply={'arpreply\x00', 0x10}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x15}, 0xfffffffffffffffe}}}]}, @snat={'snat\x00', 0x10, {{@dev={[], 0x1a}, 0xffffffffffffffff}}}}]}]}, 0x5d8) 22:58:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000004c00000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:37 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x8cffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 911.106843][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x879, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="fd4accda5962436e94df000000000000000803ffffffffed00"], 0x28}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000003c0)={0x9, {{0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x25}, 0x22e}}}, 0x88) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000080)=""/105, &(0x7f0000000240)=""/125, &(0x7f00000002c0)=""/202, 0x10d000}) 22:58:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) setsockopt$packet_int(r1, 0x107, 0x1a, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) 22:58:37 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 911.239631][T23575] binder: 23569:23575 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000006000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 911.350481][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:58:37 executing program 0: syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80200, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:37 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0xfffffffffffffffe, 0x68400) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x40}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r3, 0x5}, &(0x7f0000000100)=0x8) [ 911.464904][T23599] binder: 23596:23599 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:58:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000006800000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:37 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0xccffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 911.588815][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000), 0x188) 22:58:37 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa2, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7f, 0x101440) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0xd75) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x10000, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x40, 0x20000) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x17a) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000623ff6b2e60ce4420da4df8bfd6e97e4d58525000ae7e97b5e2cd164e8c4864e18dd983e84589f0dfae6a5c3fac5d849b9829c909c7efee961b1cf"], 0x28}}, 0x0) 22:58:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000006c00000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)=0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgrp(0xffffffffffffffff) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000005c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000e40)=0x0) r12 = getuid() getgroups(0x6, &(0x7f0000000e80)=[0x0, 0xee00, 0xffffffffffffffff, 0x0, 0xee00, 0xee00]) r14 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getegid() r17 = gettid() r18 = getuid() getgroups(0x3, &(0x7f0000000f80)=[0xee01, 0x0, 0x0]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000fc0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001000)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000001100)=0xe8) lstat(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001440)={0x0, 0xffffffffffffff9c, 0x0, 0x2, &(0x7f0000001400)='}\x00', 0xffffffffffffffff}, 0x30) fstat(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001580)={{{@in6=@dev, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000001680)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000016c0)={0x0, 0x0, 0x0}, &(0x7f0000001700)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000019c0)={0x0}, &(0x7f0000001a00)=0xc) lstat(&(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r32 = syz_open_dev$adsp(&(0x7f0000001b80)='/dev/adsp#\x00', 0x1, 0x200000) r33 = gettid() stat(&(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0}) r35 = getgid() r36 = fcntl$getown(r0, 0x9) getresuid(&(0x7f0000002080), &(0x7f00000020c0), &(0x7f0000002100)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002140)={0x0, 0x0, 0x0}, &(0x7f0000002180)=0xc) r39 = getpgid(0x0) r40 = getuid() getresgid(&(0x7f00000021c0), &(0x7f0000002200)=0x0, &(0x7f0000002240)) sendmmsg$unix(r1, &(0x7f00000023c0)=[{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000000c0)="500fe6f639f0926111a5da2c4696c88a4f775b111c080c9ced88a97ba46005b0752a3af6fc5bf81a6883cbeee7fa53946dc7fac558c0768f9ac19e3c62554bb780e2cbf45f09cda312b0f6fb7eb4e81f13ac0e9dafd717bc7f97e1308a72d354e5ab2421d4968b22514be07f7def2dba3c1d41a535ae89378508cb048b20bf9247db9b065db20c8d693867b480b2bc6f3e240e17a0b995d18184fc67b00d56a771de055fa636b5ea415ba862400dfc7e85cb9490e5d961d8194562e3e7f96d4317afd63cc07390120be2564a20f1c2e73dd2500ea2a7e849f67422093475d1ba90c6ba036ef2ad2d0060f17948471351ef1b", 0xf2}, {&(0x7f0000000280)="80fc673dd09a392d1a31c245ac26e981889b334f70541a46697b25e75082a7e201a6369843f3e3b162f93f4cdb40a2c760159baadf9096206659730d48b77c5109864201b4289a328e468361fcf0491217c55692eca879b143a13c57de", 0x5d}], 0x2, &(0x7f0000000800)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, 0xffffffffffffff9c, r0]}], 0x130, 0x4000}, {&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f00000009c0)="5180dad2e7ebeb2776aedf1d8c83371d238dc68cf2f3d1edfe32f6e3b52c64304506e29d657c1cd739e60de4587d47a46f085aeac4396c9e04c9d3bb43d4c1e4122f83cdeb24bc15b8381b88c99e55e205f836f14c3dd40adfa693bf8ade3b70aa3ef24e105843ec7f23bb8505cc241abace21481d4ca18536", 0x79}, {&(0x7f0000000a40)="f6e19907f2381b10a60b22633299f76d313a8ddddb3cde4208a35564f22f6000549b4246ca629c2b4c9bdfb188caa8dbefc7208f49789f237d07a18a5f01388b81127e38a29957e9faf3af9e2ead5ce6ebb3e8a7a4fcd2fa9f1ceff3a5cbe35b9ef197d502a7d854746a0aa11bad644d9ed0efe00dcb637e813b79efcf4dfb409167ed93018e4cf53b45a84f9fef5951efcf21cd72bec3f282bd27ac9b06c1ebffe3ce570fe674035e43017395e67bed58d83598a617c073641f7f8acae7140e4449f690eb82594a056c82ca1e0030118cdd0eefff44f1c97a110d", 0xdb}, {&(0x7f0000000b40)="6c6af91db99b4b801d1d42cee4b70c85dd2c037dc2edd2a47e3e2951fb0b4d94bf66649562448113422f90d5c8f38fbdb168901e7bcc9538bc7d0d9655347af7f08959d9b43e217c783521d9916a97a013640f7e", 0x54}, {&(0x7f0000000bc0)="c8fa9a5e1d11f5d02047cb846621e8011b6ab1ce07e317d7d2744e36a10963bf457768460566d206011ef8376639d9ce6622aa5ba40551b0937088a2660710521a476596751bbd8c77054b3da3a7942b4b9d46fd3704ef0508832d3f4b1a5930ae6bfeffa5c5cd7400d242350a525e0d258344db17b0e7028d6d4bcf5433b9c02535d0f65ea5190660004f7587d8aa54b3baf78cadb8179ac91dd39a973c875e5af30a626e320f4c56aa9d4e7157", 0xae}, {&(0x7f0000000c80)="16d9b4653984ec7e72f8ed303bdd28120c101013bce3ea0268935867ae07f3b442e3ba452935f15a7817e3ab39d24ddcfd0668fd73ccbc6278f43c52038efc1906a8a1caac0e6d9580b928aebcb936586ec573f5e470102b609e434bee5af6a0160bf3a10991198ca54c97a981dbb7236488fd708c1a853dad6a2fd0a8fb9cda561e746968986bfd6e4f33c4441515ada82a4eb109f7801193c524e5acd172ee4694017526a4873552f5125e33f10ccb6f1b4d9fc263f13d93043fbe83bdf2879865f2af44f37ad1e6bef61eb2f65ae01f2360cb0b56b3e5e90c", 0xda}, {&(0x7f0000000d80)="3560987aa93b0000c1c66bae9f1f6568e676b7323b32069d8764960aae3b872a3e15aa502f4f0bbed1ff", 0x2a}], 0x6, &(0x7f0000001200)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x18, 0x1, 0x1, [r0]}], 0xe0, 0x40001}, {&(0x7f0000001300)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001380)}], 0x1, &(0x7f0000001740)=[@cred={0x20, 0x1, 0x2, r23, r24, r25}, @cred={0x20, 0x1, 0x2, r26, r27, r28}], 0x40, 0x11}, {&(0x7f0000001780)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000001800)="4cefa177a8af48c31363f8f939c70f744770f86e0dcaf92b8db2cab5654844385308d8abb454bb516bbc3ada03549e619a7f48b08972a5fa13e8788ac2762aaab0dde8c798e6f432f5c9d5d2eeaa12be731b476486c44f3b97f25d81afcbca0d2b7541599a8686249eb19ef0d5b51bcc3bdeec00baf1d0931f7f502be2908c3998573b01f82e61d80b781015af77e6a139bd015356c0e84f2cccf832b8ee312f94fbb1797c46bba48483691b9881dc0ffe5871ff7aadaf4b3bd7e3d0bc9a4e44be1d59886348d3f0ee4863e8fd", 0xcd}, {&(0x7f0000001900)="0c2d05a7d92cd15d9dcc7de893711f15e96b963cff8645fb45c28cc2c94a77b7065ea12f4bcf359be7e124ec02087e13d4e185e79b0019085304b790defc57b5282d0fc4d8", 0x45}], 0x2, &(0x7f0000001bc0)=[@cred={0x20, 0x1, 0x2, r29, r30, r31}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r32]}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0x80, 0x4000000}, {&(0x7f0000001c40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)="2cdf9de75cd4567941a51a5b51aff13f22e104ef73a5b962600cf355fe2dd1", 0x1f}, {&(0x7f0000001d00)="3bbbbba736ac3be47989ec90c1eedb8d33b1e7af6dd8451a235b4ebf27f22e09dbf1d66bf211c95d7573fd936fdffef7aa655c4111cc22727d215968378c791774bd3d2de6b6804acf2b12e5e4ced79a10cfabb94872f63242212b670e7ab057f43bed13f23dc014c3631dfd91acc47ddbde517c85ced04d6def924b2ac1163ed16452f38264", 0x86}], 0x2, 0x0, 0x0, 0x1}, {&(0x7f0000001e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001e80)="889a68d9777b166d967cdefcc000cb57f3bfb04dad9ac4445cc2086a8815b195d49dc410e26c6cd9c9f9ee204d146d6347cba16fb7b60002e4695c5330a6380c2db59c6d0ebd1f79ce7a7f3e7cb1c4d852cfb2476630761e27058a523c1825c1357b7f1db0ef118cbf6a928d62189fcd4bd897b6cc28", 0x76}, {&(0x7f0000001f00)="f44ed3a2afd92b7611b66734ff4f340923f1ba7636ea05cba29bd32718cc5267706275775d8f91c3684e4b29185fabbdeaf765572dd4314c739e5fb1e5a1d0e3b4196deb9e05f22f905f7ea2f8861e8cd8ee67909408743eee64fb105d97a27561d17081a9b777c029305be4", 0x6c}], 0x2, &(0x7f0000002280)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r33, r34, r35}, @cred={0x20, 0x1, 0x2, r36, r37, r38}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r39, r40, r41}], 0x110, 0x80}], 0x6, 0x10) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x40, @remote, 0x5}, @in6={0xa, 0x4e20, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}, 0x4}, @in6={0xa, 0x4e20, 0x20, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x4, @mcast1, 0x20}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @remote}], 0x2d7) [ 911.822569][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:37 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = semget(0x0, 0x3, 0x0) semctl$GETZCNT(r2, 0x3, 0xf, &(0x7f0000000440)=""/4096) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000007400000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:37 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0xf5ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 911.990159][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:58:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @rand_addr=0xac}], 0x10) r1 = accept4(r0, &(0x7f00000000c0)=@can, &(0x7f0000000140)=0x80, 0x80000) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000180)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x5}, 0x8) shutdown(r0, 0x800000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 22:58:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000010000108000000019773e47000000000e81489d5a671dbfa2811cc71e7952aee81c59207eba57b74f16083c031300ca79d858f0000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000c6b40ba00b7035ca75b6e023ae07"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:58:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000007a00000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:38 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x8000000000000000, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9ff0f00000000000000008096d3ff0eace98200400000a0373f4fc55df72c2fb5008cbc7a430a000000000000080000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) fcntl$getown(r1, 0x9) 22:58:38 executing program 0: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000000005, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b003f7c0000"], 0x28}}, 0x0) 22:58:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000fffffdfd00000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:38 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x58000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0xffffffd6) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) pipe2(&(0x7f0000000280), 0x80000) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000000c0)=0x5) lsetxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='security.SMACK64IPOUT\x00', &(0x7f0000000180)='user\x00', 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0xffff, 0x9, 0xd1, 0x6, 0x0, 0x0, 0x2008, 0x1, 0x58, 0x0, 0x7, 0x81, 0x3, 0x0, 0x6, 0x3, 0x23, 0x81, 0x80, 0x4, 0x4, 0x3, 0x9, 0x4, 0x8001, 0x48000000000000, 0x100, 0xffff, 0x37c8, 0x5, 0x6, 0xfffffffffffffff9, 0x5, 0x4, 0x7, 0x6, 0x0, 0x80, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x8000, 0x4, 0x0, 0x0, 0x2, 0x6, 0x7f}, 0x0, 0x4, r1, 0x1) 22:58:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000fdfdffff00000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:38 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0xf603000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:38 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2) 22:58:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev, @in6}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000080)=0x4004) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:38 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000001000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000500)={0x68, 0x0, 0x1, [{0x0, 0x6, 0x4, 0x8998, '\x00\x00\x8c\x00'}, {0x1, 0x1, 0x4, 0x3, '\x00\x00\x8c\x00'}, {0x3, 0xf5, 0x0, 0x2}]}, 0x68) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0xf2}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r2, @in={{0x2, 0x4e24, @rand_addr=0xfc1}}, 0xfff, 0x10001, 0x77e8, 0x3, 0x80}, &(0x7f0000000300)=0x98) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000180)=0xf0dc) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0xfff) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_retries\x00\xcf\x10{\x82SEK\'i\xff\xf3315lL\xccoY\xd5\x03\xa5\bw\xd6\xbd\xbc\xa8\x01\xf4\x9dO\x80\xd9^\x98\x9c\xfc\xbc\xcf\xd0_\xf4\xba+\x14{c>IK\xa1\x96\x8bI\x8e<\x7fh\xb9\xddZG\xab\xd5\x9b\xe3\xa2\xa0=i\x90\x89C\x91\xf8\x90\xc2\x8bE\xc8\x1c\xe2\xcaZzn)\xd1[U\x12Il\xcb5\xb8\xd1\xbcC\xe8\xe5\xbb\xb47\xee>;\xac(\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000040)) 22:58:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={0x0, 0xfff}, &(0x7f00000001c0)=0xffffffffffffff7a) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e20, 0xffff, @mcast2, 0x810000000000}}, [0x7, 0x0, 0xffffffffffffffc0, 0x322, 0x4, 0x8, 0x6, 0xffff, 0x2, 0xffff, 0x8, 0xea8, 0x9, 0x8001, 0x7f]}, &(0x7f0000000340)=0x100) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x5c1601) getsockopt$nfc_llcp(r3, 0x118, 0x1, &(0x7f0000000080)=""/25, 0x19) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="af5aa5877f8af83e32ff"], 0x28}}, 0x0) 22:58:38 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000002000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0xffffffffffd, 0x84) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x132) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)) pwrite64(r0, &(0x7f00000000c0)="073f236626263ae568edc699c7cf6cdef93c083e13ae3bc1192564c2334b5208", 0x20, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0xfffffffffffffffc) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240), 0x7d) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 22:58:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000100)={0x8}, 0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x2000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc8, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75da}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4004801}, 0x40) openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0)='fou\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x30010001}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x1b0, r4, 0x500, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x69d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MEDIA={0x12c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1600}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x377be60d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10002000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3c4f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r5, 0x3, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x480c0}, 0x80) [ 912.902571][T23739] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 912.959813][T23739] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 22:58:38 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0xf6ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000003000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000380)=0x6) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x800000, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@rq={'rq', 0x3d, 0x2}}, {@sq={'sq', 0x3d, 0x80}}], [{@appraise_type='appraise_type=imasig'}, {@appraise_type='appraise_type=imasig'}, {@audit='audit'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@permit_directio='permit_directio'}, {@appraise_type='appraise_type=imasig'}, {@fowner_lt={'fowner<', r1}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:58:38 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000840)='/dev/vcs#\x00', 0x0, 0x200003) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000880)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000009c0)={r1, &(0x7f0000000940)=""/110}) r2 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r3 = open(&(0x7f00000003c0)='./file1\x00', 0x0, 0x3c) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000400), 0x4) shutdown(r2, 0x7ffffd) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000a80)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000a40)={0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000ac0)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x7, @loopback, 0x80000000}}}, 0x90) r5 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) connect$bt_l2cap(r0, &(0x7f0000000a00)={0x1f, 0x9, {0x2, 0xffffffff, 0x81, 0x10001, 0x6, 0x10001}, 0x1, 0x8}, 0xe) syz_mount_image$gfs2(&(0x7f0000000100)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0xda, 0x9, &(0x7f00000006c0)=[{&(0x7f0000000180)="7611b4848e623f72c389b1fde9c45eb3682cb91f02b4906b977833942da33c45c0fa11f8b79ec0d584638913e5bb4acb771d0b85", 0x34, 0x8f9}, {&(0x7f00000001c0)="93d8d5c6bc6944154df08e7840bcebed364ce8e097118284f5a020aaf421aea93386caf462c4a4501722b19e2bc8a4d18b32f87bb1dab14ff864ee4520e4412d85200493cc201b15f4ef2a88da5784953401177389c7f91ba80a7810973a478612036e6a1a86c28ad6283c07f2063fea77ecd282977e71f4931dd07ac08ec92a3ba1d00f72d47d8328961a5625bf6834b94f5dd84ed74926954e3eeb00c4d8c7a5783a7aceb8e4916d4769b4c8edaaf7e6177e7caf249a9e76e6d8cb7bf13b3efcc6ad2000608d5e1cdd810b4629a8482fd0167c7dae9be09c", 0xd9, 0x4}, {&(0x7f00000002c0)="e7125b980be67b49815350887d1b46e0eaa04941b6cc8785ae59b1c1a0e5c1a8382b6b48aa6456aab4e03d75e28703f7e99eabb7af2c9732eb89e039d4f4cb53f6ca148245d2a1e11a6a9ac4ae63ec28e3a2e18b9d3ab9756a752ddb60654c29faa9a688bc34c350b9fe786ffb76f0bccfb98bb0be2154683be723f158cd5ff0465a1e246c8e450ce6dff119f9c135c2550ade8fe62db4939386501f568acad75d3ac95e6e130e904b580a7fb7dfa2ea8ba36ce9e4c569134c9cf9f757b969396aceea8eb7ed4a3c901e41a4651c381255ec4cfa1241542aa84c80", 0xdb, 0x100}, {&(0x7f00000007c0)="131db15641996c3c905606348bb6749e3939b88db620a46ab3d32c45f3f66af98ead1158855740141a2e9ebaef3ca62e15af8d28eb67af5f3938f81f4bb815acc230deab2a2f82994c", 0x49, 0xffffffffffffff7f}, {&(0x7f0000000440)="63187cc2af24c5d7bd2b60b05f", 0xd, 0x3}, {&(0x7f0000000480)="bdb82a065ef6cda14786314cb1e2ce58dc07296da49cf28455d97a4befd9b7ef462196f471c6b10d7dcba0f78fd4a54d824f8495a47f", 0x36, 0x4}, {&(0x7f00000004c0)="5f64ae43bb963c2f3bb636ee123aac0689e63aa86a68491fff40538b7eccb645247be7fb5c560955b57a391f6306f5399e2a64f80d270a9036380900db5e037624d34fdc4f9d3a82417356b008f347092fd9dfada34b15c4566680d4cc2a52e55473963aa04477274947c78412447312142dcb598042d55bc5e672b7bce023d076c92a1b08e59451cfb9d1d8d4a6a6c34240d9f3f644322ab675e7fa40fb70541c784ce32fdf36ca35c5d05ccf559202fafd8a87d139aaa8e1b38493b62a40998809d8cd0e068d41dd", 0xc9, 0x1000000000000000}, {&(0x7f00000005c0)="3c61f702b31c9108849d3960e99fbcf2cab6e553bf0cda88d3fcb1799cb1ef59c260ba7016632780803405b72c51793923405c2f75b136222b390334587996b16050b18088d7cf2ca547ca384a26d04d0b2aab9d7b0d00e841e32185e1332456ffafdd72affc701d056da899a054b4dce19641f55a5e68164526687ca0aecc96f859a7ad019bbdefd23822299a146ff856f4533d9335685fb1a304aafd6011fe", 0xa0, 0x3}, {&(0x7f0000000680)="5d9d7e92cb0d6d440ce54245a9acdccb087d1cc8cd", 0x15, 0xd0e}], 0x800, &(0x7f00000008c0)=ANY=[@ANYBLOB="7374617466735f70657263656e743d307830303030303030303030847db9185534a7c812011ea5d53030303031382c7175dce3900db1e3456b6f0000c5e05f71753d30783030303030303030303030342c64000000000000b302c973749db804b75596fd0cd9646174613d657468312c6f626a5f7479"]) getsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 22:58:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000004000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:39 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000004c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000500)={r1, 0x2}) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, &(0x7f0000000180)={0x0, @motion_det}) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x404}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r7, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xf56fd1dc4f5d4cdd}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x90) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0xdd, 0x41, &(0x7f0000000240)="8ba8969f145233f9068751514cb71e9ef9d6486236db2de132f8e6e2ea932f9d808d875193769abf3dd37273dae99a3e2f74e40ca65fdaf9d7af13266f432411e5468d7306f3a51ca5b7225c0e9ee63ef05f3e899e70e83b740cd75f80274b338b0799a3980fd46a882c70e93bb90ea22736dba1de2c65425d0ddd65ffb05451be993568a4a6c92c48699259058e93707e9e5df1e76341489da5a49bb6358130b984cfa1a8802fcc21bf239aaf7a99ad76faa2d6bc119030acab7acc3a16eb8020657171f5c3fa6d9cc50ef1a7975aabce5306a97c8bb7410f63c0d5a1", &(0x7f0000000440)=""/65, 0x6}, 0x28) 22:58:39 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x10}, @empty, 0x0, 0xa, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2, @broadcast, @multicast2, @broadcast]}, 0x38) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:58:39 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000005000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 913.314917][T23779] gfs2: invalid mount option: statfs_percent=0x0000000000„}¹U4§È¥Õ000018 [ 913.346392][T23779] gfs2: can't parse mount arguments 22:58:39 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0xffffff7f00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00\b\x8c\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\xd5\xf7\x1c\x98\x8eS\x8d\x9bQ\xa6+*\xf1\xf8>\x0e\x89\x01\v\xf1\xd4\x06\xaf\xea@B\xae\x0e\xc5c\xae`\x17\x9d\x88^\x1e\x15\xa4\'p<\x7fc\x9e\xe0{\xd4\xe0wX\x93\x1c\xaa\xc7\x02%\xc2g\x90Z\x7f?\x90\v\xc3\xe9\xf2)(td\xba\xa5\xd9\x8d>Fv2E\x03\x97\xcb\fG\xf6\x01Y\xeb\xfe[\xfc\x9c\xe1\x85h\x8a\x97\xb7\xd9\xd8M\vx+\x05\x8d\x0f\x8c\xad4\x1e\xc6\xaa\x9e\xb9(\x95\x90q\x02\xfd\xfc\xcc:\x87g=%I\x84tg@>\x8a\xc5i\x17d\xd6\x06\x83\xa8\x99\x9d\xf4\xf5-;\x06,9\xce\xd6\x1f^\xf7\xa0\xdd\xaa\xe5\xf51\x04w\xbe%', 0x4) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000006000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:39 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x400, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000080001e001b0000000000"], 0x28}}, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x8000, 0x80) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 22:58:39 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xaa, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000007000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 913.633579][T23811] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 913.710522][T23805] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 22:58:40 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x4202, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000)=0x4, 0xffffffffffffffbd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) ioctl$CAPI_INSTALLED(r0, 0x80024322) r2 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x200000, 0x0) write$P9_RREAD(r3, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0xffffff62) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e23, @remote}], 0xfffffffffffffdc6) 22:58:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='\x00\x00\x8c\x00', 0x3) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001700)='/dev/rtc0\x00', 0x80000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x14000, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000040)={0x7, 0x2, 0x3}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746d54156bec544f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a00000000000000000000840000000000000008", "b541254156acc7cf0594882be124f08175e4079890380f63f70200", [0x0, 0x1]}) r4 = gettid() mq_notify(r3, &(0x7f00000000c0)={0x0, 0x38, 0x1, @tid=r4}) 22:58:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000012000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:40 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xab, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:40 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:40 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000019ef0001080000000000000000001f0000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0) 22:58:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000020000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:40 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x4000003e6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x92000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa144, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) set_mempolicy(0x3, &(0x7f00000001c0), 0x1) sendto$inet6(r0, &(0x7f0000000080)="551d9e2f31a4ccdb4104639336b489dbf4fe311362426d2c4affdc424d02465b6e5a0be99aeee8b6ee0aeb9e387d86c44539b95b10bb60a420b7975b5ec1924964d2ecb0f2d793d4ee6dc516f4f991a275305db46c741a1e8a9e4552ce2e2e5243e52e8eb6d92ff3908ca5fb6f0efa38465f61796927fd4355bc9f4a2c00b439d1790cbdcd3d8be1a0b97a8b9725e4143145b176658856a77ad6b2", 0x9b, 0xd0, &(0x7f0000000000)={0xa, 0x4e21, 0xff, @mcast2, 0x2}, 0x1c) 22:58:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) restart_syscall() r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x2000) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) fchdir(r1) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) fallocate(r1, 0x70, 0x87eb, 0x4) 22:58:40 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xac, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:40 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:58:40 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 914.406637][T23851] binder_transaction: 14 callbacks suppressed [ 914.406656][T23851] binder: 23839:23851 transaction failed 29201/-22, size 7586835780199252000--7349874591868649443 line 3147 22:58:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) socket$rxrpc(0x21, 0x2, 0xa) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x1, @remote, 0x1}, @in6={0xa, 0x4e22, 0x80000001, @remote, 0x24}], 0x38) 22:58:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:40 executing program 2: rt_sigsuspend(&(0x7f0000000300)={0x2}, 0xfffffffffffffee8) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) flistxattr(r0, &(0x7f0000000080)=""/29, 0x1d) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) keyctl$session_to_parent(0x12) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) setxattr$security_ima(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@md5={0x1, "441599b29dd4e1031fea05689a9108e1"}, 0x11, 0x3) ioctl$BLKRRPART(r0, 0x125f, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x208000, 0x4) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000340)={r3, 0x1}) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x6cbe, 0x48003) ioctl$int_in(r1, 0x0, &(0x7f0000000380)=0xa000) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000280)={{0x2, 0x4e22, @rand_addr=0x1f}, {0x307, @random="252e0a685192"}, 0x40, {0x2, 0x4e21, @empty}, 'ip6tnl0\x00'}) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000480)="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") fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000580)) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xa) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:40 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xad, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:40 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 914.641446][T23868] binder: 23865:23868 transaction failed 29201/-22, size 7586835780199252040--7349874591868649443 line 3147 22:58:40 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004c000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x410200, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000080)=0x8) 22:58:40 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xae, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) iopl(0xe4b8) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f00000002c0)=0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="080000003ab72a2abf6350d9"], &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r2, 0x5431}, &(0x7f0000000280)=0x8) 22:58:40 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@ipv6_newroute={0x1038, 0x18, 0x914, 0x70bd2d, 0x25dfdbfd, {0xa, 0x34, 0x0, 0xe24e, 0x0, 0x4, 0xfe, 0x6}, [@RTA_UID={0x8, 0x19, r1}, @RTA_EXPIRES={0x8, 0x17, 0x8}, @RTA_METRICS={0x1004, 0x8, "2ad35a0b40174d63ce6d3be91eea8b64f503d46cc2b6610dd44582b350ec782cce23fff7b50f171d93f729761ddd7e50b7d670e4b8ec332827cfcb26f99e67b2800eb1e30376d9916219e6a2f2a95d6abbe0f5dcd50fa70e2d75ecef5fc96125a0e07a549a9f415b251176eca13b6dc838c9bb948120dc895dd5dd6907f5dc2ef4e09392ad005259ef7815a995e626f39c7db6b0712d7744221df56c7e35093293b8c3e49f8b651cd9fbfbe9727bfb9262f6ec8b42e0f9ceb2e8dceeb4ffbd5a67c857851a769b445f0b14b139edfc2e42a21bd59beb185524e68e8a31a61821ef786debd6d7a7436f11895eea8490040f79e5d5caf20223432ed7fbd0ca048a7f2c393b3c0e9201afea768b33994b19fbc91d860bf4501fdddb2b0927aacb2c1e708e6c92a7ca935286bce73ca693f20380bd8ad48198c84cfb2563b9d3483cc6927b14ba8b06f708a7b04c43495367e5d6b49cd0aafaebe3e38530289084abb82aba47676374fdaf98debc8b8d102e573a6b0155b1f5c4eb7774228f43acf160b01c9021e6c02887d6003f000e718b992756ecea31f931f3859b863fe901dd23b2361004cd9179f09fd787e2aa7e69fcb7c2e78faa464f338cfee95d2d397ed5c9dc1a2bb6f458fbe4b0eb112a1662916fe78fdbd1654f20cadee60a481b3204d944edb189f0961b5fc1f8b822366d509d626e75feb2702cf641972d32e6aaae4db97f742a4adf1697f4ee023c27e143ccc929123a34e4ba506803e4412357d972a27754fd464bfd75353e4c592c7f83144dd5705fe57f6844fb2559b517c7850b1c8139b4de991190f2c074b2c6cf7a92c08f6f75db8ff32ab34c5406887d3a3fe1f4b31e0ec9591fcca31ab4f47aaf8c977cfec9704842314c2ea904bade51573221116ccf89bc14ed91000d9364c8d095d47d540fe7f753fcfade67c0f29a4a0a5a62c4c35b4ad9278d2f9d54bdbd188f0b1facdcbeefdc8e365043cf1e4a770b5c87d0056c61a9789f25caf57148905d5d3a0840512dd84db8e0ee590a42250194902e2b54c8367473cc303cb8afbb89b51b29cd13b310cb3f2ec154ca26148201fada1b8b6c27e0b41328c549a19ad9fc5f6ef8fdc8f386a9edc0968eaa9a51e4a0ae7e93efce02a1f0e16f65faf5483d636d526a328c0067e4657b1cf8f1ff23ac17a35491f1a2e6a9eaba27406be0e7733cd821c8e88cc38b793c45fcb4cefc9e01768b7a6ab5e7e5a01f834658c6ede9043deca48428f34de6e013ea3ef92923c95dc3cefe1988d53cf7bd5e0fe106a2a9351b85e178a764484a5af743e54f60834b178fa89f404331cea6c84ee7da045dafa73ecf0a501eb4480ce87860f76f94aa8c57ce9919c461722659b579600e7d95f1e3d5cb08e3d1bc562164217e44fb30c8272e184dc65279f3319912ecc5895f1ed963bcb45dce0d5f6be6cb8e83ada3beb38a97ade9ad2b5081e8fb11ac402a4e186b113de14ca79a127db404b353c6f4e178de97d4042228fd91292cb505fe9f5eceb50cea0c13743f3ee3fac754036ecaf385b8891ad3ccba5b6075225f88d04bd288cf1990946875faea5512be1befb9bdd68effb35b7f11c5dde136d2e631dce36e9a2809f7f9f6e9cf1bea304f3a62dac2754d79656427381369890948c507ca24723eed047dc87b901bbb814346ac78a2ed592b18c4edb8d354c53c133f4142f4f447cbae09e6aa429af8132709c60a732404132ff7997ff45ec1dfdcedbda4fd421e7f3fc37e8cd68acddd065106d166cb1577368427b7399ed353e2271b2428f6b58744133d3bf374b088e4a9f801f0ec51b18bcb78faf2eb3a606c929a41c1e8f1b9cc75c78d4482e2b2ad8cf7910b3608d6beef2b6fdaef0cf3a4f3cc2f31be852d0e654eff25b95ae15ac6d6d241823c26c5c330c8f3fe249467b77e9533b37adde4fae03c5c5a503deaf5f72b869cf8ded935024ef749c30bbbe4e23f66c44f9642051a63aa7e8fb566d500de845e7b986ff1ee3f2633883d9a82c76241a7dbc8965d55275bc0812d5dd9b6a9b0cd5cf81445e8a963045793a30b2e383b2e6796711479bcb471563cc88da9f729da94664ff561ac982c9e36ffcc8deefdc00be5261a3692a818271ea2abecd72dd27f153d9ed25f92793402f98c337e78cb135fd22ec80c069a221e6b71cfba646c27842d0c612416f8d2602f237902510fa199be7343d8f2617fe4ecc460345b864a63e0252b41ee52ff78a39161c399ee08c42de0544dee1fea3cbbcc21e57df710ff203ffe60ebea42b9ff332993869f504a8630aafc5677acc7521a4216431d60a52e66e2db4e099a7a8c0260096967e89f79ebb2b753aa9d89ff9c5dc1d73ac872be3f96438f60838d55c4a4b5ea6f6b8f0dae2fd13aed878bab65764c1bcbc2ae9450b8b59c7e1f09fda8ac3f79c95ef1618a3fd3ff75c273835cc905c73be1c21682da569deb443d6ea570179252e38c6046de31c7825cee7161a650644b3a714a4d5249fc312170e4a97610496bbf8392061a637a4dfa7749a505d66cd2f62c24bfe69b61ccd7355dadb4c4afab38d68d13b7a4bf0f0bfa69f62dec275622d19158f33836b3405cd1aa685d77790589265eb202cbbc3006c9a962c88eae653f4954978eecc172cd64d6f04adb327e54125e7bf2d49b732763f8341a80d850db16fe2b9ce791d71859ed5c03fe34d62c1af6f3275e30bb480784946b3f713ea78fa55b8da75f9d427dcccb8e7f5d68d7d80c3fbbfdea41dd532b97e537279630523d7623d05e82ef432afaa90095a8a6a8748c150fecbb0afef4d432db72a8372764d9361dc2817d57659c2fca17d123c730e584d42ca0aa126e83f5760dea527d4f8505644fc0f77138c4e8f83f13d0cfa075ae0a7d5e7f499a5327dea664d4c87baf7d67d2e19d8377de4105d36967409d7b9b0cb808a0c207a5de9e441288ccefc04fd15d450bc6f7e42bac333b48ebc7ea9b515ed2e207bd819530f68f4228f9be447bffbf2993fd28db93a20e386e11619e280edfdd3f349155b703b7ac61748391eaa7fba34adcfb862922710f4f59d61efd6675c3ddba22b88a4897b7524537e27a5ea95fd968472d5a48356c87e4f349ac919c580e9eb14885905c8916d76c2aa640a340117dbe1e8588721c61fc39cd9a7d25d50a85403ec7613ad70d8b50db1faa67480d5ffe3d9ac4112223da1b2ce1ba4b801ab426736a93898f635d7475e458b9f66fb7246e64e29cf800ac20bff2ebdb6c5ce785dfb3baeda8218855112c2a875b28f5dacdf03c98c55f084eaef3294664f94c7da67ce79580ea1bf4188651f57645331f373182d072ceaa2087d22d4cb66d6d484876e7a486963e11e7cd73ceb68c7ececb01f07a2248435c3992757708cf98d494ae8ace33f754acc26a00433d8bf4f84001f0da45c0181942a1f5a1659978c823dc4bf3036742920cd13ec2476d451799328fd2be150447029eaa6473093c31d5dbbf887ec01e72df0a1f5f002fffe98d7b04e46fe791c941c51a67073946973ff6d563881a8c99215e71967ec366893f729d8e55cd01b2ae0cdbf36ecca1ca3eaed96ba1c87f68c38b7efcc84de543a6d0d26a629ca319715f25360d21079d5c96fb12ef3677d0f11d74da1e96579186755c61961dae9e65fde8348650fc28b53f9974c02a383f6c7174a79dca957c47bd4e0b5cb1d0a0c94527fc08e5c82995451cd44dc153af85d79224bdef315540888ab873260bec1b642cf21851e0a5ac7166c4439df8c0c40b7312fa80add9d96818f20fd073efb97a73a0064530d297851378a6348068eaa0e701685c7ea475561894dfca52dee36ba421ca05efdb488fc1d2fbb8d449c3025ed4f8703118c478e9f8f69022bc9bedeafd9e35c155a19132b146e36a23b3e9c1bdb2e335cdc06168e4b3e2f1aa9787d4357338e51f13880a55e19b04e32c0cb53accd713ce2486e445f285bbc8155528d70b67ff2ec8362c5b803909cdc0b10366478ae02622e4081774ec6f446a6f434ae4a4d69558e7b0336e216d89bd10653042e54e3ac37a51bb989a45642026bcf5c152f108e6da47de6eba25468421ff1d6bbf0a378e78e214d5fae213a270b3fe81a5751109fa7633d9fc7c1c1945eb881b0d2bad96e90a2b234beca7b4ed51d70c47fd5355c0fd98dc2bc58c750b70eae53a646803195586465155083a17ec9e6ed5a5c71b5cfb9e2a1ddc39ac56395aad49d3badc380ae41a3e150ddb387966a39045c6c64f461def4a3de5279b302788922e0156916b77725ffdacc5a98b27572bab58a90c546b4bf674fe7cd54a1ba2b9507e51a25bc96ae5e30782d77128440908e9aae40e630611f89ad234b429070b518ca9cd1b9b4212024a93da190aa08e211f1cf7489032008590a3db05c20d4b2d1507f67505006fd41c959804d3fce4b08ce99de5f384170309f09f238542a79597d9b844a97a11d497a5aa580c3f735c66cd898ad24a4dcad431174bd295d837fb87655c0c50879ae21a017a72d91836e1ec2f5dca555c8a58182895efa1a1c34511a4cb5a49adcb8ed19d0778cfae63faad1feea2489a01dadfcd3caa8da02be54fa5146fc5350af79ed84951ac8eee802b42fd4d8113ffd9194f4b74e650691e2edf4156ee633af6609a3b366db965c5866a0912acf3c7e74dacaaf384d5cf21afc2a033369ed4586920f715219194990e137456813f2fa60ae0ab69997521cc6194dc04f328ce9387bd32525ec860f21edc7f617fad36b5335598cceed55be28085dcfb7223ab1d18771078fbf26a409d124b56a1055300294ad3d0aa10b2d413cde2d8793fdf185e18762fed41d55ecd0614c5e283df9449a911a0971f997e4ad6a1ffbeba923443746130766b6d8fe33798ca2ebe1057f27f31bd572852fa5b3eebf5659bc0ab7fd51e564292aaa92058823a156ff350b0d0ba7337d9e5f1728f34c49d2bada44b92ccbd5003b234e0c5d9ee6b4152233d8961645fd73b8569366e21996dbab4c76a2657bbe4a4bfdf2c771d81b3efb001d0852071d12168dedcf0506301fb01ff394a19c9299dea7dab61ca5113d780aea27ba45ef54b70d118f78f95974c0bde84464efade3ce81ba8b1cc4f300df52eb8e4bae58ccab6848954f1c07c5afb5fbf7cf0f79a2d05eed4f128f1e72128f26393b3314b70bce3f9dbb63c840dd5d89b7217dab2f95db92231e8ea71d9b24c12417e3a3fce7f2ce9a157d8e5ce726f63b4b12eb93eb6759366d300444a351049366e7ca4817586583d993a02dba5f0f7532ea107b53b9741316f0c68a5b04aa35b60fed72a84626501fd4ce90799fb08ddfae69340b37bfd617e116700dfbb9664619587fe399a3cd2297505236d25b8fb3a7c96b828b4c601c47d24c6d3dd5c5ac8f97f29b564aa87c1cb4d42c14d094855cfd4ccce88cd7f39eb65dbdbce3be4d8baf50eec90921a27005c0a7559f7f427334d7577b3ce6678a29570655a29f92d9f64fd6bc75dfe9f3089276d9069ef51744a5251208e9c00e48764a7a809b200c5c6bbddc88f0828c6c63f8a49ea79b445c6e57fcf584f5df56c2a17b683050b8dfb7f5af196262411b804616f7f65a0469a31ec5cab4b21040f9b02c8082fa2868a9bbf3c528fd9f7ab6163ac21c13160e6e51f87d1afde9e8d0304f0c3c8fd3e54dcc8097919aaafec8103c9c1d248a2d336f88a762be4802b7d51420ca8741980118b891cfc2038a49c44531dc7dbcc0317e170320700e7865d16ed57755362ce901466a0bc66603ecf"}, @RTA_EXPIRES={0x8, 