72fe4afb949cc75969bc0070a19d3bd76b57857a1ffce801a7bc0eccc9f7cd786cf7fdb876f25dada07c40a54ae50c2f971428f30e834dc8f3a34", @typed={0x8, 0x38, @ipv4=@remote}]}]}, 0x1128}, {&(0x7f0000003fc0)={0x5ec, 0x17, 0x8, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x1c0, 0x55, [@generic="093767843de284407bdf091c6ff6d00baca0fb14e3218b1106d0faf5076fd44ec5c41b6acfa8ec6653dbc17b094610f0e36ade3f6675272ddb54b1e4e8b3bf0279976fef9aa553e8ca294cfbbfe02d0e8da0c5feaab1175729af632e8dbba3b0a51ae86ddb14b4aabf8a68bc865525a944e5b69e0b99212502acaf60b65ea77a345282c99b262f22", @generic="f6432004bfe7b43d8dbd0c8bdf458767435baba9d6f9b77d79360a55461fdfbb3a3d61e769c077b68d79e89d52dd9782aa70878e08e4ff3fe0ce4e1d4d16f3ef5b3630bcb751b03cf119aac6a0051a1d4c54814a090122c53cb95e08574482f592b96fcf7cb9268679af65c7e767659d84b47658f751677fe0129b0e5459d15d5694f5e2cf7be3e2ef0a04adcd94550a3def65ab", @typed={0x98, 0x65, @binary="d24f7f13e3177b2cbb6eeb5137d7165d7a2f9160a3c1c1b9dad77e83a1af5156e66fd0fe2ee1b6fe76de95145a141139675b5079599699ad9fce3bf95861adbed1277071e8bf72875befc5f00b9644e4d4c93f54628fac0fd4d9be0a1df5582173b6562a9c252ecd584f53f22a5d0ff0c39b65959ae38442b649690f338d2a41eca6c076370347cef01c30a927f0de2822ad"}, @typed={0x8, 0x34, @u32=0x3}]}, @nested={0x178, 0x4, [@typed={0x4, 0x11}, @typed={0xc, 0x88, @u64=0x1}, @generic="9d0dc1a010f88c2e7a77da958de3fd2f27bc69e635e6b70075622596cd3e05af927695c37fac385d59ff377dcca5dc604d93ddb5c832997724168cbe0dd264ec993c2c710de685ff13ffd037c5978bd1bc17964cda50c0dd54e8144b164d27f990a08fc8314cba1f425907", @typed={0xc, 0x6b, @u64=0x2}, @typed={0x8, 0x12, @uid=r4}, @generic="5604db2c43e757c0ee1ada2f37cd6deb754900ebe671a63d0a277659a433941d67fea23cbc53aa0bb0a3c974223aa983ec6760c138e2f058cea849711b52ecb4a904d1da68b1599baf78d2f6ced10dcb2077bf81913134f9217dc6e6a8367fe732c19a4390ee22a2d352886c8ab2059748e8c717bd3269421b82ef6eca14a7b658c7c1e42ca05c4b35ed16e337524c1a5de6cc7a9a0168e0563f8e7e4724d6ad0c53ccdf8c89b2dae3681a1050e7babebf8627ed99f8d314861ac12d18af83498cc2f4f080ae67a09ff5cf90b9f7bd3f46f099a37efcea5e0536364b39", @typed={0x4, 0x55}, @generic="11d5"]}, @generic="453f06306ae6445b1d0e0917ae52c6b9d6a0008baf51bb2ef34554e0d6b2d9964b415613035a45d2ef7f7b7df0f88648c2f4cda19a37c8", @nested={0x1a0, 0x49, [@typed={0x14, 0x62, @ipv6}, @typed={0x8, 0x2a, @pid=r2}, @typed={0x78, 0xf, @binary="ad962d64eecc35857ae0e1a5df81dd76ea53a8b078a8630bd704d83785b3c4a1a0dee53d39e823500ff4bbe0b2f7faa5e87355e9dbf8267211e298d38870e8d40bc97ff98377023a63672ab8b97552ff326c87ffc2b3737a65bb70192e55b46d3819e55e8f0b17d85a7295faf7fed2ee99"}, @generic="1eeb1e5854d140b52ad0b59091a7f3cf196caa2646dbbb6e6dad038ab4e2a15f7a985ce107bad0a6f2399ea8790e5fe53aaf398fa190249892d3e4e63218ded3412595d6bb252ba570dc2cfdbd37402e064425179b4964680859ec", @generic="05b0436890c90746ae4252945d6acb8382adef342c0a83966d635fd3a3376efb3570925b421d9d697909ab7560e17f8a67037dfe51de0b6c304c809a38c4c96d85483f1e0403f366562ba5cb674e1d275dcf26d14d96a0f46bd6d9c26f184bac8e8806ad0b5ef992e023417430dc954042fe324d13795ec68b9da463d99a2ea678f7cc7945d3472f87a1783a0784342c8e05c6a95caaf94ced31b371e5a28fdaed38e7fc95caddf2ba7e"]}, @nested={0xcc, 0x5c, [@generic="33000b2908770efd56eddddce1e5fda3fc726138a13be84704f29539e1eef8e080b8b5c72473d2c6275b54f1c7ff4b0021496050aabf7f6ddcb9479ef8956f3d445a05b1ee99605ddb645dd736fd96fd1dd5da905502abd8e84a3daf3ce78fa10b94fea7704a378ebe91536432b001091852bbdbad6a903e897bca194379aa0a95e3563f19093625b19cad7dac585dd404b7a2b872a3949e92099c5c04c3bc0ffd8a3c284af947659f16abd438f4ca0ca8c8aaf069", @typed={0x8, 0x2c, @fd=r0}, @generic="84fa97177e58c182"]}]}, 0x5ec}], 0x5, &(0x7f0000004940)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r2, r5, r6}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r7, r10}], 0x78, 0x5}, 0x80) sendmsg$netlink(r0, &(0x7f0000005680)={&(0x7f0000004a00)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2000000}, 0xc, &(0x7f0000005580)=[{&(0x7f0000004a40)={0x324, 0x42, 0x300, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x76, @pid=r2}, @nested={0x94, 0x52, [@generic="aba876536e814e7671a15a9d5a680e80c5ba0ffcaff53633e2e9dddb83f17e75704e1c0bc0cb8ff47c3d0e4ca06c54861744387e7bde56b131229958c46c21d58f3e360e503d8c0e8138dbcea5ebe7475630bf4b8f7ee5dc16a1e55c3e806a428a0e83f3eb95ca459ef3b6a44a85c805f3250a557a328aa4ce1935ac02d8fbc054271aa85d3553905e3210fc1ed42b69"]}, @generic="bc14e1a6984ae5bcacf8fc38ea5d8da135821552fa11ae9864a3d99dbb7f36eb3e912c1e111ca6ff805ba4f10c6c912a5a81675fcaced82f789a7d68e1004d4e5d1b576597c6e36891ed4999e7c79d3fa332eabca6decc5f3812ee45a32fa5313184e64a09282204cd8a23b5c4295e8d89186b70103b5cbeb838eae20bd90bf92112eeef2b30b93f5232c9a553dbca6cfd961053129840c013d91aee9b4b", @nested={0x1cc, 0x12, [@typed={0x8, 0x40, @fd=r0}, @generic="7639274a1ae478e17b158a4c511e4750f57d2aad6fd855c6a39779c41e92b49c556efa2cc6f5967f345d4e3a50ba680695c6902f4e544ec19829bb79ee6da0cde4a388ff18839234489136bc459fa1488df2af881ba7410f78bd17a2a73ec55d7bda3d05f99cc703ead82b6db9ff28a5d95d6fa90b5261e7dd0fe9f983062e855924bb3e159e3efa79e54b42f05698a4ca0da09920bbd2d70c091174a818b55e4861fc5f7bf11c92cdc5c64ba3be90fa264d07ccbf234812cec57aa3b70062ec96fa01522c", @generic="aa6f517b0f408b500d3d9eb96641caa55df5c1955cfc37e6913868768548bce6014294ef6db1b681d73293db94dc7412a132442a56171f77a1b72680bb8553", @typed={0x8, 0x23, @fd=r0}, @typed={0x8, 0x6b, @u32=0xb7d}, @generic="843211c5bc173886c12673b09b5d87f027bc8dac0ac8aeca33a473c94c54d1b2dac2a374e1be0d69c11f42cac9118bea8a898fe3226fd4ab2626eb8f5efdffe5bf2fa005e8c0f8e432924989cce1110385f1aacc8279fe8584ec8bab281ea586df2a45ae4cd5e772d4928bd8175c3e0f2ac40d10453e56349c787056efcd21a115ee49a6ee9e95fe066e8cde745faf46982eb6a684f20b514f6624eb6b7a2413a553", @typed={0x8, 0x38, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}]}, @generic="8aec1681992f3c24d829264945d0"]}, 0x324}, {&(0x7f0000004d80)={0x2f4, 0x3b, 0x400, 0x70bd27, 0x25dfdbfd, "", [@generic="3cca15b30ad3f0c4c1ced3a1ecf60f90fe302ddcbfb17755f289a6f6371b762da9ac85a3373f30229d92c5406a7abd72ce5c109b8945f2669fb16a88a8bc20351ca8c2f672787da0bab64fd321da7850fccabffca3854a3c35cc161b30d33b8006ba9092482971c9bd64547d8fb381149e9b32aeb68f6466f098c41c9c790a1bb73bfcd1cd4d471c154624168c4654c3cdcead645979a61d23c1945cfbe058b7b7bd9861e69743153687f9960ce7fe90c886abe83b5c02f147b84b2e5fd7eb718b25508f446c382c760ee4ef805398fe77b441a1ca", @nested={0xf0, 0x68, [@typed={0x8, 0x4a, @ipv4=@local}, @typed={0x8, 0xe, @uid=r5}, @generic="492cd397e7562c9183976e0c4959cdd1cf3d1d41360d129b33134ae2e177461dcd9de9941e8956d44bb31e02f36e02076512220aecf3253265328132f120fb94a56138a577fd589498e3dcc1a0c833c1ed42297d7bc52911179ce90df8cfcdce72de685d84094ca229ecb000c8b7290c3a3ef43ab217b46b4f3dbbf41f14e693da5bb26a3577b6d8168bf54c0dc43698c7c103ab9b00f1bae6629bf6c96608f738af8dbbcd1b99e9e7edd21f47866ae79bda2c6c0c0cbe2ea59484f87ccb179f96b046a4cc6d", @typed={0x14, 0x2, @ipv6=@mcast1}]}, @generic="c858c3d89f2d8a76607ddeadc38a29149e7e333b60", @nested={0xec, 0x6c, [@typed={0x8, 0x5c, @uid=r9}, @generic="deb1b3daf94be7306dcd1fdee937bd517cef11921fefadc7d45b69c9ef20701c147b943e8c9e6c782c5889ff16b7b893f823dd444b383ecf603bba3bc31f6cb2127426a9b2911c219b7e2646be3abc745fec2cd3a2db9d708c02f633516c8aebe0ea3ed5030860ccfea0bb270efb5e3f2bcfe3e81c3fe5d3b9bfe22b79e23952fd157e256fdc86b5f0eaf63cb027de558a81149e082dfa52418ab8752319a1ac703535bcd141b604c2f7ab30401857ceb5fe0902f2830670a22b6d74967ed67b93f91114acfde0b53ac95ffd3331d3dfe43f3037d63c00", @typed={0x8, 0x37, @uid=r5}]}, @typed={0x10, 0x2a, @str='vboxnet0,\x00'}, @nested={0x4, 0x33}, @typed={0x8, 0x93, @uid=r5}]}, 0x2f4}, {&(0x7f0000005080)={0x2ac, 0x12, 0x8, 0x70bd28, 0x25dfdbfb, "", [@typed={0x4, 0xb}, @generic="4ad40332e86f5df2e191a51f20f4c67099188c54710d1faa063e28da622c58654d6e150e9cebcb400bcdf9762d70ac6caeaa442d416307bdff2acd1f4d4a262d69e734d9b165d0a9f349d2d6561e474be5dbcace1e9f159e857f4870466a712c1729906e3a08bb76396642b4663c", @nested={0x228, 0x3e, [@generic="8b9f0f28e32a5530398dba81bb66ffd2ba1c9041ae9665208b4aea25b94eee31289391ba11ec339475ea09ea6ada", @typed={0x8, 0x55, @fd=r0}, @typed={0x8, 0x7c, @uid=r5}, @generic="e3459db5045552002cd5ee3bf3b8c17e43be83d511999f0c002a8711f87a7cfb81f40d732ca3e53cd38ceb55f263969ae8063e11d133cac01a22cafc6e1d36beb65bd3e2774a39591afd4cc877ebe5fb910265dcf4", @generic="5cb9192225495dc6336d4dfe455a3c47301d601865da3780c81773344eb27f1c39946959bebac35286f3e74a9169f8c8cdd18e1e0f95eea786a0178ded8b512713ac29fb02628c0caa3d6f4ea8f67c1b63663ae59004ac7cea8c9e599fc6390aa387304637eb6b0ec89f52642c97cde6519f4e1b11a0ef490191c1df03c59de83b37735d0eaf4882a50729e4bb533f936c7f78936bf55f1652f94b09940f3a87000662c4c1d6de8453a569560e570b59a299cae3893bb52a8151ba3334dad1e5fa3ee99a39d36efb47a2bcb706e478834c31615d4ef9fa4e366061a9d01212f0398a46bb2016ad42f510eae1cc8dd5bf90d8cfa59d292650ef5f526a05", @generic="4fd925edea5f7d5ddb99a60f2f860375283ccccb07e2bcb28490d19820a98e9ba90fb046d053ffb396c54b28ccd36bf1eced003534e4280d268925cfb9ef5cd95a72f1af12d60587bf13f4899b0c3557653c868b275bc8d97ac04b0c39733788e85cdd67553c715a262eb9e0bca783383570a67d915d19d4f6fd7803c9fc40c0302375a43a58ebd524cc", @typed={0x8, 0x5, @fd=r0}]}]}, 0x2ac}, {&(0x7f0000005340)={0x220, 0x1d, 0x204, 0x70bd25, 0x25dfdbfd, "", [@typed={0x14, 0xa, @ipv6=@mcast1}, @nested={0x1a0, 0x44, [@typed={0x8, 0x65, @u32=0xfffffffffffffff8}, @generic="31a110cee35dd76f5c6a24c13c231cdccf37e7dde3952c0a6694e273a87b0b07e91e7030658680dd03ea257e0a968d1557bf57d20e5f", @typed={0x8, 0x44, @u32=0xfffffffffffffffd}, @typed={0x98, 0x49, @binary="04fd3c06e661289465a3a966eee8b9d5d61d5c97938613b7e96f526ba3df69fa6c9c1af24976d7a63b689af8d2968a25f0e89f800a91117f5eacd58421fb47c7bf916676bb67a6497543428dbd39729a6208923cc4bdcd9eca653854b0a0c8dd470a6dc1c50d92be418539280072753c594d6cd03f77cf907eaa1c548b869d1b841e5a69922cdf3494c4e37cd8c68020b4"}, @typed={0xc, 0x56, @u64=0x3}, @generic='\f', @generic="af2a650fbc7d25ef627df582c7740a1c073cc2a7467ec1764d3387115ff284e1a43a62d66bdb52c93a14366f2670de726fdee9f7f1cb3c7366c64de561164129cad3fe5063663ea04f005b50c14931903dcc4c49d84ded14a72463d816769c2052df36010d9cbe41d2159e093bd40f4ef620eb6f5085ba57a9e4f8a4b7a2aa3156245ee35c879879bb933ebc64726efc7d9850fd9426c71855ad303035206fa3f532cdde4a668e9237a58c185fdf3af511"]}, @generic="8f4596424054febdc32edbfe2db0aacdd3ff496062d62aedad01f9c99b1f80836e545c3fb0c0856ac5f55aa128a5b3551ca605e42e0646e828be9191f27b89bc9be90054d7fef53a017174d1c8fedcb2901bc9f3a4d5c5", @typed={0x4, 0x23}]}, 0x220}], 0x4, &(0x7f00000055c0)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r9, r8}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r5, r8}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}], 0xc0, 0x4000}, 0x20004000) prctl$setendian(0x14, 0x2) sched_setscheduler(r2, 0x5, &(0x7f00000056c0)=0x8000) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000005700), &(0x7f0000005740)=0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000005780)={'bond_slave_1\x00', {0x2, 0x4e20, @remote}}) mq_timedreceive(r0, &(0x7f00000057c0)=""/132, 0x84, 0x9, &(0x7f0000005880)={0x0, 0x1c9c380}) syz_emit_ethernet(0xa7, &(0x7f00000058c0)={@dev={[], 0x1d}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [{[], {0x8100, 0x543d79ec, 0x4, 0x2}}], {@llc={0x4, {@llc={0x7e, 0xdc, '9', "af41a15c6f6edd17fc3b1c7d65af1ca0ff8c8e9a2aa566862281b041fb93b46658ebb7e52acb1c833ec11258cdf44d0a5116ceffddae962d09a326e7fb17e0a2e29d45b5070d5825aeb3034f79c93c4b221584fe41e1de96efb861d1bd826ee8726525eadc4142a94961b5905669239ee17886511c93e324c51bd5a026807e883609f9c471db91705ae3b321a2db066b1b96"}}}}}, &(0x7f0000005980)={0x1, 0x2, [0xb84, 0x3a6, 0xf01, 0x461]}) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000059c0)={0x6, 0x7, 0x4, 0x0, 0x400, 0x1ff, 0x8, 0x2, 0x40, 0x1}) sendmsg$kcm(r0, &(0x7f0000006c00)={0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000005a00)="324e28bf0c166a834ff5f5cd109cde2e48780b39b9535e1919144bf6dcf5c88ffd3b5eb8df00b703175cd61a5edb7bed3a69935e4d8de263709297f5e8f0682301026c23e1eb0cffad38220577d077c21480b5cb7fe30869d655da9cef03f19884f56779e04fb4b4e9c0e520131c688e387f2fc8e38f7b59232cb78b61e8f9381f0b0cc7ed2578a1d29b5ad33acf4db1f6", 0x91}, {&(0x7f0000005ac0)}, {&(0x7f0000005b00)="fa15e7a653f985c4b000791bbb0062fe544204fea4cacbd6db80ab4dec8df01c4ab13b62e37c4c8d171c51cda197104e699f2155e52802217da6aac6731630eb03097d80f7ed0e61a37996ab660e114242095e70d6cce0", 0x57}], 0x3, &(0x7f0000005bc0)=[{0x1010, 0x10d, 0x9, "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"}], 0x1010, 0x20000010}, 0x4004000) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000006c40), &(0x7f0000006c80)=0xc) 13:51:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x24, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) 13:51:38 executing program 1: bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000003, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) 13:51:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getpeername(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000100)=0x80) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x18, &(0x7f0000000200), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x2c, 0xe}}) close(r1) 13:51:38 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc8070014") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 144.168906] binder: 10122:10123 got new transaction with bad transaction stack, transaction 127 has target 10122:0 [ 144.179653] binder: 10122:10123 transaction failed 29201/-71, size 0-0 line 2879 [ 144.185884] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 144.201677] tc_dump_action: action bad kind [ 144.210864] binder: release 10122:10123 transaction 127 out, still active 13:51:38 executing program 3: waitid(0x0, 0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x622001, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 13:51:38 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1}, &(0x7f0000000100)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in=@remote, 0x4e21, 0x0, 0x4e22, 0xd64, 0xa, 0xa0, 0x80, 0x33, r2, r3}, {0x4, 0x9, 0x1, 0x100000000, 0xb184, 0x4, 0x5da, 0x4}, {0x5, 0x1ff, 0xffffffffffffffff, 0x4}, 0x20, 0x6e6bbb, 0x3, 0x1, 0x3}, {{@in=@multicast1, 0x4d4, 0x7f}, 0xa, @in6=@mcast2, 0x3507, 0x3, 0x2, 0x4, 0x3, 0x3, 0x8}}, 0xe8) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") listen(r0, 0x0) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/audio\x00', 0x404080, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000001bc0)={'dummy0\x00'}) keyctl$get_security(0x11, r4, &(0x7f0000000480)=""/219, 0xdb) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x8, 0xe22, 0x600000000000000, 0xffff}, {0xc96, 0x8, 0x9, 0x7f}]}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x4) 13:51:39 executing program 1: bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000003, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) [ 144.234788] binder: send failed reply for transaction 127, target dead [ 144.247877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 13:51:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40600, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000040)={{0xffffffffffff8001, 0x6}, 'port1\x00', 0x48, 0x1000, 0x1ff, 0xb43f, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x534cd38c}) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x12, &(0x7f0000001400)=""/78, &(0x7f0000001480)=0x4e) 13:51:39 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x700, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:39 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000003, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) [ 144.362248] binder: 10149:10157 got new transaction with bad transaction stack, transaction 130 has target 10149:0 [ 144.372917] binder: 10149:10157 transaction failed 29201/-71, size 0-0 line 2879 [ 144.391069] binder: release 10149:10157 transaction 130 out, still active [ 144.419979] binder: send failed reply for transaction 130, target dead 13:51:39 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0xffffffffffff8e50, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 13:51:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ptrace$cont(0x1f, r1, 0x27d, 0x401) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f8, &(0x7f0000000040)={"7369743000000000b5c7b9026c7fc5e5", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 13:51:39 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc8070014") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:39 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0x31e1, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$addseals(r1, 0x409, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2000, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000080)={{0x36, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'wrr\x00', 0x20, 0x9, 0x32}, {@local, 0x4e23, 0x2007, 0x3, 0x1, 0x2}}, 0x44) 13:51:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0202060014000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000006008000030000000000000000000000ac14ffbb000000000000000000000000010e11ecac14140000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff00000000"], 0xa0}}, 0x0) 13:51:39 executing program 6: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x21, "fa3d80508cd333495fcfe0b321eb2aed2cca1f763be3e0cd3f07207868069d60c7"}, &(0x7f0000000180)=0x29) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e20, 0x6, @empty, 0x20}}, 0x6, 0x7fff}, &(0x7f0000000280)=0x90) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0), 0x1c) sendmmsg(r2, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000020000004bc333b81b8776f310863f13cf2195bf04b754ff1583370b"], 0x28}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) 13:51:39 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000003, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) 13:51:39 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x400000000000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:39 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000000)={0x20, 0x7}) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000001000), 0xc5) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 13:51:39 executing program 6: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x4, 0x9}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000080), &(0x7f0000000140)) 13:51:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = memfd_create(&(0x7f0000000000)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4d011, r1, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendmsg$kcm(r2, &(0x7f0000000300)={&(0x7f0000000200)=@ipx={0x4, 0x0, 0x0, "d33254cd2f49"}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000680)='L', 0x1}], 0x1}, 0x8000) setsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f00000002c0)=0x564, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r2, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000280)={0xac, 0x1, 0x7fff, 0x0, 0x40000000}) close(r2) 13:51:39 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000003, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) [ 144.591124] binder: 10191:10195 got new transaction with bad transaction stack, transaction 133 has target 10191:0 [ 144.601991] binder: 10191:10195 transaction failed 29201/-71, size 0-0 line 2879 [ 144.614427] kernel msg: ebtables bug: please report to author: Wrong nr of counters 13:51:39 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) r1 = getuid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f0000000180)={0x78, 0x0, 0x7, {0x5, 0xb68, 