0x17, 0xfffffffffffffffe}]}, 0x1038}, 0x1, 0x0, 0x0, 0x800000000000}, 0x0) [ 914.922482][T23896] binder: 23895:23896 transaction failed 29201/-22, size 7586835780199252044--7349874591868649443 line 3147 22:58:40 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xaf, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x80800) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x3, 0x20}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000140)={r3, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}}, [0x40d8, 0x40, 0x800, 0x8, 0x4, 0x2, 0x5, 0xfffffffffffffff7, 0x8, 0x200, 0x5, 0xfffffffffffffc24, 0xffffffff00000000, 0x9, 0x6]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r3, 0x800}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7, 0x8000000000000000) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:41 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000060000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 915.078837][ T7844] binder_release_work: 14 callbacks suppressed [ 915.078847][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:58:41 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000317a53a100000000fe00d08181261dcf2b7c29d3dd000000000000158a60"], 0x28}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40080, 0x0) getpeername$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r0, 0x0, 0xa, &(0x7f0000000040)='/dev/zero\x00', 0xffffffffffffffff}, 0x30) ptrace$getsig(0x4202, r4, 0x6, &(0x7f0000000280)) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000080)=""/101) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x9, 0x2, 0x0, 0x7, 0x0, 0x3, 0x100, 0x1, 0x6, 0x2, 0x2, 0x8d, 0x88d, 0xfff, 0x2, 0x100000000, 0x7, 0x9, 0x5, 0x9, 0x1f, 0xe207, 0x84c, 0x6, 0x9d2, 0xb1, 0x5, 0x1f, 0x7, 0x4, 0x7, 0x9, 0xd28, 0xdeb4, 0x8, 0x80000001, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffff00000001, 0x9}, 0x1, 0x3, 0x1, 0xa, 0xfffffffffffffffd, 0x6, 0x4}, r4, 0x4, r3, 0xb) 22:58:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, [], 0x21}, 0x18000000}], 0xffffffffffffffca) 22:58:41 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 915.198789][T23923] binder: 23922:23923 transaction failed 29201/-22, size 7586835780199252064--7349874591868649443 line 3147 [ 915.268687][T23927] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 22:58:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000068000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 22:58:41 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x121040, 0x0) getpeername$unix(r0, &(0x7f0000000040), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000002c0)='bridge0\x00') getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={r3, 0x278, 0x1, [0x2]}, 0xa) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x4000) [ 915.331561][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:58:41 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 915.377512][T23943] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 22:58:41 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x0) [ 915.460099][T23952] binder: 23942:23952 transaction failed 29201/-22, size 7586835780199252072--7349874591868649443 line 3147 22:58:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000006c000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:41 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)=0x8, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000040)={0x0, {0x3, 0x7}}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3ae, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000001a0000042cfcdbdf251c002000fe03fe0e00200000000001007f00000000f0ffff00000100000000000000000000000000000e0000000000000000000000000000000000000000000000001a0015000000000001000000000000000000000000400000000000000080000000000000010000000040000001000000000000001a0008000000000000"], 0x28}}, 0x0) 22:58:41 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x8000000000000) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) [ 915.553778][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:41 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb2, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 915.645601][T23964] binder: 23962:23964 transaction failed 29201/-22, size 7586835780199252076--7349874591868649443 line 3147 22:58:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000074000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0), 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x242200, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xfffffffffffffff9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, 0x4) [ 915.713664][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:41 executing program 2: accept(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:systemd_logind_exec_t:s0\x00', 0x2b, 0x3) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) fcntl$notify(r1, 0x402, 0x204000000023) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:41 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 915.803050][T23984] binder: 23983:23984 transaction failed 29201/-22, size 7586835780199252084--7349874591868649443 line 3147 22:58:41 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x6, 0x4000000002, 0x598f}, 0x6}, 0x2ea, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800000000000000000000000040672cc297892187311da6f00c09355956f869b4e5122bcced39d16487f0acf7d08b496e48f7967689a29a5aeebabcfd9a10404eee22752f7bd84c410eee55151e90c1f7ddac772e7f32626c996da06e", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0) 22:58:41 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) mount$9p_virtio(&(0x7f00000001c0)='/dev/dlm_plock\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x20000, &(0x7f00000003c0)={'trans=virtio,', {[{@nodevmap='nodevmap'}, {@uname={'uname'}}, {@access_client='access=client'}, {@privport='privport'}, {@debug={'debug', 0x3d, 0x1}}, {@mmap='mmap'}, {@msize={'msize', 0x3d, 0x7}}, {@cache_none='cache=none'}], [{@audit='audit'}, {@euid_eq={'euid', 0x3d, r1}}, {@permit_directio='permit_directio'}]}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x406000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x7, 0x4, 0x2, 0x3}) 22:58:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000007a000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:41 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='/dev/loop#\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3f) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) [ 915.956847][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 915.981757][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 [ 916.043867][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 22:58:42 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:42 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 916.102841][T24006] binder: 24005:24006 transaction failed 29189/-22, size 7586835780199252090--7349874591868649443 line 2994 22:58:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000fffffdfd000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x1, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0xffffffffffffffc3) sigaltstack(&(0x7f0000ff7000/0x8000)=nil, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm-monitor\x00', 0x20000, 0x0) accept(r1, &(0x7f0000000580)=@nl=@unspec, &(0x7f0000000440)=0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x7, 0x2, 0xa, 0x2}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000400)={@mcast2, 0x6c, r3}) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/current\x00', 0x2, 0x0) 22:58:42 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2855218dd7d932033b0000000000000000010000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x404000) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000080)={r0, 0x35db6588, 0x4, "a9b6b88d3f0757870bbabf9de91fd9065daac2d96fc5a8047c378f13c6f20f786a434ddbfcb77eb7a71bbdbcb105508854569198e8697a3e047f52e49644679caa1a50fdce738e"}) [ 916.196461][ T7839] binder: undelivered TRANSACTION_ERROR: 29189 22:58:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000180)="f08d796ca535236119bf926880cff082de7d5ae4269e9baa7d881f13d4b06d71b82a25664104a21423707e0a4fb4272b92c40f5aa62209fcee66261aa730eb00e03295340a627fd479fea6c3997a0e2696e10853fdc17481d390ac4949aa39773313306e22b69fc025e989526514495fac403fb83a306618e87da400e746b5f4c5693698d6df6ea638f0fb47f4295a759204da371af56a7de65be654a6b99ce7cb30942e8e2b6d9d8c24bce90d0ad9a84ae9fd52763f29bc92fef70733c058948ae64903a3af3df129e61567eb31805ab419db5c03c2af8f4978a31e9954d912795db983cd74b8c41dca938c1d9608111d7b5d98933bfbb132a452e84b561617") ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000000)={0xffff, 0x4}) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1000, 0x20242) sendto$x25(r2, &(0x7f0000000280)="0ffa9509e14fcd15294ffcc350fd69de553e426ea4c7a539e3930c9f0354946714a353c6afedd07676df7d581cb1baaea6cb24320516d9ee23290c2338db3109042e3a851aa673a90b2c93d68627c4d88efb0517c97d6cabc9d57ff9e9172f435c3cb6fd0c518a0a0c422f89215621ff3a808f0e7364a88596e4657fd1f5307dbc5f5042f8c7a89b63390678a4d689", 0x8f, 0xc840, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) utimensat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={{0x0, 0x2710}, {0x77359400}}, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:42 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 916.337089][T24027] binder: 24026:24027 transaction failed 29201/-22, size 7586835780199252221--7349874591868649443 line 3147 22:58:42 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:42 executing program 3: r0 = socket(0x2003, 0x5, 0xff) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r2 = getpgrp(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x100, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc62, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0xffff, 0x2208, 0x5, 0x5, 0x0, 0x1ff, 0x1, 0x4, 0x7, 0x0, 0x100000001, 0x7, 0x2, 0xffffffff, 0x10000, 0x6d1, 0xdb4e, 0x0, 0x4, 0xd6, 0x938, 0x2000000000000000, 0x6, 0x0, 0xac, 0xffffffffffffffe1, 0x19, 0x2, 0x10001, 0x7, 0x1, 0x5, 0xfffffffffffffc01, 0x0, 0x101, 0x8001, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x4, 0x7fff, 0x0, 0x6, 0x6, 0xa1a, 0x3}, r2, 0xe, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010040000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000800f60c28e8001b0000000000068d1600bac035bc00"], 0x28}}, 0x0) 22:58:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000002000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:42 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x44) r1 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x3, @rand_addr="1b7421ecb26b84286d6aefbc56474d6b", 0x401}, @in6={0xa, 0x4e21, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3a1b}], 0xac) [ 916.455517][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:42 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:42 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xff, 0x1) 22:58:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3ff, @null, @rose={'rose', 0x0}, 0x0, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) shutdown(r0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x101080, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000180)={0x9, 0xf004}) 22:58:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x420, r2, 0x103, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x62}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_BEARER={0x168, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [], @multicast2}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @mcast1, 0x45bb}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x200, @loopback, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8001, @local, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf7a}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc12}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_BEARER={0x118, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x1f}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @empty, 0xffffffff}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffff0001}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf701}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x420}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) [ 916.595596][T24056] binder: 24054:24056 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000003000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:42 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0xe) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160-generic\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) [ 916.725978][T24070] QAT: Invalid ioctl [ 916.739654][T24070] QAT: Invalid ioctl [ 916.745127][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:42 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:42 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:42 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfffffffffffffffd, 0x4000) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000080)={0x6005, 0x18000}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x103000, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1dc3) socket$nl_route(0x10, 0x3, 0x0) 22:58:42 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0x6, 0xfffffffffffffbff, 0x3, 0x8, 0x1}, &(0x7f0000000140)=0x14) r2 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x0, 0x600) getpeername$tipc(r1, &(0x7f00000001c0)=@id, &(0x7f0000000200)=0x10) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x181000, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000080)={0x6, {0x3, 0x9, 0x0, 0xfff}}) socket$key(0xf, 0x3, 0x2) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000100)=0x9, 0x4) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) modify_ldt$write2(0x11, &(0x7f0000000000)={0x1476, 0x20101000, 0xffffffffffffffff, 0x3, 0x6, 0x800, 0x40, 0x4f02c215, 0xfffffffffffffff8, 0x1}, 0x10) 22:58:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000004000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:42 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 916.978473][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:42 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40080, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000340)={0x4, 0x0, 'client1\x00', 0x2, "d25d1933ea728969", "5749dfe6ce4bda284a12e007b0184755f4c1275a38bbd15c8cb5926b704e215a", 0xffffffffffffffe0, 0x40}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200, 0x0) bind$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0xfffffffffffffca2) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x3f) 22:58:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000005000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 917.101810][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) shutdown(r0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2f, 0xc0201) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x3f}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x80000000, 0x7f}, &(0x7f0000000140)=0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) close(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:43 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x22}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:43 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000240)="2f3257885fcc0a000d92fe2a0b231b78f1dd43dbce42f8e2311b44ed77cb2fc07e557a7950e81926dcb0024505f1628c32d6388031ab1051ab80adbd64c4987d7ee7036e5137591f89ab7ecd3ced04ff70ceb871d24fb3f0054fee2add2462090240dac5c3f01e41cb59296870a586855f7d67f5be48e51e076481d7140e371dc13452c809b918a87845e7a4d63696bc7e38860dc452278fd8af5714ab638ab1218eba64ca049762a37e02482d7831623f0364ad6889b16bcbd6c9e288b2292a0ad22c3118e4", 0xc6) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="d1fa7e7900000000000000001a68aacee98f97000000fcffff07"], 0x28}}, 0x0) 22:58:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000006000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:43 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xd, 0x4000) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') ioctl$KDDISABIO(r2, 0x4b37) [ 917.336271][T24127] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 22:58:43 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, 'vboxnet0\\%,'}], 0xa, "dd9d4faf777251eff1e5272c577d07df7f54e55ca4288b526ff23fad4a29d52b9eb9a23025f3e3c18729d52a00bd87a729d7c29efb6398cc64084686a34981a31fcae963877e073543841f833c9bc85cad"}, 0x69) r1 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x95) [ 917.416589][T24132] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 22:58:43 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x44}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000007000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:43 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0xfffffffffffffffe, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = semget(0x0, 0x6, 0x2) fgetxattr(r0, &(0x7f00000000c0)=@random={'system.', '/dev/qat_adf_ctl\x00'}, &(0x7f0000000240)=""/70, 0x46) semctl$GETVAL(r2, 0x2, 0xc, &(0x7f0000000080)=""/38) 22:58:43 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xba, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000080)=""/20, 0x14}, &(0x7f00000000c0)}, 0x20) socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) 22:58:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000012000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:43 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x126}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:43 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_getnetconf={0x3c, 0x52, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xe49}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x6}]}, 0x3c}}, 0x0) 22:58:43 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xbb, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000048000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x7004, 0x7, 0x6, 0x1, 0x0, [{0x100, 0x81, 0x400, [], 0x10000}, {0x7ff, 0x0, 0x0, [], 0x10000}, {0x2, 0x4, 0x2, [], 0x9}, {0xc0, 0x2, 0x0, [], 0x1}, {0x48000000000000, 0x7, 0x6, [], 0x4b9}, {0xffffffffffffffff, 0x200, 0xffffffffffff8001, [], 0x5}, {0x806b, 0x7fffffff, 0x3, [], 0x3af6}, {0x4, 0x0, 0x400, [], 0x1}, {0x5, 0x825a, 0x7, [], 0x2}, {0x4d, 0x2, 0x6, [], 0x8c}, {0x0, 0x8, 0x7fff, [], 0x1}, {0xed4b, 0x100, 0x2, [], 0x8}, {0x5, 0x9, 0x40, [], 0x3cce}, {0x4, 0x6e, 0x8, [], 0xc04e}, {0x800, 0x0, 0x6, [], 0x6}, {0xa8, 0x703, 0x7cf0, [], 0xf7}, {0x2, 0xc6, 0xff}, {0x3, 0x7, 0x7f, [], 0x20}, {0xd7, 0x1bf, 0x2, [], 0x3}, {0x6, 0xa294, 0x7, [], 0xfae}, {0x5, 0x8, 0x3, [], 0x20}, {0x7, 0x6, 0x4}, {0x7, 0x4, 0x40, [], 0x7fffffff}, {0xd3, 0xfffffffffffffa80, 0x521, [], 0x7}]}}) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000002380)=0x5, 0x4) pwritev(r0, &(0x7f0000002300)=[{&(0x7f00000001c0)="0ad79f2dfa657b1203dc614723d636e0433b1137d1f3c3740f2124b049656f230ddc999707826c1b0a50b77ba9cdb40b450351a142756031e886b46120", 0x3d}, {&(0x7f0000000200)="4c18e1d69ec4830019f2b56d55b023dd66c3b35686441d1c2c8d6bad269b2c5531630eb67e10051d060a0b3289aff247507dc0", 0x33}, {&(0x7f0000000240)="c762eaffe09065c5a7c65e71953a61", 0xf}, {&(0x7f0000000280)="a4c9b2b13fb067f7f269a163096076522cbbf7e01645ff758ef891683eda51a0a46150e113f781e3418cca5f8581bc1bf7c58847439fac947c9cd0796337ca2dd5e587250381ed3d211fd4fdea8007ac1b95e561a127b33aa98b5d209ddd74a50eaae960b299386859daa771407eee3568a9456dcd5e6ffd90496e706b0a", 0x7e}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="5ff6182c9a9d4da2f71318ff7f04039997f90a9a9941c0386a64f3d459aed2d5a636f28ede9acc8203cc8c90dc3cacd2876a30ddf68130d5c833e26362b109ca208232811b6cd8b8e265a34452779b845c0d6df83064418d7e9f5a6fcc431e47e3babcb4550268898d74f40782be1edf39e28f5cd46966e0f8f545f7061e00d6252bde501832c82a41005e658c923dbb356fba9700fceed1abf64d3bddcf1fcff8a1f755904e13b99e3c942115ce1435fcd55b12e2f31d4a5f1af9c8356b4951405ebab02a2c765780149a035a0048e729c44096fcc9bebbed2837f115c9f1a4247950f4ab802f5ababd837d65f37395e74b8512497e976aab26aa9b89095d45c472b07d4478aa9fd5ede2827c169d9e116ccf729ff41983d3f392989f220363f2b76f7c1f74c0c430ed7937a1b547fc9e2256d8569d84901ed0b992d4b30eb8d458b733391a013c5f9d11ad85d98951531ee0ff9ae73b1d94ed406131fb80dfa0b1952242d27a29f0ed161880f67acd9578d83fa4fe1621bf7a88e2f33a0aad7492803838cdd2df2a2c7eda2ac7cc5fd2ce4c31b53634c6517cb0121494f07e0ce565769758c974a9acf962fb61a0c300fcfd95ad8f2432d1d0c2b1b460828b387537b92196a302480c2327fb49b208ae09a755c03265df5e0cf27e9e28ffd039b50833b0d678bdf3b37a1a69f7ae68b18ed8ada9c39dff1607176a6b6ea36bb696633e699dc1a9271ccc0e3ac79b835d09ae94b93c0537044ed611ec628940e68e77df0f01fd0744c668ac591b6493c2af1a64a65a8c3ca01649e75b1a703116e4b7099593ac6516478dd1edc672b3e8f495eb0d8c053fd19a1b77cee48ce9476b4a7b9de78a3230adedbf65359517d9aa4b2f64030be58de3c170c753cb20038807b7d9708019ee4b0a651f9f0c9218a47077b968a29a130d8fe18c3492ede2044f689d8def172bf4c00389af184d8b7add95dad9e64713031bc5a51aa9837ebcb152981618b1a6c5d84570d33fbb6dc8d20b2387779cf78d032a46fc20d8338c59c087895da6e0bd717f11dbe4353ff34c092f9fa823b441ee58e988c6a70aa8e468fcbd7c3b3caa292d387fa4a04011a9453187e821c320e5017a8318dbe118b9d9c02f93864b9e513012344ab304262573a8cdbceb2f7bb77e754bc0890c13a3c5e5d6b546f92393aedbcfb0587d9cf601872dfd588bc0e317db4a0b36269872da63b72cda2cb31d978d6b829e5616dee96fb66b5d25c2468ce1699888cf48276ba325c83bd2071b63250f4f69425a605d545e019ee9a8dede182d58e1ead0d8a991bba5023724ba14ba1686e60cc203e950d8ab84046b55f2ff0a8fb8fe219d20685502d7342a1c9cbb1fe73ffc56fb5650ae37d72b2fa8cc7f7a80b44eee000ad9f566a2c876682ef2135bf2a680be0ef7bb4fae2291cf86130259f11ba569e461f91351d0ada3eaba894cc7a3073e91f720f04e0cff5bde8dba0bdd1577cbcadcd589312de748e14b2d8bc7e5896d790b250ff2923e1def59110483690d59d54a208bb09eaa96207524b37118e4c04d8882d6cb4e118dff1d7f3a67eee0da609f49d6257558cf1ede76cd6940d42c2c1668ee302902c409fa17ab682dcdf6eeea6dbdaf248e6f9fa846fc5b37e9adcec5306168521bef767d9641664efa63f6f101c317e6777acba58ae140d580bbe53697fa769c539c89f947ffcd52563da0d1da0adb32f22abb27952269634a500124733a90baf69ae3ef8740ebc7030dd5c6d0c826233594c86c8c0d9859be66ba737c907aaf5857f46384003ef6f6e85b9ce6d37ba3e39559362c4fe56bf83b44be48402654ec734905630dcb845559d6a710d29714e544cbb1cc7679a5e883ee52537181bf31118edd6b05bf543e49f50368cbf0af03bd2ecb3d474476b6168975f24440f18d037fa93ccbbe1afc4dbd0b05be1276773ec57fc11f7b7997250be7886b9a455a5949a1f752af81f9aded5ca9ef3acf7a33d63d45cbb08f52419ebca758ed2bdc0de4ea68d0086edbaf92a47a775a8be6cacb452deebe0244fcea23ef594ed7ca8f5515b0c107d8475a1f9c6372262abaea2af57be656e43140ad563c38309d787e0c24c01df1b18ab5f426ecaf0d98d559c0f23ff1834528616233c86fb2ce0214adf5c46df7693167f875187ec89e6a6d120ae96b0d00fadf3834476bd7e6f9d69464c5e54d070919a499c11f755071882f69eca309217fabaa85dfe8fdc6bdb1c3463181c467a6f35ce4b9f639f7276003a2395eac3f124d40b05217ee817f8ad130252f62e9e09a7882884415ee9577bd08f6036fc5588e45defb54cb11d156cb808a9e35f3446201e070b998818e3ca5762dbe3738ef73b9136b9c8178ec6a8ce842c934bde9288cbf4858f697c1fd83099ed9e8ed2f2937147b46c56c19e5e74a8094dc9fdca49b34f914cfa6a6e86dcbe21901db057370888a939b29eec3e541a1e41424da1f2b1a14eb5cbf0c172652211b54db5e587b2487540128874cd65634a53f7da81e5263f7df552a48cdb937d704437825169e8f6f8f1b1b3bf4665a0ab7bd633e9ab0133f239dca11b4fd29862f4897570a3d17d452da6bea5578b6a9d86a0d2f55727b4e050c335b851d5053cada82ce6166d97533a5924f1cc388a37755a2286eea2683cdbad116d9c0fd800b9b5b252459c0c3ae990161de7d2116c187c51f2f3556b09368b0569d0798f603441d7633b45551f178ca931d19107cec137681e47621df5b4c85361b35ca308640ead3729d7f048849839a40a6bfd55cf4e53bec343dd38ebc3dabdf64a969fb0d74c5e88c239f935a2900f08a651e919bfb89f3cf1a77c563165cc5012b0c5174666679dbd273011739ccf1028f232989308af1fdf69ce2e0e7f352920445f2a78479934242bd45b71fb99de26af9dedd8ad344b3010196b9d50665e9e241619beea3ecf1ed4b70c015481dd9be4778e0d34d4c3129c7e1eab0c4aa47b7a82d1d936e92893aea01d40e48087be1bd4b340beac6d77e573ed210ff6127acf4b0774f8261a232925bb4b3a8ab3d86e2cd12a474c9be1adf38ff0a8a91476ac420e30770cab5153fad59266119e33919ba6beb10d3186d4b8be9a02a97bf526e282c25c4c195c939cedccb0f074c5bf9927020854cf526c31977defb58499cc344224c7380ca30929e9f8e94775fef479fee52d6c6c8fcdd3815e865a567b72456c98a6f42063bb7f93d4f80e8ae43f4410f5d8ff238242a6999d93650fba0690c17b859c206783c624ff9cdda9d13992292842915c73b568cec5e082769c583fbbae2fe44cd3d959cbfa898eca78ac65585750ece0606d9a82fcd2d6f70fad99c533f2cc871b87ec80a72fc9b017c5ce7abc6b2c1f5801a402b1ddb014052e500c359228855470d72590d0565bc3263b213b6ea3374e2552f25c568a6d4c4b52b656aaeb2e1926db9a4ea5f0248f1422f2d135de345031a4be1b5ac7e693704f33c394c77ac8da0f11e38bced1f62c9c3ca5493aee81996f3a0f3a5cf05cc6694ee9545de0cb8d55d1bd8bd78795f5e4b09427ba9d67ac3fb4ef62b9b0f55f38cbd65858a1c1aee5503a8057fb6e3a437cc4a6fe564e696037e746ab6b3dec9342be2cf2d723dac74ed341add10d0fc5df152a48e00d906f99ffad93183070ea796576cb53967cfb1b6ec4f928c88561ff643d5ce5f4402f8b21b6e9a17b4dc3abcebefeaa17907f0e1fcbf2ffe932462ccde302abf0d9b5fb0fdc58fa0466f046c2459f404b2c6d260e4bbbe6c3a31c28b979dd58957ddc7476073ee47fd93ffa1b7a2db20c05216456ee341641c3d96ffb3b6dfdca87457696995a7baf01f5fc29ca5e71e3004ef5a29bd2860278238ff26ff23f603cb72021d9ae39a131241134cb536e07a744aa7489ee355e79a7838635e04f9ecf1d467a66a05e33e8041527a0c30be16281d21b0100fd5290f5e77ce399ef767a6d8f52d3fc4d1240bd05d900c04ae9db473cf8d7bb711ac713955b02fc55336562353e98c637ad3141fa965d26fbe9277a68733713821cba6fdfa6c1e34b2169fe4991c91b649b1de20aa6685dc0a163d404733041cdd0bf5eb974bde270ecce3a1c9184cbacf679f3b1b26a036a2fb6fea597ed762a23a680188953a212f5a3fb231680c2583f035eba58adb6a131ef49c6fdf4c1a790e521875af86a9e2f96881e372dd533c3db891d52b7c27985a717eca6604962316d8ca25745e9a683970300c362bfe7a4628469122af556b0476258007825716fec526f7fd7f2a1836aa9a100fee73a80b1300e2e715409766a695bec7a9b3f7256dad54b05d5134d9610ad2cd2f7947d91d4c98c345e62b9859c410b21b5f279be8d624f13ff41d45905467755d818477415fcf9b8f3b7e289372fc106206c3d81e1e61250ea9ea828dc59db2cf818d1457636380f73a4fa16ba38c9f9b4899eee8aa6b194beac2a119bcb4b2e9b8fba64020ce67785065bb40d1d5e3f55c8accc4918dc0b4a110a9f40fe432b05b69b1e1ff58f44b7388fe0bf59e80fa98adda0f2c2e7b593aaf1616a7b8dd7963cf56480e0464992723eae94a7ea3a2dce760a0856f06553b3534b9227b8ff6a5dd921b45ef7f69624d2e0bd115c7f49838ac08b3dd2ff738ad48cbbd85f4f6ca54a9fd66de9ad9a0ea6a4cef08f351528fe5a112b399c7f1e80bbe0ffe546f63a31684304af9977c8239c8bc3490f58fa1c9121d7398e73beaf70b5be2ab96b6733adcfb23da27206f9290389c0558b3691ef079c22e9f88276ffcfa1867164544431a71996d56ccc0139fae76adc2a4aa9d73ce329c1eefa2f67961d0cc646d6ca5be453b771efa877715e949306afb656ce096d1fd2dcc86bcdf94ba624770309feb6ef6602f733387507c43566ad1270fafdb6b7729fe8a28e3a511303744498bfbb992b4586351ed575edabdf9576fc441e05ae28ca8f4068bb362cb5d7143869bbbab103df837a51e13a053f198df4694a3da29a098bd8ce03d3921ed78886e97ae3eb99a0b56a1e53a9dd10e70d8a7c172166444bb9952ec3061e6468e904876763e30c1604c5989887603eb937a7ce0aaa5a894ffb5f269d5f25f8e70d5c910a43f22ed523f601d8b636502acb43961d4f9a2044056192da0488a7900be7c1fd261d86e36efcd04bbc2c21a0d6ab2f16e21f6bf8aa5211d727ca527097ec8e90b9277834a87fcba8913ec2b8b08557be3377a6c3c4018cb7c5ea6b1ee73a6ccaf316039abf4192edca41d680b484ebe4d93040a1af5c04ded2e12d7f8e57f73125b63b2799ff5cb6f44ad78d132323667d3de9e1b046ba90b10c476f5feafe51048d333f16335d861975828e83e0818297c60b14da22bb4034550ae5b4ac145ed98269c2997c9827fbe34ba9a53979bc52997f44a226d489e171735dec621b6c6d6b08c67a5839c6bd303c22dee30cde67d936bf694067b04186ca8c82595c1cf290e0be12dc1c37f9de7f7c71cde7deed3375a9a9b0a1da27f592f5655b2a03f6fd242eeaba208359399dd09e65f8fd36b28c95642aedd02103125be23efe23b68b97242c46dde51027234c8d390e55ca37ab26d4193589d35a9a29fc6e4519ebd5e9bdbced0506882b7591a0c63208eded1e9601af1144743bb62ac4e62c057bbe9d1ca2d956fc39af1b78295584da5af7a52556f19579c3ba91ae576f17871dff1d925921a54f33c7bbfdb62de45b60d759fbaad42c992c3dfc858882a760f8aacd3e4d5f3a7f759b021d66bf99db064", 0x1000}], 0x6, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:43 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'}) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@getrule={0x14, 0x22, 0x20, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x14}}, 0x0) 22:58:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000004c000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @local}], 0xffffffffffffff05) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x5, 0x6, 0x7, 0x0, 0x2}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0xb57, 0x7ff, 0x8008, 0x1, 0x3, 0x7, 0x5, 0x20, r1}, 0x20) 22:58:43 executing program 3: lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0xfffffe4e) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x222) 22:58:43 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xbc, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:43 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x176}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x48200) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000060000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 918.208531][ T7844] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 918.224292][ T7844] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 918.235212][ T7844] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 22:58:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000068000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x140, &(0x7f0000000080)={0x77359400}) shutdown(r0, 0x1) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'bcsf0\x00', 0x6}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0x1, @ipv4={[], [], @remote}, 0x1}], 0x2c) [ 918.258684][ T7844] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 918.298100][ T7844] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 22:58:44 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xbd, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000280)='/dev/loo\x00#\x00', 0x6) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xe1, "39599537898a2180d2161dfd9e95ff2598f57f506d5caddbcbf45e91fb8958ee4fd350c7c3f6a94fc36baa68cf1e52924a0681f4b488ef44a88212ebc36794bac984ae90b1f1b4819f499a4ac7546805120b167726f078c9c53741c9b9ae056e9088df335934f7299484c0bdc60db2b59be702615c32ee0c9e55fdef2691a1b70b4ee7640b91af2a698d71cccefeead2ed2f637f04697a7e3e8ab709d37c7ebacc41fd817621e9a5c7921ab0edaa621453f589319b55ebb89d6e1ebdb9ce5c27fb09835329290459d7b7c8bcf1b3cef29764777cee4c46bf9e143c68e46e9e6048"}, &(0x7f0000000080)=0xe9) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r3, 0x4) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@dev, 0x5, 0x1, 0x0, 0xe, 0x4, 0x1}, 0x20) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/28) [ 918.326487][ T7844] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 918.351558][ T7844] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 918.360030][ T7844] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 918.368103][ T7844] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 22:58:44 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x17c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 918.379009][ T7844] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 918.414825][ T7844] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 22:58:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000006c000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 918.449343][ T7844] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 22:58:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7ff, 0xc00) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000000c0)={0x1000, 0x80}) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140), 0x0) 22:58:44 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f00000002c0)="4f8a0c9d", 0x4) 22:58:44 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xbe, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000074000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x191082, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) fchdir(r1) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:44 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r1 = msgget(0x2, 0x2) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000000c0)=""/150) shutdown(r0, 0x1) r2 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000007c0)={0x20000000}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='bpf\x00', 0x80c10, &(0x7f00000006c0)={[{@mode={'mode', 0x3d, 0x8001}}, {@mode={'mode', 0x3d, 0x80}}, {@mode={'mode', 0x3d, 0x8a}}], [{@permit_directio='permit_directio'}, {@smackfsroot={'smackfsroot', 0x3d, 'ppp0'}}, {@fsuuid={'fsuuid', 0x3d, {[0x76, 0x34, 0x77, 0x65, 0x39, 0x66, 0x30, 0x30], 0x2d, [0x77, 0x64, 0x39, 0x38], 0x2d, [0x36, 0x33, 0x3f, 0x77], 0x2d, [0x37, 0x77, 0x77, 0x36], 0x2d, [0x35, 0x73, 0x0, 0x75, 0x73, 0x65, 0x7f, 0x77]}}}, {@seclabel='seclabel'}, {@appraise_type='appraise_type=imasig'}, {@fowner_eq={'fowner', 0x3d, r4}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0xfffffffffffffffe, @link='syz1\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000005}, 0x8000) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f00000004c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x1, @loopback, 0x8}, @in={0x2, 0x4e23, @remote}], 0xfffffffffffffef1) splice(r2, &(0x7f0000000040), r0, &(0x7f0000000080), 0x9, 0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800a}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r5, 0x420, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x251}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 22:58:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000007a000000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:44 executing program 3: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) lsetxattr(0x0, 0x0, &(0x7f00000001c0)='/dev/snd/timer\x00', 0xf, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 22:58:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e22, @empty}], 0x10) shutdown(r0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2200, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000030000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:44 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xbf, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:44 executing program 2: get_thread_area(&(0x7f0000000000)={0x1f5, 0x1000, 0xffffffffffffffff, 0x1, 0x0, 0xd043, 0xf4, 0x40, 0x400, 0x8}) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x9, 0x10800) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video37\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:44 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x340}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:44 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000050000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100100000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) restart_syscall() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000060000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:45 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 919.428820][T24313] binder_transaction: 15 callbacks suppressed [ 919.428840][T24313] binder: 24311:24313 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:46 executing program 3: write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x3) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 22:58:46 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3f6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:46 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x40, 0x400000) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x3) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000070000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:46 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc2, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 920.801650][T24333] binder: 24326:24333 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x298080, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000080)={0x2a, 0x29, 0x1, {0x4, [{{0x5, 0x0, 0x7}, 0x5, 0x2, 0x7, './file0'}]}}, 0x2a) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000120000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:46 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x7) r2 = dup2(r1, r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @local, @broadcast}, &(0x7f0000000300)=0xc) sendto$packet(r2, &(0x7f0000000440)="e235bd78204f0c9e59388447d18995d223a30a73cbe1eaff31a6006ecf1f0a3156a67ec46e8f32b3e921e7274bfa780acd11d3dba8aa10c8d8b6cddeee6aff0b5721bc2aa2317170b2d7deaf46545b2c406dcc3de5083f792172b2ec134f569bdf69173eb8e09c9f270f69f0f2ab1386b6d37f758f2e4af32b0b810216dab2ae6ca469c0a8a60f51686b6b73088fbdac75cd2432a3331d22ced3ae97ce6d56a2003c6b3c544076f62c83eaa913860e2e10dc1accc2", 0xb5, 0x0, &(0x7f0000000500)={0x11, 0x1b, r3, 0x1, 0x7f, 0x6, @broadcast}, 0x14) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f00000000c0)={0x3}) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000040)={0x20, 0x28, &(0x7f0000000180)="952021343e2dd81e45e26b4d51b069ad0bd6fcf5497b90d95f27293b37378c183c5f9c41c77ad546c6c4539ab1536307fa0e9645bffda93bf7984b1341d9da05d57a96041f192385faa64b3b2b953bed7fd61d34ea6c9fafc21308bca7add1ccea879e7decbea651a29a48a55f3074529c699e6e802af86fb18626d76f1b35e7fab64f8d57a500330cfa891f3c9a57de8df1b9af027d9e252aa8b615d7637961067915aa1076304aa1fcaf610508f12fd4c5072843ed3da637c1a7c3768e5c0666e6a0981844b933a70a6e5f053319527a12b3b30fe1bff05ffc245d7a", {0xffff, 0x1, 0x77775f7f, 0x7, 0xffff, 0xff, 0x13, 0x6}}) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000100), &(0x7f0000000280)) setfsgid(r4) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) [ 920.848736][T24335] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 920.866182][T24335] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 920.875492][ T7839] binder_release_work: 14 callbacks suppressed [ 920.875501][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 [ 920.889117][T24335] netlink: 'syz-executor.3': attribute type 29 has an invalid length. 