0x0, {0x5, 0x9, 0x20, 0x6, 0x9, 0x5, 0xdf65, 0x3, 0x6, 0x1000000000000, 0x68, r1, r2, 0x1, 0x6}}}, 0x78) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000140)) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x3) 13:51:39 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x500000000000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 144.726930] binder: release 10191:10195 transaction 133 out, still active 13:51:39 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000003, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6831a10dae33c015b747b827009ff6d59db3c56fe8fc62e411dcba7a605884f070ddac3fb66e521d6cc8821f4a9cbd057419f30e52c9d8183a6761f5a8681dcab642184d022bbba4f718c5d6758942fdffffff560c8e99546f080f3c8184b4731c5a83caf7b8705c522b8eeec2c0efddb07ae2217183db324131492a100c86b29bc4012f58987f58f765c92c0962e1284734b45c9c9d633313f96252e5527dabed056383a1f448715e158e178a3dcaebef8cd56a5a7d650a50e5bfdc3a1b60d08ae1d0d9f3b50afb7737efd731bc9b290330df4cfe5c9e45a2de2ebd4897c4b573632ec2a3581c296deb213f3913597a26de4f2c5b3c3a"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) 13:51:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="3a020ab3e7a2ee55d4d967bddf57061aab6edcd0d30246b5070fbff1ee52eaff06c883c97764ed98f63d3b81f4d81ddfba4ab123c59b8dc5225ab823adcd3b67ea7733440a8402972da7e85f4ab309f75c", 0x51) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x28002, 0x0) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000080)={0x4, 0xffce}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:51:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000007c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef443394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a6b03fbe9c0ec68357e1fbe52ed77b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344967ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b55548b845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20ad67e8b62ed7676706d40bc5c80e376980b81", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r2 = creat(&(0x7f00000004c0)='./file0\x00', 0xc0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000500)={0x0, 0xffffffffffffff47}) sendto$inet(r1, &(0x7f00000005c0), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000004440)=[{{&(0x7f0000003c80)=@l2, 0x80, &(0x7f0000004380)}}], 0x1, 0x0, &(0x7f0000004540)={0x0, 0x989680}) 13:51:39 executing program 7: unshare(0x8020001) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000080)={0x2, 0x2, 0x1}) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x16, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x7f}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x4) clone(0x1f000000, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000580)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'veth0_to_bridge\x00', @ifru_names='bond_slave_1\x00'}}) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setpriority(0x1, 0x0, 0x0) 13:51:39 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f76") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1}, &(0x7f0000000080)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={r1, @rand_addr=0x8, @multicast2}, 0x7) r2 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) [ 144.837376] binder: send failed reply for transaction 133, target dead [ 144.911558] binder: 10235:10236 got new transaction with bad transaction stack, transaction 136 has target 10235:0 [ 144.922207] binder: 10235:10236 transaction failed 29201/-71, size 0-0 line 2879 13:51:39 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000003, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) [ 144.977965] binder: release 10235:10236 transaction 136 out, still active [ 145.059433] binder: send failed reply for transaction 136, target dead 13:51:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) getpid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000340)={0x206, &(0x7f0000000300)=[{0x40, 0x81, 0xe864, 0x5}, {0xfffffffffffff804, 0x0, 0xdb, 0x8000}, {0x8, 0x10001, 0x100000001, 0xfffffffffffeffff}]}, 0xfffffeca) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) ptrace$poke(0x4, r5, &(0x7f0000000780), 0xc9) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={"6272696467653000800000000040f400"}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/mcfilter\x00') alarm(0x100000000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x1, 0x81}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000280)={r7, 0x100}, &(0x7f0000000840)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a1, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)={0x800, 0x0, 0x0, 0x0, 0x0, 0xf687, 0x1}) accept(r2, &(0x7f0000000880)=@in={0x0, 0x0, @multicast2}, &(0x7f0000000900)=0x80) syz_open_pts(r8, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @dev, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000100)={@local, r9}, 0x14) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000040)) accept4(r4, &(0x7f0000000940)=@hci, &(0x7f0000000700)=0x2c4, 0x20080000) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000000380), &(0x7f0000000040)=0x4) 13:51:39 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x400000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) timerfd_create(0x5, 0x80800) socket$key(0xf, 0x3, 0x2) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f8571407067566e4255decbef8f162cf4960afd017674ed825393db7dcededd8f384a78dd4e310bf23fa570f84021f2ad61268f843309c91199ca2000b415b11a2f71894e85fd1514") r2 = socket(0x10, 0x0, 0x4) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f00000000c0)=""/254, 0xfe}, &(0x7f00000001c0), 0x70}, 0x20) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f0000dc5f98)) 13:51:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @local}}, 0x0, 0x1, 0x0, "75a51ae94faa156bc1ccaa2b1685197cdd7e6203c4a0442760c0b84b18bf1851aea503b88236b703026d9acf32f7079b08024b7c8926ea6f6e7f701a8e56989dd43af09721f7fb9c698e56c3d953bc19"}, 0xd8) sendto$inet(r2, &(0x7f00000002c0), 0x0, 0x20000020000802, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) 13:51:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cpuset\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xb4, r2, 0x900, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x73}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400000}]}, 0xb4}}, 0x40000) sendfile(r0, r1, &(0x7f0000000000)=0x4c000000, 0xff) 13:51:39 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f76") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:39 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x8205, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x11fc, 0x9, 0xf, 0x6, 0x70bd29, 0x25dfdbfc, {0xf, 0x0, 0x3}, [@generic="af8fa58146558da259c7b98fab5ba3d0df267e391864cb96b458991b8f", @typed={0x4, 0x65}, @nested={0x11c4, 0x10, [@generic="fd93db2199833491998df0a75a11cdcb1c94746596052d41ca6eb0ad66c89d834e7e54068c6713d7bfda2389758d3d681359d9dc6ebd0aeadeb32c00ad8eda3d181df62367677432f9eb1e938ac1f979dc24bb3192d5f040dbb38c8071310cbcbd", @generic="326ed90b15ce03f598ed078d34acdfdff5203766a96f1595e18426bbc4dcd5f448fca3e740d9b10e2292b34fe0e0be4d9f5426c4de10a11dc08fb53e845aea7e04fb00aa1d6849ec00eb506c0435e1d5326437f85c4799678deebf3df7718e1948e9a90d05975419e63a0ab1f07bf573bc5e27e2de975fc7c6ab161fb2a62722247679dda869e2b8c5b7cfa18fee78f00347efa2be342c1d1d0c4817e8106e53c5695bd46667c6f1f4d1b642056ce3a8a1c0122bebf2cb295acabc525c90c3fecfc63eccbc4e33f1dc67b2f86ec1c7ee8bfaba79", @generic="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", @generic="de394cfec811abf6113c74e7edf61f9635bbcf3ac007db19d8a13c7c5885f3b5ef8d8980590f0d7b3d6e79a539b30782745ebfb4cecd43d02cc8a20c6c480d13adee98eb60d3251999577df77732461824653adb96416537da6a2ac0fafd487a3e7df43ffe7b6b7eecc30b73d996446359a400683de7b1179bc92b3d580b31e829", @typed={0x8, 0x3, @ipv4=@rand_addr=0x8}]}]}, 0x11fc}, 0x1, 0x0, 0x0, 0x10}, 0x800) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl(r3, 0x40084149, &(0x7f0000001f64)) 13:51:39 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000003, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6831a10dae33c015b747b827009ff6d59db3c56fe8fc62e411dcba7a605884f070ddac3fb66e521d6cc8821f4a9cbd057419f30e52c9d8183a6761f5a8681dcab642184d022bbba4f718c5d6758942fdffffff560c8e99546f080f3c8184b4731c5a83caf7b8705c522b8eeec2c0efddb07ae2217183db324131492a100c86b29bc4012f58987f58f765c92c0962e1284734b45c9c9d633313f96252e5527dabed056383a1f448715e158e178a3dcaebef8cd56a5a7d650a50e5bfdc3a1b60d08ae1d0d9f3b50afb7737efd731bc9b290330df4cfe5c9e45a2de2ebd4897c4b573632ec2a3581c296deb213f3913597a26de4f2c5b3c3a"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) 13:51:39 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x1, @ipv4={[], [], @local}, 0x4}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0xfa}, 0xc) r2 = socket$inet6(0xa, 0x1000000000000, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000d11000), &(0x7f0000000080)=0x4) [ 145.155856] binder: 10272:10273 got new transaction with bad transaction stack, transaction 139 has target 10272:0 [ 145.166478] binder: 10272:10273 transaction failed 29201/-71, size 0-0 line 2879 [ 145.189088] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.196425] bridge0: port 1(bridge_slave_0) entered disabled state 13:51:39 executing program 7: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="78ca9f314bf40dcb08b39c5bebd228a6951f5539962aadd408cfc05bae8dbff324aff0d337cf5a", 0x27) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0xa05901) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'eql\x00', @dev={[], 0x11}}) 13:51:39 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000003, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) [ 145.212211] binder: release 10272:10273 transaction 139 out, still active 13:51:40 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f76") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:40 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1d, 0x1, 0x0, 0x0, {0x1f}}, 0x14}}, 0x0) [ 145.264067] binder: send failed reply for transaction 139, target dead 13:51:40 executing program 7: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x2f, 0x9, 0x17, 0x13, 0xb, 0x9, 0x0, 0x166}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000000d) 13:51:40 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000003, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) 13:51:40 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f00000000c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000500)}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="98605b46b1c2", 'ip6gre0\x00'}}, 0x1e) [ 145.407253] binder: 10308:10319 got new transaction with bad transaction stack, transaction 142 has target 10308:0 [ 145.417901] binder: 10308:10319 transaction failed 29201/-71, size 0-0 line 2879 [ 145.504211] binder: BINDER_SET_CONTEXT_MGR already set [ 145.509947] binder: 10327:10328 ioctl 40046207 0 returned -16 [ 145.524219] binder: 10327:10328 got transaction with invalid parent offset or type [ 145.532369] binder: 10327:10328 transaction failed 29201/-22, size 32-8 line 3090 [ 145.541712] binder_alloc: binder_alloc_mmap_handler: 10327 20001000-20004000 already mapped failed -16 [ 145.551812] binder: BINDER_SET_CONTEXT_MGR already set [ 145.564551] binder: 10327:10328 ioctl 40046207 0 returned -16 [ 145.571562] binder: 10327:10331 got transaction with invalid parent offset or type [ 145.586866] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.595748] binder: 10327:10331 transaction failed 29201/-22, size 32-8 line 3090 [ 145.617071] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.741373] device bridge_slave_1 left promiscuous mode [ 145.747741] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.768559] device bridge_slave_0 left promiscuous mode [ 145.774275] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.838482] binder: release 10308:10319 transaction 142 out, still active [ 145.863808] binder: send failed reply for transaction 142, target dead 13:51:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000280)) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000002c0), 0x174, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) recvmsg(r1, &(0x7f0000000580)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/123, 0x7b}], 0x1}, 0x2) shutdown(r1, 0x1) 13:51:40 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2400000008061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={@rand_addr, @broadcast}, &(0x7f00000005c0)=0xc) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x2, 0x0, [0x0, 0x0]}) recvmmsg(0xffffffffffffffff, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000001300)}, 0x2000000000000}], 0x1, 0x0, &(0x7f0000006000)) 13:51:40 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000080)=""/175, &(0x7f0000000140)=""/56, &(0x7f00000002c0)=""/151, 0x1000}) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280), 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x1d, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000380)='id_legacy\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000400)="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", 0xfd, r1) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) 13:51:40 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000003, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) 13:51:40 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:40 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x2000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000200)="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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000240028ecffffff0000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) r2 = getpid() r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x800, 0x0) perf_event_open(&(0x7f0000000100)={0x6, 0x70, 0x3, 0x6, 0x1, 0x4, 0x0, 0x29, 0x200, 0xa, 0x0, 0x2, 0x2, 0x21ac4586, 0x4, 0x6, 0xfffffffffffffffc, 0x10000, 0x0, 0x1ff, 0xffffffff, 0x10001, 0x2, 0x5, 0x7f, 0x8, 0x6, 0xfff, 0x400, 0x0, 0x2, 0x0, 0x1a, 0xffff, 0x1, 0x0, 0xffffffff00000000, 0xfffffffffffffffd, 0x0, 0x4, 0x5, @perf_bp={&(0x7f0000000040)}, 0x100, 0x4, 0x6, 0x0, 0x3, 0x9, 0x80000000}, r2, 0x2, r3, 0x8) 13:51:40 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) unshare(0x400) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 13:51:40 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) 13:51:40 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in, 0x0, 0x0, 0x0, 0x3, 0x30}, 0x98) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4305c2, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x5, 0x5, 0x9, 0x6bcf, 0x84, 0x4, 0x3, 0x7, 0xfb, 0x3}) [ 145.986740] netlink: 'syz-executor7': attribute type 1 has an invalid length. [ 145.994305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 146.006361] binder: 10348:10358 got new transaction with bad transaction stack, transaction 147 has target 10348:0 [ 146.017098] binder: 10348:10358 transaction failed 29201/-71, size 0-0 line 2879 13:51:40 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x183cc, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:40 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008c80), 0x4000000000000a7, 0x43, 0x0) 13:51:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0), 0x8) close(r2) close(r1) 13:51:40 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) [ 146.087939] netlink: 'syz-executor7': attribute type 1 has an invalid length. [ 146.092314] binder: release 10348:10358 transaction 147 out, still active [ 146.095650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 13:51:40 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 146.172427] netlink: 'syz-executor7': attribute type 1 has an invalid length. [ 146.179880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 146.194107] binder: send failed reply for transaction 147, target dead 13:51:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@newneigh={0x34, 0x1c, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @remote}, @NDA_DST_MAC={0xc, 0x1, @random="f7e9e2a4c5d2"}]}, 0x34}}, 0x4) [ 146.230141] netlink: 'syz-executor7': attribute type 1 has an invalid length. [ 146.237649] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 13:51:41 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x60) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x240201) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x40045108, &(0x7f0000a07fff)) [ 146.270739] binder: 10394:10397 got new transaction with bad transaction stack, transaction 150 has target 10394:0 [ 146.281450] binder: 10394:10397 transaction failed 29201/-71, size 0-0 line 2879 13:51:41 executing program 7: r0 = socket$inet6(0xa, 0x800000806, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000000)="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", 0x118) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="bb626229ce8721af39733e3ba4ea726d342a4ddbd03e539c8963addeef97e4f56fe9d8a9e7ff6e349cadef88c746abc636b421bd78c8d8ea36ec37cbd4e14121eb3e06ee6c2b9df7", 0x48, 0xfffffffffffffffb) r2 = add_key(&(0x7f0000000300)='.request_key_auth\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000380)="728fc7f6cd9ad101ceff50dafbeab7e90a20e30a9b593370b0a28cff756b9a65a1cfb4ad23e4658a182934918f38f35379304ed8fada72ff430703943071af2a2c962563b2e1a20bf8c502078dedb111472ef4fb62ffa3308cdf9d35840351189bd9a2ae9ba1fb54c427882bea749abc2f5eaba37d2a9b66018a4c53d3e51934340b2ab778bcc1a99a46219e1ee6a9b788de12db6a6587dd61d9c98656acc90f5b83b85d68feda2630227c0bf192fe092e46ca9eb49bf7f7c1d7106ec828888a93497ad739657aed4349c60e09cd085695c3f8ebffe199cebb", 0xd9, 0xfffffffffffffffa) keyctl$instantiate(0xc, r1, &(0x7f0000000240)="0beb15b450326c3ee7b5ba5aef715d89be4b06efac75663331377fd40bd4eb8bcdb896c1765f4069beb98998c52dd18d53b4febac06f7193051c260ac08475c226129e9b7990e107270c0de2d3af61a05098a3a1101b8ac618a0a5616f7763620e66c220fe2e555877b4efbff3cbba7de29f6cf1f38c558f9e955b69819bcce4bf0503fd28ff1153b43de4451f40e6a2715590e7516063e1b675758429", 0x9d, r2) 13:51:41 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote, 0x0, 0xff}, 0x0, @in=@multicast2, 0x0, 0x1}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0xfa) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x200080, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000240)="3bd5d4510346bc7fddcb31bba1ba4294cf9517a502f75eb4080b2d6e3c6952688fd179f420d72de56390155bf4d06ed139acbe50f623647cf97f49f92675a5ab927944de52f776ea7b19d85e", 0x4c) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000140)) recvmmsg(r1, &(0x7f0000000f00), 0x400000000000308, 0x10000, &(0x7f0000001000)={0x77359400}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xe091, @mcast2, 0x7f}, 0x1c) 13:51:41 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) 13:51:41 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x3f00000000000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init1(0x1fc) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x110) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x10) fcntl$notify(r0, 0x402, 0x1) close(r2) 13:51:41 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 146.366710] binder: release 10394:10397 transaction 150 out, still active [ 146.401405] binder: send failed reply for transaction 150, target dead [ 146.482289] binder: 10424:10427 got new transaction with bad transaction stack, transaction 153 has target 10424:0 [ 146.493001] binder: 10424:10427 transaction failed 29201/-71, size 0-0 line 2879 13:51:41 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/hwrng\x00', 0x400000, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x1f8, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast, [], @broadcast, [], 0xd0, 0x108, 0x138, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1, 0x0, @loopback, 0x0, @empty, [], @dev}}}]}, [@snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}]}, 0x270) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r1, 0x94, "a989c3f6387336d50be2640f08cbf9c8d0f3937a4cd952ad31e91aec249f769a869faba723ab24194ba6dfba31d77743a3f088dddaca571ceae07d3be8a26805d71aa72805107fd9478c2cae1c6d980d08001d119bd6d5571483eaeb7eaa00798744b904fc9abdd91d7a9f9a2d0306cbfecce6ce7c2001c8e0b9a7ce6bd182ba0d13408c7c7981dd19c5d552a59931651198c52f"}, &(0x7f0000000280)=0x9c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x20000220], 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snapshot\x00', 0xc480, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000580)={0xfffffffffffffff7, 0xffffffffffffffe0}) 13:51:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:51:41 executing program 6: socket$netlink(0x10, 0x3, 0x4) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x80002, 0x0) finit_module(r0, &(0x7f0000000080)='\x00', 0x2) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x4, {0x2, 0x4e24, @local}, {0x2, 0x4e22, @rand_addr=0x5}, {0x2, 0x4e21, @rand_addr=0x9}, 0x2, 0x3, 0x7, 0x3, 0x14c, &(0x7f0000000100)='ip6tnl0\x00', 0x23890a36, 0x0, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@setneightbl={0x1c, 0x43, 0x301, 0x0, 0x0, {0xa}, [@NDTA_NAME={0x8, 0x1, '\x00'}]}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 13:51:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x1000000000000009) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e) 13:51:41 executing program 7: r0 = socket$inet6(0xa, 0x800, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local}], 0x20) shutdown(r0, 0x0) 13:51:41 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) 13:51:41 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x6000000000000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:41 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 146.555326] binder: release 10424:10427 transaction 153 out, still active [ 146.581503] binder: send failed reply for transaction 153, target dead [ 146.622583] binder_alloc: 10445: binder_alloc_buf, no vma [ 146.628293] binder: 10445:10447 transaction failed 29189/-3, size 0-0 line 2967 [ 146.661187] binder_alloc: 10445: binder_alloc_buf, no vma 13:51:41 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) 13:51:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) r3 = getpgid(0xffffffffffffffff) socket$inet6(0xa, 0x80000, 0xb42) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000000c0)=r3) fcntl$dupfd(r0, 0x0, r0) dup3(r1, r0, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") write(r0, &(0x7f0000000440)="55c51f3ad27bcafdb75ed5f94488aaa37ebef965080e701ae0ab5efa9ea3", 0x1e) [ 146.666933] binder: 10445:10460 transaction failed 29189/-3, size 0-0 line 2967 13:51:41 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0xffffffffffffff39) setsockopt$inet_group_source_req(r0, 0x0, 0x2d, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) 13:51:41 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6831a10dae33c015b747b827009ff6d59db3c56fe8fc62e411dcba7a605884f070ddac3fb66e521d6cc8821f4a9cbd057419f30e52c9d8183a6761f5a8681dcab642184d022bbba4f718c5d6758942fdffffff560c8e99546f080f3c8184b4731c5a83caf7b8705c522b8eeec2c0efddb07ae2217183db324131492a100c86b29bc4012f58987f58f765c92c0962e1284734b45c9c9d633313f96252e5527dabed056383a1f448715e158e178a3dcaebef8cd56a5a7d650a50e5bfdc3a1b60d08ae1d0d9f3b50afb7737efd731bc9b290330df4cfe5c9e45a2de2ebd4897c4b573632ec2a3581c296deb213f3913597a26de4f2c5b3c3a"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) 13:51:41 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000240)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={r2, 0x200, 0x6, [0x10001, 0x7fff, 0xffffffffffffff01, 0x3, 0x100000000, 0xaa]}, 0x14) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b00010200000000004000000000000bb0fb64b94b803c169bc514d866eabbd3317183ab75c8a4c73234ba38f3f162d1877028a9f99b35"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x400000000000252, 0x10000, &(0x7f0000001000)={0x77359400}) 13:51:41 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x3f00, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = dup3(r0, r0, 0x80000) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) r2 = inotify_init() mkdir(&(0x7f0000000100)='./control\x00', 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x80000d50) open(&(0x7f0000000000)='./control\x00', 0xd40beb2474dfd227, 0x0) 13:51:41 executing program 2: r0 = socket(0x10, 0x3, 0x2) r1 = dup(r0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) write(r1, &(0x7f0000000040)="1b00000042001f0fff07f4f9002304000afa04e611080041000201", 0x1b) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$inet6(0xa, 0x3, 0xa3d9) accept$unix(r1, 0x0, &(0x7f0000000080)) [ 146.841257] binder_alloc: 10488: binder_alloc_buf, no vma [ 146.847076] binder: 10488:10491 transaction failed 29189/-3, size 0-0 line 2967 [ 146.874916] binder_alloc: 10488: binder_alloc_buf, no vma [ 146.880700] binder: 10488:10495 transaction failed 29189/-3, size 0-0 line 2967 13:51:41 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6831a10dae33c015b747b827009ff6d59db3c56fe8fc62e411dcba7a605884f070ddac3fb66e521d6cc8821f4a9cbd057419f30e52c9d8183a6761f5a8681dcab642184d022bbba4f718c5d6758942fdffffff560c8e99546f080f3c8184b4731c5a83caf7b8705c522b8eeec2c0efddb07ae2217183db324131492a100c86b29bc4012f58987f58f765c92c0962e1284734b45c9c9d633313f96252e5527dabed056383a1f448715e158e178a3dcaebef8cd56a5a7d650a50e5bfdc3a1b60d08ae1d0d9f3b50afb7737efd731bc9b290330df4cfe5c9e45a2de2ebd4897c4b573632ec2a3581c296deb213f3913597a26de4f2c5b3c3a"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) 13:51:41 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x60100, 0x0) dup2(r0, r1) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r3, 0xc004510e, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x1f, 0xd4, 0x3, 0x3df, 0x6}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e21, 0x200000000000000, @loopback, 0xfff}}}, 0x84) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e24, 0x1, @local, 0xffffffffffffff01}, {0xa, 0x4e21, 0x7fff, @empty, 0x800}, 0x8, [0x3, 0x40, 0x5, 0x8, 0x3dd1, 0x800000000000001, 0x4, 0x8]}, 0x5c) 13:51:41 executing program 4: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x1, 0x4, 0x7}, {{}, 0x100000001, 0x4}], 0x30) r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x2, 0x28002) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r2 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x7, 0x7ff, 0x9, 0xb8, 0x695, 0xff, 0x8, 0x5, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000180)={r3, 0x2}, 0x8) 13:51:41 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:41 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9c70b0000b802000000ba000000000f300f21bcc42175d08cf6d66a0000c4624d93443a00b9980100000f3265f2410f0866470fe07d001d0000000043d9fe66baf80cb85cc87b8fef66bafc0ced", 0x4e}], 0x1, 0x0, &(0x7f00000002c0), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'bond0\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000003c0)={0x0, 0x1000}) r3 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x200, 0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000002c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x18) mkdir(&(0x7f0000000200)='./file0\x00', 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000240)) 13:51:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x76, &(0x7f0000000200), 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000000)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x8000, @mcast1, 0x3}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r3, 0x3}, 0x8) close(r2) close(r1) 13:51:41 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x13a, @time, 0x8, {0x7, 0x1f}, 0x100, 0x0, 0x80}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r2) quotactl(0x400, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="c0c4f6c7f70821375ca8919e96f84280b5dee65d68010d508d107ab9e97a06f73a48da228cb269a7a68bf49991b8fd36781e6fd557cd8d2bba89740980aa50ea20d07882894474a1b81a") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000002c0)={0x1000, 0x0, 0x3ff}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000003c0)={0x3c6, 0x3, 0x0, [{0x9, 0x0, 0x5, 0x400, 0x1, 0x80000000}, {0x2, 0x4, 0x2, 0x1, 0xfffffffffffffffa, 0x81}, {0x411, 0x1, 0xffffffff00000000, 0xffffffff, 0x9, 0x2c4a, 0xa6}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000004c0)={0x1, r0}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000500)=0x8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000540)={@loopback, 0x35, r1}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000006c0)={0x7, 0xc, [0x7fff, 0xd9e, 0x101]}) r4 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x120010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x14, 0x0, &(0x7f0000000700)=[@increfs_done={0x40106308, r4, 0x3}], 0xe6, 0x0, &(0x7f0000000740)="874018275e2d44e6b140b1cc29824392447cdb0fd9daee5e5c43ab0864af74ad4c7413a84625b537b089aa7d1606861650767d6a8112b5b7a44f716c0849af4f662a9260a13cba126898a092e23cef09496fce80c3e6957c9cd19ea98a25a855e24280350f4aaa7c920f8f5dd929ecc1495d5975c0f18dae9b7b4a38af3ec931894416ea6e08ae1e3584325c256c5a7e280ac0ed94553157938ba73abf130feca1f8a61595342306a18c1d184ca2b3e0bd34398fcdc10a9597b2dfbe724763c7905f244f643f72a010af9e36eed5d433c8850170164db509891991781a1f53af53799767b232"}) statx(r0, &(0x7f0000000880)='./file0\x00', 0x100, 0x49, &(0x7f00000008c0)) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000009c0)={{0x9, 0x5, 0x100000001, 0x7fff, 0x6}, 0x80000001, 0x8, 0x6, 0x4, 0xfffffffffffffff7, "d27a1f995d706eff9c7a3dbb2c919a6194d287674b36083495d2748d56c772e2bf28b51321e8c9799db89e6dea873e40aeeb57df6ca2891a40e889409d096785a84c3ae79035691cd5d9af7d006a19afc5f731e3e2b1e8db74215040d851d09fa9a522394a328623a9c3b48aefb08759c66384fdca1fd8d1ca74ad8024b56157"}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000a80)={'erspan0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x3) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000b00)='team\x00') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000b40)={0x0, @broadcast, @rand_addr}, &(0x7f0000000b80)=0xc) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001080)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000000bc0)={0x478, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x14c, 0x2, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x3, 0x0, 0x7ff, 0x1ff}, {0x6, 0x7, 0x5c9, 0x4}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x4, 0xff, 0x8000, 0x1}, {0xf6, 0x2, 0x0, 0x81}, {0x45, 0x435, 0x9, 0x3f1}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x700000}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x80, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r6}, {0x1c0, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x1, 0x9, 0x6, 0x95c4}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x10001, 0x2, 0x3}, {0x6e5, 0x2, 0xffffffffffffffff, 0x8000}, {0x7ff, 0xffffffffffffffff, 0x1, 0x22e}, {0x9, 0x6, 0x81, 0x4}, {0xa7, 0x4, 0x80000001, 0x7fff}]}}}]}}, {{0x8, 0x1, r3}, {0xb8, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0xc010}, 0x24004805) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KDSKBMETA(r7, 0x4b63, &(0x7f0000001100)=0x9) ioctl$IOC_PR_PREEMPT_ABORT(r7, 0x401870cc, &(0x7f0000001140)={0x2, 0xffffffffffff0001, 0x2902575c, 0x100}) r8 = syz_open_dev$sndpcmc(&(0x7f0000001180)='/dev/snd/pcmC#D#c\x00', 0x1f, 0x214000) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) ioctl$EVIOCGREP(r8, 0x80084503, &(0x7f00000011c0)=""/58) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r8, 0xc0a85322, &(0x7f0000001200)) 13:51:41 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x2, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 147.132357] binder_alloc: 10526: binder_alloc_buf, no vma [ 147.138183] binder: 10526:10532 transaction failed 29189/-3, size 0-0 line 2967 13:51:41 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6831a10dae33c015b747b827009ff6d59db3c56fe8fc62e411dcba7a605884f070ddac3fb66e521d6cc8821f4a9cbd057419f30e52c9d8183a6761f5a8681dcab642184d022bbba4f718c5d6758942fdffffff560c8e99546f080f3c8184b4731c5a83caf7b8705c522b8eeec2c0efddb07ae2217183db324131492a100c86b29bc4012f58987f58f765c92c0962e1284734b45c9c9d633313f96252e5527dabed056383a1f448715e158e178a3dcaebef8cd56a5a7d650a50e5bfdc3a1b60d08ae1d0d9f3b50afb7737efd731bc9b290330df4cfe5c9e45a2de2ebd4897c4b573632ec2a3581c296deb213f3913597a26de4f2c5b3c3a"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) [ 147.202256] binder_alloc: 10526: binder_alloc_buf, no vma [ 147.208192] binder: 10526:10538 transaction failed 29189/-3, size 0-0 line 2967 13:51:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) ioctl(r0, 0x1, &(0x7f0000000280)="08776506a18b79dc00000000e1ff0073aeb16b050000006a7b121eb77e8f738a2443cfcf00e5cd011c5908a972acfbec9865a0220646cd6551d860a237b83037e9db0d833782742ae20b6cc311a725b33b37dd2530227e1c592f5060e9c09b27b55bbb277fe3d741cf18908cedfcc79695c3760e596475b9a47f0dffffff7fd47cf95f58") ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'syzkaller0\x00'}) 13:51:42 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:42 executing program 2: clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") tkill(r0, 0x1000000000016) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x2, r1, r1) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cuse\x00', 0x200200, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000200)=0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000006c0)=@sack_info={r3, 0xb1, 0x2}, &(0x7f0000000700)=0xc) accept$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x14) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@loopback, @in6=@ipv4, 0x4e24, 0xfaa, 0x4e23, 0x7f, 0xa, 0x80, 0x20, 0x7e, r4, r5}, {0x1, 0x9, 0x0, 0x4, 0x2, 0x7f, 0x101, 0x81}, {0x8, 0x5be, 0x8000, 0x20}, 0x80, 0x6e6bb5, 0x3, 0x0, 0x1, 0x3}, {{@in6=@remote, 0x4d3, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x4, 0x2, 0x0, 0x2, 0x5, 0xc3}}, 0xe8) socket$bt_hidp(0x1f, 0x3, 0x6) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000540)={0x0, 0xdf, "d2cce6c1ce8213a0f998637c5e94d198196499e54a7fea99fbe3930781efcda45d79608cbe4753448185e36c53301ee0aeaba154c82c7020d5bc217bfa0128fadc300c96d15a9e0327c43a21149af8874bcdab3778dd3c6b941b3458a1070460c8a64da2f2bac73dbaefea563ec5cc5b76b14b0c9e78044ad9b3ec546f62e9f649016f8648401e5ae2245bf0a834e8a51dd96d765155b2f357c5041ea315f1f9362d67737104318da53ccfafc637eaf54a08ecf27da668886bb5df14f49c85e969084351ca1e01fb6186c2376932c897589f3ca9afb117c8075005ba57e1df"}, &(0x7f0000000640)=0xe7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000680)={r7, 0x8}, 0x8) r8 = getuid() connect(r1, &(0x7f00000003c0)=@ax25={0x3, {"8f1442d00f709b"}, 0x6}, 0x80) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x19}, @in=@multicast1, 0x4e21, 0x0, 0x4e20, 0x7, 0xa, 0xa0, 0x80, 0xff, r6, r8}, {0x4, 0x401, 0x80000000000000, 0x9, 0x8, 0x5, 0x800, 0x80}, {0x401, 0x2, 0x5}, 0x5, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in=@loopback, 0x4d4, 0x3f}, 0xa, @in=@multicast1, 0x3504, 0x7, 0x1, 0x7, 0x2, 0x3f, 0x81}}, 0xe8) restart_syscall() ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000440)={{0x2, 0x2, 0x9, 0x2, 0x4}, 0x6, 0x7, 'id1\x00', 'timer1\x00', 0x0, 0xf424, 0x0, 0x10000, 0x7fff}) 13:51:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0x2c) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x400000) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000140)={"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"}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x4, @loopback, 0x400}, @in6={0xa, 0x4e23, 0xff, @mcast1, 0x5}], 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x2f}, [@ldst={0x7, 0x0, 0x0, 0x51}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) 13:51:42 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0xc0640, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000580)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc1205531, &(0x7f0000000280)=""/236) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)=""/38) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@generic, &(0x7f0000000100)=0x80) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000380)={0x3, {{0x2, 0x4e21, @loopback}}, 0x1, 0x2, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}}]}, 0x190) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x10200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000200)={0x5, 0x2, {0x0, 0x3, 0x1000, 0x0, 0x123e2767}}) 13:51:42 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) 13:51:42 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0xffffff7f00000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:42 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6831a10dae33c015b747b827009ff6d59db3c56fe8fc62e411dcba7a605884f070ddac3fb66e521d6cc8821f4a9cbd057419f30e52c9d8183a6761f5a8681dcab642184d022bbba4f718c5d6758942fdffffff560c8e99546f080f3c8184b4731c5a83caf7b8705c522b8eeec2c0efddb07ae2217183db324131492a100c86b29bc4012f58987f58f765c92c0962e1284734b45c9c9d633313f96252e5527dabed056383a1f448715e158e178a3dcaebef8cd56a5a7d650a50e5bfdc3a1b60d08ae1d0d9f3b50afb7737efd731bc9b290330df4cfe5c9e45a2de2ebd4897c4b573632ec2a3581c296deb213f3913597a26de4f2c5b3c3a"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) 13:51:42 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') r0 = socket$kcm(0x29, 0x5, 0x0) sendfile(r0, r0, &(0x7f0000301ff8), 0xffffffff) write$binfmt_aout(r0, &(0x7f00000000c0), 0xfffffdef) [ 147.451365] binder_alloc: 10569: binder_alloc_buf, no vma [ 147.457206] binder: 10569:10574 transaction failed 29189/-3, size 0-0 line 2967 [ 147.485500] binder_alloc: 10569: binder_alloc_buf, no vma [ 147.491281] binder: 10569:10580 transaction failed 29189/-3, size 0-0 line 2967 13:51:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt(r0, 0x80000000, 0x7, &(0x7f0000000000)="2619bd3f83d06b1a2be4456656e2c6a5fa8e71afaa2401ff50d05535c43a8cd85ab98b3bb77cae0bc6023c5e0a42d4f4ea00a2361818b796d49da7a723f1ce5b54ee9c169dd31ffa80725bd8039d2d17616fa5bd3228682654088a9654a0f150f62e41aed3aceb2e3b76c691e84bd36556bb7eb5de0ba80f5a5579a7717ea29a90c7c39aa2af634fff0993ef33bc33908bf04bf977c55b916ee9d487319c29bb4aacf35ff2", 0xa5) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x6, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x48, [], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=""/72}, &(0x7f00000001c0)=0x78) 13:51:42 executing program 7: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") 13:51:42 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0x515440) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0xbb, 0x1}, 0x4}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x3dd) connect$inet(r0, &(0x7f0000000040), 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x14) dup2(r2, r0) 13:51:42 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x8305000000000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:42 