22:58:46 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 920.912386][T24335] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 920.924374][T24340] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 920.933502][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 920.943316][T24340] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 920.986258][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 921.031097][T24340] netlink: 'syz-executor.3': attribute type 29 has an invalid length. 22:58:46 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:46 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x488200, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000240)="6673449021e0f9043039885f2e1287f9027f9fa176973e8df4d93e63b401a700becdf85d008a27e2192ef50397f6a7dc6a506b292a15b1f4f5f6794c8c8d787bbe1d8a59e954f321d419b4a525f061cd615a134576dcf886a480d66ed182c2a3b7dc81e7e3217facf5b56034329ca103ed3182675f18eaaebb13cd2a3b6f7d255879b4e3e14311fa610b19bad025f98743e259d4ebfce1fe3b372d315f2f7198c4114255ae", 0x157) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) [ 921.071526][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 921.107163][T24357] binder: 24346:24357 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 921.131746][T24340] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 921.170435][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 921.194075][T24340] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 921.205720][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 921.213287][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 [ 921.230586][T24340] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 921.240451][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 921.251403][T24340] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 921.278697][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 921.303506][T24340] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 921.312544][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 22:58:49 executing program 3: write(0xffffffffffffffff, 0x0, 0x0) getpid() close(0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 22:58:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) mkdir(&(0x7f0000001000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000200000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:49 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) 22:58:49 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:49 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000480000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 924.014880][T24380] binder: 24375:24380 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 924.043477][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x5, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @loopback}], 0xed0354d1) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:49 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdc2, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c0f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541250156acc7cf059488ec0800"}) socket$bt_rfcomm(0x1f, 0x1, 0x3) [ 924.144790][T24387] binder: 24386:24387 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:50 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000004c0000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 924.301919][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 [ 924.453741][T24408] binder: 24407:24408 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 924.587917][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x800000005, 0x107, 0x2084, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000180)='Q', 0x0}, 0x18) 22:58:52 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:52 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x40000000dc5, 0x0, 0x0, 0x12, 0x8, 0x7, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200db6a871d0080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200", [0x0, 0x4]}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) r3 = gettid() syz_open_procfs(r3, &(0x7f0000000380)='net/ptype\x00\x83\xd9\x9b\xa0\x1a\xc4\xb6\xbf\x93&\x94K\xdc[\xaf\x16\x9b\xf7%}\x8d\x80\x9f\xd6\xd6\xf5\x1e\xb3\xe1\x00\x05\x93\xc7\xa0\xf5\xf4}\xd1\xea\xcb\x1f\xd86\x803#DO\x9cZ\x14p\x00\b\x00\x00t[\x05\xd4C\x05\xc2\xdc\xed\xe2\xcfX\xf4\xae\xd3G\t\\\xfd#\xa9\xd6[yzD\xd4\x03\"\x99\xea{;\xec\xee\x9cz=\xe2\xc6e\xa5%f\x00A\xb6Sc\x98F\xfb\xd4\xcf\xce\xb2\xdf\x7f\xf5\x04\xa5\xc6\xd2j\x8df\xff\xa8\xbe\x9f]\xc7\x83\x8eK\x95\x13\xe0\xb2x>\xfe\n\xf4n]\xc3Z\xe4\xa8\xb36D\x92\f\r88\xcbp\xfa\xe5\x82\xd2\xd4X\x16\x8d>\x19\xc3\xdc\x0028\xf6\x00!z\x9d\xfe\xabQ0\xec\x9aP\x8f\xcc\xd5\xb4`\xd1\xaf-\x89~\x8b\x1c\xa7\x1ae%\bo\x8ae\x83,\xd7\x02-ZTng\xb9\xe4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f00000000c0)={0x0, "4aaf6b7d6ab67185849ddb4f4bed61816c8bb6c8d50a541c2ee0c123c124153c", 0x102, 0x6, 0x6, 0x12, 0x1}) 22:58:52 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000600000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 927.074613][T24424] binder: 24415:24424 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000), 0x0) 22:58:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000680000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:53 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:53 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000), 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) fcntl$setstatus(r3, 0x4, 0x42803) [ 927.165806][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:58:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0xff) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) tee(r0, r1, 0xfffffffffffffffc, 0xa) r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x2, 0x8000) r4 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x70, 0x4000000000000000, 0xd0, 0x3, 0x5, 0x0, 0x0, 0x12, 0x4, 0x5, 0xc69, 0xf8b, 0x2, 0x800, 0x20, 0x1, 0x80, 0x5, 0x6, 0x7fff, 0x3, 0x10001, 0xffff, 0x7, 0x3, 0x4, 0x9, 0xfffffffffffffff9, 0x20, 0x2, 0x8001, 0x1, 0x451, 0x7, 0x1ff, 0x2, 0x8, 0x0, 0x80000001, 0x1, @perf_config_ext={0x2, 0x5c7}, 0x2, 0x5, 0x4, 0xb, 0x4, 0x6, 0x4}, r2, 0x4, r3, 0x2) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1f14, 0x0, 0x0, 0x12, 0xfffffffffffffffc, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0090000000000000e000000000080000eac97e43d8dec965bc400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200", [0x0, 0x2000000000]}) r5 = getpgrp(0xffffffffffffffff) write$FUSE_LK(r4, &(0x7f0000000180)={0x28, 0x0, 0x5, {{0x6, 0x620, 0x1, r5}}}, 0x28) tee(r2, r4, 0x8, 0xf) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) 22:58:53 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc02c5341, &(0x7f0000000000)) 22:58:53 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 927.298167][T24444] binder: 24438:24444 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000800001, 0x84) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000006c0000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 927.436609][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:58:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) readahead(r0, 0x0, 0x51bb) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000480)={0x0, "a40ba7c426ee8ad05bf553fd682641fd0962c517a19f9595f26e515ec50c749b", 0x2, 0x0, 0xffffffffffffffe1, 0x2, 0x2, 0x0, 0x1, 0x6}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) r3 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x101, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000180)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) r5 = getegid() stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x1}, [{0x2, 0x2, r4}], {0x4, 0x5}, [{0x8, 0x2, r5}, {0x8, 0x4, r6}], {0x10, 0x6}, {0x20, 0x1}}, 0x3c, 0x2) 22:58:53 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000a40)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000180)={&(0x7f00000002c0)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x10, "ebba1f703354f2493830a5eee80fe44b"}, 0x0) [ 927.559040][T24469] binder: 24460:24469 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:53 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x2200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/177) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:53 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000740000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 927.672706][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:58:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x42) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x40000000) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x2400) accept4$packet(r1, &(0x7f00000054c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000005500)=0x14, 0x800) bind$bt_hci(r1, &(0x7f0000005540)={0x1f, r2, 0x2}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) [ 927.857702][T24497] binder: 24492:24497 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:53 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x2601}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:53 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xca, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000007a0000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 927.952319][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:58:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x20, 0x101002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000180)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x0) r4 = dup3(r2, r3, 0x0) syncfs(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r1, &(0x7f0000000000)=[{{0x77359400}, 0x1, 0x38, 0x2}], 0xfe3d) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) [ 928.065025][T24514] binder: 24509:24514 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 928.175763][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:58:54 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0105303, &(0x7f0000000000)) 22:58:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000001000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:54 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xcb, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:54 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x42, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x0, 0x8001}) 22:58:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8141, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0xc20, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/243) fsetxattr(r2, &(0x7f0000000040)=@random={'osx.', 'trustedeth0\x00'}, &(0x7f0000000080)='*{\x99system\x00', 0xa, 0x1) [ 928.590299][T24542] binder: 24533:24542 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:54 executing program 3: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) 22:58:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x13}, 0x3}], 0x2c) tee(r0, r0, 0x10001, 0x1) 22:58:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000002000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 928.679415][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:58:54 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xcc, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x24}, 0xba9}, @in={0x2, 0x4e23, @remote}], 0x2c) r1 = request_key(&(0x7f0000000340)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)=' hash=', 0xfffffffffffffffb) keyctl$update(0x2, r1, &(0x7f0000000400)="d73a03038fe1550fa6944aedf70756e99386eae277fb12efa18b3afd2a1ab61ae31fd167f2e9964a4bc7307804aa18f004f57ffce22bf6ec101afc068f5092a2197ce1816b976ad3d5a9", 0x4a) r2 = request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='systemwlan0^~\x00', 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r2, 0x1ff}, &(0x7f0000000140)={'enc=', 'oaep', ' hash=', {'md4-generic\x00'}}, &(0x7f00000001c0)="231d29ab421b88008e55994360beff9a6e6bc9e8b0fea213c979e0bd4916ee5951bf1ce25901ca5e873785e7b1a768005f1ce7e3d950709696c6ddb7662898bf1e70a1b0c91e16abbe12801160064ab934e734160e693e90e0751298c8e5d74a19f33fe7a5264fa748523bb72ddf798240d76f13da73d57117c4aed1ee432d199eee251a40ef95ccc691", &(0x7f0000000280)=""/187) 22:58:54 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = request_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)=')]proc:%\x00', 0xfffffffffffffffc) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="2ad156a51c2cc0ed65b2eb38a94d017819417edbd444b5a2770ae788bdaef73bbeb8dd599ff16a0a2681db4392", 0x2d, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) [ 928.839481][T24560] binder: 24558:24560 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:54 executing program 3: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000640)={{{@in=@dev, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@loopback}}, 0x0) get_robust_list(0x0, &(0x7f0000000ac0)=&(0x7f0000000a80)={&(0x7f0000000a40)={&(0x7f0000000a00)}}, &(0x7f0000000b00)=0x18) getresuid(&(0x7f0000000400), &(0x7f0000000480), 0x0) getresgid(0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000740)) fstat(r1, &(0x7f0000000780)) getgid() getgroups(0x6, &(0x7f0000000800)=[r2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) lstat(&(0x7f0000000840)='./file0/bus\x00', &(0x7f0000000880)) getgroups(0x2, &(0x7f0000000900)=[0x0, 0xee00]) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/bus\x00', 0x6857b21ff1155d90) futimesat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000016c0)) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000c80)=ANY=[@ANYBLOB="000128bdbfe7f7690cba99315b1631dbbbac6ec945be129279062e57ad8300fbdbdf25fcff00000000000001410400001c00178e456bc8c34e859b03149885a1f7040000001b000000006574683a0f09ee47fe546db3e0a53f805df0"], 0x1}, 0x1, 0x0, 0x0, 0x4040890}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5798e5a7"], 0x4) getpgrp(0xffffffffffffffff) sendfile(r4, r4, &(0x7f0000000180), 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 22:58:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000003000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 928.929281][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:58:54 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xcd, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0x1, 0x9, 0x40, 0x1, 0xffff, 0xf880}, 0x1000000000000005}, 0xfffffc8c) shutdown(r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x402, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000140)={0x36b, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}]}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) accept(r2, &(0x7f0000000180)=@tipc=@id, &(0x7f0000000200)=0x80) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) [ 929.054957][T24579] binder: 24576:24579 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000004000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:55 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x101400) ioctl$TIOCSTI(r0, 0x5412, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xfffffffffffffffe, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x40, 0x180000}) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) 22:58:55 executing program 0: socketpair(0xa, 0x5, 0x10000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) restart_syscall() r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0x200) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) [ 929.163165][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:58:55 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x4003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:55 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xce, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setlease(r0, 0x400, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x24000, 0x301100) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000040)=0x8001) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x12, 0x0, 0x0, "648eda93c3c02746676c953283b3d09cd54156bec5c4f972e9072d1fb7d0e7a84ed92904d908db3c0edd036ec80f351b5500", "a191a66a11f0e9a0ba9fb4da4200000000000080000eace982dc58e4cda0373f4fc55df72c469e998cbc5a430a000000000000000000008400", "b541254156acc7cf0594882be124f08175e4079890380f63f70200"}) [ 929.337265][T24604] binder: 24596:24604 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000005000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 929.456669][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 [ 929.575682][T24620] binder: 24619:24620 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 929.649279][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:58:55 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000a40)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000180)={&(0x7f00000002c0)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380), 0x0) 22:58:55 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xcf, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r1 = getpgrp(0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x191, 0x2, 0x4, 0x0, 0x85c, 0x400, 0x2, 0x4, 0xe36f, 0xffff, 0xffff, 0x4, 0x1, 0x3f, 0x20, 0x1, 0x4, 0x6, 0x5, 0xd8, 0x8e1, 0xfffffffffffffff7, 0x9, 0x2, 0x8, 0xffff, 0xef, 0x5, 0x8, 0x6, 0xe714, 0x3, 0x3, 0x401, 0x1, 0x0, 0x777, 0x4, @perf_config_ext={0x20, 0x3ff}, 0x2ca84bc8df845ec6, 0x9, 0x5, 0xf, 0x6, 0xffffffffffffffff, 0x7}, r1, 0x5, r2, 0x1) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:55 executing program 2: r0 = socket$inet6(0x10, 0x40000000000003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000018007f5800fe01b2a4a280930a06000000a84599910000002900090008000c00010000001900150006000000000067c01338d54400009b84136ef75afb83de44b2ee3b2733c9237f8d621a4559e65517b3", 0x55}], 0x1}, 0x0) 22:58:55 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x4400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000006000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x440, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x4}}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) [ 930.030160][T24636] __nla_parse: 22 callbacks suppressed [ 930.030173][T24636] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. [ 930.031336][T24637] binder: 24628:24637 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:56 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x8, 0x0, 0x9, 0x0) 22:58:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000007000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:56 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 930.225204][T24649] binder: 24648:24649 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000012000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:56 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x7601}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 930.353627][T24661] binder: 24658:24661 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @empty}}}, 0x90) 22:58:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000400)={0x7, @raw_data="6639d4f717529bf7bcb121c067fcfcb881d57c3f669ece4436c5e91666050005ae26038404c728fddfed8ef887e0b1132e10c66dd88eee90ae6a3c23c121c7dc60fa6fa31e57eb877e065680f188455165e656f786afac75856590913947f0de08cbc46f48a5bbf83092af995f4a04c526ec0c5336f2b24e2976fd212ca7eb4d5c6725b615b9e1007eb00511064664fbd5603a1f03954024a34919034693275f891af47933dc125435c5a976a43663810c55e44f088ab4ffa46d8978dbd017501bab4e698fe52770"}) getsockopt$inet6_tcp_buf(r1, 0x6, 0x3d, &(0x7f0000000080)=""/242, &(0x7f0000000180)=0xf2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x14}, 0x6}, @in6={0xa, 0x4e23, 0x8, @remote, 0x4}, @in6={0xa, 0x4e23, 0x800, @ipv4={[], [], @multicast1}, 0x1}], 0x64) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000003c0)=0x1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="250425bd7000fedbdf250700000004000900"], 0x18}}, 0x81) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000380)={0x1ff, "fe004be5dd519aab3e5ed4754187ae1bbad4434ac3d35c849836d9c4159a74dc", 0x3, 0x1}) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, [], 0x14}, 0x7}, @in={0x2, 0x4e23, @remote}], 0x2c) 22:58:56 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) inotify_init() pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22:58:56 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000020000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:56 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x7c01}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x1f, @remote, 0x7fb}, @in={0x2, 0x4e23, @remote}], 0x2c) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x30001, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r2, 0x1f}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r2, 0xe72}, &(0x7f00000001c0)=0x8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000000)=0x7) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10) [ 931.034106][T24672] binder: 24669:24672 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000048000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:57 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd2, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:57 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xf603}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:57 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000000000000000000000", 0x4c}], 0x1}, 0x0) [ 931.221468][T24692] binder: 24691:24692 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x4, 0x30}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x7, 0x80}, 0x10) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) fsetxattr(r0, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)=')#vboxnet0vboxnet0wlan0\xdbkeyringself\x00', 0x24, 0x0) 22:58:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000004c000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:57 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 931.492574][T24707] binder: 24703:24707 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:57 executing program 2: 22:58:57 executing program 3: openat$vsock(0xffffffffffffff9c, 0x0, 0x602000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) 22:58:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @broadcast}], 0xe) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:57 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000060000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:57 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 932.032707][T24731] binder: 24724:24731 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000068000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:58 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000008043500, 0x2d00000000000005, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) 22:58:58 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x14001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7, 0x400081) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x81, 0x400) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in={0x2, 0x4e23, @local}], 0x10) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:58 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 932.211324][T24746] binder: 24745:24746 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:58 executing program 3: openat$vsock(0xffffffffffffff9c, 0x0, 0x602000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) 22:58:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000006c000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 932.335818][ T7839] binder_release_work: 7 callbacks suppressed [ 932.335828][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e21, @empty}}) 22:58:58 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 932.513717][T24768] binder: 24765:24768 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:58:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x58f, 0x80000) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x400000000000, 0x2, 0x401, 0x9}, {0x6, 0xc00, 0x401, 0x8000}, {0x4, 0x2d6cfcf3, 0x491, 0x2}, {0x8001, 0x2, 0x4, 0x7}, {0x3, 0x998c, 0xffffffffffffffff, 0x7ff}, {0x75db, 0x3, 0xf4, 0x1}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000074000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:58 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 932.600600][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:58:58 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 932.744914][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:58:58 executing program 2: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="05a0c734010000003d6309758b4627060000a26567d3961b329ca15e419dc70000000000023930b876b0ed3c90055911a14cfe4a000700057f"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 22:58:58 executing program 3: openat$vsock(0xffffffffffffff9c, 0x0, 0x602000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) 22:58:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000007a000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/197, 0xc5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:58 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200800, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x17) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x8, 0x80) 22:58:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000fffffdfd000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 932.945558][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:58:58 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x80045301, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x14) 22:58:58 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:58 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r1 = accept4(r0, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in={0x2, 0x4e21, @broadcast}], 0x4) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x25) exit_group(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 22:58:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000fdfdffff000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 933.212411][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:59 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xda, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000010000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 933.363373][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:58:59 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x80ffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000000c0)={0xa033, 0x68, 0x6, 0x9dd, 0x2}) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000100)=""/75) r2 = dup(r0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x7, 0x4) 22:58:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000020000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 933.479713][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 [ 933.631501][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:58:59 executing program 2: 22:58:59 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x51}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 22:58:59 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xdb, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:58:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:58:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000030000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:58:59 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:58:59 executing program 2: 22:58:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000040000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 934.029377][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:58:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x6}, 'port1\x00', 0x8, 0x1004, 0x48000000000000, 0x8001, 0x2, 0x800, 0x2e, 0x0, 0x4, 0x7fff}) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x0, 0x1, &(0x7f0000000140)='\x00'}, 0x30) ptrace$peek(0x1, r2, &(0x7f00000001c0)) r3 = shmget$private(0x0, 0x3000, 0x11, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) 22:59:00 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xdc, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:00 executing program 2: 22:59:00 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000050000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:00 executing program 3: [ 934.246230][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:59:00 executing program 2: 22:59:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xcc64c859766ef84c, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0xfffffffffffffbff, @local, 0x6}, @in={0x2, 0x4e21, @rand_addr=0xfffffffffffffed4}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x100000000}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x3f, @mcast1, 0x3fffffffc00000}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x7fff}, @in6={0xa, 0x4e23, 0x9, @empty, 0xffff}, @in={0x2, 0x4e21, @local}], 0xcc) 22:59:00 executing program 3: 22:59:00 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xdd, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000060000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:00 executing program 3: 22:59:00 executing program 2: 22:59:00 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r1 = semget$private(0x0, 0x3, 0x540) semctl$SEM_STAT(r1, 0x1, 0x12, &(0x7f0000000080)=""/170) shutdown(r0, 0x0) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x3b, 0x202003) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:59:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000070000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:00 executing program 3: 22:59:00 executing program 2: 22:59:00 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xde, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:00 executing program 3: [ 934.795080][T24935] binder_transaction: 10 callbacks suppressed [ 934.795100][T24935] binder: 24930:24935 transaction failed 29201/-22, size 7586835780199253760--7349874591868649443 line 3147 22:59:00 executing program 2: 22:59:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) syz_emit_ethernet(0xc1, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaa8aaaaaaaaaaaabb91004e00810021000011aaab08332565000e5db96bde0f9660da1f9d7a2d50157e82bf5d6bb365c187a438107eecd878eb9e842d6c9e8004ff005301f596d6219e064c92e45e01a095377d387715ada491adf79d57b5449993b1e074ccc9c81bc6b16168a7d59cd1917c4dd03ed435c1795fe6ff877f3a3389d93fba78cf82426ab6b5c7f99e003711ded8bed0adad83a5d89d7b336667bbb512868921f18a02d1790762b47e1a0a7a482a6c64529eba411731d118"], &(0x7f00000001c0)={0x0, 0x2, [0xeb1, 0x40f, 0xbed, 0x135]}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, @in6={0xa, 0x4e20, 0x39, @empty, 0x7}, @in6={0xa, 0x4e22, 0x6, @empty, 0x7f}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @broadcast}], 0x68) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 22:59:00 executing program 3: 22:59:00 executing program 2: 22:59:00 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:00 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xdf, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000120000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:00 executing program 3: 22:59:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080), 0x64) 22:59:01 executing program 2: [ 935.107650][T24959] binder: 24957:24959 transaction failed 29201/-22, size 7586835780199256576--7349874591868649443 line 3147 22:59:01 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000200000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:01 executing program 3: 22:59:01 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x5000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:01 executing program 2: 22:59:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0x5}}, [0x5, 0x1, 0x3, 0x40, 0x100000000, 0x100000000, 0x8000, 0x8, 0x2, 0x100000000, 0x3761, 0x6, 0x100000000, 0xe19, 0x101]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0x1fb8, 0x3, [0x1, 0x28, 0x82]}, &(0x7f00000001c0)=0xe) [ 935.336616][T24975] binder: 24972:24975 transaction failed 29201/-22, size 7586835780199260160--7349874591868649443 line 3147 22:59:01 executing program 3: 22:59:01 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000480000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:01 executing program 3: 22:59:01 executing program 2: 22:59:01 executing program 0: [ 935.558564][T24995] binder: 24993:24995 transaction failed 29201/-22, size 7586835780199270400--7349874591868649443 line 3147 22:59:01 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x6000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000004c0000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:01 executing program 3: 22:59:01 executing program 2: 22:59:01 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe2, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:01 executing program 0: 22:59:01 executing program 3: 22:59:01 executing program 2: [ 935.834171][T25016] binder: 25014:25016 transaction failed 29201/-22, size 7586835780199271424--7349874591868649443 line 3147 22:59:01 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000600000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:01 executing program 0: 22:59:01 executing program 3: 22:59:01 executing program 2: [ 936.032232][T25031] binder: 25027:25031 transaction failed 29201/-22, size 7586835780199276544--7349874591868649443 line 3147 22:59:01 executing program 0: 22:59:02 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:02 executing program 3: 22:59:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000680000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:02 executing program 2: 22:59:02 executing program 0: 22:59:02 executing program 3: [ 936.292978][T25047] binder: 25046:25047 transaction failed 29201/-22, size 7586835780199278592--7349874591868649443 line 3147 22:59:02 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xc000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:02 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:02 executing program 3: 22:59:02 executing program 2: 22:59:02 executing program 0: 22:59:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000006c0000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:02 executing program 2: 22:59:02 executing program 3: 22:59:02 executing program 0: [ 936.557665][T25066] binder: 25065:25066 transaction failed 29201/-22, size 7586835780199279616--7349874591868649443 line 3147 22:59:02 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:02 executing program 2: 22:59:02 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$void(r0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0xfffffffffffffe24) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780)='/dev/kvm\x00', 0x280, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000080)) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:59:02 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000740000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340)='veth1\x00\x00 \x00A\x83\x86\xf4\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000180)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000480)='\x00', 0x1, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="a5", 0x1}], 0x1}}], 0x1, 0x80) 22:59:02 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x4800000c0045009, &(0x7f0000000080)=0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000640)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fcntl$setown(r0, 0x8, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 22:59:02 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 936.893899][T25092] binder: 25089:25092 transaction failed 29201/-22, size 7586835780199281664--7349874591868649443 line 3147 22:59:02 executing program 0: ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) 22:59:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000007a0000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:03 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 937.103028][T25114] binder: 25113:25114 transaction failed 29201/-22, size 7586835780199283200--7349874591868649443 line 3147 22:59:03 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:03 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x22000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000fffffdfd0000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:03 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:03 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x126}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:03 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x2601000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:03 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000020000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 937.413978][ T7833] binder_release_work: 12 callbacks suppressed [ 937.413988][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000030000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:03 