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) 13:51:42 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000380)={0x2, 0x0, [0x48a]}) 13:51:42 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, [], {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x1, @random="f8bf88df5b1b", @remote, @dev, @rand_addr=0xac1414bb}}}}, &(0x7f0000000040)={0x0, 0xfffffffffffffffd}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x100, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x5, 0xffffffff, 0x4fa8, 0x0, 0xfffffffffffffff7, 0x34c28, 0xd, 0x800, 0x7, 0x0, 0x2, 0x9, 0x9, 0x0, 0x800, 0x8, 0x8, 0x0, 0x7f, 0x100000001, 0xc0, 0x3f, 0x744, 0x2, 0x5, 0xfffffffffffffe01, 0x1, 0xa2b4, 0x0, 0x5, 0x2, 0x7, 0x100, 0x4, 0x7fffffff, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000140), 0x3}, 0x4, 0xfffffffffffffffc, 0x1, 0x5, 0x740092, 0x2, 0x3}, r1, 0xb, r0, 0x9) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 13:51:42 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6831a10dae33c015b747b827009ff6d59db3c56fe8fc62e411dcba7a605884f070ddac3fb66e521d6cc8821f4a9cbd057419f30e52c9d8183a6761f5a8681dcab642184d022bbba4f718c5d6758942fdffffff560c8e99546f080f3c8184b4731c5a83caf7b8705c522b8eeec2c0efddb07ae2217183db324131492a100c86b29bc4012f58987f58f765c92c0962e1284734b45c9c9d633313f96252e5527dabed056383a1f448715e158e178a3dcaebef8cd56a5a7d650a50e5bfdc3a1b60d08ae1d0d9f3b50afb7737efd731bc9b290330df4cfe5c9e45a2de2ebd4897c4b573632ec2a3581c296deb213f3913597a26de4f2c5b3c3a"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x48}, 0x0) 13:51:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f000039a000)=[{0x35, 0x0, 0x0, 0xfffffffffffffffe}, {0x6}]}, 0x10) [ 147.807357] binder_alloc: 10611: binder_alloc_buf, no vma [ 147.813130] binder: 10611:10614 transaction failed 29189/-3, size 0-0 line 2967 [ 147.841267] binder_alloc: 10611: binder_alloc_buf, no vma [ 147.846981] binder: 10611:10622 transaction failed 29189/-3, size 0-0 line 2967 13:51:42 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40, 0x0) ioctl$TIOCGPTPEER(r0, 0x541f, 0x0) 13:51:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x7, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20000, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{&(0x7f00000000c0)=@ax25, 0x80, &(0x7f0000001340)=[{&(0x7f0000000140)=""/102, 0x66}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/158, 0x9e}, {&(0x7f0000001280)=""/30, 0x1e}, {&(0x7f00000012c0)=""/128, 0x80}], 0x5, &(0x7f00000013c0)=""/215, 0xd7, 0x839c}, 0x100000000}, {{&(0x7f00000014c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001540)=""/72, 0x48}, {&(0x7f00000015c0)=""/227, 0xe3}, {&(0x7f00000016c0)=""/164, 0xa4}, {&(0x7f0000001780)=""/180, 0xb4}], 0x4, 0x0, 0x0, 0xf15b}, 0x45fd}, {{&(0x7f0000001880)=@generic, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/183, 0xb7}], 0x1, &(0x7f0000001a00)=""/152, 0x98, 0x800}, 0x3a21af56}, {{&(0x7f0000001ac0)=@xdp, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b40)=""/255, 0xff}, {&(0x7f0000001c40)=""/100, 0x64}], 0x2, &(0x7f0000001d00)=""/8, 0x8, 0x5}, 0x100000001}, {{&(0x7f0000001d40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001dc0)=""/144, 0x90}, {&(0x7f0000001e80)=""/43, 0x2b}, {&(0x7f0000001ec0)=""/92, 0x5c}], 0x3, &(0x7f0000001f80)=""/175, 0xaf, 0xfffffffffffffbff}, 0x10001}], 0x5, 0x0, &(0x7f0000002180)) 13:51:42 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x4000000000000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:42 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:42 executing program 6: semget(0x1, 0x1, 0x400) r0 = semget(0x0, 0x1, 0x8) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000100)=""/3) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x120) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) 13:51:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000080)={0x7, 0x5322, 0x174, 0x404}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0xc0000102]}) [ 148.077124] binder_alloc: 10650: binder_alloc_buf, no vma [ 148.082796] binder: 10650:10654 transaction failed 29189/-3, size 0-0 line 2967 [ 148.112514] binder_alloc: 10650: binder_alloc_buf, no vma [ 148.118283] binder: 10650:10654 transaction failed 29189/-3, size 0-0 line 2967 [ 148.156164] kernel msg: ebtables bug: please report to author: Wrong nr of counters 13:51:42 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAF(r1, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x269d, 0x200000000000, 0x0, 0x0, 0x9, 0x0, 0xd5}) ioctl$KDGKBLED(r1, 0xc0045405, &(0x7f0000000080)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f00000000c0)={0x1000003, 0x4}) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7, 0x882) 13:51:42 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6831a10dae33c015b747b827009ff6d59db3c56fe8fc62e411dcba7a605884f070ddac3fb66e521d6cc8821f4a9cbd057419f30e52c9d8183a6761f5a8681dcab642184d022bbba4f718c5d6758942fdffffff560c8e99546f080f3c8184b4731c5a83caf7b8705c522b8eeec2c0efddb07ae2217183db324131492a100c86b29bc4012f58987f58f765c92c0962e1284734b45c9c9d633313f96252e5527dabed056383a1f448715e158e178a3dcaebef8cd56a5a7d650a50e5bfdc3a1b60d08ae1d0d9f3b50afb7737efd731bc9b290330df4cfe5c9e45a2de2ebd4897c4b573632ec2a3581c296deb213f3913597a26de4f2c5b3c3a"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x30}, 0x0) 13:51:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ppoll(&(0x7f0000013000)=[{r1}], 0x1, &(0x7f0000001000)={0x77359400}, &(0x7f000000d000), 0x8) fcntl$setlease(r1, 0x400, 0x2) ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000000000)=0x7f) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x40, 0x4) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000240)={0x6}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") 13:51:42 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000040)='./file0//ile0\x00', &(0x7f0000000200)='cgroup2\x00', 0x1800040, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040), 0x0) 13:51:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000180)=0x8, 0x30b) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x1, 0x3f}, &(0x7f0000000080)=0x8) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x7fff}, &(0x7f0000000100)=0x8) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$netlink(r1, 0x10e, 0x0, &(0x7f00000002c0)=""/206, &(0x7f0000000140)=0xce) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 13:51:42 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:42 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x7000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/l2cap\x00') getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) time(&(0x7f0000000000)) 13:51:43 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x128}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x6, 0xf68, 0xe7, 0x40, 0x0, 0x6d, 0x20000, 0x1, 0x3f, 0x80000000, 0x5, 0x5, 0x7a, 0x3f, 0x0, 0x100000000, 0x5, 0xfffffffffffffeff, 0xc74, 0x66e15254, 0x3, 0x401, 0x7fff, 0xb9d, 0x7fffffff, 0x81, 0x37b0, 0x7fff, 0x8000, 0x7, 0xf53, 0x8, 0x401, 0x1, 0xdc, 0x5, 0x0, 0x6, 0x0, @perf_config_ext={0x6, 0x3}, 0x21000, 0x1f, 0x3, 0x5, 0x7ff, 0x3, 0x8}, r1, 0x5, r0, 0xa) creat(&(0x7f0000000000)='./file0\x00', 0x4) sync_file_range(r0, 0x228, 0x6, 0x3) 13:51:43 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x30}, 0x0) [ 148.286364] binder: 10680:10684 transaction failed 29189/-22, size 0-0 line 2852 [ 148.325518] binder: 10680:10696 transaction failed 29189/-22, size 0-0 line 2852 13:51:43 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0xbe) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000), 0x351) 13:51:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_newroute={0x1c, 0x18, 0xe0b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0x40800) write$P9_RLOPEN(r1, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x39, 0x3, 0x8}, 0x9b7cf3f}}, 0xfffffffffffffddf) 13:51:43 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:43 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x1100, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000500)=0x10f) r4 = getegid() tee(r1, r0, 0x2, 0x2) sendmsg$unix(r1, &(0x7f00000005c0)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)="71c84e8ec3e1669e5dbd20d6c8ccffe20334f52f8badeabee4877346847beb4c81bc60613c7246b45a91d7cf0f6488c0487fc29cb2d6cdd58b81acd21d9206d6e5308f2b976e9d6105beee2a8b91caa8821192196a461c36294cdfdaa735d64f7c669d7edab595cadfde9dc6c8eae681dcfc6542fc63e66bd9e81e672ca30467a28413d32637e8e798eeab4b553911d9270766e8544b6e697c62cce4135bdd4b9100852c5c0baba3294934c710", 0xad}, {&(0x7f00000001c0)="56e3b34e46bde868e2bbf953b351de858986b7290dbab484a190af72d288e368f378baec89e71091f3e0a193e5a0480e926b504c492597d62e89ca8a8aa47e6c9131", 0x42}, {&(0x7f00000002c0)="c9f94a3dcf878242afc67ac49d2094407acdd4195e5600a3c1498ba644a7e68fccdace44374855c71040dd89fa0f337f01983b0f743a5b1f1f1822b2eb3f39d9e1a154f1ba62fdfc76881001f33b5a9d7a1b424a57f9d2517bd3035f07f23f38399e", 0x62}, {&(0x7f0000000340)="89fa6a5e1030d15e2ffa5b7235512376531f0559621229a9013287d2609082da490517bcc3f6eb6902db0b4dc62cbcff0e2034a345e70f7a4637bb15a0c022fe7f7c5c65baa5baafca7ea614679fc84043e575c224ba2ea1e0f4bf8ec49baba7d1cbafc2d76093a837b8", 0x6a}, {&(0x7f00000003c0)="37a46ed47be4b467de276320a7a5a4fef3c950f863c8bef905420e766e9e2bf2970eabda6e87531b99404552cc0a9544c4b93262299913ae95d617b345523739072d333df6efbfc1f8cd727584c6fbafe975c1bc228dec1333468396b41268baf0fb75ac8da469dff11118a860fc46bad927ad8b1a7511ec", 0x78}], 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="300031dc10c07fadbbfe6a8fc4506a5a", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="230000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0], 0x68, 0x4000}, 0x14) ioctl(r1, 0x208912, &(0x7f0000000680)="023c3a3fab902f868f81e033b353fb") clock_gettime(0xe281a269f94be3f3, &(0x7f0000000000)) 13:51:43 executing program 6: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0x8) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r3 = socket$inet6(0xa, 0x80003, 0xff) dup3(r2, r3, 0x0) 13:51:43 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x30}, 0x0) 13:51:43 executing program 2: read(0xffffffffffffffff, &(0x7f0000000140)=""/28, 0x1c) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8000, 0x7ffffffffbffffff) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) dup2(r0, r1) [ 148.494342] binder: 10716:10721 transaction failed 29189/-22, size 0-0 line 2852 [ 148.540126] binder: 10716:10721 transaction failed 29189/-22, size 0-0 line 2852 13:51:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) 13:51:44 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xa2, 0x800) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0xa4, 0x35c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000240)={0x7, 0xffffffffffffffe1, 0x1, 'queue1\x00', 0x6}) syz_open_procfs$namespace(r1, &(0x7f00000001c0)='\x00\x00\x00\x00') 13:51:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0xd2800, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000000)=""/28, &(0x7f0000000080)=0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000240)) 13:51:44 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:44 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x30}, 0x0) 13:51:44 executing program 6: socket$key(0xf, 0x3, 0x2) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x30) setsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f0000000140)=0x4, 0x4) r1 = socket$inet6(0xa, 0x3, 0x4000000000001) connect$inet6(r1, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2, 0x200000007}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x1d84, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e21, @remote}, 0x42, 0xffff, 0x5, 0x1, 0x80000001, &(0x7f0000000040)='bridge_slave_0\x00', 0x10001, 0x7fff, 0x4}) sendmsg(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002800)}, 0x0) 13:51:44 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x3, 0x6, @dev}, 0x10) close(r0) 13:51:44 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x3, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x89, 0x61f21a6ece61b5b7) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x100, 0x1f, 0xfd1, 0x9, 0x7fffffff, {0x0, @in={{0x2, 0x4e21}}, 0x3, 0x7, 0x6e3e, 0xffffffffffffffc0, 0x5}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x81, 0x8640, 0x81}, &(0x7f0000000200)=0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100), &(0x7f0000000000)=0x4) [ 149.593071] device bond_slave_0 entered promiscuous mode [ 149.599055] device bond_slave_1 entered promiscuous mode [ 149.610525] binder: 10759:10769 transaction failed 29189/-22, size 0-0 line 2852 [ 149.622676] device bond_slave_0 left promiscuous mode [ 149.628193] device bond_slave_1 left promiscuous mode 13:51:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) sync_file_range(r1, 0x1, 0xfffffffffffffff7, 0x2) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000080)={{0x0, @rand_addr, 0x4e24, 0x3, 'wlc\x00', 0x20, 0x100, 0x28}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x4e23, 0x0, 0x9, 0x600000000000, 0x800}}, 0x44) r2 = socket(0x10, 0x3, 0x9) r3 = dup3(r2, r1, 0x80000) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000100)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000240)=0xc) r5 = syz_open_procfs(r4, &(0x7f00000002c0)="ce065252afc6166fc1017b79fb49271f63ad91dca17f1d51cac6b74402b44906450768e8d21006f68a353d41a21b1e2e61d002085c84b22730faba30e7ccf9ab712473277f3539b4951f066a9e134cc7dd282f6de4bf0e1db9d0f0b12444dab63f5b2c78e5841ae2d5ad0c3f7491ee6e599217be05f48eca01abbde98b028f4f6c645d47b985225445100214884236c434c3750e694dd224e5cf4e8b23229784ca4d5badb9ba440f0054d7f87fc889c313bec58ca6d53e065acd727d80f401413005c0d6511e62633d7d00f9") sendfile(r2, r5, &(0x7f0000000040), 0x100000001) 13:51:44 executing program 6: r0 = epoll_create1(0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x8400) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000000c0)={0x100000001, 0x6, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000100), 0x4) ioctl(r2, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x101, 0x3ff}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x5}) 13:51:44 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x30}, 0x0) 13:51:44 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x82050000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 149.650444] device bond_slave_0 entered promiscuous mode [ 149.656057] device bond_slave_1 entered promiscuous mode [ 149.656518] binder: 10759:10775 transaction failed 29189/-22, size 0-0 line 2852 [ 149.677587] device bond_slave_0 left promiscuous mode [ 149.682912] device bond_slave_1 left promiscuous mode 13:51:44 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:44 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) read(r1, &(0x7f00000001c0)=""/105, 0x69) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000080)={{0x2, 0x7}, 'port1\x00', 0x8, 0x0, 0x80000001, 0x4, 0x0, 0x5, 0x3, 0x0, 0x2, 0x7fff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9208, 0x4000000000000202) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) 13:51:44 executing program 6: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x5) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x44840, 0x0) setsockopt$packet_int(r2, 0x107, 0x1f, &(0x7f00000001c0)=0x1, 0x4) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080)={0x80, 0xb936}, 0x2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000000)) [ 149.796514] binder: release 10793:10795 transaction 180 out, still active [ 149.836285] binder: send failed reply for transaction 180, target dead [ 149.874018] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 [ 149.903649] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 13:51:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x61, "470839b8f0252ffd2ed5dcff56e3b12f37530b03bd985c4d40ab949b8a1e97700e651692997566a80824cffe77bea94ace894d5a70f03034f7436db86e8cc17d48f53f1b235c3b571b7a31ea311d0aadf342fc651e0f5b58b70283c04df5cea631"}, &(0x7f00000000c0)=0x69) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r2, @in6, 0x2000000000000, 0x0, 0x0, 0x8000000}, 0x98) io_setup(0x3, &(0x7f00000002c0)=0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x101080, 0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x9f, r0, &(0x7f0000000300)="94166e8151ed94dea70b4654c73b", 0xe, 0x7, 0x0, 0x1, r4}]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x5, 0x10000) bind$xdp(r1, &(0x7f0000000280)={0x2c, 0x4, r5, 0x24, r6}, 0x10) 13:51:44 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:44 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x3000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:44 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6831a10dae33c015b747b827009ff6d59db3c56fe8fc62e411dcba7a605884f070ddac3fb66e521d6cc8821f4a9cbd057419f30e52c9d8183a6761f5a8681dcab642184d022bbba4f718c5d6758942fdffffff560c8e99546f080f3c8184b4731c5a83caf7b8705c522b8eeec2c0efddb07ae2217183db324131492a100c86b29bc4012f58987f58f765c92c0962e1284734b45c9c9d633313f96252e5527dabed056383a1f448715e158e178a3dcaebef8cd56a5a7d650a50e5bfdc3a1b60d08ae1d0d9f3b50afb7737efd731bc9b290330df4cfe5c9e45a2de2ebd4897c4b573632ec2a3581c296deb213f3913597a26de4f2c5b3c3a"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x30}, 0x0) 13:51:44 executing program 7: r0 = socket$inet6(0xa, 0x807, 0x100400000) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ustat(0x5, &(0x7f0000000000)) 13:51:44 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x147, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newroute={0x1c, 0x18, 0x23, 0x0, 0x0, {0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) 13:51:44 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4000, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x44) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x4}) perf_event_open(&(0x7f0000003040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000002180)=[{&(0x7f0000000140)=""/159, 0x9f}], 0x1) 13:51:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x100, 0x0) accept4(r0, 0x0, &(0x7f0000000000), 0x0) prctl$setmm(0x23, 0x6, &(0x7f0000ffc000/0x2000)=nil) [ 150.045557] binder: release 10824:10835 transaction 182 out, still active [ 150.069886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.076779] IPv6: NLM_F_CREATE should be set when creating new route [ 150.083379] IPv6: NLM_F_CREATE should be set when creating new route 13:51:44 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6831a10dae33c015b747b827009ff6d59db3c56fe8fc62e411dcba7a605884f070ddac3fb66e521d6cc8821f4a9cbd057419f30e52c9d8183a6761f5a8681dcab642184d022bbba4f718c5d6758942fdffffff560c8e99546f080f3c8184b4731c5a83caf7b8705c522b8eeec2c0efddb07ae2217183db324131492a100c86b29bc4012f58987f58f765c92c0962e1284734b45c9c9d633313f96252e5527dabed056383a1f448715e158e178a3dcaebef8cd56a5a7d650a50e5bfdc3a1b60d08ae1d0d9f3b50afb7737efd731bc9b290330df4cfe5c9e45a2de2ebd4897c4b573632ec2a3581c296deb213f3913597a26de4f2c5b3c3a"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x3c}, 0x0) 13:51:44 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000100000000000000000000000000"], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:44 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0xfe0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x37, &(0x7f0000000000)={0x9, {0xffffffff}, 0x80000000, 0xfff}, 0x0, 0x8, &(0x7f0000000040)) rt_sigaction(0x3a, &(0x7f0000000380)={0x0, {}, 0x5}, 0x0, 0xfffffee7, &(0x7f00000003c0)) 13:51:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00000000c0)={'bond_slave_0\x00', {0x2, 0x0, @multicast1}}) tee(r0, r0, 0x9, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x2002, 0x0) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000240)=""/115) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0}]) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000040)="d7dc59a26c925bee7f043a45858b6cce5b0883b0f328f3d0a5fdf3e728e7ab29e46104ad0cd3165aca156b7c7c0655b0c687c7bb5161369d35bc229673fb40d918adaef28d506ee996bca7e6eab4cb8c017114859bd347a371de2210349bac7d82527702bc95443594eda26ad223230000101ec5d6eb33be05b103675888a96b01c8f2d375ee1551b28a28f5bf77aba9257a6f8115d15fffc005b8bd91b200") [ 150.087914] binder: send failed reply for transaction 182, target dead [ 150.089979] IPv6: NLM_F_CREATE should be set when creating new route 13:51:44 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x8800, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:44 executing program 6: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) r0 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x4, 0x100) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000380)=0x0) ptrace$pokeuser(0x6, r1, 0x2, 0x9eb) futimesat(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x77359400}, {0x77359400}}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x80, 0x200) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000002e0000032abd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="0b00ffff0f000f00feff0f0008000b000400000008000b0007000000ba6bf2a5d23d31ffc381bf9f73d00c8ce0923fbe49f8f0c2bf41537e6e65afdb990af5eace04f435cf43361a899755c2266efd341248"], 0x34}}, 0x24044080) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f0000000180)="02000000010000000000f4ff0400000000000000", 0xffffffffffffff4a, 0x3) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000001c0)={0xfffffffffffffffa, 0x7fff, 0x5}, 0xc) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000000c0)) [ 150.172493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.209709] binder: release 10855:10859 transaction 184 out, still active 13:51:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) 13:51:45 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 150.255854] binder: send failed reply for transaction 184, target dead 13:51:45 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_names\x00') r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101000, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0xb, 0x80000002) 13:51:45 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6831a10dae33c015b747b827009ff6d59db3c56fe8fc62e411dcba7a605884f070ddac3fb66e521d6cc8821f4a9cbd057419f30e52c9d8183a6761f5a8681dcab642184d022bbba4f718c5d6758942fdffffff560c8e99546f080f3c8184b4731c5a83caf7b8705c522b8eeec2c0efddb07ae2217183db324131492a100c86b29bc4012f58987f58f765c92c0962e1284734b45c9c9d633313f96252e5527dabed056383a1f448715e158e178a3dcaebef8cd56a5a7d650a50e5bfdc3a1b60d08ae1d0d9f3b50afb7737efd731bc9b290330df4cfe5c9e45a2de2ebd4897c4b573632ec2a3581c296deb213f3913597a26de4f2c5b3c3a"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x3c}, 0x0) 13:51:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025c3f0a00145f8f764070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e23, @loopback}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7b, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="d3422f9ab0c158e8"], &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x66, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) 13:51:45 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x7, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:45 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) seccomp(0x0, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x100000000000000, 0x1ff, 0x5, 0x51}, {0xffffffffffffc155, 0x9, 0x3, 0x3}, {0x920, 0x5, 0x0, 0x1}, {0x81, 0x5, 0x7, 0x5}, {0x4, 0x4, 0x8, 0x7f}, {0x8000, 0x7, 0x0, 0x2}]}) listen(r0, 0xfffffffffffffff8) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) sendmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00007ed000)=[{&(0x7f0000000000)='u', 0x1}], 0x1, &(0x7f0000275000)}}], 0x1, 0x48084) recvmmsg(r1, &(0x7f0000003280)=[{{&(0x7f0000002900)=@hci, 0x80, &(0x7f0000002ac0), 0x0, &(0x7f0000002b00)=""/230, 0xe6}}], 0x1, 0x0, 0x0) shutdown(r1, 0x1) 13:51:45 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820faeb995298992ea54c7be", 0x10) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x50400, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xc4, "069de42fccc818d4dc1482e283b7281866e014aef81eba4f2500c28a7c8108855808b046c73cde979abe50ba1e5a8b3ff6b5d4e19f9abb1424624534c9e93d2c32d991e3af2121a671f9c8c987b4a915b2bdb2bb64be56bfbbf124874331dd0b041a249dd398a328f59d6f6ad2cb926757095cd2c11b2fedf86b8374e756db8dbdb72c6e582d9b2f55f172df33978fb2e395fedc20fee4c8a1cc60750123d988121334249ad22f3ca4762e45a30865c9c1b9edb39b6393ae50d2545b1dcf826105adc239"}, &(0x7f0000000240)=0xcc) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r5, 0x4) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000500)='\x00', 0x1}]) 13:51:45 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) pwrite64(r0, &(0x7f0000000000)="e4523a365258eb245b43c537c34ec7021477cc425a099b8d950ed06bac3ee3f825571feddeb1ca0ef6a1bda94b4ec91fe7393245af7e4ba9658498ff8976da4b2fdb03de8b21e9d51fadff79e1a1cd68797d1b8b1794f9030d6c00786d26774c4ca337648b0ced3e9970f709d6662a8af7e4aad50251759d26c48b40f62de6f05f241c02d8d7ff8ebe32920b5b6200339db93c36861813054141bb5ebab601cfc5a435597a", 0xa5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x3, @local}, 0xeb8164632d5b68a5) 13:51:45 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x3c}, 0x0) 13:51:45 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x440, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) r2 = accept4(r0, 0x0, &(0x7f0000000180)=0xffffffffffffff06, 0x80800) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x195) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x7}, 0x1) 13:51:45 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x2000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:45 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)='_', 0x1, 0x0, &(0x7f0000000b00)={0x2, 0x0, @loopback}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x101200, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), 0x14) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0x6, 0x101, 0x6e1900, 0xf60, 0x121, 0xdec7}) openat$random(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x200000, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/151, 0x97}], 0x1, &(0x7f00000005c0)=""/224, 0xe0}, 0x40000002) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x2, @loopback, 0x6}}, 0x4, 0x5}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000340)={r2, 0xffff, 0x40, 0x3, 0x3, 0x8}, &(0x7f0000000380)=0x14) getsockname$unix(r1, &(0x7f0000000400), &(0x7f0000000040)=0x6e) 13:51:45 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x7, 0x4400) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_data=&(0x7f00000000c0)="a32fd3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 13:51:45 executing program 4: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x80}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 13:51:45 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x42}, 0x0) 13:51:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x20000000005}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020027bd7000eadb07000d0000002000030008000400d8660000140002006e72300000000000000000000000000020000100080005000300002175fd7aa80014000300e000000100000000000000000000000008000400090000000800060006000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008881) [ 151.026107] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 151.040280] netlink: 'syz-executor3': attribute type 1 has an invalid length. 13:51:45 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl(r0, 0x7, &(0x7f0000000100)="1bf7e7df1f0dcca0c4bfefc0c25adae444a4b81f9cb963e3cae32ad6043d95a890af44214cbe14dc59d3b22a624b8d1140153dfecb1c45567ea2a83ff53bc653ad7844abadb816412f2ce0d42f2c0112518a39e607f31fb39a3e34fc55f12b484de76cb6f6e20f4d85d46ba13d6280606eb5d1a571d9955c57d4f68b5e83c376d6dbc84ac0a38a15008fecd31e15d83a9eb776729246eb31fdd32c534e35645632a5ad323821d8ca833a4c49b2fab0a84fab1b46a6222bf35bd8fab69cc7a42e9076ae6a521a316d926f240692") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000003c0)=""/246) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000000)) fcntl$dupfd(r1, 0x1, r1) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) 13:51:45 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010300000000000000000200000000000005000000001400090008000000", @ANYRES32=r1, @ANYBLOB="73ebbe29a407cfd5c0a0b31451968804ad3e7273fbcaeaa1c640bb275b195e0e84f227af9f151a4456932c92194da8797c6132cb451879c4ad5770b8456a95dcafea619a430252ae8a168da41ff73e685a", @ANYRES32=0x0], 0x30}}, 0x0) 13:51:45 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x1fffffffc) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, &(0x7f0000001800)=""/130, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r2}) close(r1) write$vnet(r0, &(0x7f0000000340)={0x1, {&(0x7f0000000000), 0x0, &(0x7f0000000140)=""/139, 0x0, 0x2}}, 0x68) socket$packet(0x11, 0x3, 0x300) r3 = geteuid() ioprio_get$uid(0x3, r3) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 13:51:45 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x60000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:45 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x42}, 0x0) 13:51:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xd1, &(0x7f0000000040), 0x4) socket$inet6(0xa, 0x6, 0x0) 13:51:45 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='rdma.max\x00', 0x2, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) pkey_alloc(0x0, 0x3) pwrite64(r1, &(0x7f00000002c0)="033697de83db900125ac23ee5a4801873d180f292963e5ad23c4528b332d30938799e2445e89fcd6af38050e321c6ac342f6c934ae40f364fbc6c0206e", 0x3d, 0x0) [ 151.120475] binder: release 10873:10877 transaction 186 out, still active [ 151.127546] binder: undelivered TRANSACTION_COMPLETE [ 151.139985] binder: send failed reply for transaction 186, target dead 13:51:45 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x42}, 0x0) [ 151.194419] QAT: Invalid ioctl [ 151.212957] QAT: Invalid ioctl 13:51:45 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000700), 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}, [0x8, 0x4, 0xffff, 0x6, 0x7fff, 0xffffffff00000000, 0x1, 0x6, 0x7, 0xce3c, 0x7, 0x0, 0x1, 0x7, 0x2]}, &(0x7f00000002c0)=0x100) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e23, 0x1000, @empty, 0xff}}}, 0x84) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="03005d80d5e7f2ba40770000568054af", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="010000e0010000000200006008000000e4312e97e351922f141660377277e2bf2bd05cec113039383aca3f84cf08f6aa2e64ebf4f1a7fc0492d9feda12608b"], 0x48}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00'}) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f00000003c0), 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x1}, 0x23, 0x0, 0x0, 0x0, "0327e19a2b0100000000000000f9030008990039966a7d5cb2bd00000008000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) accept$unix(r1, &(0x7f0000000400)=@abs, &(0x7f0000000000)=0x6e) 13:51:45 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000180)={0x1}) write$vnet(r0, &(0x7f00000000c0)={0x1, {&(0x7f0000000000)=""/8, 0x8, &(0x7f0000000080)=""/16, 0x2}}, 0x68) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@local, 0x76, 0x3, 0xff, 0x1, 0x2, 0x80, 0x5}, 0x20) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff, 0x2}}, 0x1c}}, 0x0) 13:51:46 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000440)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x2002, 0x0) r2 = socket(0x11, 0xa, 0x0) bind$xdp(r2, &(0x7f0000000000)={0x2c, 0x2}, 0x10) dup3(r1, r1, 0x0) tkill(r0, 0x1002000000013) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x1000, @mcast2}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000140)={r3, 0x0, 0x7}, 0x8) 13:51:46 executing program 7: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="2f696f20156d656d6f7279202b72646d6101"], 0x12) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)) r3 = dup(r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x1}}, [0x2, 0x2, 0x8, 0x0, 0x5, 0xc92e, 0x6, 0x8, 0x3, 0x5, 0x9, 0x1, 0xf5, 0x1, 0xff]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000002c0)={r4, 0x9, 0x1, 0x200, 0x400, 0x1, 0x0, 0x6, {r5, @in6={{0xa, 0x4e21, 0x200, @mcast2, 0xffffffffffffe2f1}}, 0x0, 0xfffffffffffffff8, 0x4c9, 0x200, 0x7}}, &(0x7f0000000380)=0xb0) 13:51:46 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x6000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:46 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x45}, 0x0) 13:51:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x9, 0x8000) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000140)) ioctl(r0, 0x8000000000008902, &(0x7f0000000100)="a003005cc80700315f8571") r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa283000c200a0009000100031d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="300000000020040000d605a0501918fc7d2905000000ef8c0000000000000000400000000000000000000000000000"], 0x30) [ 151.464495] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 151.504620] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 13:51:46 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x13, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") accept4(r0, &(0x7f0000000200)=@un=@abs, &(0x7f00000002c0)=0x80, 0x800) getsockname(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000000c0)=0x80) r1 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000046442cdac9c1c2c6582a6d8f52e80460ad7e6743e479b225ade64cccf415e12fc215c596e664ba00e8de9d056ad0ea85d153d3ae5d94238b0000000000000000a80adb356f0100000000", @ANYRES32=0x0], &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0xffff, 0x20}, &(0x7f00000001c0)=0xc) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x8, 0x1a24e0fc2c2b8add) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 13:51:46 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6831a10dae33c015b747b827009ff6d59db3c56fe8fc62e411dcba7a605884f070ddac3fb66e521d6cc8821f4a9cbd057419f30e52c9d8183a6761f5a8681dcab642184d022bbba4f718c5d6758942fdffffff560c8e99546f080f3c8184b4731c5a83caf7b8705c522b8eeec2c0efddb07ae2217183db324131492a100c86b29bc4012f58987f58f765c92c0962e1284734b45c9c9d633313f96252e5527dabed056383a1f448715e158e178a3dcaebef8cd56a5a7d650a50e5bfdc3a1b60d08ae1d0d9f3b50afb7737efd731bc9b290330df4cfe5c9e45a2de2ebd4897c4b573632ec2a3581c296deb213f3913597a26de4f2c5b3c3a"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x45}, 0x0) 13:51:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000003, 0x13) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/ipc\x00') getpgid(r1) 13:51:46 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x1100000000000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:46 executing program 6: r0 = socket$inet(0x2, 0x2, 0x8000) r1 = dup(r0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0xfffffffffffffffb, 0x3, 0x2, 0x4, 0x9}, 0x14) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00002eaffc)=0x101, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x4001, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000266ffc), 0x4) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000004bc0)={&(0x7f0000000000), 0xc, &(0x7f0000004b80)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x1}}, 0x0) recvfrom$inet(r1, &(0x7f0000000380)=""/237, 0xed, 0x2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x70c000) sendto$inet(r1, &(0x7f0000000100)="89", 0x1, 0x3fffffd, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) 13:51:46 executing program 3: openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x400, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x200001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003bc0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000003cc0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000003d00)={@loopback, 0x0}, &(0x7f0000003d40)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000003d80)={@mcast2, 0x0}, &(0x7f0000003dc0)=0x14) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa00}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0x4, 0x0, 0x70bd2a, 0x25dfdbfe, {0x7}, [@typed={0x8, 0xa, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @local}, &(0x7f0000003e80)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000005140)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000005280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f0000005240)={&(0x7f0000005180)=@mpls_newroute={0xbc, 0x18, 0x902, 0x70bd25, 0x25dfdbfd, {0x1c, 0x20, 0x0, 0xfffffffffffffbff, 0xfe, 0x3, 0xfe, 0xb, 0x200}, [@RTA_DST={0x28, 0x1, [{0x7, 0x0, 0xbd64, 0x1}, {0x96, 0x3, 0x5, 0x5}, {0x7fff, 0x4db, 0x1, 0x31}, {0x6, 0x6, 0x2, 0x79cb}, {0x9, 0x100000000, 0x9133, 0x4}, {0x8, 0x40, 0x8000, 0x2}, {0x20, 0x5, 0x9, 0x11}, {0xc074, 0x6, 0x7, 0x5}, {0x80, 0x5, 0x3, 0xe3a}]}, @RTA_OIF={0x8, 0x4, r1}, @RTA_OIF={0x8, 0x4, r2}, @RTA_DST={0x2c, 0x1, [{0x9, 0x76c376da, 0x1ff, 0x7d}, {0x7, 0xe5, 0x101, 0x401}, {0x8, 0x6, 0x6, 0x5}, {0x6, 0x1, 0x9, 0x4}, {0x9, 0x7fffffff, 0x1, 0xa31}, {0x1f, 0x7fff, 0x7}, {0x0, 0xaf0, 0x22567716, 0x5d1}, {0x5, 0x3ff, 0x100, 0x1}, {0x1000, 0x6, 0xffffffffffff433e, 0xfffffffffffffff9}, {0xb21, 0x7, 0x10000, 0x800}]}, @RTA_OIF={0x8, 0x4, r3}, @RTA_OIF={0x8, 0x4, r4}, @RTA_DST={0x24, 0x1, [{0x7fff, 0xfffffffffffffffd, 0x8, 0x3}, {0x3e9c, 0x4, 0x9, 0x7fff}, {0x8, 0xfb0, 0x0, 0x5}, {0x9, 0x7, 0x5, 0x389c0000}, {0x6, 0x4de0, 0x0, 0xfffffffffffffffa}, {0x3, 0xa60, 0x6, 0x1f}, {0x70000000, 0x1, 0x8, 0x10001}, {0x101, 0x1000, 0x1, 0x6}]}, @RTA_OIF={0x8, 0x4, r5}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4000000004}, [@typed={0x4, 0x12}]}, 0x18}}, 0x0) 13:51:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ffffffff82f4dd6f515b9aad52af35285c860709ce151e788f9eae9b03790126", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0), 0x304, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") accept$alg(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f000000d140)={0x0, 0x0}) recvmmsg(r1, &(0x7f000000cfc0)=[{{&(0x7f0000009900)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000009a00)=[{&(0x7f0000009980)=""/55, 0x37}], 0x1, &(0x7f0000009a40)=""/183, 0xb7}}, {{&(0x7f000000aa80)=@ax25, 0x80, &(0x7f000000cec0)=[{&(0x7f000000bec0)=""/4096, 0x1000}], 0x1, &(0x7f000000cf40)=""/99, 0x63}}], 0x2, 0x0, &(0x7f000000d180)={0x0, r3+10000000}) [ 151.998162] binder: release 10978:10981 transaction 188 out, still active [ 152.020103] binder: send failed reply for transaction 188, target dead 13:51:46 executing program 6: capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) [ 152.072216] binder: 11051:11056 got new transaction with bad transaction stack, transaction 190 has target 11051:0 [ 152.082962] binder: 11051:11056 transaction failed 29201/-71, size 0-0 line 2879 13:51:46 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x45}, 0x0) 