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x26010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 937.506313][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:03 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000040000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:03 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x7c010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 937.604132][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:03 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x4003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:03 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xea, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f023c123f3188a070") r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x308, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x1, @bearer=@l2={'eth', 0x3a, 'gretap0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x800) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x2dc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000003c0)={0x9, 0x7ff, 0x4, 0x5, 0xf5f, 0x9, 0x800, 0x45, 0x0}, &(0x7f0000000400)=0x20) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r5, 0x8, 0x80}, 0xc) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RSETATTR(r3, &(0x7f0000000140)={0x7}, 0x3ec) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) 22:59:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000050000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:03 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 937.783549][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:59:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x56f, 0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x1, @null, @bpq0='bpq0\x00', 0x360, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x2452, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x800) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a0025e6ff00000000000000000000000000000400000000"], 0x1c}}, 0x0) 22:59:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x80, 0x6, 0x1, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x29) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x20820000, r0}, 0x2b) 22:59:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000060000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) symlinkat(0x0, 0xffffffffffffffff, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000340)) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x4000) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000040)=0x6) 22:59:03 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xeb, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 937.985278][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:59:03 executing program 0: r0 = gettid() r1 = accept4(0xffffffffffffff9c, &(0x7f0000000300)=@in, &(0x7f0000000380)=0x80, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000400)={{0xa, 0x4e20, 0x401, @mcast2, 0x1f}, {0xa, 0x4e22, 0x8, @mcast2, 0x5}, 0x20, [0x80, 0x5, 0xfffffffffffffffd, 0x0, 0x80000000, 0xb5, 0x5, 0x7]}, 0x5c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f00000003c0)={0x0, r2+10000000}, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2000, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x4, 0x4) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x8}, {r5, r6+30000000}}, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000000100)=0x192f, 0x4) tkill(r0, 0x1004000000016) wait4(r0, &(0x7f0000000480), 0x0, &(0x7f00000004c0)) wait4(r0, &(0x7f0000000200), 0x1, &(0x7f0000000240)) 22:59:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000070000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000140)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), r1}}, 0x18) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x840010, 0x0) 22:59:04 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 938.112486][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:04 executing program 3: pipe2(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) io_setup(0x4, &(0x7f0000000140)=0x0) connect$ax25(r2, &(0x7f00000000c0)={{0x3, @default, 0x5}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) io_submit(r4, 0x200000000000005c, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:59:04 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xec, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000120000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:04 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$FUSE(r0, &(0x7f0000002140), 0x55e0567) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)={0x5, 0x0, [{}, {}, {}, {}, {}]}) [ 938.321200][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000480000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:04 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x40030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @empty=[0xd000]}]}, 0x44}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x800, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x80000000}) [ 938.437529][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:04 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xed, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:04 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c80), 0xdf1fd48b9a0b66, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f00000000c0)={0x1, 0x0, 0x100000001, 0x400}) 22:59:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000200)="06", 0x1) tkill(r3, 0x12) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1e) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000000)={0x0, {0x9, 0x1, 0x4, 0x2ad9}, {0x100000001, 0x8001, 0x2}}) fcntl$setstatus(r1, 0x4, 0x42803) 22:59:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000004c0000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 938.741852][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r2 = dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa0000000000400003000001000000000000002560b700fff0c30000000000000000000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x38e}]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x100, 0x1, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000881}, 0x40000) 22:59:04 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x44000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000600000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 938.877939][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:04 executing program 0: bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) sendto$inet(r0, &(0x7f0000000000), 0xa805000000000000, 0xc0, 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="abe85c66ea74df0000000000000000"], 0x0, 0x0, 0x0}) 22:59:04 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xee, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 938.974662][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:59:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000680000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:05 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xef, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000006c0000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:05 executing program 3: r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000240)=0x10) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) r3 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x0, 0xd0002) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="04001a1c547a524377681f5e01000000d580013948c4506c1aa6682760f1beb1262641f0a3a047735e312455e69b0938c00e53ae95be6ffe7729ffa225d765d19f6e465aa165cff14be62b324d922202e0f9d85349498a28331c239bdc372b8a9fdfcb97481fa355a9b8af70b01287d60162a49c4602a7f62aee8722b38eab99a114bf73e7bf2b413aa1ad0208eef7dd675b0dbd0bc518f48b85a7fc980aac9d26c07d264b1a6c2c"], 0xa8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000280)=0xc) kcmp(r4, r5, 0x3, r0, r1) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) syz_open_dev$loop(0x0, 0x0, 0x1000000000) mkdir(&(0x7f00000001c0)='./control\x00', 0x0) userfaultfd(0x0) [ 939.202425][T25281] binder: 25278:25281 unknown command 1717364907 22:59:05 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x76010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 939.308682][T25281] binder: 25278:25281 ioctl c0306201 20000380 returned -22 22:59:05 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 939.493996][T25281] binder: 25278:25281 unknown command 1717364907 [ 939.537130][T25281] binder: 25278:25281 ioctl c0306201 20000380 returned -22 22:59:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r2 = dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:05 executing program 0: bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) sendto$inet(r0, &(0x7f0000000000), 0xa805000000000000, 0xc0, 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="abe85c66ea74df0000000000000000"], 0x0, 0x0, 0x0}) 22:59:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000740000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:05 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x7c010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:05 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 939.954083][T25309] binder_transaction: 13 callbacks suppressed [ 939.954183][T25309] binder: 25306:25309 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000007a0000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 940.046396][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 940.084350][T25319] binder: 25308:25319 unknown command 1717364907 22:59:06 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf2, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 940.116262][T25319] binder: 25308:25319 ioctl c0306201 20000380 returned -22 [ 940.136796][T25322] binder: 25321:25322 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:06 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x8cffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000300000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 940.367667][T25333] binder: 25332:25333 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x17f, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, 0x0, 0xffffff89, 0x20048044, &(0x7f0000000540)={0x2, 0x2004e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0x18) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x2c, @empty, 0x4e24, 0x4, 'wlc\x00', 0x4, 0x8a, 0x64}, {@local, 0x4e22, 0x2000, 0x81, 0x7fffffff, 0x1000}}, 0x44) 22:59:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r2 = dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:06 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 940.556924][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 940.575879][T25342] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 940.833416][T25346] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20004 22:59:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r2 = dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000500000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:06 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xccffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:06 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 940.973449][T25348] binder: 25347:25348 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000600000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:07 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 941.119934][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 941.156647][T25360] binder: 25359:25360 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000700000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:07 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xf5ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 941.393186][T25368] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20004 [ 941.404535][T25369] binder: 25366:25369 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x400040) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40400, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r2, 0x80000, r3}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipmr_getroute={0x1c, 0x1a, 0x525, 0x0, 0x0, {0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}, 0x1c}}, 0x0) 22:59:07 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 22:59:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000001200000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 941.979171][T25384] binder: 25382:25384 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r2 = dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:08 executing program 3: r0 = gettid() seccomp(0x0, 0x0, 0x0) tkill(r0, 0x0) getpgid(r0) 22:59:08 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xf6030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:08 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000002000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:08 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x7, 0x20200) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000200)={0x8b, 0x1, 0x32, "58efe9d6b68432ec3250ef79210e1b7095acacac8bc0b4f486a658fa530489bd9be317bf6fe13c955c35462de888f070ac3944968b29949f7713b520", 0x33, "248387e9debc064f8ba4c52b57a5f7b91756b4699e62407f9dcf0b528084798a787cfe497b66a4f5a5faa02d3ed99f4f3395d77bf4c2146131f3aaa3", 0xa0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="b40a000000000000ad0000dbd8606ee924e2bb000000000000ca132877f8c4f8490399854678a321d0a8fe472e826f9d676a46c7a1ce65e9"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) [ 942.188798][ T26] audit: type=1326 audit(1553036348.072:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25389 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0x0 [ 942.232201][T25399] binder: 25390:25399 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:08 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000004800000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 942.314048][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:59:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) [ 942.417761][T25410] binder: 25408:25410 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 942.454382][ T5] binder_release_work: 11 callbacks suppressed [ 942.454392][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000004c00000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:08 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xf6ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:08 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 942.540185][T25420] binder: 25418:25420 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 942.683309][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 [ 942.998630][ T26] audit: type=1326 audit(1553036348.862:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25389 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0x0 22:59:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r2 = dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 22:59:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0xa0, 0x1}, 'port0\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x3}) 22:59:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000006000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:09 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfa, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:09 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xffff8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f3"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:59:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000006800000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:09 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfb, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:09 executing program 0: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:dhcp_state_t:s0\x00', 0x22) r1 = inotify_init() inotify_rm_watch(r1, 0x0) [ 943.244764][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 [ 943.267746][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:59:09 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xffffff7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000006c00000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 943.402894][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00008d2000/0x2000)=nil, 0x2000, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x30000) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000100)="fbb892f0338f045b092f1ce62d5bb8738267ddec03651412254992c14c28337d7e2aa10d5b3b4372f4446f3357d11123b138594eb2c137fbdc4732437c5a13bbae69f6d705f3ff5d2bc9ade5a1bdb139b3f80d27481d9b29f53a3ccbf8cff646e138ad80e6e50c0a9ed84bd92db4bff763f5542ea5fce2dc1c16") getpeername$llc(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0xfffffffffffffffc, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df}) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400800, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x220000, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000240)) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) [ 943.581391][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:09 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfc, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000840), &(0x7f0000000080)=0x1c1) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000180)=0x3, 0x8) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000480)) r5 = getgid() keyctl$chown(0x4, r4, 0x0, r5) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x0, 0x4004400}) r7 = fcntl$dupfd(r2, 0x406, r2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr, @initdev}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000240)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, @dev={0xfe, 0x80, [], 0xa}, 0x80000000, 0x7f, 0x1, 0x100, 0x6, 0x1000101, r8}) r9 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r10) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, 0x0) r11 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_STAT(r11, 0xd, &(0x7f00000005c0)=""/137) getsockname$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{}, [@netrom, @netrom, @null, @rose, @default, @rose, @default, @bcast]}, &(0x7f0000000000)=0x48) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000000c0)=0x4) 22:59:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000007400000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r2 = dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 22:59:09 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xffffff8c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 944.184987][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:59:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000007a00000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 944.229370][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:10 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfd, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:10 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xffffffcc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000010000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 944.349093][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000020000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 944.558464][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:10 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfe, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 944.804034][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r2 = dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 22:59:12 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xfffffff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000030000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:12 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x102, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r2 = dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 22:59:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r2 = dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) [ 946.433809][T25524] binder_transaction: 7 callbacks suppressed [ 946.433830][T25524] binder: 25514:25524 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 946.469525][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:59:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000040000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:12 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x103, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:12 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 946.488182][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 [ 946.519363][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:59:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000050000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 946.585113][T25531] binder: 25529:25531 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000060000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 946.670050][T25540] binder: 25539:25540 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:12 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x104, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 946.767553][T25544] binder: 25543:25544 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:13 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x3, 0x7, 0x7, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x408, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_emit_ethernet(0x25, &(0x7f00000002c0)=ANY=[@ANYBLOB="002000000000ffffffffffff08004500041c00000000000090780278"], 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80002, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000380)={r4, 0x2, &(0x7f0000000240)=[0xd15, 0x1], &(0x7f0000000280)=[0x6], 0xdfed7d5f6ab2f170, 0x4, 0x81, &(0x7f0000000300)=[0x8, 0xe81, 0x100000001, 0x101], &(0x7f0000000340)=[0x9, 0x8, 0x20, 0x4, 0x80, 0x8, 0x7]}) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000180)={0x10000, 0xf000, 0x3, 0xc54, 0x8}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000140)={0x1d, @local, 0x4e22, 0x1, 'ovf\x00', 0x2, 0x4, 0x56}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f0000000100)=0xfffffffffffffec4) accept4$bt_l2cap(r3, &(0x7f00000003c0), &(0x7f0000000400)=0xe, 0x800) 22:59:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000070000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:13 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:13 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x105, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r2 = dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 22:59:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r2 = dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000120000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 947.364573][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 947.374469][T25560] binder: 25552:25560 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:13 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x106, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 947.446174][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 947.452064][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:59:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x600000000000000, [0x1b, 0x0, 0x1b, 0x4800], [0xc2]}) [ 947.503403][T25570] binder: 25569:25570 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:13 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000200000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 947.610504][ T7833] binder_release_work: 4 callbacks suppressed [ 947.610513][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 [ 947.642322][T25575] APIC base relocation is unsupported by KVM [ 947.642345][T25575] kvm [25573]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 22:59:13 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x107, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 947.696620][T25583] kvm [25573]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 947.708646][T25582] binder: 25579:25582 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000480000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x8001, 0x280) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f0000001640)=[{&(0x7f0000000200)=""/94, 0x5e}, {&(0x7f0000000280)=""/131, 0x83}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/192, 0xc0}, {&(0x7f0000001480)=""/180, 0xb4}, {&(0x7f0000001540)=""/210, 0xd2}], 0x6, 0x0) r3 = gettid() syz_open_procfs(r3, &(0x7f0000000140)='net/igmp\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) [ 947.789553][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:13 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x108, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:13 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 947.882040][T25592] binder: 25589:25592 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 947.986798][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r2 = dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 22:59:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r2 = dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000004c0000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:14 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x109, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x406, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @remote}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000440)=[@in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0x7fff, @loopback, 0xd47f}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}], 0x3c) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x585000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xcc, "fb29da36e48c181df8bf95560aa17a35ac7022a20c4c055310bc9468a283e3c1834b3bb37fa5947591a2cda4c28021554ad5a54a091875d3c129b2f66175cf6ee6445db3545d7fd35c93909b85b6f671e797b883646078cae7fd79e51f1b0fb30ed9c44feca698387e1331c5de701641d1edcd39424d780c6ad71dc1f163051b3afaff3a3b191c925a079e18a6f72a71ea22a641d98e78ea1943371e23fb237f222e13f44fb29114fd1ed7f59c9ecce2eb1090297c88d14fc90b5a9945c0dad8b0233a408c4ba79d0868d5fa"}, &(0x7f0000000200)=0xd4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000240)={r6, 0x38, "adc2a94aad7305bd6b190c64af0df1bc3298b804c031e04368ff1828e0b0821bd76eedb8ca568efecfae60cb081436776ce0444de44ce847"}, &(0x7f0000000280)=0x40) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f00000004c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0xfffffffffffffffe, 0x0, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b3}]}) accept4$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e, 0x80800) ioctl$KVM_RUN(r7, 0xae80, 0x0) 22:59:14 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 948.235490][T25608] binder: 25606:25608 transaction failed 29189/-22, size 7586835780199251968--7349874591868649443 line 2994 22:59:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000600000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 948.319360][ T7833] binder: undelivered TRANSACTION_ERROR: 29189 [ 948.357233][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:59:14 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000680000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:14 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 948.417215][T25625] binder: 25624:25625 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 948.448168][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:14 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000006c0000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 948.580225][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 [ 948.673379][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:14 executing program 3: symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x88002, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000180)="223172fd5427b1a4be636021e097ad686c7871276fc6b2d30bb46638be87d04328ff619b8b924177d8cac0382649038962e91b0ef625bdab5daaaa704c527bbe9f7025ef1d1d0b1cc5cf821dc21da6ef39180a8d6274c7420dae2f2d29508eb6ee093f4dbebfb659fc82341bcc1b0b7c3285e452555693779d285afa6475a26b7ae3f4d98bcdb776e5c1d7e01a010afe9e6e77eeaa7ea6aba2df") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000100)={0x3bd3, 0x3, 0x80}) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @local, 0x0, 0x0, 'none\x00', 0x0, 0x0, 0x1000000}, 0x2c) 22:59:14 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:14 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000001600)='/dev/input/mouse#\x00', 0x7, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001940)={0x0, 0x87, "6b9595760664757766723b065cdbcf5e9f9aaa3e6a97e8b01ab5a63022c152655e5c3337ca84c03f8d21d29906a47c644781ba264a7af1d339fe67fbde14029bfc9ff46ff00d167e967b84426bf827fb8178a653c4db2acd0d7fc8056d418f91f0d3ed58ed9d05006d4f44f2a903d60fae9a9cc409b5826ced39c63730ec83e61386d5bbab781b"}, &(0x7f0000001a00)=0x8f) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001a40)={r1, 0x1}, 0x8) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KIOCSOUND(r3, 0x4b2f, 0xd9f) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bind$unix(r4, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f7765726469738cb7c28d8985e428f53d413a001000000078706f72743db56e2c00000000000000"]) r5 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001500)={{{@in6=@mcast2, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000001900)=0xe8) stat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x7c4) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001700)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001740)={0x0, 0x0}, &(0x7f0000001780)=0xc) stat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000001b00)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000000200)="626e6d79c0cdf4ad1d95aedb49299a955acc11a0a810e77b6938a493703a5b5d7ad12fac7ba8f137e3e257e40c7c34177bc2a4d62bd205f02356be23a98b6b5e64ad5d7d533598b25e60a067782bea1809087e5ec6ef74561509b403edbb29e62255cec63ec3078f0d68", 0x2e1}, {&(0x7f0000000300)="a5867291e2918376ec9b8cd6c3020652c5583a0937e880a5114a014ba7eeee63d3c0352b59f7923ec2bb90ec8324defdb2b10f444b0bdaf1a07dd596b90aed8d58329b8335b15709f769db463da7d244de89107b03c8fcb10413bcb28feae8ef88ae9ddd2224826ec91e7cd516f27120b7b57a726c6a9d47d3ee35d21a6a32f3d3c197644adbfaf6d17b0a3b4fbe370decdbe5eec9233e59be97f0186e09029c9289eae36a4c54e3e675af2ff236c31401c90ff8bcd0986f6cced79bdb2f8e8074f10a4664144000149f76fe04ffc85538345a8d412f3b5ac64d953772522f14", 0xe0}, {&(0x7f0000000180)="ffe244503a1cc6164341eb34ab02e53cf4fd406ca3350ba7a798bd5af5a8b217534b853b04f600557060d2b5dc35a126c01d38be3e5df77d773843", 0x3b}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="f023f8678c451b1edd8918b1787069670a989b2943c5c60764fc097349b0", 0x1e}, {&(0x7f0000001440)="7548dc41", 0x4}], 0x6, &(0x7f0000001880)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0xc, 0x80}, 0x10) 22:59:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r2 = dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000740000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:14 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x80ffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:15 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000000)) ftruncate(r2, 0x2008000) sendfile(r0, r2, 0x0, 0x80000000000d) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f00000000c0)=0x8) [ 949.141060][T25652] overlayfs: unrecognized mount option "lowerdisŒ·Â‰…ä(õ=A:" or missing value 22:59:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000007a0000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 949.185824][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 [ 949.193893][T25662] overlayfs: unrecognized mount option "lowerdisŒ·Â‰…ä(õ=A:" or missing value 22:59:15 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 949.227940][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:59:15 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = syz_open_dev$mouse(&(0x7f0000000500)='/dev/input/mouse#\x00', 0x8, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000540)=0x5, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r2}, 0xc) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f0000000240)={0x3, 0x10000}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000280)={0x7fff, 0xfffffffffffff6d7, 0xfffffffffffffbff, 0x0, 0x9, 0x7ff, 0x8, 0x45f, 0x8, 0x2, 0x7fff, 0x5, 0x0, 0x10000, 0x4, 0x1, 0x5, 0x4, 0x2}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)="04"}, 0x20) close(r3) 22:59:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000fffffdfd0000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:15 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 949.390134][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:15 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000fdfdffff0000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:15 executing program 0: socketpair(0x0, 0xa, 0x40, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x3}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000016c0)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x102, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x10001) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x0, 0x0, 0xda7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0xc}, 0x48) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) [ 949.599658][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:15 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000100f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:16 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80800) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x24000000000000, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240), 0x8) 22:59:16 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) stat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) unlink(&(0x7f00000001c0)='./file0\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000), 0x0) creat(0x0, 0x0) 22:59:16 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000200f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 950.128986][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:59:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000300f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:16 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:16 executing program 0: 22:59:16 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) recvfrom$rose(r0, &(0x7f0000000000)=""/79, 0x4f, 0x40000041, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) read$eventfd(r1, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 22:59:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000400f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:16 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x110, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:16 executing program 3: r0 = pkey_alloc(0x0, 0x4) pkey_free(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='smaps_rollup\x00') perf_event_open(0x0, 0x0, 0x0, r1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000300)) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000003ea587e0e2022febc6b63ae1333d388cfab4ba2bc6d9d35e829a9cefbbb385ab5e530c5e6fdc746e0036fae95df3529b9af0aa03000000cf9e0de8e3dbd5406fda0815301b253cbdd4ee4a87b9741f287a6ee98573a6ffa6d810dd4ed26470853292aff079b98cd3eef96f717e05d3fcf8100a9ee09f4557", @ANYRES16=r3, @ANYBLOB="00082dbd7000ffdbdf2504000000080004000400000008000300000000000800050000000000080006000000000008000600ff0000000800020000010000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x2004e21}, 0xffffffffffffffc9) socket$nl_generic(0xa, 0x5, 0x84) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0)) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x0, 0x200}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c) r6 = getegid() getgroups(0x1, &(0x7f00000002c0)=[r6]) connect$l2tp(r5, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) 22:59:16 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000500f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 950.998782][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:59:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000600f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:17 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x111, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000700f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:17 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xd6f, 0x1, 0x916, 0xfffffffffffffff8, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e24, @broadcast}}}, 0x84) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x2000) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)={@empty, @broadcast, 0x1, 0x2, [@local, @loopback]}, 0x18) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, 0x0) [ 951.469266][T25770] binder_transaction: 12 callbacks suppressed [ 951.469286][T25770] binder: 25768:25770 transaction failed 29201/-22, size 7586835780199710720--7349874591868649443 line 3147 22:59:17 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2b, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x25dfdbfe, {0x4000000004}, [@typed={0x4, 0x12}]}, 0x18}}, 0x0) r2 = dup(r0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={r3, @rand_addr=0x1ff, @local}, 0xc) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x3, 0xc0}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000080)={0x1, r4, 0x1, 0x7}) 22:59:17 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x112, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000001200f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:17 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x500000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:17 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x113, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 951.897163][T25793] binder: 25790:25793 transaction failed 29201/-22, size 7586835780200431616--7349874591868649443 line 3147 [ 951.948754][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:59:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000002000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000004800f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 952.131878][T25806] binder: 25804:25806 transaction failed 29201/-22, size 7586835780201349120--7349874591868649443 line 3147 22:59:18 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x114, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:18 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x600000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 952.237502][T25812] binder: 25811:25812 transaction failed 29201/-22, size 7586835780203970560--7349874591868649443 line 3147 22:59:18 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2b, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x25dfdbfe, {0x4000000004}, [@typed={0x4, 0x12}]}, 0x18}}, 0x0) r2 = dup(r0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={r3, @rand_addr=0x1ff, @local}, 0xc) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x3, 0xc0}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000080)={0x1, r4, 0x1, 0x7}) 22:59:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000004c00f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:18 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x115, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 952.523131][T25824] binder: 25823:25824 transaction failed 29201/-22, size 7586835780204232704--7349874591868649443 line 3147 22:59:18 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x700000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000006000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x400000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000002c0)={0x1, 0x0, 0x7fff, 0x3, 0xfffffffffffffff8}) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000000c0)={r2, r3/1000+10000}, 0xfffffffffffffcc6) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe5c}, 0x2000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x4) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000240)=0x3) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair(0x2, 0x6, 0x9, &(0x7f0000000040)) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000300)) 22:59:18 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x116, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:18 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dlm-control\x00', 0x80, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000980)='/dev/video1\x00', 0x2, 0x0) r2 = syz_open_dev$usb(&(0x7f00000009c0)='/dev/bus/usb/00#/00#\x00', 0x1000, 0x20001) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/vga_arbiter\x00', 0x8000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/urandom\x00', 0x240, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000a80)=0x0) fstat(0xffffffffffffff9c, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c00)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000d00)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d40)={0x0, 0x0, 0x0}, &(0x7f0000000d80)=0xc) sendmsg$unix(r0, &(0x7f0000000e40)={&(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000740)="a391da07d7d54c69953124ebd7c2ef95e7ad0b7b189812b80ff8d2bfd3356e5d1b962b2f23f4595bcaf33c2bb4f91cbfa63e5ec3ef3babc30d90861cbc1021bb43be2217001dc39c7d3c94863bf715f69a5ee5c44ed490efb029", 0x5a}, {&(0x7f00000007c0)="da1612402982a69c3a02cf627b5aaf78e9f3d886d46ec7d10c5f74498fcdc09092947f674114798aa766c398dffd16fe4d28e1a6630c8ee76c547b9a872e582ee3bea82ccfa415585b86182daedf4117f4d3073f96fb2fb6a3b7ad171a046f10e54a7b19bdb0c71edaf54d17173d389759a972b2b9d3d264a5bb10e1cd7c5c9e2cdf091765bc874c2672b8a9d67991bf74f3d3c8ac11d16b86450bf813e1425aeca8228f0606ff3ad3d11d12de2f00621b49c2b305168911ff8d6a", 0xbb}, {&(0x7f0000000880)="7285ecc336139b6b62cc7c690287fbb4f9f4d7ece32b0756b4d6bb7d1bb61babc80c2fab80b1b4379b36fbfb77c35dc65832f5e21a8fa61a921be7f7ce76ee22843cd177c7220274e2da67ef19d062e773399d7169d277257b7d7f5ea248b10585bfb8c72d", 0x65}, {&(0x7f0000000900)="1883c12c970dc846dd74fb9160f87a6c228e8b88df4e6998883ebb214f967e2efa0b5048c18b8427d007878cc84552d004823e65", 0x34}], 0x4, &(0x7f0000000dc0)=[@rights={0x28, 0x1, 0x1, [r1, r2, r3, r4, r5, r6]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0x68, 0x80}, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x66, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000380)=0x8) ioctl$DRM_IOCTL_MARK_BUFS(r14, 0x40206417, &(0x7f0000000000)={0x8, 0xffffffff00000001, 0x2, 0x100, 0x8, 0x3f8}) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000080)=""/238) [ 952.764410][T25835] binder: 25832:25835 transaction failed 29201/-22, size 7586835780205543424--7349874591868649443 line 3147 22:59:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000006800f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 952.827699][ T7839] binder_release_work: 12 callbacks suppressed [ 952.827707][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:59:18 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffdb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10009, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x84, "19bebd6d6b6fa0033a37e7a0d8f512ce3ec175c1359da0365bcbf77b95594f213da80e7a824925558788e7b2289ef2c33a0e710c2e683dab90c852a22b402c4933fc28afa9478fab6f9fdcdc79143d3169d14e833803a241689d24fd663c679979cc2aeb8f2f6000f3e9b6b1d0505cc3720b104e7473d0a6b34be9cafbb34711d890eb41"}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000180)) connect$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x1, 0x2}}, 0x10) fcntl$getown(r0, 0x9) migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000040)=0x8) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000300)) [ 952.953591][T25848] binder: 25847:25848 transaction failed 29201/-22, size 7586835780206067712--7349874591868649443 line 3147 22:59:18 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000500)='proc\x00') ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000009000000000000000080000000000000010000000000000003000000000000000006000100000000000000000000000000000000000000000000000000000000000000000000000008000000000000000600000000000000007f01b201000000f8f5ffffffffffff00000000000000000000000000000000000000000000000000060000000000000000000000010000000101000000000000ffae0007000000000000000000000000000000000000000000000000000000000000000000000010090000000000000009000000000000000c0000000000000003000104000000000000000000000000000000000000000000000000000000000000000000000000ffffffff040000000700000000000000080000000000000009070606000000000000000000000000000000000000000000000000a400000000000000000000000900000000000000070000000000000005000000000000006d060708000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0500000000000000ff7f00000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000f5000006000000000000000700000000000000350702000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000100000000000002000000000000004b00000100000000000000000000100000000000000000000000000000000000000000000000000000000000000000"]) 22:59:18 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x117, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:18 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xc00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000006c00f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 953.063491][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:19 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x101402) timerfd_gettime(r0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 22:59:19 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000000c0)={0x6, 0x2, 'client1\x00', 0x7, "fb991bb0818dd431", "add00b72769f6faacaaefa13f45347150c578bdf47c92eb1a5967d61f648dd26", 0x1ff, 0x9e}) ioctl$VHOST_GET_FEATURES(r0, 0x4008af25, &(0x7f0000000080)) [ 953.178066][T25873] binder: 25869:25873 transaction failed 29201/-22, size 7586835780206329856--7349874591868649443 line 3147 22:59:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000007400f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:19 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x118, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 953.249330][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 [ 953.324460][T25885] binder: 25883:25885 transaction failed 29201/-22, size 7586835780206854144--7349874591868649443 line 3147 [ 953.410101][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:19 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000040c0)='/dev/dlm_plock\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000004100)={0x0, 0x1}, &(0x7f0000004140)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000004180)={r4, 0x5}, &(0x7f00000041c0)=0x8) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x4) ioctl$TCFLSH(r5, 0x540b, 0x3) r6 = dup3(r0, r2, 0x0) r7 = socket$l2tp(0x18, 0x1, 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000004040)=0x4) connect$l2tp(r7, &(0x7f0000004080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x72e0c2676e7bc604) sendmmsg$alg(r6, &(0x7f0000003ec0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2bd2efb8049eb022c8c8855855789dd1d37fb5580444ac35a5e075ea7b653c4d99f39e0f0d488e51f24a2d72efa525000c843f20d7caab54ef48555caf292b1516a5c42039ce37ad570c5890033daed80904bcc7b17d8d64c779ab8769ea61b44dc6c7bddc55c65d0c7720d07440dd9e2d703c9c64845826e9e91d93c7cb5a82ef352588b4fc715f49ee25247f99b46305225a69971838bc51cd34e89097b19f", 0xa0}], 0x1, &(0x7f00000001c0)=[@assoc={0x18, 0x117, 0x4, 0x100}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xf0, 0x117, 0x2, 0xd6, "c14bf505a3009692b42736c8c1f30bd06289477eedd960dbfd484cbf29dbce9a2e8f19d79aaf09963610a1976c50d226c937f8484f0689bc1a25ec888d0067db72344578c51202d04ca64ac50fdc43e6233c62b6ca3764f77c6caaa91ef99ed80a1bb58badfc956eeb12dedfe80c3e31fe93c9e58a680bb82732324ccb973c6e238870c94599ea45838b652972bcdaf94ee6681064184733efdeed0d4390fc2929c76c47423e569df20d26e58499f9bcda2f3b68af9196de299c2fb3a0d8260e610951a8dffbba535b0dbcd90405cac025d7f069bda6"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x3f}], 0x2180, 0x10}, {0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002340)="51e0ff775e25f28f2a4007c206270d7db92a4f1c57e8f3bddb5f710162192f6712a574899493f7d30b0a0ea41b30e67d1d6de4480e694b51dc4562a5ea708563b262fd259cbfc582390e78bc8c1c2ee9d003d9e1148ce1b3de74341a6e4f3023a3a71d81d7c1ecc099f43db25a115ce3adfbed2a3c447b", 0x77}, {&(0x7f0000000140)="b1be9da63cde26771ab582a40575cabc64ffe14ebfff6018d854fb1f3a6ba0a324e19a5bb8510334a7ed", 0x2a}], 0x2, &(0x7f0000002400)=[@iv={0x100, 0x117, 0x2, 0xe9, "e55fe5ae4fce2a6fdc94daf4cfd90ae869f1f2f04f037cbbd29c34425d189b1d011bb03c96c8d1eb1cdfa99d6997013f3afc6441c0d9255e89db7ca6c35f0aa04987454ef23a968033678a7784d2772b8e99eb2ad81a78ad94ef5614297766c4547e00b7bcada8e64b7a495b1a016d6c217bd4e5c6729c5e15f30d0b872881c271e4c7e18185a5afa1513e35931dd793ac2321b5955933bc97fa89c8f0c49d92852aecb28e1ccae79b351fb14bf468a638eaea24c40ffd3603b0930367857119360ab8b2cdf02f7e8ea3e1a5ce99809ebec384ce8ac8cc2a3bbd0bdc8b8b10b45fa405ecea8f9b04b0"}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}], 0x130, 0x4004}, {0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002540)="fa217865d33153059e16cad4fd8ba8f3731b76fbbd773c2f21f41aecac019ca38673d09d8c5d3067aad501d65c7c3c66a341a83ae205c80ba1f87fdedc62e53dcae592502d25f0f2b945b59ee43f3663ac9353d9a9666cd2581700ac8075e145b546c1d2235bd946a797a08d31b85e706bad925db0c77f2448f9918b89aa8dae19b35291af59a3bbac1d325d77de993a188f1b99a771b6d10d80e9f8e2dc996ed252e9ae00d8b2fc00d0e23fdec9954a18950e4fce563c5429e0fdc95efa5a124076356f693f11f7a27e394d535b9987", 0xd0}, {&(0x7f0000002640)="e31b9824e819e095a4072237d978d9a38e42d9f36a4ca736b0734926562e68d0735a49148a4f9df299294db5cb38b1e7677e5d213feb37e916618d186683d895ac7f4181832942bee755d44c95b30d0fb3ad17889812cff00716e8451855f59d815c29036c45d14c1b8cde2141db6efe0d3ac353880a01105832d7821fa86a89b731c781a843bc795d8cdd77d3a2087d38398e15bba08286dd405b69b01ec02f2bc4154c284a2452722a65fbbb8806ca9378610316ed1ae4ad6b3247f7451bf28d8e139b6395d27bbc39f4855c9a222f6521ecc0a80ca3001d606d531d414a7d7747eb038a", 0xe5}, {&(0x7f0000002740)="762f34debfc17f5963cece0df801d1c64844a8557514aee256eb3e24d76a3edd4f41616620b0420656c8e27aa66ebf8f37f64657cbf64f6c50b2648f89c38064cdaafc11161bcbfb569e46fba3a71a848dce49ff00c0a15820516881e64ee86eedc6f59180ecf5f1cbb638f44f7358c04d8b37791b2e33abce7632e61361", 0x7e}, {&(0x7f00000027c0)="c421c4d1a366a9fd256115eefce1d5fd119295991aca2fcf124bc5ba6f478289e4b8a87c4020cf5ce984cd1f", 0x2c}, {&(0x7f0000002800)="77e834d0ebee18033ab075bd36b0bb6f33deddfeef23ef5dbc88f47cf6fe4bfbaeef66cc9ffd3141ad98416ca40e6cf8c010506f12dcd86b20b37e0654a84a7160fb705731f0edfbd8cc8dbe18bf0d50819241b20864021ca0d32132aa22b605af2f8ea4496d54dc092b4ef356f1925d50f3d2566f29673f92b08ef9d1f59d9c552dda9c7fb0cbdcaec87eb4872658b7", 0x90}, {&(0x7f00000028c0)="b52a1de0fd6d2864608f5aa6bf429740472aab2a1bcaacda9a2484a4e3e387295c4076f510c25f636023648736c248607d52c4d1d90c63db210d2f09fdc86fc210f2f5d2c2eea76a9d32bb978e6d75eb78f33974d903463aeb658bee7aff4bc65ecd4a0232ad2d348ab1f2595de417fd1f2c55d6cc4f9e6a08f6617ef6e64b35ca84f8feccb151390ed005a1c2861b", 0x8f}, {&(0x7f0000002980)="e4c170b9e58b61c2c74b66878d10a7a70dfc3f7c71ecca76a61fc52b989270187c668f9de83427491122a7fd3d7344f9396d263467e1495f9b46eb91dcfbf2d0c8942de1b61f497dcf74282f152b4a2d5038e855", 0x54}], 0x7, &(0x7f0000002a80)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0x800}, {0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002ac0)="a54bf28fa37159d549b23636a1df30fd9b8826c12b277518df67adf6749b5745592bef7707d81def77750009a9048de999bad39bf64aec288cdd9e70ee594cfc00833acb6242d77723af812d94cb27a1efdd818fcdbf40f30ec78d07416222745236f461b31f64396a870193be35ca784941de927f0f7c48484ac71e6fa3238416af1ad899614724daa87e0b2147a1838792b97b4f21cb821dc550f8b8a3cc43e3384c6fae00cd86a8e0f599ba8ebe961afb7a5da39d48781a22a9c2723dcc52c736a73abe29a8a9e3400fb138", 0xcd}, {&(0x7f0000002bc0)="22b654e658a29990320e5f33123da7d6aa2518f91a0b79c96edaeb16c02651b6d6331548c8ca231895e1ca485f92e58197d7d3734d6a965019f24ca674f63ca84baba09ad915d15546a0e426239db8fd8b59a1e6ce7ba80759917012f9913b2a668cd6112e0c884c7d1cbf6d5d860eb8378c11c42e539ae0", 0x78}, {&(0x7f0000002c40)="c7d72decfc8afa542f69ff970451bf2e31f87079f01fa365a7e784325483c4f1abe73fcf4ad9b3c64f077362fb79b2b1adbed9ff7652e466623763f30471a48a3e14806582e776d37f60d023", 0x4c}], 0x3, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002d00)="5ea8a0e885", 0x5}], 0x1, &(0x7f0000002d80)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x48, 0x10}, {0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000003e00)="3d83e00b049e5ba1aeee8c0a5515fb46e6fe12", 0x13}, {&(0x7f0000003e40)="a4422fbec0059a94c94984153f54c5a85ad6", 0x12}], 0x3, 0x0, 0x0, 0x4000080}], 0x6, 0x24008010) 22:59:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = msgget$private(0x0, 0x342) msgsnd(r3, &(0x7f00000001c0)={0x0, "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"}, 0x1008, 0x800) r4 = socket$vsock_dgram(0x28, 0x2, 0x0) getpeername(r4, &(0x7f0000002e80)=@ethernet={0x0, @link_local}, &(0x7f0000002f00)=0x80) r5 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x80, 0x90400) setsockopt$inet6_tcp_int(r5, 0x6, 0x10b, &(0x7f0000000080)=0xc, 0xffffffffffffff7f) socket$netlink(0x10, 0x3, 0x5) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) ftruncate(r0, 0x540) 22:59:19 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000007a00f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:19 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x119, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff2, 0x101000) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000100)={0x200, 0x1}) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000180)={0x75e726d7, 0xfffffffffffffffe}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r4, 0x4}}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r5, 0x1ff, 0x476a}, &(0x7f0000000280)=0xc) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000340)={0xa, 0x600000000000000, [0x6e0], [0xc2]}) 22:59:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x505001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000003c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r2}}, 0x18) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket$inet(0x10, 0x20000000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007041dfffd946f610500070000001f00000000000400060005000067ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, r5, 0x10, 0x0, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x11a}}}, 0xa0) [ 953.757673][T25906] binder: 25895:25906 transaction failed 29201/-22, size 7586835780207247360--7349874591868649443 line 3147 22:59:19 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x11a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000fffffdfd00f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 953.867194][T25915] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 953.884069][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 [ 953.895904][T25916] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 22:59:19 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x2200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:19 executing program 0: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000240)={{0xd0, 0x3}, {0x2c9, 0x8}, 0x6, 0x7, 0x200}) r0 = gettid() mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x2f, 0x0, @tid=r0}, &(0x7f0000000100)) r2 = socket(0x40000000015, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x1000, 0x811d}, 'port0\x00', 0x50, 0x20001, 0x4, 0x6, 0x2, 0x1, 0x2, 0x0, 0x3, 0x9}) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f00000002c0)={0x2}) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f76") sendto$inet(r2, &(0x7f0000000a00)="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", 0x481, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2, 0x54) recvfrom$ax25(r2, &(0x7f0000000340)=""/229, 0xe5, 0x0, 0x0, 0x0) [ 954.098822][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:59:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:20 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x11b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000200000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x78861ae0be4e4851, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x1f4, @empty}}, 0x0, 0x0, 0x5400, 0x0, 0x54}, 0x98) 22:59:20 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x2601000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000300000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 954.674392][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:59:20 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x11c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000400000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:20 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 954.787637][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:59:20 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x11d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000500000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 954.882759][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:20 executing program 0: socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x1f, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="62d42dd60e77d1759b0e9eba026aedb72cf1ecf78d8373ce9f225443f56ba1295baf582d9eb61d9056ad88169165e07400399292d68877da460e21d25ddbedbe693225916ef76397ab24a8d3f08e42de2d9049eb8a2cafdb9cd87a2a5911e2fda3479653173b4d9e7f4cc4160228af7775c1c985bbce47360a88f42a", 0x7c, 0x200}], 0x20, &(0x7f00000003c0)=ANY=[@ANYBLOB="63727566742c646f6e745f686173682c61707072616973652c7375626a5f747970653d73797a2c7375626a5f726f6c653d2c636f6e746578743d756e636f6e66696e65645f752c0067653ddf076d7a26b344b3ff30211f0ff629de8740c883ee150f099252dfcc45fcceff4c4190dafeab4851157df09e54329ea178a19a9d"]) r1 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xffff, 0xc0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020c25bd7000fdb9df2502000000080005000100000014000100fe8000000000000000000000000000bb"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$join(0x1, &(0x7f0000000300)={'syz'}) [ 954.971314][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:59:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000600000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:21 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000500)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000640)=0xe8) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000800)=[0xee01, 0xffffffffffffffff, 0x0, 0xee00, 0xee01, 0xee00, 0xee00, 0xee00, 0x0]) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000840)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000880)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000980)=0xe8) r13 = getegid() sendmsg$unix(r1, &(0x7f0000000b40)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000240)="b02f30d4fa689e64f95cc4352097d90ba4d9ea6802b65b169e1e374e18fb0da00c435a549fbeb6707f5a572af5602aa52198ad0f52b88a7bdc0c9eba3186a56bb02cb68b83196ca68b64273999ae70d305046f37e01161105fa7fc22297073db6edf58d95d8732422c6dd5d5c847cf268794ccd2662eb3011f2d148bbbd54b7e45b86542008df984f6f632b7a8921eef4810d4cd2e31d8e4f2ffe722f2863d53a74af64a339f6df0c679355d6fabaf9e7d13ee71064f1a207b9f0ea32968", 0xbe}, {&(0x7f0000000140)="98a6398ecaff0d334f656682bf1a9759a17d2242", 0x14}], 0x2, &(0x7f00000009c0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x10}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0x158, 0x800}, 0x20000000) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r14 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r14, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r14, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r14, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e20, @remote}], 0xfffffffffffffe58) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r14, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r15 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10080, 0x0) ioctl$KVM_CREATE_DEVICE(r15, 0xc00caee0, &(0x7f00000000c0)={0x4}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r14, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @local}], 0x2c) 22:59:21 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x11e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x101000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000040)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast1, @in=@empty, 0x4e20, 0x0, 0x4e22, 0x31, 0xa, 0xa0, 0x80, 0x73, 0x0, r2}, {0x3, 0x7, 0x4, 0x7, 0x7ff, 0x8c66, 0x200, 0x2000000000000}, {0x9, 0xff, 0x6, 0x3}, 0x46704142, 0x6e6bb7, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x7e}, 0xa, @in=@rand_addr=0x401, 0x0, 0x0, 0x1, 0x6, 0x80000000, 0x1, 0x4}}, 0xe8) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xfffffffffffffffb) getsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = semget(0x3, 0x4, 0x44) semop(r3, &(0x7f00000003c0)=[{0x6, 0xb5b7, 0x1000}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000380)={0xe3, 0x200, 0x81, 0x525, 0x7, 0x9, 0x7637, 0x10000, 0x9, 0x40, 0x5, 0x5}) bind$llc(r0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x70, 0x4, 0x8, 0x8, 0x1, 0x0, 0x8, 0x2000, 0x1, 0x1f, 0x2b, 0x4, 0x9, 0x3, 0x100000001, 0xfa, 0x2, 0x8000, 0x9, 0x4, 0x3, 0x2, 0x1, 0x1, 0x40, 0x7, 0x4, 0xaf, 0xff, 0x8001, 0xbe, 0x9, 0x9, 0xed, 0x100, 0xfff, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x10}, 0x10000, 0x1, 0x3, 0x9206137f0b5b0ad6, 0x50cd, 0x8, 0xffffffffffffff0a}, r1, 0x9, r1, 0xb) 22:59:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000700000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000001200000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:21 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x11f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @remote}, 0x10) userfaultfd(0x800) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 22:59:21 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x4003000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r2, &(0x7f0000000200)='/', 0x1) sendfile(r2, r2, &(0x7f0000000040), 0x7f) sendfile(r2, r2, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x0) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000a7b7d3d39edaf8ffffffffffffff84"], 0x2000, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000100)) [ 955.902697][T26021] device syz_tun entered promiscuous mode [ 955.923657][T26021] device syz_tun left promiscuous mode [ 955.959402][T26024] device syz_tun entered promiscuous mode [ 955.970786][T26021] device syz_tun left promiscuous mode 22:59:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000004800000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:22 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x1, 0x2}, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000200)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 22:59:22 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x120, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:22 executing program 0: r0 = geteuid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x10, 0x100000}, 0x16a) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r0, r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40085112, &(0x7f0000b18000)={{0x2000ffffff93}, {0xffffff90}}) 22:59:22 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x4400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000004c00000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:22 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x4003000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:22 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x20) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) shutdown(r0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xc8, 0x20000) getsockopt$inet_int(r1, 0x0, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @rand_addr=0x23d}], 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x9}, 0x1c) 22:59:22 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x121, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:22 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x7601000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 956.578677][T26052] binder_transaction: 9 callbacks suppressed [ 956.578697][T26052] binder: 26049:26052 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000006000000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 956.824195][T26070] binder: 26067:26070 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:23 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x122, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:23 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000580)={0x2, 0x0, @dev}, &(0x7f00000005c0)=0x10, 0x800) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000600)={0x0, 0x1000, "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"}, &(0x7f0000001640)=0x1008) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001680)={r2, 0x9}, 0xc) 22:59:23 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000080)=""/140) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000000), 0x4) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) 22:59:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000006800000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:23 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x7c01000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x16, 0x0, &(0x7f0000000080)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc300, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000040)={0xfff, 0xfffffffffffffffb}) [ 957.329428][T26085] binder: 26077:26085 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000006c00000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000100)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) 22:59:23 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x123, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:23 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x4040, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) [ 957.565791][T26103] binder: 26094:26103 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000007400000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x25, &(0x7f0000000040)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x9}, 0x1c) 22:59:24 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x124, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:24 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:59:24 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x8cffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 958.228934][T26127] binder: 26120:26127 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000007a00000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000001, 0x8, 0x33}) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000000440)) [ 958.273503][ T7839] binder_release_work: 8 callbacks suppressed [ 958.273514][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:59:24 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x125, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000003000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 958.382120][T26136] binder: 26134:26136 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 958.406190][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 958.412127][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 958.415605][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:59:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000005000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:24 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xccffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 958.451039][T26143] binder: 26142:26143 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 958.483430][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 [ 958.569261][T26151] binder: 26147:26151 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 958.610945][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:59:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:24 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x400) accept$unix(0xffffffffffffffff, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x889, 0x4, 0x9, 0x4, r3}, &(0x7f0000000280)=0x10) r4 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x759a}], 0x30}], 0x1, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r4, &(0x7f0000008a00)=[{{0x0, 0xffffffff08000000, &(0x7f0000000400)=[{&(0x7f0000000000)=""/48, 0x7ffff000}, {&(0x7f00000000c0)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 22:59:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000006000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:24 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x126, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:24 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xf5ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:24 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xccffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 959.155320][T26166] binder: 26160:26166 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000007000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:25 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x127, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 959.248155][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 [ 959.339470][T26181] binder: 26179:26181 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000012000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:25 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x7ff, 0x0) chroot(&(0x7f0000000240)='.//ile0\x00') symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, 0x0) lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x8, 0x1, [0x7]}, &(0x7f0000000300)=0xa) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={r3, 0x2b}, &(0x7f0000000600)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x0, 0x0, 0x0, [], [], [], 0x2, 0x2}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000007c0)) r4 = getpgid(0x0) sched_setattr(r4, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x3, 0x80000000003, 0x54ea, 0x40}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000380)={0x8}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) close(0xffffffffffffffff) write(r5, &(0x7f0000000400)="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", 0x200) sendfile(r5, r6, 0x0, 0x10000) [ 959.382309][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:59:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000020000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:25 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xf603000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 959.493692][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 [ 959.698112][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 [ 959.738466][ T26] audit: type=1800 audit(1553036365.612:106): pid=26195 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17997 res=0 [ 959.807857][ T26] audit: type=1804 audit(1553036365.662:107): pid=26191 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir463958507/syzkaller.LXTNa9/1744/file0/file0" dev="sda1" ino=17997 res=1 [ 959.836602][ T26] audit: type=1804 audit(1553036365.682:108): pid=26191 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir463958507/syzkaller.LXTNa9/1744/file0/file0" dev="sda1" ino=17997 res=1 22:59:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:26 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x400) accept$unix(0xffffffffffffffff, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x889, 0x4, 0x9, 0x4, r3}, &(0x7f0000000280)=0x10) r4 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x759a}], 0x30}], 0x1, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r4, &(0x7f0000008a00)=[{{0x0, 0xffffffff08000000, &(0x7f0000000400)=[{&(0x7f0000000000)=""/48, 0x7ffff000}, {&(0x7f00000000c0)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 22:59:26 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x128, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000048000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket(0x10, 0x80002, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000006011902170002000000000000000793"], 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492805, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'}) 22:59:26 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xf6ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000004c000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:26 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8540, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0xf0, 0x47, [], &(0x7f0000000040)=0x9}) msgctl$MSG_INFO(0x0, 0xd, &(0x7f0000000080)=""/103) [ 960.411714][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:59:26 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x129, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000060000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8000000004) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x71b, 0x100) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000002c0)=0x5c, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) setuid(r3) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x400, 0x70bd26}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x81) r4 = socket(0xa, 0x3, 0x8) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x6, 0x5, 0x2, 0x6, 0x1000, 0x4}, 0xffffffffffff7fff}, 0xa) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)={r5, r6}) prctl$PR_SET_FPEMU(0xa, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'bridge0\x00z\xe5\xff\xff\xff\x00'}) [ 960.577800][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000068000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:27 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r0, 0xa, 0xf) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000200)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0xfffffffffffffe1f, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x401, 0x401, 0x4, 0x3}, {0xfffffffffffffffd, 0xfffffffffffffff8, 0x6}]}, 0x10) poll(0x0, 0x0, 0x7fffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000040)={0x8000, 0x7fffffff, 0x2, 0x0, 0x0, [{r0, 0x0, 0x3ff}, {r3, 0x0, 0x7fffffff}]}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000002c0)=""/177, &(0x7f0000000100)=0xffffffffffffff60) 22:59:27 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xffffff7f00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:27 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x6, 0x40002) connect(r0, 0x0, 0x0) 22:59:27 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x12a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000006c000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000074000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:27 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100, 0x0) getsockname(r0, &(0x7f0000000080)=@generic, &(0x7f0000000100)=0x80) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040), 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x80200000000002, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) getpid() ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) mount$overlay(0x400000, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) r9 = getegid() lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000580)=[0xffffffffffffffff, 0xee00, 0xee01, r7, r6, 0xffffffffffffffff, 0x0]) r13 = getgid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getegid() fsetxattr$system_posix_acl(r2, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=r4, @ANYBLOB="040004000000000008000600", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="08000600", @ANYRES32=r12, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="ff000000", @ANYRES32=r14, @ANYBLOB="08000400", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000200000000002000060000000000"], 0x84, 0x1) chdir(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 22:59:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000007a000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:27 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x12b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000100000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 961.649206][T26285] binder_transaction: 8 callbacks suppressed [ 961.649227][T26285] binder: 26284:26285 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) write$cgroup_int(r4, &(0x7f0000000080)=0x1000, 0x12) r5 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x1, r5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000041000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x1c0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:59:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 961.798468][T26292] binder: 26290:26292 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:28 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x12c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:28 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000200000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x141401, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$inet(0x10, 0x10000000001, 0xc) fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000100)='/dev/kvm\x00', 0x9, 0x3) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07121dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)) sendmsg(r1, &(0x7f0000001700)={&(0x7f0000000140)=@rc={0x1f, {0x800, 0x0, 0xfffffffffffff460, 0x8, 0x80}, 0xfffffffffffffffb}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="bc71178b513d153728f5f41a0a09577c401bc05b5ebeb48d9e9bae4f9cc4bc0fbca7fc35a7c4f5992a3c7f386cbfa387d6e54e9e905052ac570c21ca8117422f2099f3ac8494337e55001dea5466cc59d64221e3d09d78940cc4c0fc6abfd97fee3216ed6110e8ef7ff9", 0x6a}, {&(0x7f0000000240)="ae73ba41ce0e5dfad488d7fabc1a85cdc01b29d121c3c0281bcfef5132c92bd3964cfcdd520940f429c3e23d7acbba97ac1150bbb8354c353bd0a3f4686a9f3d3075e5a28b399d90b4518aff008f7e5a592a6a781e177b912328a5ec9d7b421031956348a923", 0x66}, {&(0x7f00000002c0)="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", 0xfd}, {&(0x7f00000003c0)="20f913d9bf4c15c07437eef1509139c7484d23802a7936b18b2e5ba539c7a126e34ceab028c9b897822b427cfa2f8d2aa06fda9def371dea567c12e22025417494da7981e98f9d8b19d4cc0eaa1c42446dddb6e3b3aaeda2d65378f496b82f64b6c9eae0e8f65f25a4f6cd6b117a396c6fd9010d5dc06df810f775159c", 0x7d}], 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1268}, 0x80) 22:59:28 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000180)) fsetxattr$security_smack_entry(r2, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000007) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x42, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000140)={0x9, &(0x7f00000005c0)=[{0x9, 0x9, 0x7afd, 0x9}, {0x4, 0x1, 0x3, 0x80000001}, {0xfffffffffffffff9, 0x10000, 0x64, 0x4}, {0xc7c, 0x9, 0x7, 0x7}, {0x2, 0x0, 0x8, 0xe44}, {0x8, 0x7, 0x3, 0x3}, {0x8, 0x1, 0x27a, 0xc279}, {0x0, 0x5, 0x873f, 0x9}, {0x3f, 0x6, 0x0, 0x10000}]}, 0x10) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0) creat(&(0x7f0000000a00)='./bus\x00', 0x0) io_setup(0xb, &(0x7f0000000240)) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) r5 = creat(0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000015005884705b0cc550989bdc8423c61942e4c58ed7c35516b0bb1ba29dbc0db19f8c956ee494d300"], 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) [ 962.405660][T26315] binder: 26306:26315 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:28 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x12d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000300000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:28 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='!