13:51:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x3b, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000000201d059f40800000000009d886d81006f7398fd138fc9d51982791765fe106b000000000000000118eeb4c22c31f564c5a6cc84292550561259740771d3213357442bbf2bec7dc0234b38b05664b345e32f7526e0b77900194ad040d968bbd080d94903f1a467c6e1b8632b44acf38e2468b72cffd70d03626ab15676f8502b0e67ddab93fc5ad88a2115670c423245d56be17f182fae21a39ab14d93730c33a2ee9be96ae629d0ea8d8372b6526adf80187237528c4f5f98444d40012303f4c434c2a5aec85dd73364d5"], 0x14}}, 0x0) r2 = geteuid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x7, {{0x0, 0x0, 0xfffffffffffffffe, 0x68, 0xf6, 0xfffffffffffffffd, {0x6, 0x5aba, 0x40, 0x6, 0x8000, 0x5, 0xffffffffffff7fff, 0x383c, 0x40, 0x8, 0x1, r2, r3, 0x3f, 0x80}}, {0x0, 0x2}}}, 0xa0) 13:51:46 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) read(r0, &(0x7f0000000140)=""/207, 0xcf) io_setup(0x1008, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x0, 0x6}]) [ 152.115054] kernel msg: ebtables bug: please report to author: Wrong nr of counters 13:51:46 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x4f) getsockopt$inet_buf(r0, 0x0, 0x24, &(0x7f0000008000), &(0x7f0000000180)=0x35c) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='\x00'}, 0x10) futimesat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}}) 13:51:46 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f000000070000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6831a10dae33c015b747b827009ff6d59db3c56fe8fc62e411dcba7a605884f070ddac3fb66e521d6cc8821f4a9cbd057419f30e52c9d8183a6761f5a8681dcab642184d022bbba4f718c5d6758942fdffffff560c8e99546f080f3c8184b4731c5a83caf7b8705c522b8eeec2c0efddb07ae2217183db324131492a100c86b29bc4012f58987f58f765c92c0962e1284734b45c9c9d633313f96252e5527dabed056383a1f448715e158e178a3dcaebef8cd56a5a7d650a50e5bfdc3a1b60d08ae1d0d9f3b50afb7737efd731bc9b290330df4cfe5c9e45a2de2ebd4897c4b573632ec2a3581c296deb213f3913597a26de4f2c5b3c3a"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x47}, 0x0) [ 152.195895] binder: release 11051:11056 transaction 190 out, still active 13:51:47 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x600, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:47 executing program 6: accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @multicast2}, &(0x7f00000001c0)=0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r0, 0x1, 0x1, 0x6, @remote}, 0x14) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0x800000000008982, &(0x7f0000000080)) 13:51:47 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x1, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:47 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8000001) fallocate(r0, 0x0, 0x0, 0x10bc93) 13:51:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="000085779e14693e38626a87fd6f580eb70000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000400000048000300080001000000000008000800000000001400020079616d300000000000000000000000000800050000000000080004000000000008000500e000000208000100000000000400010008000400000000000c0002000800040000000000"], 0x74}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xe, 0x3, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fcb000)={r1, &(0x7f0000000180), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f000051e000)={r1, &(0x7f00000002c0), &(0x7f0000950000)}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ipddp0\x00', 0x10) 13:51:47 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f000000070000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x47}, 0x0) [ 152.331246] binder: send failed reply for transaction 190, target dead 13:51:47 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0xb4ab) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x1b}, 0x100, 0x0, 0x1, 0x1, 0x280000000000, 0x0, 0xffffffff}, &(0x7f0000000080)=0x20) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xa0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xffc3) 13:51:47 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair(0x0, 0x80805, 0x6, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$inet6_dccp_int(r1, 0x21, 0xa, &(0x7f0000000240)=0x7, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x0, 'syzkaller1\x00'}, 0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280)={0x0, 0xfffffffffffffff9}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={r2, 0xf53}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x1, 0xffffffff}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r3, 0x2}, &(0x7f0000000140)=0x8) 13:51:47 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f000000070000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="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"], @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x47}, 0x0) [ 152.431446] binder: 11113:11114 unknown command 0 [ 152.450875] binder: 11113:11114 ioctl c0306201 20000580 returned -22 [ 152.453605] dccp_xmit_packet: Payload too large (65475) for featneg. [ 152.479629] binder: release 11113:11127 transaction 193 out, still active [ 152.510219] IPVS: Unknown mcast interface: syzkaller1 [ 152.545460] binder: send failed reply for transaction 193, target dead [ 152.555250] dccp_xmit_packet: Payload too large (65475) for featneg. [ 152.573101] IPVS: Unknown mcast interface: syzkaller1 13:51:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000340)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f0000000040), 0xfffffffffffffe15, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 13:51:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000280)) chroot(&(0x7f0000000000)='./file0\x00') readv(r0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000440)=""/195, 0xc3}, {&(0x7f0000000200)=""/49, 0xfffffe08}], 0x3) 13:51:47 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x1, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:47 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x8205000000000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:47 executing program 2: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x40e280, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x19}, 0x9}, @in={0x2, 0x4e20, @rand_addr=0x6}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000200)={r2, 0x0, 0x72, "1789e79a23149ec1f766a5d4bea401643a5fed3202522818bd9f2c1e993b5e7e1e08e756a216c5c12ce7e4ac822ce15afa96fcd343585bf6b9d261e4b8624e2a7187df7103360460109adf2f1847128442e9e810be6a7ca116e856d2c6622baf6e9d33000127d5a91e3d38ebfe798b5fdf36"}, 0x7a) ioctl$TCFLSH(r1, 0x540b, 0x53) sendto(r0, &(0x7f0000000040), 0x0, 0x4000811, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote, 'syzkaller0\x00'}}, 0x80) bind(r1, &(0x7f0000000300)=@nfc_llcp={0x27, 0x0, 0x2, 0x7, 0x8100000000, 0x76e, "5bd541737bee0107f4be95337761fa370897213233a8dca148b9521374e5a08d9e529b307a99de8fca5d7fecea2db76c72cb88950a8868686ba341e61ffabb", 0x23}, 0xfffffffffffffee6) 13:51:47 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x40}, 0x0) 13:51:47 executing program 7: pkey_mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x115040, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000380)=0x20) timerfd_gettime(r1, &(0x7f0000000180)) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0xc2) write$evdev(r0, &(0x7f0000001fdc)=[{}, {{0x0, 0x2710}}], 0x30) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x3c, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x3, @local, 0x2}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={r2, 0x2000000000000009}, &(0x7f00000003c0)=0x8) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x440000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x2000, 0x0) timerfd_gettime(r3, &(0x7f00000000c0)) 13:51:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)='%procnodevvboxnet1#cgroup\x00', 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="21562cdf19e3a2fcccb7531f29c9a3ef8d741080507a898ef5cc712f889777ff68c80230c7f6e2c0bd77e57d65cbd047d8fc238fe05f0e69fedeef6eb604186b626835166c759a99579866171a64a3ed3d5dfbc223b85fc1df530cb378a328689dce6381dff66ca3b10f8d00b90f212f3cd905de", 0x74}, {&(0x7f0000000180)="8a9d3cf5de07e084d0b549bf990c74b9aee10c2609f4ce3a99cf599abd9b", 0x1e}], 0x2, r2) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") clock_gettime(0x9, &(0x7f0000000140)) 13:51:47 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x40}, 0x0) 13:51:47 executing program 2: socket$vsock_stream(0x28, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$RTC_UIE_OFF(r0, 0x7004) syz_emit_ethernet(0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff00000086dd600f8e3f00240000fe80e1ffffff000000000000000000bbfe80000000000000000000000000003a000001000000000000000000000000000000000000000000000000f4fdf4b8b93a5cba4596787561147843e1aa67a3f0c2e80dd539ff75401a7d03f367a3b2990448b90178b0013140da09831c30faf8286b9d6dfd97d3b1aaafb9b1a61749dd53ca162046910419f0728a1381716765e2700de0", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000840)={0xfffffffffffffffc}) [ 152.697519] binder: 11149:11158 unknown command 0 [ 152.704735] binder: 11149:11158 ioctl c0306201 20000580 returned -22 [ 152.729544] kernel msg: ebtables bug: please report to author: Wrong nr of counters 13:51:47 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x400) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000040)={0xc0002, 0x0, [0x0, 0x6, 0x200, 0x4, 0x1f, 0x5, 0x6, 0x40]}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0688da0c120000009b28b7e110fb669c8de8cd2cc2bc6dfcb84dc53fb622f2be1bc902d7875f4b4d6f8036231b7aaa4c9786172a17558d2b823087f600bb7ef2", "fcfd26614e22fc68994bb9bef71165a0aa446d6d01218f732b567cc95a786175"}) 13:51:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x18000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0xb0, "8b95f48687cca9a1068b98e934ed69aeeded0dc1480776f5f28b3c897c40714064e045b6b273ba5c44b35c1801cd424c4c64a7b521acf9e2e12ceaad13203ce9ced8dffa42614b483c1d9d046efb2a1abf48a68d1d7e4653b53e6943481aed3faf0f2e399192ab114d46b875be05f07f9f1a5e1f5002a559776f944cee37b8cf605f1a4dae78d67c9f8ff8788f6d6415d4818123a9ddfab2c7387df8ccdc5e93f12bed812e72eb01a819e0268483ad02"}, &(0x7f00000001c0)=0xd4) ioctl(r0, 0x719, &(0x7f0000000000)="025cc80700145f8f764070a99bd7fc36ea470f33ec") r2 = socket$kcm(0x29, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) 13:51:47 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x40}, 0x0) 13:51:47 executing program 6: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) r1 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0xffff, 0x80) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x200) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = perf_event_open(&(0x7f000001d000)={0x8000000000000002, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x800) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000140)=0x54) read(r3, &(0x7f0000465f8e)=""/114, 0x47) read(r3, &(0x7f00000020c0)=""/4096, 0x1000) accept$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000280)=0x1c) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000180)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 13:51:47 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x100000000000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:47 executing program 2: socket$netlink(0x10, 0x3, 0x0) [ 153.007977] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 153.046560] binder: BINDER_SET_CONTEXT_MGR already set [ 153.052356] binder: 11209:11210 ioctl 40046207 0 returned -16 13:51:47 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x800) ioctl$TCXONC(r1, 0x4008af04, 0x0) signalfd4(r1, &(0x7f0000000100)={0x2}, 0x8, 0x80800) sendto$inet(r0, &(0x7f0000000040)="2818983ad3eedb79da130d874be1fac041960a1851bfeee14a80e7a22b59b06b6d54cdcb9bcaa513e0b8f1ee56261068630e6fd05d3f9ad3c59bfabdea6f5208d55f4b32", 0x44, 0x4000, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) 13:51:47 executing program 7: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/121, &(0x7f00000000c0)=0x79) write(r0, &(0x7f0000000340)="16f91220a8c7a61a85492a0000001f0000000000", 0x14) ppoll(&(0x7f00000001c0)=[{r0}, {r0, 0xc0}, {r0, 0x2090}, {r0, 0x80}], 0x4, &(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000280)={0x7}, 0x8) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000240)) mq_timedreceive(r0, &(0x7f0000001040)=""/4096, 0x1000, 0x100, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x0, 0x5f9e, 0x400, 0x100000000, 0x7f, 0x1, 0x0, 0x60, 0x9, 0x1ff}, 0xb) ioctl$int_out(r0, 0x2, &(0x7f0000000180)) [ 153.059959] binder: 11209:11210 unknown command 0 [ 153.065368] binder: 11209:11210 ioctl c0306201 20008fd0 returned -22 [ 153.073783] binder: BINDER_SET_CONTEXT_MGR already set [ 153.079789] binder: 11209:11213 unknown command 0 [ 153.085337] binder: 11209:11210 ioctl 40046207 0 returned -16 [ 153.085979] binder: 11209:11213 ioctl c0306201 20008fd0 returned -22 13:51:48 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:48 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:51:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x10}, @in={0x2, 0x4e21, @rand_addr=0x3}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x4, @mcast1, 0x5}], 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000b40)=@l2, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000001000)=[{0x18, 0x0, 0x0, "e20d"}], 0x18}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f0000000180)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r1, 0x8}, 0x8) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) sigaltstack(&(0x7f0000001000/0x3000)=nil, &(0x7f0000000000)) 13:51:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000000)={0x5bae76821f9b410f}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="80d3260fdc58050f211666440f3801aaed00000042f6d5b9260200000f32450f01c90f20e035000020000f22e08f8868ed09d366baf80cb8cceca68eef66bafc0c66b80d0066ef", 0x47}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)={0x2, 0x0, [{}, {}]}) 13:51:48 executing program 6: r0 = socket(0x10, 0x0, 0x0) getsockopt$inet_int(r0, 0x0, 0x3, &(0x7f00000010c0), &(0x7f0000001100)=0x4) ioctl$sock_proto_private(r0, 0x89e6, &(0x7f00000000c0)="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") getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000080)=0x4) write(r0, &(0x7f0000000040)="3e0000004e001f00ff03f4f9002304000a04f51108000100020100020800028001cba80054de5a860ba362969c8f849c206d20a880d42f15a4a16748fb53", 0x3e) 13:51:48 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0xfc83) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/92, 0x5c}, {&(0x7f00000001c0)=""/98, 0x62}], 0x2, &(0x7f0000000280)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000001280)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001300)=""/173, 0xad}, {&(0x7f00000013c0)=""/75, 0x4b}, {&(0x7f0000001440)=""/18, 0x12}, {&(0x7f0000001480)=""/102, 0x66}, {&(0x7f0000001500)=""/30, 0x1e}, {&(0x7f0000001540)=""/219, 0xdb}, {&(0x7f0000001640)=""/42, 0x2a}], 0x7, &(0x7f0000001700)=""/48, 0x30, 0x1}, 0x100badda}, {{&(0x7f0000001740)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001940)=[{&(0x7f00000017c0)=""/178, 0xb2}, {&(0x7f0000001880)=""/143, 0x8f}], 0x2, &(0x7f0000001980)=""/202, 0xca, 0x4}}, {{&(0x7f0000001a80)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001b00)=""/98, 0x62}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000001c40)=""/255, 0xff}, {&(0x7f0000001d40)=""/20, 0x14}, {&(0x7f0000001d80)=""/238, 0xee}, {&(0x7f0000001e80)=""/121, 0x79}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/59, 0x3b}], 0x8, &(0x7f0000002000)=""/58, 0x3a, 0x3f}, 0x800}, {{&(0x7f0000002040)=@sco, 0x80, &(0x7f00000020c0), 0x0, 0x0, 0x0, 0x7}, 0x1}, {{&(0x7f0000002100)=@ipx, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002180)=""/218, 0xda}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/151, 0x97}, {&(0x7f0000003340)=""/25, 0x19}, {&(0x7f0000003380)=""/52, 0x34}], 0x5, &(0x7f0000003440)=""/74, 0x4a, 0x34}}], 0x6, 0x10042, &(0x7f0000003640)={0x77359400}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000003680)={r2, @local, @broadcast}, 0xc) 13:51:48 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x5000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:48 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200240, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101000, 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x9) dup3(r0, r1, 0x0) [ 153.499511] binder: release 11149:11158 transaction 195 out, still active [ 153.524609] binder: send failed reply for transaction 195, target dead 13:51:48 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 153.578957] binder: 11239:11240 got new transaction with bad transaction stack, transaction 199 has target 11239:0 [ 153.590199] binder: 11239:11240 transaction failed 29201/-71, size 0-0 line 2879 13:51:48 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f00000000c0)) 13:51:48 executing program 3: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200), 0x0, 0x0, 0xffffffffffffffff) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x180, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0x7, 0x3}, 'port0\x00', 0x10, 0x2, 0x5, 0xfffffffeffffffff, 0x100000001, 0x7, 0x7e, 0x0, 0x4}) keyctl$unlink(0x9, 0x0, r0) 13:51:48 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x6, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/167, 0xa7, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x40000003}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0x1000000000000000, 0xffffffffffffff50) 13:51:48 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:51:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000180)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x80000000, 0x1, 0xfffffffffffffffa, 0x8, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000200)={r5, 0x2e, "8804fb1f1f2c0b1699d2b35cbb9e96da7eb71e810e43099be6642fb3d4df32812b384d7e68b2eed0f282bc2c569a"}, &(0x7f0000000240)=0x36) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e20, @remote}}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0), &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 153.756352] binder: release 11239:11240 transaction 199 out, still active 13:51:48 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x21a0, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0x2000000}, 0x48) 13:51:48 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x1, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @broadcast}, &(0x7f00000000c0)=0x8) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000080)=0x400, 0x4) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000000)=0x6, 0x4) 13:51:48 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x3c}, 0x0) [ 153.842240] binder: send failed reply for transaction 199, target dead 13:51:48 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc08c5102, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3}) pipe2(&(0x7f0000000080), 0x80000) 13:51:48 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x1000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 153.928879] binder: 11287:11292 unknown command 0 [ 153.964134] binder: 11287:11292 ioctl c0306201 20000580 returned -22 [ 153.998435] binder: release 11287:11299 transaction 202 out, still active [ 154.071386] binder: send failed reply for transaction 202, target dead 13:51:48 executing program 7: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0xfffffffffffffffd]}) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x200, 