\xf6\x9eM\xa7\x17ku\x8aS\xd8\x9d\xb2\xc5\xc5K0\x83\f\xe3\xd7m\x01\x96\x98\xcbx\az\x8a\xc3\xf5\xf6\x16n\x16q\x87\xdb\xe4\xb0%s)\xab{m\xdb\xb8\x96p\xad\xabD\xd8\xbdYCE\xc5\x11\x94\xb2k P!\fBY\xc6\xdfJ\x02l^(\xed\xa3xGGU\xae.\x05X2fV\aP\x8d\xcdJ\xc1%\x13=\x8e\xfaZ\xfb\x85\x1d\xae4\xf1\x9f\x06\xc4q\xf6\x05\xd6\x8d\x87\xf7\aw\xb7Y\xa9`\xda\xaf\xcaR\x84\xa4M\x85\x00\xfdD(\xac\x85\xc0\xb3\x87\b\x9cN\xae\'\xc9\xc4\xbf\xde\xf9\x9c\x83b\x97W\xf1[\xa1I\x8f\xf8\x87\x03\x9a\xe4\xdf\x13?\xa84\xf1=,x\xad\x95\x8aF\xdcC\xdf\xa2\xca\"o\x13\xc7n5\xe7\x1c>\x84\xaa\xbe>q\xd9\\\xef\x0e\x10\x8a&\x1dq\x8er\x18\xfa\xc1r\xea\xd1\xbcM\xa3\x10(\xf8\xf5\x9d|\xfd\xa8{\xe5\x88\f\xbe}\xa9\xfe~\t\xa6\xabn\xbf#\x9fXm\xcc\x058\xc1\x93\xbe\xb8@2\xca\x8em\xee\x12\x06\xb1\x89c\x1a\xc4\xae\xfb\x16+7ws\x0fb\xe8+&\x03e\x97U\x00', 0x1ff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) [ 962.510088][ T2489] print_req_error: I/O error, dev loop0, sector 128 flags 801 [ 962.518546][ T2489] Buffer I/O error on dev loop0, logical block 16, lost async page write 22:59:28 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 962.571578][ T2489] print_req_error: I/O error, dev loop0, sector 136 flags 801 [ 962.579311][ T2489] Buffer I/O error on dev loop0, logical block 17, lost async page write [ 962.640619][ T2489] print_req_error: I/O error, dev loop0, sector 128 flags 801 [ 962.648404][ T2489] Buffer I/O error on dev loop0, logical block 16, lost async page write 22:59:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:28 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x12e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 962.679645][T26333] binder: 26331:26333 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 962.698065][ T2489] print_req_error: I/O error, dev loop0, sector 136 flags 801 [ 962.705974][ T2489] Buffer I/O error on dev loop0, logical block 17, lost async page write 22:59:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000400000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:28 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000180)) fsetxattr$security_smack_entry(r2, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000007) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x42, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000140)={0x9, &(0x7f00000005c0)=[{0x9, 0x9, 0x7afd, 0x9}, {0x4, 0x1, 0x3, 0x80000001}, {0xfffffffffffffff9, 0x10000, 0x64, 0x4}, {0xc7c, 0x9, 0x7, 0x7}, {0x2, 0x0, 0x8, 0xe44}, {0x8, 0x7, 0x3, 0x3}, {0x8, 0x1, 0x27a, 0xc279}, {0x0, 0x5, 0x873f, 0x9}, {0x3f, 0x6, 0x0, 0x10000}]}, 0x10) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0) creat(&(0x7f0000000a00)='./bus\x00', 0x0) io_setup(0xb, &(0x7f0000000240)) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) r5 = creat(0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000015005884705b0cc550989bdc8423c61942e4c58ed7c35516b0bb1ba29dbc0db19f8c956ee494d300"], 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) 22:59:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e80)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x80, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000700)=0xe8) r3 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000740)={{{@in=@loopback, @in6=@loopback, 0x4e21, 0x1, 0x4e23, 0x2, 0xa, 0xa0, 0x0, 0x6c, r2, r3}, {0x991c, 0x3, 0x9, 0x0, 0x5a5, 0x1, 0xd6a, 0x5}, {0x1ff, 0x280, 0x0, 0x100000001}, 0x6, 0x6e6bbc, 0x0, 0x0, 0x1, 0x2}, {{@in=@empty, 0x4d2, 0x6f}, 0xa, @in=@empty, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0xa4}}, 0xe8) socket$bt_hidp(0x1f, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = inotify_init1(0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x7, @empty, 0x3}, @in6={0xa, 0x4e20, 0x3, @mcast2, 0x9}], 0x38) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) fcntl$getownex(r5, 0x11, &(0x7f000045fff8)) openat$cgroup_procs(r0, &(0x7f0000000f80)='tasks\x00\xc8\x01l]\xf3{\xcdwP\x98\tJbZ\x0e\xd5u_\xec\x95\x06QU\x1b\xfa', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in6, @in=@multicast1}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) fstat(r4, &(0x7f0000000200)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r6, &(0x7f0000001ec0)=[{{&(0x7f0000000080)=@nfc={0x27, 0x1411}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000001b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0xf, &(0x7f0000001e40)}}], 0x2, 0x0) 22:59:28 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:28 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x12f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000500000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 963.092917][T26355] binder: 26350:26355 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:29 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x130, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ffe, 0xfffffffffffffffc}, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="f1e2805d02cb5da6272b17f1cd42d8728d60c659bbcb6973c861cfc00f2a7207f2ef7750a7a5c6803557", @ANYRESHEX=r2]], 0x1}}, 0x8800) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), 0x10) [ 963.242546][T26367] binder: 26364:26367 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000600000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 963.303575][ T2490] print_req_error: I/O error, dev loop0, sector 128 flags 801 [ 963.311279][ T2490] Buffer I/O error on dev loop0, logical block 16, lost async page write [ 963.328376][ T7839] binder_release_work: 9 callbacks suppressed [ 963.328385][ T7839] binder: undelivered TRANSACTION_ERROR: 29201 22:59:29 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 963.415494][T26378] binder: 26376:26378 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 963.491483][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:29 executing program 0: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$getflags(r0, 0x40b) 22:59:29 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x131, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000700000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:29 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000180)) fsetxattr$security_smack_entry(r2, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000007) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x42, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000140)={0x9, &(0x7f00000005c0)=[{0x9, 0x9, 0x7afd, 0x9}, {0x4, 0x1, 0x3, 0x80000001}, {0xfffffffffffffff9, 0x10000, 0x64, 0x4}, {0xc7c, 0x9, 0x7, 0x7}, {0x2, 0x0, 0x8, 0xe44}, {0x8, 0x7, 0x3, 0x3}, {0x8, 0x1, 0x27a, 0xc279}, {0x0, 0x5, 0x873f, 0x9}, {0x3f, 0x6, 0x0, 0x10000}]}, 0x10) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0) creat(&(0x7f0000000a00)='./bus\x00', 0x0) io_setup(0xb, &(0x7f0000000240)) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) r5 = creat(0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000015005884705b0cc550989bdc8423c61942e4c58ed7c35516b0bb1ba29dbc0db19f8c956ee494d300"], 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) 22:59:29 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 963.721322][T26394] binder: 26392:26394 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:29 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000080)=0x6fae, &(0x7f00000000c0)=0x4) shmctl$SHM_LOCK(0x0, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$ppp(r2, &(0x7f0000000040)='b', 0x1) clock_nanosleep(0x4, 0x1, &(0x7f0000000100)={0x77359400}, 0x0) shmget(0x1, 0xf000, 0x20, &(0x7f0000ff0000/0xf000)=nil) 22:59:29 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x132, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:29 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000001200000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 963.911009][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1a823d8d, 0x0) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f00000001c0)={0x3, 0x8, 0x9, 0x9, 0x6, 0x51}) syz_extract_tcp_res(&(0x7f0000000400), 0x401, 0x80) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000040), 0x4) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080)=0x1f, 0x4) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000240), 0x4) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x7fc, 0x0) syz_open_dev$sndmidi(&(0x7f00000003c0)='/dev/snd/midiC#D#\x00', 0x7f, 0x8000) write$P9_RATTACH(r3, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x71, 0x1, 0x8}}, 0x14) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r5, 0x700, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x81}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x40800) 22:59:29 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x133, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 964.064727][T26418] binder: 26415:26418 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 964.086243][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 964.092062][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 964.166238][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000002000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:30 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3}) 22:59:30 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x134, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:30 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:30 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x3f, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1ff, 0x4000) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x720) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x3001}}) 22:59:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x40, 0x20000) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000180)=0x6bf07fae) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000080)=""/30) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) fsetxattr$security_capability(r2, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x7f, 0x400}, {0x9, 0x80000001}]}, 0x14, 0x2) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 964.619658][T26440] binder: 26430:26440 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:30 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x135, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x800) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x7}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r1, 0x8001}, &(0x7f0000000240)=0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x800876c9) 22:59:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000004800000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 964.749119][T26452] input: syz0 as /devices/virtual/input/input13 [ 964.769065][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:30 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x136, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 964.824407][T26458] input: syz0 as /devices/virtual/input/input14 22:59:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000004c00000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 964.891401][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 964.993693][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:31 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r0, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 22:59:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x40, 0x20000) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000180)=0x6bf07fae) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000080)=""/30) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) fsetxattr$security_capability(r2, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x7f, 0x400}, {0x9, 0x80000001}]}, 0x14, 0x2) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:59:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000006000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:31 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x137, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 965.489091][T26482] input: syz0 as /devices/virtual/input/input15 22:59:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000006800000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 965.530063][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:31 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x138, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x40, 0x20000) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000180)=0x6bf07fae) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000080)=""/30) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) fsetxattr$security_capability(r2, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x7f, 0x400}, {0x9, 0x80000001}]}, 0x14, 0x2) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:59:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000006c00000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:31 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 965.643266][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000007400000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 965.716974][T26498] input: syz0 as /devices/virtual/input/input16 [ 965.734838][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:32 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x139, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000007a00000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x40, 0x20000) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000180)=0x6bf07fae) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000080)=""/30) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) fsetxattr$security_capability(r2, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x7f, 0x400}, {0x9, 0x80000001}]}, 0x14, 0x2) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:59:32 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x22}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:32 executing program 0: io_setup(0xe2, &(0x7f0000000000)=0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e) r3 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) io_submit(r0, 0x2, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000040)="c1f00d15cac977efc44fe369a3e10f40b9a7660f1d9412c9df5feb8deacc99e972dfa9899c5404d15b5c1ccad916bdffb1cc5981d2dfeacf8a432e2dc2c903d76c435684808f3754bc0f09d359dd", 0x4e, 0x7}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x8000, r2, &(0x7f00000001c0)="96a4a735d164e16a551c281af53b4054f7ccd04243a867f5161e2238df746107cddf0d177f794394c31e6729a95708cdcda5db8061fc29c5d265828e3163441598b951c0e40b497e73fbc7cc6c0182a98debb4a6e54a3c71ea4dab2674cc59a76ce7fe578f2dfa17215c11e41a33162babe39c37170c31d1ea4540f6ae3bdea20f44e62177f3950111ae59fe38bca93b9e0d47833a2a1dc23266fd25c307ac6f20", 0xa1, 0x4, 0x0, 0x2, r3}]) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x1e) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x659) uselib(&(0x7f0000000340)='./file0\x00') mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000003c0)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x80}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000480)={r5, 0x1000, "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"}, &(0x7f00000014c0)=0x1008) pread64(r2, &(0x7f0000001500)=""/85, 0x55, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000001580)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={r4, 0x50, &(0x7f0000001700)}, 0x10) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f00000017c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast]}) fcntl$getownex(r3, 0x10, &(0x7f0000001840)) prctl$PR_SET_PDEATHSIG(0x1, 0x101) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000001880)={r6, 0x40}, 0x8) poll(&(0x7f00000018c0)=[{r3, 0x20ed}, {r2, 0x520}, {r1}, {r2, 0x88}, {r3, 0x20}, {r2, 0x1400}, {r1, 0x4210}], 0x7, 0x6) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000001900)={0x609, 0x4, 0x3, 0x0, 0x0, [{r1, 0x0, 0x2}, {r2, 0x0, 0x2}, {r4, 0x0, 0x8}]}) arch_prctl$ARCH_GET_CPUID(0x1011) write$binfmt_elf32(r2, &(0x7f0000001980)={{0x7f, 0x45, 0x4c, 0x46, 0x7fffffff, 0x4, 0x772, 0xff, 0x5, 0x3, 0x3e, 0x8001, 0x29e, 0x38, 0x34c, 0xe0, 0x1f, 0x20, 0x1, 0xffff, 0x7, 0x9}, [{0x1, 0xfffffffffffffff9, 0x7f5, 0x1e0, 0x4, 0x5, 0xfffffffffffffff9, 0x8}], "0f1a83b67790c3b9f97a3e33bead83b5bfa33589a596364d93dee1f7bac5f44402af9c357c1c9ffb47e56d3b13cfad177b83c6e1ea2377178dabb083874498d55fd8220dac2c0965fd8b2d4f9f3fd823c450691d15facb10699f84089c32bd6df5fac472568f767f0125691dcd83da90882b1db01d61b0ccd0cc380fc8ce43a0afd7448d5975cc4f70210579a02ac3e1237509cbabb6dd469dd3dfee3b5439daa8ec64384f954a268142bcde7601ab889d31eec7a9de563432bf1f840fcb0487793d88f68a8cdab61d51d0bf1cb84afa8304008cadb29052cd27ea02b823d05ee37471", [[], [], [], [], [], [], [], [], [], []]}, 0xb3b) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f00000024c0)={{0xa, 0x4e24, 0x2, @loopback, 0x22d1}, {0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, 0x3, [0x3f, 0x20, 0xe0, 0x2, 0x2, 0x3, 0xd2ac, 0xffff]}, 0x5c) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000002540)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) gettid() setxattr$security_evm(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)='security.evm\x00', &(0x7f0000002600)=@sha1={0x1, "c73b6ef15fd84dd4f29641fdebbd91f2f0e1c00c"}, 0x15, 0x3) ioctl$TCSETA(r3, 0x5406, &(0x7f0000002640)={0x0, 0x2, 0x0, 0x0, 0xd, 0x1, 0x100, 0x2, 0x2, 0x400}) semget(0x0, 0x6, 0x400) [ 966.408540][T26523] input: syz0 as /devices/virtual/input/input17 22:59:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000fffffdfd00000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:32 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x13a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x40, 0x20000) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000180)=0x6bf07fae) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000080)=""/30) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) fsetxattr$security_capability(r2, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x7f, 0x400}, {0x9, 0x80000001}]}, 0x14, 0x2) 22:59:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000fdfdffff00000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:32 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x44}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:32 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) fcntl$setstatus(r0, 0x4, 0x403fd) 22:59:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000001f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 966.672151][T26543] input: syz0 as /devices/virtual/input/input18 22:59:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x84e20, @rand_addr=0x333}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="fd", 0x1}], 0x1}, 0x8040) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x4008000, 0x0, 0x0) 22:59:32 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x13b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x40, 0x20000) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000180)=0x6bf07fae) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000080)=""/30) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 966.803897][T26556] binder_transaction: 9 callbacks suppressed [ 966.803918][T26556] binder: 26555:26556 transaction failed 29201/-22, size 7586835780216029184--7349874591868649443 line 3147 [ 966.853535][T26559] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 966.922824][T26565] input: syz0 as /devices/virtual/input/input19 22:59:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:33 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x126}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x41) 22:59:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000002f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:33 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x13c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x40, 0x20000) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000180)=0x6bf07fae) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000080)=""/30) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 967.278538][T26573] binder: 26572:26573 transaction failed 29201/-22, size 7586835780232806400--7349874591868649443 line 3147 [ 967.331426][T26583] input: syz0 as /devices/virtual/input/input20 22:59:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000003f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:33 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x13d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x40, 0x20000) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000180)=0x6bf07fae) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000080)=""/30) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 967.464179][T26598] binder: 26595:26598 transaction failed 29201/-22, size 7586835780249583616--7349874591868649443 line 3147 22:59:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000004f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:33 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x176}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 967.596891][T26605] input: syz0 as /devices/virtual/input/input21 [ 967.643280][T26610] binder: 26609:26610 transaction failed 29201/-22, size 7586835780266360832--7349874591868649443 line 3147 [ 967.713014][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:59:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:34 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x13e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x40, 0x20000) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000180)=0x6bf07fae) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000080)=""/30) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000005f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:34 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x17c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 968.233249][T26625] input: syz0 as /devices/virtual/input/input22 [ 968.289233][T26623] binder: 26621:26623 transaction failed 29201/-22, size 7586835780283138048--7349874591868649443 line 3147 22:59:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x40, 0x20000) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000180)=0x6bf07fae) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 968.492047][T26636] input: syz0 as /devices/virtual/input/input23 22:59:34 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x13f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000006f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 968.612015][ T5] binder_release_work: 8 callbacks suppressed [ 968.612025][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:34 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:34 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x140, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x40, 0x20000) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000180)=0x6bf07fae) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 968.722534][T26647] binder: 26645:26647 transaction failed 29201/-22, size 7586835780299915264--7349874591868649443 line 3147 22:59:34 executing program 0: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400002200006008, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = msgget$private(0x0, 0x40) msgctl$IPC_RMID(r1, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKBSZGET(r2, 0x127a, &(0x7f0000000040)) [ 968.812700][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 968.858370][T26654] input: syz0 as /devices/virtual/input/input24 22:59:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000007f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:34 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x340}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:34 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8000000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000340)={r1, 0xcf}, &(0x7f0000000380)=0x8) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x1, 0x2}, [{0x2, 0x6, r3}], {0x4, 0x2}, [{0x8, 0x5, r4}], {0x10, 0x7}}, 0x34, 0x3) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) 22:59:34 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x141, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x40, 0x20000) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000180)=0x6bf07fae) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 969.169410][T26675] binder: 26670:26675 transaction failed 29201/-22, size 7586835780316692480--7349874591868649443 line 3147 22:59:35 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x3000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa6) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000000c0)=0x6) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 22:59:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000012f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x40, 0x20000) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000180)=0x6bf07fae) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:35 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x142, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 969.281913][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 [ 969.391541][T26694] binder: 26689:26694 transaction failed 29201/-22, size 7586835780501241856--7349874591868649443 line 3147 22:59:35 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x3f6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:35 executing program 0: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='io.max\x00\xe3\xc6\xa1\xbc\x16\x94p`R\xfbqcm\xab\x87\x19\x86\x983uoG\x18\xd4\xc8*R6\x84\xfb\xfbU0xffffffffffffffff, 0xffffffffffffffff}) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000280)={0x9fd9}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x538, 0x0, 0x238, 0x368, 0x0, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, &(0x7f0000000180), {[{{@uncond, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x7}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x3f, 0xf}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x0, 0x0, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x78c8, 0xffffffffffffffe1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e20}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xa}}]}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@rand_addr=0xffffffff, @loopback, 0x0, 0xffffff00, 'erspan0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x1d, 0x2, 0x40}, 0x0, 0x98, 0xe0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', 0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x598) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000b80)) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f0000000a40)={0x0}}, 0x11) [ 969.465856][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000020f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:35 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x143, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x40, 0x20000) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000180)=0x6bf07fae) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = epoll_create1(0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xf2, 0x5, 0x2, "b0010f23bcb7ab6e76a1e9df0fc310f0", "50a0bc37ebc04ec9c1d4e4ef75b182dabb9ddaa45d95f94fb8030f75210d83ab934a0947bac7a745ed30ffb35c334564210a4743e34ce41e72b2b6e3d4111bb772d2eded71cf65d165f56cdfd4d67a5d4b28bc6d996c7a956da8e00a4269bb316317ffad5758078ab3532821a2fbfa71c6e7704c933fe992663ff5e29a88aedd48f4bfd9e27f997aa2d82c371c78081392df07e7a4a4e583b8acfb5383ed74033e3db0e4a126ab9c0f6904d9c373f48b4b79689fef63e477bb9316b01adc8fd8816c36981b2214e0267801cb451a094cdf3c9a501124fef51a65a8d5a7"}, 0xf2, 0x3) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) dup3(r3, r2, 0x0) 22:59:35 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 970.053261][T26718] binder: 26713:26718 transaction failed 29201/-22, size 7586835780736122880--7349874591868649443 line 3147 22:59:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000140)=0xc) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x100, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$packet_buf(r4, 0x111, 0x5, 0x0, &(0x7f0000000100)) 22:59:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x40, 0x20000) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000048f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:36 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x144, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 970.210080][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:36 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 970.309587][T26740] input: syz0 as /devices/virtual/input/input28 [ 970.325416][T26739] binder: 26738:26739 transaction failed 29201/-22, size 7586835781407211520--7349874591868649443 line 3147 22:59:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000004cf2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 970.369853][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 [ 970.494766][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:36 executing program 0: fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e23, @dev}}, 0xfffffffffffff02a, 0x7fff}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x0, 0x320]}, 0x2c) lsetxattr$security_smack_entry(0x0, &(0x7f0000000240)='security.SMACK64IPIN\x00', 0x0, 0x0, 0x0) getgroups(0x7, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other='allow_other'}], [{@obj_user={'obj_user', 0x3d, 'proc!