0x80) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20041000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 13:51:48 executing program 6: ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000040)={'bridge_slave_0\x00', {0x2, 0x0, @broadcast}}) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000007000)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x9892dc467c7ca936, 0x84) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@generic={0x0, 0x9, 0x3}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 13:51:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5435, &(0x7f00000000c0)) syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000140)) flock(r1, 0x4) 13:51:48 executing program 2: unshare(0x400) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f000000a3c0), 0x1, 0x0) 13:51:48 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x3c}, 0x0) 13:51:48 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x1, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000002c0)="025ce80700145f2df0bf4a2c4da8c5f9c835bdce96e272407074fd163ee7d522ad58538e58df238832be34fc04e254fab99c2f6c9232cbc7e13f0d6835ef5fcdf09830517de08cb027b1791ae4254e152b72d3b7d0d4a758f8a2fab459f36351b1a46b1779b3b3fd472af2bcc0058318b54a6a9018320d782321b096867591031eb4471920e2d4a44496af1d4928ca366fdc99225b853513b96eefd6a8e47addb7e7d6282bb2d2b6b7085e2336c2ebc680fd38824eeb3af0a72d58a29f7a") r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x805, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) dup3(r1, r2, 0x0) 13:51:48 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x8800000000000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:48 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x3c}, 0x0) 13:51:48 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x10040) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000380)={0x4, 0xdde3, 0x80, 0x0, 0x0, [], [], [], 0x3ff, 0xfffffffffffff27c}) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r1, 0x2c, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5bf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffffc}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x8000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x2000c004}, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$pptp(0x18, 0x1, 0x2) sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x2d, 0x119, 0x0, 0x0, {0x8000001}, [@nested={0x4}]}, 0x18}}, 0x0) 13:51:49 executing program 7: r0 = socket$inet6(0xa, 0x4000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="f2a766ba610066ed48b813c4830f000000000f23d00f21f835300000000f23f866ba2000edc441175d392e67450f01cb0fc72cbe67400f001066ba4100b0a8ee36420f015900", 0x46}], 0x1, 0x0, &(0x7f0000000100), 0x0) [ 154.195259] binder: 11324:11329 unknown command 0 [ 154.204605] binder: 11324:11329 ioctl c0306201 20000580 returned -22 [ 154.228348] binder: release 11324:11342 transaction 204 out, still active 13:51:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100000000, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000180)={0x2, 0x3, 0x0, 0x7fffffff, 'syz1\x00', 0x2}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0x8008af00, &(0x7f0000000040)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000100)=0x1, 0x4) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f00000000c0)={0x5, 0xffff, 0x80000000}) 13:51:49 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x1, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:49 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0xcc830100, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 154.307157] binder: send failed reply for transaction 204, target dead 13:51:49 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x3e}, 0x0) [ 154.382919] binder: 11359:11362 unknown command 0 13:51:49 executing program 3: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0xffffffffffffffff) r0 = shmget(0x2, 0x3000, 0x100, &(0x7f0000000000/0x3000)=nil) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r3 = geteuid() fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) r6 = fcntl$getown(0xffffffffffffffff, 0x9) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x3, r1, r2, r3, r4, 0x92, 0x80}, 0xfffffffffffffffc, 0x80, 0x8, 0x6, r5, r6, 0x3}) futex(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000000c0), 0x0) munlock(&(0x7f0000000000/0x3000)=nil, 0x3000) 13:51:49 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffff97]}, 0x48) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x100000000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) [ 154.419897] binder: 11359:11362 ioctl c0306201 20000580 returned -22 [ 154.487530] binder: release 11359:11369 transaction 206 out, still active [ 154.546084] binder: send failed reply for transaction 206, target dead 13:51:51 executing program 6: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='memory.high\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) writev(r1, &(0x7f0000000800)=[{&(0x7f00000006c0)='T', 0x1}], 0x1) 13:51:51 executing program 2: r0 = socket$inet6(0xa, 0x1000020000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_open_pts(0xffffffffffffffff, 0x0) 13:51:51 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x3e}, 0x0) 13:51:51 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0xffffff7f, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:51 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x6, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@\x00\x00'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:51 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000280), 0x10) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) setsockopt(r0, 0x65, 0x1, &(0x7f0000000040)="2b90365c824c5b00", 0x8) 13:51:51 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0xa8, 0x1100082) r1 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040)) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000300)={0x0, 'vlan0\x00'}, 0x18) 13:51:51 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x200000082, 0x1000000000006, 0x4, 0x9, 0x1}, 0x2c) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x6, 0x48003) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffc92) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000040)=0xa8) 13:51:51 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x8038, &(0x7f0000000140)) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xa3023, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 157.218140] binder: 11400:11404 got new transaction with bad transaction stack, transaction 208 has target 11400:0 [ 157.228829] binder: 11400:11404 transaction failed 29201/-71, size 0-0 line 2879 13:51:52 executing program 3: r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ff5fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ff7fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) clock_gettime(0x6, &(0x7f0000000040)={0x0}) ppoll(&(0x7f00004c7fb0)=[{r0, 0xd}], 0x1, &(0x7f0000000000)={r1}, &(0x7f00004c7000), 0x8) close(r0) mlock(&(0x7f0000012000/0x4000)=nil, 0x4000) 13:51:52 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x3e}, 0x0) 13:51:52 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$int_out(r0, 0x40045731, &(0x7f0000000100)) 13:51:52 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) unshare(0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x100017, &(0x7f0000000040)=0x3, 0x4) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xe0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000001c0)=0x2) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000400)=""/35) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000200)={{0xffffffffffffffff, 0x3, 0x8, 0x2, 0x400}, 0x6, 0x8, 'id0\x00', 'timer1\x00', 0x0, 0x10000, 0x9, 0x4, 0x7f}) prctl$void(0x1f) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e21, 0x1, @local, 0xf9}}, 0xffff, 0x5, 0x0, "98d69557d499fb43e0473df782ca52c04271115509e9890b1c988d46260cb1380baa55c38381ab44ae44502f9b3a114c02865c2d50ee4820207001c8d98296e70b681ff47385a58e8ea9c44269eed3c0"}, 0xd8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) sched_setparam(r3, &(0x7f0000000340)=0x5) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000380)=""/2, &(0x7f00000003c0)=0x2) 13:51:52 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x83050000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 157.327163] binder: release 11400:11404 transaction 208 out, still active 13:51:52 executing program 7: r0 = gettid() r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x416, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x208242, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f00000001c0)={{0x6, 0x7, 0x6, 0x80000000, 'syz1\x00', 0x401}, 0x5, 0x40, 0x9, r0, 0x3, 0x1ff, 'syz0\x00', &(0x7f0000000040)=['$lo\x00', '\x00', 'vmnet1@&mime_typebdev*-\x00'], 0x1d, [], [0x4, 0x800, 0x4, 0x5]}) socket$inet6(0xa, 0xf, 0x9) dup3(r1, r2, 0x0) 13:51:52 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x3f}, 0x0) 13:51:52 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:52 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)="1e49cf35770515ade78ecfe763816de986d5252525a9222e0700599825ad3bb8319b6e7ee35e723715a86d0d37a2fc427b6295fb6d90329c74c6febc8cf85fe824e626166d6720b8757302fb24ce32ce3461e5a621fe22c927108b649a37a5c1de112ee2cc656b75352367", 0x6b, r3) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) r5 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x9) write$P9_RVERSION(r5, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) ioctl(r4, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x7b, 0x0, [0xc001001b]}) [ 157.443481] binder: send failed reply for transaction 208, target dead 13:51:52 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r2 = socket$inet6(0xa, 0x80003, 0xff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20001, 0x0) close(r2) 13:51:52 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x3f}, 0x0) [ 157.510743] binder: 11447:11449 unknown command 25344 13:51:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x5, 0x1, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x400200, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r2, r3}}, 0x18) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000040), 0x4) 13:51:52 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000000)=@nfc={0x27, 0x1, 0x1}, 0x80) accept$packet(0xffffffffffffff9c, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x1d, r1}, 0x10, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0300000000080000ff03000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r3/1000+30000, @ANYBLOB="010000200100000004000020210200002a06198b029bd5250bd14c5dda203f768964563c9ae3b1ce676c23b5aee8e0ca74d966f01e95e1ac5b8f1fb52cd6179bff71c912458daea6a96a577489222d63a278621f239c5f"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x80) connect$can_bcm(r0, &(0x7f0000000480), 0xfffffffffffffda2) prctl$setname(0xf, &(0x7f0000000080)='mime_typeselinux\x00') r4 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x81) [ 157.569994] binder: 11447:11449 ioctl c0306201 20000580 returned -22 13:51:52 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x20000000, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 157.629851] binder: release 11447:11455 transaction 211 out, still active [ 157.691158] binder: send failed reply for transaction 211, target dead 13:51:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000e80)=[{&(0x7f00000002c0)="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", 0x57d}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 13:51:52 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}, {&(0x7f0000001800)=""/252, 0xffffffffffffff85}, {&(0x7f0000001740)=""/155, 0x9b}, {&(0x7f0000000140)=""/11, 0xb}, {&(0x7f0000000300)=""/102, 0x67}], 0x5, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x5) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000001400)=@rc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1, &(0x7f0000001480)=""/174, 0xae}}], 0x1, 0x0, &(0x7f0000001640)) ioctl(r0, 0xc2604110, &(0x7f0000000380)="b22918d1d930c8a1f3550277f96927dab368153fa2127e49ccea3c4be64e4353ef2372f61c36cc3c97d0b4971b7aa5475d979371b8becda6621728b04dfbc8e51b260939f4540ce91b322b1b07660787d64966f87e31d70db77ec509db344b5b569125f4a2c96c231d9838bae1fbe68457040e583eeacdef2bcd2eaf5ad4d2654fe71ce2ea6f23625d7e0777b777bc809486133170d473909fc08a820e804cd4a1e03b") syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xa292, 0x200002) r1 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) 13:51:52 executing program 3: r0 = getpid() sched_setaffinity(r0, 0x6, &(0x7f0000000080)=0xb4a2) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000001c0)) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) read(r1, &(0x7f0000000280)=""/251, 0xfb) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x2e) write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0400004c50e2000000000000000500000000fa01ffff670009000000000000003800000000008000ffff000000000000000000000000000000000000906019216bfcea93835d35119e0100234439655162000000f2098d432c82d5acd1822fcb798a9a1f2d56814adaac3bc8a005cc0d5d89fdf74e99d718fbbacf398f0cd722a4b3d07602f13cfc43335a9e6180bb236292968ecd"], 0x52) 13:51:52 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:52 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='Y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000001450c1efd273cfc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="c300000000000000"], @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x3f}, 0x0) 13:51:52 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x40000107]}) 13:51:52 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0//ile0\x00', 0x101200, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)={0x9, 0x0, [{0x4, 0x9b, &(0x7f0000000280)=""/155}, {0xf000, 0xbd, &(0x7f0000000340)=""/189}, {0x15000, 0x5c, &(0x7f0000000400)=""/92}, {0x4, 0x55, &(0x7f0000000480)=""/85}, {0x0, 0xda, &(0x7f0000000500)=""/218}, {0x4, 0x6b, &(0x7f0000000600)=""/107}, {0x0, 0x66, &(0x7f0000000680)=""/102}, {0x10000, 0x48, &(0x7f0000000700)=""/72}, {0x2ffc, 0x17, &(0x7f0000000780)=""/23}]}) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040), 0x0) r3 = semget(0x1, 0x7, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f0000000180)=""/96) 13:51:52 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x300, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 157.837537] binder: 11495:11499 unknown command 25344 13:51:52 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 157.859208] binder: 11495:11499 ioctl c0306201 20000580 returned -22 13:51:52 executing program 2: keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) madvise(&(0x7f00003d2000/0x3000)=nil, 0x3000, 0x0) close(r0) getsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 13:51:52 executing program 6: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000300)=@newtaction={0x14}, 0x14}}, 0x0) mount(&(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x810028, &(0x7f0000000240)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 13:51:52 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x20001, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0xfff, 0x4]) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x141000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") getrlimit(0x0, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)) [ 157.911495] binder: release 11495:11510 transaction 213 out, still active 13:51:52 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:52 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x11, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 157.959338] binder: send failed reply for transaction 213, target dead 13:51:52 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:51:52 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000040)=0x9) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6) close(r2) dup3(r0, r1, 0x0) [ 158.020839] binder: 11525:11526 unknown command 25344 [ 158.026614] binder: 11525:11526 ioctl c0306201 20000580 returned -22 [ 158.038663] devpts: called with bogus options [ 158.045998] devpts: called with bogus options [ 158.198006] binder: BINDER_SET_CONTEXT_MGR already set [ 158.203532] binder: 11554:11555 ioctl 40046207 0 returned -16 [ 158.211619] binder_alloc: binder_alloc_mmap_handler: 11554 20000000-20002000 already mapped failed -16 [ 158.221997] binder: BINDER_SET_CONTEXT_MGR already set [ 158.227387] binder: 11554:11558 ioctl 40046207 0 returned -16 [ 158.233475] binder: 11554:11555 got new transaction with bad transaction stack, transaction 216 has target 11525:0 13:51:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400f2ff0f000d06000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012001000010065722570616e000004000200"], 0x34}}, 0x0) 13:51:53 executing program 2: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) pause() symlink(&(0x7f0000001000)='./file1\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) futimesat(r1, &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) [ 158.244077] binder: 11554:11555 transaction failed 29201/-71, size 0-0 line 2879 [ 158.251997] binder: release 11554:11555 transaction 216 out, still active [ 158.259072] binder: undelivered TRANSACTION_COMPLETE [ 158.264264] binder: undelivered TRANSACTION_ERROR: 29201 13:51:53 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)=@known='security.ima\x00', &(0x7f0000000200)='security.', 0x9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000140)="52a1ab763b506fef753ac08b5260a4b4b5b837cf34daaed1c39a07c7108e0956d4e0faeee1eeb1a0712dccc1dc5f451efe5472e0dacb3f2a4b3ce678b637e4df62aca64209fcfce2f6edae5fc566f2988e4aa7451f45316bf7775d6a434776a681b1c09a5802520ddd6bcc8d4f08", 0x6e) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0x18}, 0x18) 13:51:53 executing program 7: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000280)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8, &(0x7f0000000080)="0a793a4635ff35e404fb90cdb17d206b389d176373078f6f694b91c6dd791acc51061d2d545673942d4a70b8dc65d469e0eb532025e5d9339e6ed111d816077f") removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)=@random={'osx.', 'bdev*-\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100) openat(r2, &(0x7f00000002c0)='./file0\x00', 0x14000, 0x2c) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f0000000180)={{}, {r3, r4+10000000}}, &(0x7f00000001c0)) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:51:53 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0xb, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:51:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000080)={0x101, 0xffff, 0x2, 0x0, 0x0, [{r2}, {r0, 0x0, 0x20}]}) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000040)) dup3(r3, r2, 0x0) 13:51:53 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x9, 0x40) openat(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x1c8) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000000)=0x9, 0x4) getsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000ffc)=0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x100, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000002c0)={0x0, 0x3}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x3, 0xa8aacc503c67cca9, 0x7, 0x80000000, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={r4, @in6={{0xa, 0x4e20, 0x101, @remote, 0x4}}, 0x9, 0x1000, 0x6, 0xffff00000, 0xc5}, &(0x7f00000001c0)=0x98) 13:51:53 executing program 6: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="1070") r1 = fcntl$dupfd(r0, 0xfffffffffffffffe, r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0xffffffffffffff61, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) connect$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x19, 0x0, 0x1, 0xb53, 0x6, @dev}, 0x14) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) r2 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0), 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540), 0x0, 0x0, r2) r3 = semget$private(0x0, 0x7, 0x204) semctl$IPC_INFO(r3, 0x0, 0x3, &(0x7f0000000380)=""/152) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280), &(0x7f0000000340)='/.