}@cpuset'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@seclabel='seclabel'}, {@obj_user={'obj_user', 0x3d, '/proc/self/attr/current\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/proc/self/attr/current\x00'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_emit_ethernet(0x1, &(0x7f0000000540)=ANY=[@ANYPTR64], 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:59:36 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x145, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000060f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:36 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 970.987711][T26763] input: syz0 as /devices/virtual/input/input29 22:59:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000068f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 971.058625][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:37 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x2, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000180)=0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f00000000c0)={0x6206, 0x6}) r2 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x3f, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0305602, &(0x7f0000000000)={0x0, 0xe7}) 22:59:37 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x146, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000006cf2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 971.221196][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:37 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000340)='/dev/bus/usb/00#/00#\x00', 0x530d, 0x2400000000000801) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0xcf}, &(0x7f0000000400)=0x8) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x6, 0x1, 0x3, 0x0, 0x67c16a8f}, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200, 0x0) recvfrom$unix(r1, &(0x7f0000001400)=""/84, 0x54, 0x40000000, &(0x7f0000001480)=@abs={0x0, 0x0, 0x4e24}, 0x6e) openat$null(0xffffffffffffff9c, 0x0, 0x80018538d, 0x0) get_mempolicy(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000500)) clone(0x1006210f, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000004c0)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r2, 0xffffffffffffffb8, &(0x7f0000000080)) r3 = request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe) preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000001140)=""/179, 0xb3}, {&(0x7f0000001200)=""/198, 0xc6}, {&(0x7f0000001300)=""/77, 0x4d}, {&(0x7f0000001380)=""/5, 0x5}], 0x4, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r3, 0x6, 0x400}, 0x0, &(0x7f0000000140)="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", 0x0) [ 971.360484][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:37 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000074f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:37 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x147, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:37 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000400)={0x0, 0xfffffffffffffffc}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000580)={0x0, 0x5}, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r2 = semget(0x3, 0x2, 0x440) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x7fffffff]) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x5}, 0x8) [ 971.869613][T26813] binder_transaction: 4 callbacks suppressed [ 971.869640][T26813] binder: 26812:26813 transaction failed 29201/-22, size 7586835782145409024--7349874591868649443 line 3147 22:59:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000007af2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:37 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x148, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:37 executing program 0: mmap(&(0x7f0000f83000/0x3000)=nil, 0x3000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x4, 0x3, 0x0, 0x3, 0x17, 0xffffffffffffffff, 0x10001, 0x8, 0x3, 0x5c, 0x3, 0xffff}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x4, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000416000/0x3000)=nil, 0x3000, 0x0, 0x32, r0, 0x0) close(r0) 22:59:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:38 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 972.064615][T26834] binder: 26831:26834 transaction failed 29201/-22, size 7586835782246072320--7349874591868649443 line 3147 22:59:38 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000000)={0x6, "a40194f4651c73071371e8ad3950182014c3f2805fc6c777fc01e5aad88dd7fb"}) r1 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@ax25={{}, [@rose, @remote, @null, @default, @remote, @null, @null, @bcast]}, &(0x7f00000000c0)=0x80) sendto$rxrpc(r1, &(0x7f0000000100)="1b645ef0ef11807e7af75c622332fd5ecdf8b16d007b4e3a9c715fb7500ed04fa683247926af010638271f4921385228335eb21c23e94f674f4d6dc5fbb51fb7a8c1feee28b6de7188336665e77a2ba76e5bebdded45a93ffaf2c23006364b2657b0c85370e40b7f59f4eaf6b0ec9d0526b972d4e5a5d155b42382a9db9a4bf64c63bbcea81e46b439841fe52d370819102b104ea3006af95d759dd46b678f8d7a19ad2b4613d7779c02432cc6a0424740edd046dbb346f154ef8cdfcdfb4e6191c839e2773e9161e143d96f8450d6f979c6d36d4b01e2a5aad7868e2f6b84bd11c577fb991dcb5e0d4147f8512482", 0xef, 0x20000000, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) sched_getattr(r2, &(0x7f0000000380), 0x30, 0x73114f846c31836e) prctl$PR_SET_FPEXC(0xc, 0x83) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000240)={0x0, @reserved}) 22:59:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000fffffdfdf2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:38 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x149, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:38 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ptrace$pokeuser(0x6, r0, 0x3ff, 0x80000000) r1 = getpgid(0x0) capget(&(0x7f0000000280)={0x20080522, r1}, &(0x7f00000003c0)) waitid(0x0, r1, 0x0, 0xc100000d, 0x0) 22:59:38 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 22:59:38 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x2200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 972.743436][T26867] binder: 26854:26867 transaction failed 29201/-22, size 7586835784460533759--7349874591868649443 line 3147 22:59:38 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet6(r0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) dup(r0) r1 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x10, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) 22:59:38 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x14a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000002000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:38 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 22:59:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000003000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 972.964594][T26884] binder: 26880:26884 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:38 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x14b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 973.088144][T26891] binder: 26888:26891 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:39 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x2601}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:39 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 22:59:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000004000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:39 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x14c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:39 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000a40)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0x10, "737f5d107d588dbea6072274749c8383"}, 0x0) [ 973.623852][T26900] binder: 26899:26900 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:39 executing program 0: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)={@multicast2, @local, 0x0, 0x2, [@remote, @empty]}, 0x18) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000380)={@multicast2, @local}, 0xc) 22:59:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000005000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 973.693616][ T7844] binder_release_work: 5 callbacks suppressed [ 973.693626][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:39 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x14d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:39 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000240)={0x8001009, 0x5, 0x2}) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r1, r3, &(0x7f0000000000), 0x800000bf) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) 22:59:39 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x3f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 973.812827][T26924] binder: 26923:26924 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 973.932641][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000006000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:40 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x14e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:40 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000100)) write$cgroup_type(0xffffffffffffffff, 0x0, 0xfffffffffffffd30) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) stat(&(0x7f00000000c0)='./bus\x00', &(0x7f00000004c0)) fstat(0xffffffffffffffff, 0x0) fcntl$notify(r1, 0x402, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000700080000ee8b08b7960ff7aa6e211c7700fdff863809aa0063b8f24252b1d85cbf000000000038f70f653f0ffb09f0d536b564df5e0a9efd50fe203534da91b5b9fb501e1ac4bfa3841f9d63e232b9b2500fb1d96033ccfdff066428eb4c319a6d03"], 0x6b) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) 22:59:40 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 974.467230][T26959] binder: 26953:26959 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:40 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x14f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000007000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:40 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x4003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 974.668533][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:40 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x150, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 974.803421][T26984] binder: 26983:26984 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 974.882556][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000012000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:41 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x4400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:41 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x151, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 975.353830][T27004] binder: 27000:27004 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x7) r5 = socket(0x10, 0x80002, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) ioctl$int_out(r1, 0x2, &(0x7f00000002c0)) write(r5, &(0x7f0000000080)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) write$P9_RGETATTR(r2, &(0x7f00000004c0)={0xa0, 0x19, 0x1, {0x0, {0x10, 0x1, 0x6}, 0x10, r6, 0x0, 0x3, 0xfff, 0x3, 0x100, 0x80, 0x8, 0x1c000000000000, 0xe0f5, 0x7fff, 0x3ff, 0xffffffff, 0xffffffff, 0xfffffffffffffffd, 0xffffffffffff0000, 0x7}}, 0xa0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r5, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000100)) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$binfmt_misc(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="ef4af9b525a49460da9a04000000"], 0xe) sendfile(r1, r4, &(0x7f0000000140), 0x8fff) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000280)) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000580)=""/228) 22:59:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000048000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 975.439719][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:41 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x152, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:41 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x7601}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000004c000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 975.609206][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000060000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 975.730019][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 [ 975.845882][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:42 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x153, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000068000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:42 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x7c01}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 976.356988][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:44 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x2}) 22:59:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000006c000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:44 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x154, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:44 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0xf603}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:44 executing program 0: [ 978.753072][T27078] binder_transaction: 4 callbacks suppressed [ 978.753092][T27078] binder: 27068:27078 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000074000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 978.869663][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:44 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x155, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:44 executing program 0: 22:59:44 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 978.997250][T27099] binder: 27093:27099 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:44 executing program 0: 22:59:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000007a000000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 979.102229][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:45 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x156, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:45 executing program 0: [ 979.273613][T27121] binder: 27112:27121 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 979.350225][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:45 executing program 0: 22:59:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000030000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:45 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x157, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:45 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 979.544114][T27133] binder: 27129:27133 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) 22:59:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000050000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 979.651137][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:45 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x158, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:45 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 979.779988][T27151] binder: 27146:27151 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 979.869550][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 [ 979.937226][T27165] input: syz0 as /devices/virtual/input/input42 22:59:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(0xffffffffffffffff, 0x1) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:46 executing program 0: 22:59:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000060000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:46 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x159, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:46 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:46 executing program 0: [ 980.521512][T27179] binder: 27176:27179 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 980.535397][T27182] input: syz0 as /devices/virtual/input/input43 22:59:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000070000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:46 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x15a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 980.635878][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:46 executing program 0: 22:59:46 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x80ffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 980.814744][T27198] input: syz0 as /devices/virtual/input/input44 [ 980.833780][T27197] binder: 27192:27197 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 980.886239][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(0xffffffffffffffff, 0x1) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:47 executing program 0: 22:59:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000120000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:47 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x15b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:47 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:47 executing program 0: [ 981.422060][T27215] input: syz0 as /devices/virtual/input/input45 [ 981.430479][T27218] binder: 27209:27218 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000200000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:47 executing program 0: [ 981.527034][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:47 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x15c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000480000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 981.607666][T27229] binder: 27227:27229 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 981.645449][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 981.799483][T27240] input: syz0 as /devices/virtual/input/input46 [ 981.819976][T27241] binder: 27238:27241 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 981.866293][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(0xffffffffffffffff, 0x1) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:48 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:48 executing program 0: 22:59:48 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x15d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000004c0000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:48 executing program 0: [ 982.335218][T27254] input: syz0 as /devices/virtual/input/input47 22:59:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000600000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:48 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x15e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 22:59:48 executing program 0: 22:59:48 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 982.588400][T27272] input: syz0 as /devices/virtual/input/input48 22:59:49 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000680000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:49 executing program 0: 22:59:49 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x15f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 22:59:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:49 executing program 0: [ 983.302660][T27291] input: syz0 as /devices/virtual/input/input49 22:59:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000006c0000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:49 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x160, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:49 executing program 0: 22:59:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 22:59:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:49 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x5000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000740000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:49 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x161, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 983.697624][T27320] input: syz0 as /devices/virtual/input/input50 22:59:49 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000001c0)) [ 983.777130][T27326] binder_transaction: 4 callbacks suppressed [ 983.777150][T27326] binder: 27319:27326 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7, @empty, 0x19}, {0xa, 0x4e20, 0x1000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, 0xffffffffffffffff, 0xf6}}, 0x48) 22:59:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000007a0000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 983.950583][ T7844] binder_release_work: 4 callbacks suppressed [ 983.950593][ T7844] binder: undelivered TRANSACTION_ERROR: 29201 22:59:49 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x6000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:49 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x162, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 984.086339][T27342] binder: 27338:27342 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) 22:59:50 executing program 0: write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) io_setup(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9) 22:59:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000001000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:50 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x163, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 984.300851][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:50 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000a40)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000180)={&(0x7f00000002c0)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240), 0x0) 22:59:50 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 984.440957][T27364] binder: 27362:27364 transaction failed 29201/-22, size 7586835780199251969--7349874591868649443 line 3147 22:59:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000002000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:50 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x164, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 984.599593][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:50 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 984.717717][T27381] binder: 27380:27381 transaction failed 29201/-22, size 7586835780199251970--7349874591868649443 line 3147 22:59:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000003000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:50 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0xc000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 984.803500][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:50 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x165, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 984.905592][T27392] binder: 27391:27392 transaction failed 29201/-22, size 7586835780199251971--7349874591868649443 line 3147 [ 984.985011][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000004000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:51 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:51 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x166, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 985.208681][T27402] binder: 27400:27402 transaction failed 29201/-22, size 7586835780199251972--7349874591868649443 line 3147 22:59:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000005000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 985.274592][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:51 executing program 3 (fault-call:4 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:51 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:51 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x167, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000006000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 985.359145][T27412] binder: 27411:27412 transaction failed 29201/-22, size 7586835780199251973--7349874591868649443 line 3147 [ 985.389594][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x126, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[]}}, 0x0) [ 985.486884][T27418] binder: 27417:27418 transaction failed 29201/-22, size 7586835780199251974--7349874591868649443 line 3147 [ 985.499616][T27424] input: syz0 as /devices/virtual/input/input51 [ 985.529139][T27424] FAULT_INJECTION: forcing a failure. [ 985.529139][T27424] name failslab, interval 1, probability 0, space 0, times 0 [ 985.571881][T27424] CPU: 0 PID: 27424 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 985.580965][T27424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.591040][T27424] Call Trace: [ 985.594357][T27424] dump_stack+0x172/0x1f0 [ 985.598706][T27424] should_fail.cold+0xa/0x15 [ 985.603310][T27424] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 985.609131][T27424] ? ___might_sleep+0x163/0x280 [ 985.613992][T27424] __should_failslab+0x121/0x190 [ 985.618942][T27424] should_failslab+0x9/0x14 [ 985.623481][T27424] __kmalloc_track_caller+0x2d8/0x740 [ 985.628865][T27424] ? pointer+0x910/0x910 [ 985.633126][T27424] ? __lock_acquire+0x548/0x3fb0 [ 985.638073][T27424] ? kasprintf+0xbb/0xf0 [ 985.642322][T27424] kvasprintf+0xc8/0x170 [ 985.646575][T27424] ? bust_spinlocks+0xe0/0xe0 [ 985.651277][T27424] ? debug_check_no_obj_freed+0x211/0x444 [ 985.655023][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 [ 985.657014][T27424] kasprintf+0xbb/0xf0 [ 985.657031][T27424] ? kvasprintf_const+0x190/0x190 22:59:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0xa, 0x80005, 0x0) ioctl(r1, 0x20000000008912, &(0x7f0000000240)="0a5c2d0240316285717070") r2 = socket(0x10, 0x802, 0x0) sendto(r2, &(0x7f0000000180)="120000001200e7efd4ca8006e1d7580c80b7", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x8}, {&(0x7f00000000c0)=""/85, 0x4}, {&(0x7f0000000fc0)=""/4096, 0x1064}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x15}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f6, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0xff}}) [ 985.657064][T27424] ? input_default_getkeycode+0x520/0x520 [ 985.657078][T27424] input_devnode+0x4c/0x90 [ 985.657096][T27424] device_get_devnode+0x175/0x2e0 [ 985.657110][T27424] ? refcount_sub_and_test_checked+0x154/0x200 [ 985.657129][T27424] devtmpfs_delete_node+0xaa/0x1a0 [ 985.657143][T27424] ? devtmpfs_create_node+0x250/0x250 [ 985.657161][T27424] ? __device_link_free_srcu+0x120/0x120 [ 985.657176][T27424] ? refcount_dec_and_test_checked+0x1b/0x20 [ 985.657193][T27424] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 985.657217][T27424] ? kobject_put+0x84/0xe0 [ 985.687583][T27424] ? __device_link_free_srcu+0x120/0x120 [ 985.687601][T27424] ? klist_children_put+0x4a/0x60 [ 985.687616][T27424] ? klist_put+0xdc/0x180 [ 985.687635][T27424] device_del+0x8b4/0xc40 [ 985.687657][T27424] ? __device_links_no_driver+0x250/0x250 [ 985.687673][T27424] ? mark_held_locks+0xa4/0xf0 [ 985.687691][T27424] ? _raw_spin_unlock_irq+0x28/0x90 [ 985.687709][T27424] ? __input_unregister_device+0x153/0x4a0 [ 985.687723][T27424] ? _raw_spin_unlock_irq+0x28/0x90 [ 985.687745][T27424] cdev_device_del+0x1a/0x80 [ 985.687762][T27424] evdev_disconnect+0x42/0xb0 [ 985.687783][T27424] __input_unregister_device+0x200/0x4a0 [ 985.699084][T27424] input_unregister_device+0xc5/0x110 [ 985.699105][T27424] uinput_destroy_device+0x1f4/0x250 [ 985.699128][T27424] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 985.699144][T27424] ? tomoyo_domain+0xc5/0x160 [ 985.699160][T27424] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 985.699179][T27424] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 985.699191][T27424] ? tomoyo_path_number_perm+0x263/0x520 [ 985.699207][T27424] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 985.699233][T27424] ? __fget+0x35a/0x550 [ 985.699256][T27424] uinput_ioctl+0x4a/0x60 [ 985.699270][T27424] ? uinput_compat_ioctl+0x90/0x90 [ 985.699292][T27424] do_vfs_ioctl+0xd6e/0x1390 [ 985.761798][T27424] ? ioctl_preallocate+0x210/0x210 [ 985.782021][T27424] ? __fget+0x381/0x550 [ 985.782048][T27424] ? ksys_dup3+0x3e0/0x3e0 [ 985.782065][T27424] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 22:59:51 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x168, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000007000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 985.782080][T27424] ? fput_many+0x12c/0x1a0 [ 985.782107][T27424] ? tomoyo_file_ioctl+0x23/0x30 [ 985.793128][T27424] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 985.793157][T27424] ? security_file_ioctl+0x93/0xc0 [ 985.804330][T27424] ksys_ioctl+0xab/0xd0 [ 985.804353][T27424] __x64_sys_ioctl+0x73/0xb0 [ 985.804374][T27424] do_syscall_64+0x103/0x610 [ 985.804398][T27424] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.804418][T27424] RIP: 0033:0x458079 [ 985.815147][T27424] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 985.815157][T27424] RSP: 002b:00007f5de5bd8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 985.815173][T27424] RAX: ffffffffffffffda RBX: 00007f5de5bd8c90 RCX: 0000000000458079 [ 985.815182][T27424] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 985.815191][T27424] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 22:59:51 executing program 0: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x5) fremovexattr(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000d00)=ANY=[@ANYBLOB="9f93566e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x44801) sendmsg$FOU_CMD_DEL(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x4, &(0x7f0000000040), 0x0, r0, 0x2}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000540)=ANY=[@ANYBLOB="1d000000018a20bf0374c942300e075f0000000000000000090000002857fcbe3ca0034aaa822ad702d60eaed047e26646c75b2fd4fb99b7cdb483c3cd273d10352c675739a19b1fedbc12ce6f0664bfe511949d9428704a7df0d7c98ce0a08e908e4f6073e285222d0d8bf24826af3691c98e7c1d0cdd1d777ab71d490a75061c3221ecf4c97eba65abc8ed14aeeed699b2f22efe8d3f5853eb7caf881a9d97822aa43e83c51cf72bbd809497af18947f"]) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x10001, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000b80), 0x0, 0x1, 0x10004, 0xffffffffffffffff, 0x0}) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f00000003c0)=""/67) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x10000200000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) setsockopt$ax25_int(r3, 0x101, 0x5, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000780)=0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000008c0)=r4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x9820, 0x0, 0x0, {0xa, 0x4e22, 0x0, @local, 0x20}}}, 0x80, 0x0}}], 0x1, 0x4000) [ 985.815200][T27424] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5de5bd96d4 [ 985.815209][T27424] R13: 00000000004c2685 R14: 00000000004d5108 R15: 0000000000000005 [ 985.884080][T27436] binder: 27435:27436 transaction failed 29201/-22, size 7586835780199251975--7349874591868649443 line 3147 [ 986.045101][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:52 executing program 3 (fault-call:4 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000012000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:52 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x22000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:52 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x169, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 986.209991][T27454] binder: 27446:27454 transaction failed 29201/-22, size 7586835780199251986--7349874591868649443 line 3147 [ 986.226442][T27455] input: syz0 as /devices/virtual/input/input54 [ 986.269897][T27460] FAULT_INJECTION: forcing a failure. [ 986.269897][T27460] name failslab, interval 1, probability 0, space 0, times 0 22:59:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000020000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 986.316743][T27460] CPU: 1 PID: 27460 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 986.325839][T27460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.335916][T27460] Call Trace: [ 986.339243][T27460] dump_stack+0x172/0x1f0 [ 986.343612][T27460] should_fail.cold+0xa/0x15 [ 986.344042][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 986.348244][T27460] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 986.348269][T27460] ? ___might_sleep+0x163/0x280 22:59:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 986.348292][T27460] __should_failslab+0x121/0x190 [ 986.348311][T27460] should_failslab+0x9/0x14 [ 986.348331][T27460] kmem_cache_alloc_trace+0x2d1/0x760 [ 986.348348][T27460] ? mutex_trylock+0x1e0/0x1e0 [ 986.348365][T27460] ? kasan_check_write+0x14/0x20 [ 986.348392][T27460] kobject_uevent_env+0x2fb/0x1030 [ 986.394797][T27460] ? wait_for_completion+0x440/0x440 [ 986.400137][T27460] kobject_uevent+0x20/0x26 [ 986.404697][T27460] device_del+0x758/0xc40 [ 986.409151][T27460] ? __device_links_no_driver+0x250/0x250 22:59:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004c000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 986.414896][T27460] ? _raw_spin_unlock_irq+0x28/0x90 [ 986.420118][T27460] ? __input_unregister_device+0x153/0x4a0 [ 986.425944][T27460] ? _raw_spin_unlock_irq+0x28/0x90 [ 986.431174][T27460] cdev_device_del+0x1a/0x80 [ 986.435778][T27460] evdev_disconnect+0x42/0xb0 [ 986.440481][T27460] __input_unregister_device+0x200/0x4a0 [ 986.446136][T27460] input_unregister_device+0xc5/0x110 [ 986.451528][T27460] uinput_destroy_device+0x1f4/0x250 [ 986.456841][T27460] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 986.462760][T27460] ? tomoyo_domain+0xc5/0x160 22:59:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000060000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 986.467456][T27460] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 986.473558][T27460] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 986.479817][T27460] ? tomoyo_path_number_perm+0x263/0x520 [ 986.485474][T27460] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 986.491293][T27460] ? __lockdep_free_key_range+0x120/0x120 [ 986.497040][T27460] ? __fget+0x35a/0x550 [ 986.501217][T27460] uinput_ioctl+0x4a/0x60 [ 986.505557][T27460] ? uinput_compat_ioctl+0x90/0x90 [ 986.510687][T27460] do_vfs_ioctl+0xd6e/0x1390 22:59:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000068000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 986.515294][T27460] ? ioctl_preallocate+0x210/0x210 [ 986.520416][T27460] ? __fget+0x381/0x550 [ 986.524590][T27460] ? ksys_dup3+0x3e0/0x3e0 [ 986.529024][T27460] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 986.535275][T27460] ? fput_many+0x12c/0x1a0 [ 986.539710][T27460] ? tomoyo_file_ioctl+0x23/0x30 [ 986.544669][T27460] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 986.551101][T27460] ? security_file_ioctl+0x93/0xc0 [ 986.556229][T27460] ksys_ioctl+0xab/0xd0 [ 986.560401][T27460] __x64_sys_ioctl+0x73/0xb0 22:59:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000006c000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 986.565010][T27460] do_syscall_64+0x103/0x610 [ 986.569618][T27460] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 986.575522][T27460] RIP: 0033:0x458079 [ 986.579429][T27460] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 986.599056][T27460] RSP: 002b:00007f5de5bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 986.607500][T27460] RAX: ffffffffffffffda RBX: 00007f5de5bb7c90 RCX: 0000000000458079 [ 986.615509][T27460] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 986.623496][T27460] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 986.623507][T27460] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5de5bb86d4 [ 986.623517][T27460] R13: 00000000004c2685 R14: 00000000004d5108 R15: 0000000000000005 22:59:52 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x3ff, 0x101000) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000001c0), 0x4) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000200)=0x1000000000000002, &(0x7f0000000140)=0x4) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000040)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000080)={0x3, 0x0}) [ 986.866659][T27479] kcapi: manufacturer command 1320 unknown. 22:59:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000074000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:52 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x26010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:52 executing program 3 (fault-call:4 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:52 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x1) mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0d9350d62df40b458100000060b9d9f4b9a3b5988ef1a3303f1047e2ceb34ec84f4dd0be1fe272ee5dc0ec09ae88c4f689d8bd430904c3c97c0a8a96b820c1a4091b5654801d9b1e92bb2a1ad123ea768c150ee63ef869782c780180000000000000b56be7aa4338ab71339563a614b8c6d42e0efe65db76feeed37bc662545f1eed85fd148ab90fb6f8e73d624b88a5f478a457041de3b965ba279ae15deabcd5a880fad713ae448fc299b003c382eaf837c176bbaeb64ced034e1fe5d2304d240d837c9d552c5dd133fd5086dd6dc6f304a794acfc84d307bdadeba4c100100000000000000000000000000000000000000000"], 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 987.066410][T27489] input: syz0 as /devices/virtual/input/input55 22:59:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000007a000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 987.115877][T27489] FAULT_INJECTION: forcing a failure. [ 987.115877][T27489] name failslab, interval 1, probability 0, space 0, times 0 [ 987.140394][T27489] CPU: 1 PID: 27489 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 987.149481][T27489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.149490][T27489] Call Trace: [ 987.149515][T27489] dump_stack+0x172/0x1f0 [ 987.149542][T27489] should_fail.cold+0xa/0x15 [ 987.149565][T27489] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 987.149588][T27489] ? ___might_sleep+0x163/0x280 [ 987.149614][T27489] __should_failslab+0x121/0x190 [ 987.171865][T27489] should_failslab+0x9/0x14 [ 987.171884][T27489] __kmalloc+0x2dc/0x740 [ 987.171904][T27489] ? kobject_uevent_env+0x2fb/0x1030 [ 987.171922][T27489] ? rcu_read_lock_sched_held+0x110/0x130 [ 987.171938][T27489] ? kobject_get_path+0xc4/0x1b0 [ 987.171963][T27489] kobject_get_path+0xc4/0x1b0 [ 987.216897][T27489] kobject_uevent_env+0x31f/0x1030 [ 987.222004][T27489] ? wait_for_completion+0x440/0x440 [ 987.227282][T27489] kobject_uevent+0x20/0x26 [ 987.231859][T27489] device_del+0x758/0xc40 [ 987.236192][T27489] ? __device_links_no_driver+0x250/0x250 [ 987.241902][T27489] ? _raw_spin_unlock_irq+0x28/0x90 [ 987.247087][T27489] ? __input_unregister_device+0x153/0x4a0 [ 987.252898][T27489] ? _raw_spin_unlock_irq+0x28/0x90 [ 987.258085][T27489] cdev_device_del+0x1a/0x80 [ 987.262674][T27489] evdev_disconnect+0x42/0xb0 [ 987.267336][T27489] __input_unregister_device+0x200/0x4a0 [ 987.272952][T27489] input_unregister_device+0xc5/0x110 [ 987.278320][T27489] uinput_destroy_device+0x1f4/0x250 [ 987.283596][T27489] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 987.289491][T27489] ? tomoyo_domain+0xc5/0x160 [ 987.294179][T27489] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 987.300249][T27489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 987.306494][T27489] ? tomoyo_path_number_perm+0x263/0x520 [ 987.312142][T27489] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 987.318054][T27489] ? __fget+0x35a/0x550 [ 987.322213][T27489] uinput_ioctl+0x4a/0x60 [ 987.326555][T27489] ? uinput_compat_ioctl+0x90/0x90 [ 987.331659][T27489] do_vfs_ioctl+0xd6e/0x1390 [ 987.336249][T27489] ? ioctl_preallocate+0x210/0x210 [ 987.341358][T27489] ? __fget+0x381/0x550 [ 987.345512][T27489] ? ksys_dup3+0x3e0/0x3e0 [ 987.349913][T27489] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 987.356135][T27489] ? fput_many+0x12c/0x1a0 [ 987.360544][T27489] ? tomoyo_file_ioctl+0x23/0x30 [ 987.365477][T27489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 987.371704][T27489] ? security_file_ioctl+0x93/0xc0 [ 987.376815][T27489] ksys_ioctl+0xab/0xd0 [ 987.380995][T27489] __x64_sys_ioctl+0x73/0xb0 [ 987.385584][T27489] do_syscall_64+0x103/0x610 [ 987.390176][T27489] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.396066][T27489] RIP: 0033:0x458079 [ 987.399944][T27489] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 987.419549][T27489] RSP: 002b:00007f5de5bd8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 987.427951][T27489] RAX: ffffffffffffffda RBX: 00007f5de5bd8c90 RCX: 0000000000458079 [ 987.435915][T27489] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 987.443886][T27489] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 987.451871][T27489] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5de5bd96d4 [ 987.459836][T27489] R13: 00000000004c2685 R14: 00000000004d5108 R15: 0000000000000005 22:59:53 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:53 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3, 0x2000) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000080)) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000100), 0x4) 22:59:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000fffffdfd000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:53 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x3f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:53 executing program 3 (fault-call:4 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 987.694073][T27522] input: syz0 as /devices/virtual/input/input56 [ 987.758570][T27522] FAULT_INJECTION: forcing a failure. [ 987.758570][T27522] name failslab, interval 1, probability 0, space 0, times 0 [ 987.784267][T27522] CPU: 1 PID: 27522 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 987.793355][T27522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.803411][T27522] Call Trace: [ 987.806698][T27522] dump_stack+0x172/0x1f0 [ 987.811050][T27522] should_fail.cold+0xa/0x15 [ 987.815763][T27522] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 987.821654][T27522] ? ___might_sleep+0x163/0x280 [ 987.827263][T27522] __should_failslab+0x121/0x190 [ 987.832225][T27522] should_failslab+0x9/0x14 [ 987.836731][T27522] __kmalloc+0x2dc/0x740 [ 987.840987][T27522] ? kobject_uevent_env+0x2fb/0x1030 [ 987.846300][T27522] ? rcu_read_lock_sched_held+0x110/0x130 [ 987.852019][T27522] ? kobject_get_path+0xc4/0x1b0 [ 987.856957][T27522] kobject_get_path+0xc4/0x1b0 [ 987.861738][T27522] kobject_uevent_env+0x31f/0x1030 [ 987.866867][T27522] ? wait_for_completion+0x440/0x440 [ 987.872177][T27522] kobject_uevent+0x20/0x26 [ 987.876680][T27522] device_del+0x758/0xc40 [ 987.881007][T27522] ? __device_links_no_driver+0x250/0x250 [ 987.886726][T27522] ? _raw_spin_unlock_irq+0x28/0x90 [ 987.891930][T27522] ? __input_unregister_device+0x153/0x4a0 [ 987.897738][T27522] ? _raw_spin_unlock_irq+0x28/0x90 [ 987.902962][T27522] cdev_device_del+0x1a/0x80 [ 987.907580][T27522] evdev_disconnect+0x42/0xb0 [ 987.912273][T27522] __input_unregister_device+0x200/0x4a0 [ 987.917923][T27522] input_unregister_device+0xc5/0x110 [ 987.923305][T27522] uinput_destroy_device+0x1f4/0x250 [ 987.928612][T27522] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 987.934513][T27522] ? tomoyo_domain+0xc5/0x160 [ 987.939204][T27522] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 987.945278][T27522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 987.951524][T27522] ? tomoyo_path_number_perm+0x263/0x520 [ 987.957169][T27522] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 987.962998][T27522] ? __fget+0x35a/0x550 [ 987.967173][T27522] uinput_ioctl+0x4a/0x60 [ 987.971513][T27522] ? uinput_compat_ioctl+0x90/0x90 [ 987.976638][T27522] do_vfs_ioctl+0xd6e/0x1390 [ 987.981246][T27522] ? ioctl_preallocate+0x210/0x210 [ 987.986472][T27522] ? __fget+0x381/0x550 [ 987.990648][T27522] ? ksys_dup3+0x3e0/0x3e0 [ 987.995082][T27522] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 988.001352][T27522] ? fput_many+0x12c/0x1a0 [ 988.005812][T27522] ? tomoyo_file_ioctl+0x23/0x30 [ 988.010883][T27522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 988.017141][T27522] ? security_file_ioctl+0x93/0xc0 [ 988.022363][T27522] ksys_ioctl+0xab/0xd0 [ 988.026536][T27522] __x64_sys_ioctl+0x73/0xb0 [ 988.031136][T27522] do_syscall_64+0x103/0x610 [ 988.035752][T27522] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.041645][T27522] RIP: 0033:0x458079 [ 988.045559][T27522] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 988.065170][T27522] RSP: 002b:00007f5de5bd8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 988.073601][T27522] RAX: ffffffffffffffda RBX: 00007f5de5bd8c90 RCX: 0000000000458079 [ 988.081596][T27522] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 988.089583][T27522] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 988.097564][T27522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5de5bd96d4 22:59:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000fdfdffff000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x410002) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, 0x0) r6 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f00000001c0)=0xe3) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) fallocate(r0, 0x11, 0x6, 0x8e) 22:59:54 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 988.105648][T27522] R13: 00000000004c2685 R14: 00000000004d5108 R15: 0000000000000005 22:59:54 executing program 3 (fault-call:4 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000020000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x80000000) 22:59:54 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:59:54 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 988.367385][T27546] input: syz0 as /devices/virtual/input/input57 [ 988.421969][T27546] FAULT_INJECTION: forcing a failure. [ 988.421969][T27546] name failslab, interval 1, probability 0, space 0, times 0 [ 988.440685][T27546] CPU: 0 PID: 27546 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 988.449732][T27546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.459800][T27546] Call Trace: [ 988.463116][T27546] dump_stack+0x172/0x1f0 [ 988.467483][T27546] should_fail.cold+0xa/0x15 [ 988.472091][T27546] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 988.477908][T27546] ? ___might_sleep+0x163/0x280 [ 988.482771][T27546] __should_failslab+0x121/0x190 [ 988.487723][T27546] should_failslab+0x9/0x14 [ 988.492233][T27546] kmem_cache_alloc_node+0x264/0x710 [ 988.497532][T27546] ? find_held_lock+0x35/0x130 [ 988.502314][T27546] __alloc_skb+0xd5/0x5e0 [ 988.506649][T27546] ? skb_trim+0x190/0x190 [ 988.510990][T27546] ? kasan_check_read+0x11/0x20 [ 988.515854][T27546] alloc_uevent_skb+0x83/0x1e2 [ 988.520721][T27546] kobject_uevent_env+0xa63/0x1030 [ 988.525843][T27546] ? wait_for_completion+0x440/0x440 [ 988.531142][T27546] kobject_uevent+0x20/0x26 [ 988.531162][T27546] device_del+0x758/0xc40 [ 988.531184][T27546] ? __device_links_no_driver+0x250/0x250 [ 988.531206][T27546] ? _raw_spin_unlock_irq+0x28/0x90 [ 988.550949][T27546] ? __input_unregister_device+0x153/0x4a0 [ 988.556769][T27546] ? _raw_spin_unlock_irq+0x28/0x90 [ 988.561984][T27546] cdev_device_del+0x1a/0x80 [ 988.566612][T27546] evdev_disconnect+0x42/0xb0 22:59:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x80044dfb, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x9c, "b1c707be839fef23931f389f56ff276eaeeec88c3091732c830ac6d0c5c55b0a85ee9295581253b4562ca35231c4af03b632b1dbb0e03b2e9fd4b43b2d9c80c4aa01810b10853e52b518b12aa09d344b06d42a872a12e5873490faf96e0fa46e71216906082423e36d0b5f57ff8b204ca6ad72bfc43df2b4d9740e0d504c5373d1c695e993290a49173bce1da427983807596bba36d755b45580716f"}, &(0x7f0000000000)=0xa4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000200)={r2, 0x80000001, 0x1000, "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"}, 0x1008) 22:59:54 executing program 0: r0 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='GPLI\x00', 0xffffffffffffffff) keyctl$clear(0x7, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000140)=[{&(0x7f0000000240)="803ff8ffffffffffffff0300e60100006cff9900000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efdb56108e53b3994b2cc86d95687df2409c1be2ac93b7e0050a6b72696c6044c1ea3efe6c6758f6", 0x61, 0x400}], 0xc080, 0x0) r1 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x6, 0x82000) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f00000002c0)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000180)=0x0) ptrace$peek(0x3, r2, &(0x7f00000001c0)) [ 988.571300][T27546] __input_unregister_device+0x200/0x4a0 [ 988.576959][T27546] input_unregister_device+0xc5/0x110 [ 988.582338][T27546] uinput_destroy_device+0x1f4/0x250 [ 988.582363][T27546] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 988.582378][T27546] ? tomoyo_domain+0xc5/0x160 [ 988.582398][T27546] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 988.582422][T27546] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 988.593857][T27546] ? tomoyo_path_number_perm+0x263/0x520 [ 988.593877][T27546] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 988.593907][T27546] ? __fget+0x35a/0x550 [ 988.593933][T27546] uinput_ioctl+0x4a/0x60 [ 988.593954][T27546] ? uinput_compat_ioctl+0x90/0x90 [ 988.635923][T27546] do_vfs_ioctl+0xd6e/0x1390 [ 988.640517][T27546] ? ioctl_preallocate+0x210/0x210 [ 988.645616][T27546] ? __fget+0x381/0x550 [ 988.649771][T27546] ? ksys_dup3+0x3e0/0x3e0 [ 988.654211][T27546] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 988.660543][T27546] ? fput_many+0x12c/0x1a0 [ 988.664949][T27546] ? tomoyo_file_ioctl+0x23/0x30 [ 988.669881][T27546] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 988.676127][T27546] ? security_file_ioctl+0x93/0xc0 [ 988.681243][T27546] ksys_ioctl+0xab/0xd0 [ 988.685384][T27546] __x64_sys_ioctl+0x73/0xb0 [ 988.690033][T27546] do_syscall_64+0x103/0x610 [ 988.694620][T27546] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.700510][T27546] RIP: 0033:0x458079 [ 988.704395][T27546] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:59:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000030000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 988.723989][T27546] RSP: 002b:00007f5de5bd8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 988.732412][T27546] RAX: ffffffffffffffda RBX: 00007f5de5bd8c90 RCX: 0000000000458079 [ 988.740374][T27546] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 988.748340][T27546] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 988.756318][T27546] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5de5bd96d4 [ 988.764402][T27546] R13: 00000000004c2685 R14: 00000000004d5108 R15: 0000000000000005 [ 988.785586][T27561] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (20) [ 988.828813][T27561] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 988.858072][T27567] binder_transaction: 10 callbacks suppressed [ 988.858092][T27567] binder: 27566:27567 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:54 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:54 executing program 3 (fault-call:4 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1, 0x3, 0x80000001, 0x3, 0x5ad}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240)="6836d7a8", 0x4}, 0x68) r0 = syz_open_dev$video(&(0x7f0000000380)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0xa}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) bpf$MAP_CREATE(0x4, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x0, 0x2, 0x0, {0x0, @raw_data="2085f3072c9b42f03f10be83b68ebcf014a0409fdf8be3d3e82c747c7f79f7cee00b443f02000000a91ca25441677d169fb75a152d6eebf4bef6c96076d67f243aebaac6430c9ef1a788e60eb3d0a7c29a5e3416871c8a51df55701a05e0a2f09883c482efaf6dc9e1695038733a23bbf0faf76a1d3fae5c251c4fad507b2ead2f1581057e3f84f3e8503ee570d8069eb53a897d2dd5f3d89629917fb171132181e9f3c510ac5229a6b6096547977578c5795d84cf23fe1d042df97dbd37a4b3d0e338a1b611e3ae"}}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000003c0)={0x80000000, 0x0, 0x0, {0x0, @vbi={0x8, 0x568, 0x0, 0x0, [0xf683], [0x3, 0x6c65]}}}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000002c0)={0x1, 0x1, 0x40}) 22:59:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000040000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:54 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x40030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 989.134578][T27580] input: syz0 as /devices/virtual/input/input58 [ 989.151926][T27583] binder: 27575:27583 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 989.183434][T27580] FAULT_INJECTION: forcing a failure. [ 989.183434][T27580] name failslab, interval 1, probability 0, space 0, times 0 [ 989.205612][T27580] CPU: 1 PID: 27580 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 989.214674][T27580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.224741][T27580] Call Trace: [ 989.228049][T27580] dump_stack+0x172/0x1f0 22:59:55 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000100)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190000003fefffff03060200000000e80001060000040d00170037063705c9df110000", 0x29}], 0x1) [ 989.232399][T27580] should_fail.cold+0xa/0x15 [ 989.237011][T27580] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 989.242833][T27580] ? ___might_sleep+0x163/0x280 [ 989.242857][T27580] __should_failslab+0x121/0x190 [ 989.242877][T27580] should_failslab+0x9/0x14 [ 989.242896][T27580] kmem_cache_alloc_node_trace+0x270/0x720 [ 989.242923][T27580] __kmalloc_node_track_caller+0x3d/0x70 [ 989.252718][T27580] __kmalloc_reserve.isra.0+0x40/0xf0 [ 989.252739][T27580] __alloc_skb+0x10b/0x5e0 [ 989.252755][T27580] ? skb_trim+0x190/0x190 22:59:55 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x43, "a0f0703cad990206d52c5cb4fc2133ccd6ec8ea8ac122c94f74eee8f3d2566f63219a26c226b62350a95ba4c861cb08e4ee9f629af131256e151d3e54ccdd393e26d66"}, &(0x7f0000000140)=0x4b) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0)={r2, 0x10001}, 0x8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x802, 0x18, 0xfa11, {0x4000000000000000, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5) [ 989.252777][T27580] ? kasan_check_read+0x11/0x20 [ 989.252802][T27580] alloc_uevent_skb+0x83/0x1e2 [ 989.252823][T27580] kobject_uevent_env+0xa63/0x1030 [ 989.297520][T27580] ? wait_for_completion+0x440/0x440 [ 989.302830][T27580] kobject_uevent+0x20/0x26 [ 989.307350][T27580] device_del+0x758/0xc40 [ 989.311802][T27580] ? __device_links_no_driver+0x250/0x250 [ 989.317544][T27580] ? _raw_spin_unlock_irq+0x28/0x90 [ 989.322730][T27580] ? __input_unregister_device+0x153/0x4a0 [ 989.328556][T27580] ? _raw_spin_unlock_irq+0x28/0x90 [ 989.333775][T27580] cdev_device_del+0x1a/0x80 [ 989.338361][T27580] evdev_disconnect+0x42/0xb0 [ 989.343036][T27580] __input_unregister_device+0x200/0x4a0 [ 989.348670][T27580] input_unregister_device+0xc5/0x110 [ 989.354042][T27580] uinput_destroy_device+0x1f4/0x250 [ 989.359329][T27580] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 989.365209][T27580] ? tomoyo_domain+0xc5/0x160 [ 989.369872][T27580] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 989.375955][T27580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 989.382205][T27580] ? tomoyo_path_number_perm+0x263/0x520 [ 989.387827][T27580] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 989.393623][T27580] ? rcu_preempt_deferred_qs_irqrestore+0x5b9/0xd20 [ 989.400233][T27580] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 989.406067][T27580] ? lockdep_hardirqs_on+0x418/0x5d0 [ 989.411370][T27580] ? __fget+0x35a/0x550 [ 989.415531][T27580] uinput_ioctl+0x4a/0x60 [ 989.419845][T27580] ? uinput_compat_ioctl+0x90/0x90 [ 989.424947][T27580] do_vfs_ioctl+0xd6e/0x1390 [ 989.429548][T27580] ? ioctl_preallocate+0x210/0x210 [ 989.434646][T27580] ? __fget+0x381/0x550 [ 989.438803][T27580] ? ksys_dup3+0x3e0/0x3e0 [ 989.443217][T27580] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 989.449441][T27580] ? fput_many+0x12c/0x1a0 [ 989.453855][T27580] ? tomoyo_file_ioctl+0x23/0x30 [ 989.458802][T27580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 989.465033][T27580] ? security_file_ioctl+0x93/0xc0 [ 989.470145][T27580] ksys_ioctl+0xab/0xd0 [ 989.474410][T27580] __x64_sys_ioctl+0x73/0xb0 [ 989.479034][T27580] do_syscall_64+0x103/0x610 [ 989.483702][T27580] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.489588][T27580] RIP: 0033:0x458079 [ 989.493496][T27580] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 989.513101][T27580] RSP: 002b:00007f5de5bd8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 989.521587][T27580] RAX: ffffffffffffffda RBX: 00007f5de5bd8c90 RCX: 0000000000458079 [ 989.529580][T27580] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 989.537589][T27580] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 989.545568][T27580] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5de5bd96d4 [ 989.553532][T27580] R13: 00000000004c2685 R14: 00000000004d5108 R15: 0000000000000005 22:59:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000050000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:55 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 989.630078][ T7833] binder_release_work: 11 callbacks suppressed [ 989.630088][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 22:59:55 executing program 3 (fault-call:4 fault-nth:6): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 989.753362][T27606] binder: 27604:27606 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:55 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x44000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 989.824455][T27613] input: syz0 as /devices/virtual/input/input59 [ 989.876787][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 989.888641][T27613] FAULT_INJECTION: forcing a failure. [ 989.888641][T27613] name failslab, interval 1, probability 0, space 0, times 0 [ 989.916748][T27613] CPU: 0 PID: 27613 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 989.925823][T27613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.935907][T27613] Call Trace: [ 989.939225][T27613] dump_stack+0x172/0x1f0 [ 989.943613][T27613] should_fail.cold+0xa/0x15 [ 989.948227][T27613] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 989.954047][T27613] ? ___might_sleep+0x163/0x280 [ 989.958924][T27613] __should_failslab+0x121/0x190 [ 989.963966][T27613] should_failslab+0x9/0x14 [ 989.968568][T27613] kmem_cache_alloc_node_trace+0x270/0x720 [ 989.974412][T27613] __kmalloc_node_track_caller+0x3d/0x70 [ 989.980064][T27613] __kmalloc_reserve.isra.0+0x40/0xf0 [ 989.985446][T27613] __alloc_skb+0x10b/0x5e0 [ 989.989869][T27613] ? skb_trim+0x190/0x190 [ 989.994205][T27613] ? kasan_check_read+0x11/0x20 [ 989.999082][T27613] alloc_uevent_skb+0x83/0x1e2 [ 990.003885][T27613] kobject_uevent_env+0xa63/0x1030 [ 990.009105][T27613] ? wait_for_completion+0x440/0x440 [ 990.014410][T27613] kobject_uevent+0x20/0x26 [ 990.018930][T27613] device_del+0x758/0xc40 [ 990.023391][T27613] ? __device_links_no_driver+0x250/0x250 [ 990.029138][T27613] ? _raw_spin_unlock_irq+0x28/0x90 [ 990.034358][T27613] ? __input_unregister_device+0x153/0x4a0 [ 990.040172][T27613] ? _raw_spin_unlock_irq+0x28/0x90 [ 990.045377][T27613] cdev_device_del+0x1a/0x80 [ 990.049966][T27613] evdev_disconnect+0x42/0xb0 [ 990.054663][T27613] __input_unregister_device+0x200/0x4a0 [ 990.060304][T27613] input_unregister_device+0xc5/0x110 [ 990.065687][T27613] uinput_destroy_device+0x1f4/0x250 [ 990.070978][T27613] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 990.076908][T27613] ? tomoyo_domain+0xc5/0x160 [ 990.081594][T27613] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 990.087671][T27613] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 990.093926][T27613] ? tomoyo_path_number_perm+0x263/0x520 [ 990.099591][T27613] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 990.105429][T27613] ? __fget+0x35a/0x550 [ 990.109644][T27613] uinput_ioctl+0x4a/0x60 [ 990.113963][T27613] ? uinput_compat_ioctl+0x90/0x90 [ 990.119094][T27613] do_vfs_ioctl+0xd6e/0x1390 [ 990.123703][T27613] ? ioctl_preallocate+0x210/0x210 [ 990.128816][T27613] ? __fget+0x381/0x550 [ 990.132981][T27613] ? ksys_dup3+0x3e0/0x3e0 [ 990.137414][T27613] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 990.143661][T27613] ? fput_many+0x12c/0x1a0 [ 990.148187][T27613] ? tomoyo_file_ioctl+0x23/0x30 [ 990.153154][T27613] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 990.159422][T27613] ? security_file_ioctl+0x93/0xc0 [ 990.164567][T27613] ksys_ioctl+0xab/0xd0 [ 990.168757][T27613] __x64_sys_ioctl+0x73/0xb0 [ 990.173361][T27613] do_syscall_64+0x103/0x610 [ 990.177968][T27613] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.183865][T27613] RIP: 0033:0x458079 [ 990.187765][T27613] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 990.207384][T27613] RSP: 002b:00007f5de5bd8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 990.215809][T27613] RAX: ffffffffffffffda RBX: 00007f5de5bd8c90 RCX: 0000000000458079 22:59:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000060000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:56 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x170, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 990.223774][T27613] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 990.231742][T27613] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 990.239806][T27613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5de5bd96d4 [ 990.247794][T27613] R13: 00000000004c2685 R14: 00000000004d5108 R15: 0000000000000005 22:59:56 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x76010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 990.361333][T27623] binder: 27622:27623 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000070000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:56 executing program 0: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x10000, 0x100) r1 = openat(r0, &(0x7f0000000200)='./file1/../file0\x00', 0x84000, 0x40) chdir(&(0x7f0000000280)='./file0\x00') r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00') ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f00000002c0)={0x9, 0x10001, @name="a45e1feb62097e0900a0c05900685ff5084edf94648b2f351bbc394b981c8a61"}) mknod$loop(&(0x7f0000000240)='./file1/file0\x00', 0x8280, 0x0) renameat2(r2, &(0x7f0000000000)='./file1/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x2) [ 990.440667][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:56 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x171, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 990.509222][T27633] binder: 27631:27633 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 22:59:56 executing program 3 (fault-call:4 fault-nth:7): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:59:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000120000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) [ 990.565838][ T5] binder: undelivered TRANSACTION_ERROR: 29201 22:59:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x1d000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="71e67a111ff954fe46b900832c8f80b695", 0x11) 22:59:56 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x172, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 990.654623][T27645] binder: 27644:27645 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 990.668965][T27646] overlayfs: './file0' not a directory 22:59:56 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x7c010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 990.735279][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 [ 990.779719][T27652] input: syz0 as /devices/virtual/input/input60 [ 990.867082][T27652] FAULT_INJECTION: forcing a failure. [ 990.867082][T27652] name failslab, interval 1, probability 0, space 0, times 0 [ 990.887271][T27652] CPU: 1 PID: 27652 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 990.896329][T27652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 990.906404][T27652] Call Trace: [ 990.906435][T27652] dump_stack+0x172/0x1f0 [ 990.906461][T27652] should_fail.cold+0xa/0x15 [ 990.906495][T27652] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 990.906520][T27652] ? ___might_sleep+0x163/0x280 [ 990.906544][T27652] __should_failslab+0x121/0x190 [ 990.906571][T27652] should_failslab+0x9/0x14 [ 990.924581][T27652] kmem_cache_alloc_trace+0x2d1/0x760 [ 990.924614][T27652] kobject_uevent_env+0x2fb/0x1030 [ 990.924633][T27652] ? wait_for_completion+0x440/0x440 [ 990.924657][T27652] kobject_uevent+0x20/0x26 [ 990.924675][T27652] device_del+0x758/0xc40 [ 990.924698][T27652] ? __device_links_no_driver+0x250/0x250 [ 990.924717][T27652] ? trace_hardirqs_on+0x67/0x230 [ 990.924743][T27652] __input_unregister_device+0x3a4/0x4a0 [ 990.980277][T27652] input_unregister_device+0xc5/0x110 [ 990.985680][T27652] uinput_destroy_device+0x1f4/0x250 [ 990.990994][T27652] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 990.996915][T27652] ? tomoyo_domain+0xc5/0x160 [ 991.001592][T27652] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 991.007664][T27652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 991.013919][T27652] ? tomoyo_path_number_perm+0x263/0x520 [ 991.019572][T27652] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 991.025392][T27652] ? __fget+0x35a/0x550 [ 991.029555][T27652] uinput_ioctl+0x4a/0x60 [ 991.033897][T27652] ? uinput_compat_ioctl+0x90/0x90 [ 991.039027][T27652] do_vfs_ioctl+0xd6e/0x1390 [ 991.043625][T27652] ? ioctl_preallocate+0x210/0x210 [ 991.048728][T27652] ? __fget+0x381/0x550 [ 991.052891][T27652] ? ksys_dup3+0x3e0/0x3e0 [ 991.057313][T27652] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 991.063538][T27652] ? fput_many+0x12c/0x1a0 [ 991.067961][T27652] ? tomoyo_file_ioctl+0x23/0x30 [ 991.072910][T27652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 991.079150][T27652] ? security_file_ioctl+0x93/0xc0 [ 991.084261][T27652] ksys_ioctl+0xab/0xd0 [ 991.088404][T27652] __x64_sys_ioctl+0x73/0xb0 [ 991.092994][T27652] do_syscall_64+0x103/0x610 [ 991.097578][T27652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.103476][T27652] RIP: 0033:0x458079 [ 991.107376][T27652] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 991.127018][T27652] RSP: 002b:00007f5de5bd8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 991.135449][T27652] RAX: ffffffffffffffda RBX: 00007f5de5bd8c90 RCX: 0000000000458079 [ 991.143447][T27652] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 991.151432][T27652] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 991.159405][T27652] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5de5bd96d4 [ 991.167389][T27652] R13: 00000000004c2685 R14: 00000000004d5108 R15: 0000000000000005 [ 991.226757][T27642] ================================================================== [ 991.235189][T27642] BUG: KASAN: use-after-free in string+0x208/0x230 [ 991.241691][T27642] Read of size 1 at addr ffff8880929cef80 by task syz-executor.3/27642 [ 991.249913][T27642] [ 991.252237][T27642] CPU: 0 PID: 27642 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190319 #6 [ 991.261232][T27642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.271298][T27642] Call Trace: [ 991.274591][T27642] dump_stack+0x172/0x1f0 [ 991.278904][T27642] ? string+0x208/0x230 [ 991.283073][T27642] print_address_description.cold+0x7c/0x20d [ 991.289065][T27642] ? string+0x208/0x230 [ 991.293211][T27642] ? string+0x208/0x230 [ 991.297349][T27642] kasan_report.cold+0x1b/0x40 [ 991.302100][T27642] ? string+0x208/0x230 [ 991.306241][T27642] __asan_report_load1_noabort+0x14/0x20 [ 991.311856][T27642] string+0x208/0x230 [ 991.315820][T27642] ? widen_string+0x2e0/0x2e0 [ 991.320533][T27642] ? console_unlock+0x6a7/0xeb0 [ 991.325381][T27642] ? find_held_lock+0x35/0x130 [ 991.330135][T27642] vsnprintf+0xbfc/0x1af0 [ 991.334470][T27642] ? pointer+0x910/0x910 [ 991.338714][T27642] ? string+0x1cc/0x230 [ 991.342857][T27642] add_uevent_var+0x14d/0x310 [ 991.347531][T27642] ? cleanup_uevent_env+0x50/0x50 [ 991.352570][T27642] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 991.358816][T27642] ? input_dev_uevent+0x110/0x890 [ 991.363852][T27642] input_dev_uevent+0x163/0x890 [ 991.368689][T27642] ? input_add_uevent_bm_var+0x150/0x150 [ 991.374317][T27642] dev_uevent+0x312/0x580 [ 991.378642][T27642] ? device_get_devnode+0x2e0/0x2e0 [ 991.383854][T27642] ? kobject_uevent_env+0x2fb/0x1030 [ 991.389121][T27642] ? rcu_read_lock_sched_held+0x110/0x130 [ 991.394860][T27642] ? kobject_uevent_env+0x37d/0x1030 [ 991.400131][T27642] ? device_get_devnode+0x2e0/0x2e0 [ 991.405325][T27642] kobject_uevent_env+0x487/0x1030 [ 991.410438][T27642] ? release_nodes+0x548/0x9c0 [ 991.415215][T27642] kobject_uevent+0x20/0x26 [ 991.419719][T27642] kobject_put.cold+0x177/0x2ec [ 991.424579][T27642] ? evdev_handle_set_keycode_v2+0x140/0x140 [ 991.430543][T27642] put_device+0x20/0x30 [ 991.434684][T27642] evdev_free+0x51/0x70 [ 991.438821][T27642] device_release+0x7d/0x210 [ 991.443414][T27642] kobject_put.cold+0x28f/0x2ec [ 991.448263][T27642] cdev_default_release+0x41/0x50 [ 991.453308][T27642] kobject_put.cold+0x28f/0x2ec [ 991.458178][T27642] cdev_put.part.0+0x39/0x50 [ 991.462792][T27642] cdev_put+0x20/0x30 [ 991.466767][T27642] __fput+0x6df/0x8d0 [ 991.470750][T27642] ____fput+0x16/0x20 [ 991.474719][T27642] task_work_run+0x14a/0x1c0 [ 991.479330][T27642] exit_to_usermode_loop+0x273/0x2c0 [ 991.484699][T27642] do_syscall_64+0x52d/0x610 [ 991.489281][T27642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.495158][T27642] RIP: 0033:0x411e31 [ 991.499048][T27642] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 991.518655][T27642] RSP: 002b:00007ffebbf3f6e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 991.527061][T27642] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411e31 [ 991.535024][T27642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 991.542998][T27642] RBP: 0000000000000000 R08: 0000000068915b43 R09: 0000000068915b47 [ 991.550976][T27642] R10: 00007ffebbf3f610 R11: 0000000000000293 R12: 0000000000000001 [ 991.558940][T27642] R13: 00007ffebbf3f720 R14: 0000000000000001 R15: 00007ffebbf3f730 [ 991.566907][T27642] [ 991.569221][T27642] Allocated by task 27652: [ 991.573648][T27642] save_stack+0x45/0xd0 [ 991.577797][T27642] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 991.583420][T27642] kasan_kmalloc+0x9/0x10 [ 991.587764][T27642] __kmalloc_track_caller+0x158/0x740 [ 991.593163][T27642] kstrndup+0x5f/0xf0 [ 991.597158][T27642] uinput_dev_setup+0x1d4/0x310 [ 991.602193][T27642] uinput_ioctl_handler.isra.0+0x12b8/0x1cc0 [ 991.608166][T27642] uinput_ioctl+0x4a/0x60 [ 991.612583][T27642] do_vfs_ioctl+0xd6e/0x1390 [ 991.617156][T27642] ksys_ioctl+0xab/0xd0 [ 991.621315][T27642] __x64_sys_ioctl+0x73/0xb0 [ 991.625947][T27642] do_syscall_64+0x103/0x610 [ 991.630530][T27642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.636418][T27642] [ 991.638752][T27642] Freed by task 27652: [ 991.642808][T27642] save_stack+0x45/0xd0 [ 991.646945][T27642] __kasan_slab_free+0x102/0x150 [ 991.651881][T27642] kasan_slab_free+0xe/0x10 [ 991.656661][T27642] kfree+0xcf/0x230 [ 991.660568][T27642] uinput_destroy_device+0xf8/0x250 [ 991.665756][T27642] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 991.671658][T27642] uinput_ioctl+0x4a/0x60 [ 991.675994][T27642] do_vfs_ioctl+0xd6e/0x1390 [ 991.680582][T27642] ksys_ioctl+0xab/0xd0 [ 991.684749][T27642] __x64_sys_ioctl+0x73/0xb0 [ 991.689326][T27642] do_syscall_64+0x103/0x610 [ 991.693916][T27642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.699796][T27642] [ 991.702134][T27642] The buggy address belongs to the object at ffff8880929cef80 [ 991.702134][T27642] which belongs to the cache kmalloc-32 of size 32 [ 991.716015][T27642] The buggy address is located 0 bytes inside of [ 991.716015][T27642] 32-byte region [ffff8880929cef80, ffff8880929cefa0) [ 991.729027][T27642] The buggy address belongs to the page: [ 991.734668][T27642] page:ffffea00024a7380 count:1 mapcount:0 mapping:ffff88812c3f01c0 index:0xffff8880929cefc1 [ 991.744804][T27642] flags: 0x1fffc0000000200(slab) [ 991.749742][T27642] raw: 01fffc0000000200 ffffea000236fe88 ffffea00026ec048 ffff88812c3f01c0 [ 991.758335][T27642] raw: ffff8880929cefc1 ffff8880929ce000 0000000100000022 0000000000000000 [ 991.766900][T27642] page dumped because: kasan: bad access detected [ 991.773379][T27642] [ 991.775785][T27642] Memory state around the buggy address: [ 991.781416][T27642] ffff8880929cee80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 991.789813][T27642] ffff8880929cef00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 991.797883][T27642] >ffff8880929cef80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 991.806025][T27642] ^ [ 991.810188][T27642] ffff8880929cf000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 991.818250][T27642] ffff8880929cf080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 22:59:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup(0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff, @rand_addr="00000000000000000000000000007fff"}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:59:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000480000000000f2da49691d0000000000009a"], 0x0, 0x0, 0x0}) 22:59:57 executing program 1: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4401) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x10b, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x173, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:59:57 executing program 0: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x0, 0x40006011, r0, 0x0) mremap(&(0x7f00001c0000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f00001c1000/0x3000)=nil) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6404000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x10, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x43c1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r1, 0xc002}, {r0, 0x8000}], 0x2, &(0x7f0000000200)={r3, r4+30000000}, &(0x7f0000000240)={0x2}, 0x8) 22:59:57 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x44) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x8cffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 991.826298][T27642] ================================================================== [ 991.834348][T27642] Disabling lock debugging due to kernel taint [ 991.873505][T27642] Kernel panic - not syncing: panic_on_warn set ... [ 991.880178][T27642] CPU: 0 PID: 27642 Comm: syz-executor.3 Tainted: G B 5.1.0-rc1-next-20190319 #6 [ 991.890600][T27642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.900672][T27642] Call Trace: [ 991.903980][T27642] dump_stack+0x172/0x1f0 [ 991.908341][T27642] panic+0x2cb/0x65c [ 991.912246][T27642] ? __warn_printk+0xf3/0xf3 [ 991.916839][T27642] ? string+0x208/0x230 [ 991.920997][T27642] ? preempt_schedule+0x4b/0x60 [ 991.925860][T27642] ? ___preempt_schedule+0x16/0x18 [ 991.930985][T27642] ? trace_hardirqs_on+0x5e/0x230 [ 991.936037][T27642] ? string+0x208/0x230 [ 991.940197][T27642] end_report+0x47/0x4f [ 991.944357][T27642] ? string+0x208/0x230 [ 991.948542][T27642] kasan_report.cold+0xe/0x40 [ 991.953235][T27642] ? string+0x208/0x230 [ 991.957402][T27642] __asan_report_load1_noabort+0x14/0x20 [ 991.958088][T27668] binder: 27662:27668 transaction failed 29201/-22, size 7586835780199251968--7349874591868649443 line 3147 [ 991.963042][T27642] string+0x208/0x230 [ 991.963056][T27642] ? widen_string+0x2e0/0x2e0 [ 991.963072][T27642] ? console_unlock+0x6a7/0xeb0 [ 991.963094][T27642] ? find_held_lock+0x35/0x130 [ 991.992842][T27642] vsnprintf+0xbfc/0x1af0 [ 991.997283][T27642] ? pointer+0x910/0x910 [ 991.997815][ T7833] binder: undelivered TRANSACTION_ERROR: 29201 [ 992.001563][T27642] ? string+0x1cc/0x230 [ 992.001584][T27642] add_uevent_var+0x14d/0x310 [ 992.001600][T27642] ? cleanup_uevent_env+0x50/0x50 [ 992.001616][T27642] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 992.001637][T27642] ? input_dev_uevent+0x110/0x890 [ 992.001653][T27642] input_dev_uevent+0x163/0x890 [ 992.001675][T27642] ? input_add_uevent_bm_var+0x150/0x150 [ 992.043802][T27642] dev_uevent+0x312/0x580 [ 992.048130][T27642] ? device_get_devnode+0x2e0/0x2e0 [ 992.053317][T27642] ? kobject_uevent_env+0x2fb/0x1030 [ 992.058594][T27642] ? rcu_read_lock_sched_held+0x110/0x130 [ 992.064311][T27642] ? kobject_uevent_env+0x37d/0x1030 [ 992.069791][T27642] ? device_get_devnode+0x2e0/0x2e0 [ 992.074981][T27642] kobject_uevent_env+0x487/0x1030 [ 992.080080][T27642] ? release_nodes+0x548/0x9c0 [ 992.085692][T27642] kobject_uevent+0x20/0x26 [ 992.090181][T27642] kobject_put.cold+0x177/0x2ec [ 992.095018][T27642] ? evdev_handle_set_keycode_v2+0x140/0x140 [ 992.101001][T27642] put_device+0x20/0x30 [ 992.105147][T27642] evdev_free+0x51/0x70 [ 992.109312][T27642] device_release+0x7d/0x210 [ 992.113904][T27642] kobject_put.cold+0x28f/0x2ec [ 992.118763][T27642] cdev_default_release+0x41/0x50 [ 992.123787][T27642] kobject_put.cold+0x28f/0x2ec [ 992.128629][T27642] cdev_put.part.0+0x39/0x50 [ 992.133216][T27642] cdev_put+0x20/0x30 [ 992.137209][T27642] __fput+0x6df/0x8d0 [ 992.141172][T27642] ____fput+0x16/0x20 [ 992.145158][T27642] task_work_run+0x14a/0x1c0 [ 992.149759][T27642] exit_to_usermode_loop+0x273/0x2c0 [ 992.155060][T27642] do_syscall_64+0x52d/0x610 [ 992.159652][T27642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.165543][T27642] RIP: 0033:0x411e31 [ 992.169437][T27642] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 992.189043][T27642] RSP: 002b:00007ffebbf3f6e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 992.197462][T27642] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411e31 [ 992.205698][T27642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 992.213672][T27642] RBP: 0000000000000000 R08: 0000000068915b43 R09: 0000000068915b47 [ 992.221630][T27642] R10: 00007ffebbf3f610 R11: 0000000000000293 R12: 0000000000000001 [ 992.229594][T27642] R13: 00007ffebbf3f720 R14: 0000000000000001 R15: 00007ffebbf3f730 [ 992.238538][T27642] Kernel Offset: disabled [ 992.242867][T27642] Rebooting in 86400 seconds..