\x00', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) shutdown(r1, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180)=0x326, 0x4) 13:51:53 executing program 7: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000300)={0x33155c75}, 0x4) r2 = dup2(r1, r1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="24eb448d003f5f85714070") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f00000002c0)={0x200, 0x400, 0x5, 0xba}) r5 = getpid() r6 = accept4$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14, 0x80800) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000740)={@mcast2, @ipv4, @empty, 0x3, 0xfffffffffffffff9, 0x7, 0x400, 0xffff, 0x100, r7}) get_robust_list(r5, &(0x7f0000000180)=&(0x7f0000000140)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}}, &(0x7f00000001c0)=0x18) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(r6, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0) 13:51:53 executing program 3: r0 = timerfd_create(0x7, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x109400) r2 = request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)='/dev/adsp#\x00', 0xfffffffffffffff8) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000240)={@loopback}, &(0x7f0000000280)=0xc) keyctl$clear(0x7, r2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_RMID(r5, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{}, {r3, r4+10000000}}, &(0x7f0000000140)) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, &(0x7f0000002000)) timerfd_gettime(r0, &(0x7f0000000080)) 13:51:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB], 0x20}, 0x0) 13:51:53 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r2 = open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x101) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f00000000c0)=0x1) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) 13:51:53 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x16, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 158.818732] binder: release 11525:11526 transaction 215 out, still active [ 158.825859] binder: undelivered TRANSACTION_COMPLETE 13:51:53 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x8, 0x8202, 0xfffffffffffffbff, 0x1, 0x0}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000300)=r1, 0x4) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000280)) truncate(&(0x7f0000000000)='./file0//ile0\x00', 0x101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f00000000c0)) 13:51:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB], 0x20}, 0x0) [ 158.871497] binder: send failed reply for transaction 215, target dead [ 158.878400] binder: send failed reply for transaction 216, target dead [ 158.897843] binder: 11605:11609 got new transaction with bad transaction stack, transaction 219 has target 11605:0 [ 158.908757] binder: 11605:11609 transaction failed 29201/-71, size 0-0 line 2879 [ 159.006064] binder: release 11605:11609 transaction 219 out, still active [ 159.078262] binder: send failed reply for transaction 219, target dead 13:51:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)="6e4a5c60ed0fec701e") getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000001c0), 0x2) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r4, 0xf20}, &(0x7f0000000180)=0x8) dup3(r3, r0, 0x0) 13:51:53 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0xffffffffffffffa3, 0xfa00, {0x0, &(0x7f0000001840)}}, 0x20) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) eventfd(0x7) write$P9_RCLUNK(r1, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xffffffffffffffff}}, 0x3ca) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) 13:51:53 executing program 6: setrlimit(0x7, &(0x7f0000000000)={0x14, 0x88}) mkdir(&(0x7f0000000040)='.\x00', 0x20) pipe(&(0x7f0000001140)) 13:51:53 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x6, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB], 0x20}, 0x0) 13:51:53 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 159.198828] binder: 11643:11649 unknown command 25344 13:51:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000"], 0x2c}, 0x0) 13:51:53 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0xfffffe82, &(0x7f0000000100)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000180)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x35) connect$inet6(r0, &(0x7f0000000140), 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r1, 0x200, &(0x7f00000002c0)={&(0x7f00000001c0)=""/224, 0xe0}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r2 = syz_open_procfs(r1, &(0x7f0000000300)='sched\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000005c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), r3, 0x1}}, 0x18) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) 13:51:53 executing program 7: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x402040, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x18}, 0x10) r3 = inotify_init() r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000480)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000580)=0xe8) getgroups(0x7, &(0x7f00000005c0)=[0xffffffffffffffff, 0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee00]) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000600)='/dev/full\x00', 0x8000, 0x0) r9 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r10 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000640)='/dev/mixer\x00', 0x4000, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)={0xe, 0xfff, 0x6, 0x1, 0x10, 0x1, 0x3}, 0x2c) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000006c0)=0x0) getresuid(&(0x7f0000000700)=0x0, &(0x7f0000000740), &(0x7f0000000780)) fstat(0xffffffffffffff9c, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000c00)=0x0) r16 = geteuid() getresgid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000d00)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d40)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000e40)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/rfkill\x00', 0x20600, 0x0) r22 = eventfd(0x3) r23 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f40)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r24 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r25 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/sequencer2\x00', 0x400800, 0x0) r26 = getpgrp(0xffffffffffffffff) r27 = geteuid() stat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r29 = openat$zero(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/zero\x00', 0x4200, 0x0) r30 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001100)={0xffffffffffffffff, 0x5, 0x8}, 0xc) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r32 = syz_open_dev$dspn(&(0x7f0000001180)='/dev/dsp#\x00', 0xec, 0x129300) r33 = fcntl$getown(0xffffffffffffffff, 0x9) r34 = geteuid() fstat(0xffffffffffffff9c, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r36 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001240)='/dev/rfkill\x00', 0x400000, 0x0) r37 = socket$nl_xfrm(0x10, 0x3, 0x6) r38 = socket$inet6(0xa, 0x80f, 0x10001) r39 = syz_open_dev$audion(&(0x7f0000001280)='/dev/audio#\x00', 0x6, 0x603) sendmmsg$unix(r0, &(0x7f00000013c0)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)="e1c913e584ad4fb4363c971a759b0b1441311c89bc27057cfe20cb9bb4984bb40f0c88ce26d0c35beb77de146b5a35babb43734ae12666c68b72bd25b3", 0x3d}, {&(0x7f00000001c0)="2901199fe56dccd9f79cd934d017d3a9113ff4914c157e57cb12de24989567f3184ef13359754b15fb3e2861d0a496", 0x2f}], 0x2, 0x0, 0x0, 0x4080}, {&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="bebf3167bf161b7c18956384327044412129fd01ac9bfcaf323a5e4d621194e75f6ce8c2083d09db8059ac818c9567c0b3caca9383bce3a54daf635abf373bf57a827253bd5cf82980a6bb77f7368f5db9f0db367860c44730f64cae07d45af32f2dea00acbc5c305e4ae32829e2c49d0a3d129936826302004f0856c8f6874319e400123ea0a8e88ab687374826f053642a85588c", 0x95}, {&(0x7f0000000380)}], 0x2, &(0x7f0000000840)=[@rights={0x18, 0x1, 0x1, [r1]}, @rights={0x18, 0x1, 0x1, [r2, r3]}, @rights={0x18, 0x1, 0x1, [r4]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x20, 0x1, 0x1, [r8, r9, r10, r11]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}], 0xa8, 0x20000840}, {&(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000980)="4d123f92ada8608d04057efaa423080f90356eceb7ff3db93d15a85768fe4ef4298160e76d682f390d14af2fbca5615c416ec661c023310f32744ed8ca9a638daa036050272b1fce7c33c110ce27ac6bcc24733f2c692e649c051a2ddbdcbd779664d345b66efe25365a1ec6d113a37e97503ed75c08b7e1d2b187c123a4a19ebd0b7ae73c17def94bc2b24402785fc3eef717954966bae4c04aa10547af2d6f60b9e38081eb22a4dc473f53fa628ecab8ff", 0xb2}, {&(0x7f0000000a40)="616dfea325bb72b07fdd17f0d895eba8c468b6121cfb628b14c5e99e47994e4e18b70c8e94fd7867129437c3c3371051b6b4b1bbb3026c4fa6775f55717dba0590a077b3e9eb218b78eb5eab14aa7811f2a4f879d5139d71939a6c4724c68500ef2f4a8181b10b670339e1c740f7f485e93318d21cc148199ba91f77f22a2dfbe31c9b69985a77c1c3a405ce440476036b9ca48abcb401e43f8a4d2e583e871c33cc78ce32d7f2f94cc4a22edd1fe2cf3856e9d41f14fc51bd3896ad52cddd330afe9ef472e562", 0xc7}, {&(0x7f0000000b40)="c542d06998fdfb338c6702c4fadb6a86c1afdeb15642fd4b3e172d01a28ba9cb46", 0x21}, {&(0x7f0000000b80)}], 0x4, &(0x7f00000012c0)=[@cred={0x20, 0x1, 0x2, r15, r16, r17}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @rights={0x28, 0x1, 0x1, [r21, r22, r23, r24, r25]}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @rights={0x20, 0x1, 0x1, [r29, r30, r31, r32]}, @cred={0x20, 0x1, 0x2, r33, r34, r35}, @rights={0x20, 0x1, 0x1, [r36, r37, r38, r39]}], 0xe8, 0x4800}], 0x3, 0x40000) r40 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x82, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r40, &(0x7f0000000040)={0x28}, 0x28) [ 159.222107] binder: 11643:11649 ioctl c0306201 20000580 returned -22 13:51:54 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) readahead(r0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001540)=[&(0x7f0000000100)={0x0, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfd2e, 0x10000000000}]) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x80, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x80000000, 0x2d1399bf, 0x2, 0x6}) 13:51:54 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x11, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 159.290744] binder: release 11643:11657 transaction 222 out, still active 13:51:54 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 159.361065] binder: send failed reply for transaction 222, target dead [ 159.425223] binder: 11683:11684 unknown command 25344 [ 159.474933] binder: 11683:11684 ioctl c0306201 20000580 returned -22 [ 159.508904] binder: release 11683:11688 transaction 224 out, still active 13:51:54 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='(()bdev{%\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xe800, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x7, 0xfffffffffffffff7, 0xb71d}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x9, 0x201, 0x4, 0xfc, r2}, &(0x7f0000000200)=0x10) 13:51:54 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000"], 0x2c}, 0x0) 13:51:54 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=""/111, 0x6f}, {&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f00000008c0)=""/125, 0x7d}, {&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000140)=""/51, 0x33}, {&(0x7f00000007c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/251, 0xfb}, {&(0x7f0000000500)=""/192, 0xc0}, {&(0x7f00000005c0)=""/122, 0x7a}], 0x9, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000b80)="a28b84c8df26709f7f0ae51a81be27ffd4daf1ef18a0cd85da431b8eba289969859946178223c3f1dadb938a5410ee6ecb1030f198332eb4921826a44a0a15e86f5dd1807088b71fc086d3b9629b88917c4ab4979aa671566ac1f15041813fd1ae3a1056a18d0bfa22fcadccb53df44ed12a3bcae77684402b74ff56e32f65d02c040a522796e8781970ec0f62ff8dbec36577057c20f08522e6a5653d4cb28664d7", 0xa2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) recvmmsg(r1, &(0x7f0000004ec0)=[{{&(0x7f0000003940)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000004b40), 0x0, &(0x7f0000004b80)=""/156, 0x9c}}, {{&(0x7f0000004c40)=@ipx, 0x80, &(0x7f0000004e00), 0x0, &(0x7f0000004e40)=""/84, 0x54, 0x4}}], 0x2, 0x0, 0x0) pwrite64(r1, &(0x7f0000000200)="13f25b427edd5ea6b6f0c5240fc596820957d375b9e3e66610140cc7ac93b61c1271c7de2830714fbaca5f47b728657c4a2ab6acbb730b3d853d57804049919536172a1f70f9d470d7d4a494e8bb131d2f018784e020ecc33ace5b4230d59a878de1ed39a8f7dfd587299eb7b06da58a44afe0e7c6be9af75993", 0x7a, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000c80)=@sack_info={0x0, 0x6, 0x20}, &(0x7f0000000cc0)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={r2, 0x3}, &(0x7f0000000340)=0x8) r4 = syz_open_dev$mouse(&(0x7f0000000640)='/dev/input/mouse#\x00', 0x200, 0x80000) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) timerfd_settime(r4, 0x1, &(0x7f0000000b00)={{}, {r5, r6+30000000}}, &(0x7f0000000b40)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000a00)={r3, @in={{0x2, 0x4e22, @broadcast}}, 0x7, 0xe8, 0x7355, 0xff, 0x7fffffff}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000940)={r3, @in6={{0xa, 0x4e20, 0x100, @loopback, 0xe1}}, 0x9, 0x3, 0x8001, 0x8001, 0x1}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r7, 0x1000}, &(0x7f0000000c40)=0x8) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000d00)={'ip6tnl0\x00', {0x2, 0x4e21, @rand_addr=0x8000}}) 13:51:54 executing program 7: r0 = socket$inet6(0xa, 0x1000080001, 0x8000000030d) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000003740)="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", 0x52d}], 0x1, &(0x7f0000000a80)}}], 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080)=0x8, 0x4) 13:51:54 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) close(r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000000c0)={{0xa, 0x3, 0x9cdf, 0x1f, '\x00', 0x3}, 0x6, 0x104, 0x6, r1, 0x4, 0x8, 'syz0\x00', &(0x7f0000000080)=['\'\x00', "cd2d00", '\x00', '/dev/mixer\x00'], 0x11, [], [0x36, 0xbb4e, 0x4, 0x3]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0xc04, 0x5}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={r2}, 0x8) 13:51:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40104593, &(0x7f0000000040)=[0x0, 0x8]) 13:51:54 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x18, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:54 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 159.544017] binder: send failed reply for transaction 224, target dead [ 159.621371] binder: 11709:11711 unknown command 25344 13:51:54 executing program 2: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x7c) 13:51:54 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000"], 0x2c}, 0x0) 13:51:54 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@remote, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2b, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)={0x0, 0x0, [0x0, 0xc60]}) 13:51:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x101000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x458, 0x118, 0x230, 0x230, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000040), {[{{@arp={@multicast1, @local, 0xffffffff, 0xffffffff, @empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}, 0x100, 0x81, 0x1100000, 0x8, 0x0, 0x4, 'veth0_to_bond\x00', 'tunl0\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xeef6, 0x8}}}, {{@uncond, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}, {{@arp={@rand_addr=0x400, @dev={0xac, 0x14, 0x14, 0x1f}, 0xffffffff, 0xff000000, @mac=@remote, {[0x0, 0x0, 0xff, 0x0, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}, 0x100, 0x8, 0x80000000, 0x0, 0x9, 0x81, 'rose0\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x0, 0x42}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @loopback, @local, 0x4, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) socket$inet(0x10, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x4}, 0x10) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000080)) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000140)={'bridge_slave_0\x00', @ifru_mtu=0xffffffffffff042a}) [ 159.652492] binder: 11709:11711 ioctl c0306201 20000580 returned -22 [ 159.684799] binder: release 11709:11718 transaction 226 out, still active 13:51:54 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:54 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x4, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:54 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500"], 0x32}, 0x0) [ 159.749468] binder: send failed reply for transaction 226, target dead 13:51:54 executing program 2: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='attr/fscreate\x00') exit(0x1000) lseek(r1, 0x800000000002f, 0x10000001) [ 159.863633] binder: 11739:11742 unknown command 4219648 [ 159.887201] binder: 11739:11742 ioctl c0306201 20000580 returned -22 [ 159.911999] binder: release 11739:11748 transaction 228 out, still active 13:51:54 executing program 3: r0 = socket$inet6(0xa, 0x100000000000a, 0xffffffffffffffff) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x91, 0x20, 0x1, 0x3, 0x80}, &(0x7f0000000140)=0x98) bind$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) getsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 13:51:54 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x102, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000200)="aac543f47796cdcd76eb443716efe12066e4edabd3c0567b304b3725cdf0f2c88901697083f329609d6680db273764f7d9b4a4595325d700e76b5ce1c909493746194555387844035fe65df9b7a8ce921fcef8e73b34bc8ba5548e9eccbde0535421dd2583ece78ff4a51dfbf03755a60361b24e6e3f5d4ca047ba12cbdb084fbe5f23d0de1808cdf7324708499c5f868e10de0c819c4681537e75e2883e2f119373c24df5b7ee518cf74caca7cb11d475079a13bb", &(0x7f0000000180)="ef3551da4f8e4cab07"}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000001000090c000000000000000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="08001000000000000800050000000000"], 0x5}}, 0x0) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={r4, 0x0, 0x2, [0x7ff, 0x9]}, 0xc) ioctl$KVM_GET_TSC_KHZ(r5, 0xaea3) 13:51:54 executing program 4: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x101801) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) 13:51:54 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0b0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x2, &(0x7f0000000300)=[r2, r3]) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={&(0x7f0000000200)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000580)=""/169, 0xa9}], 0x1, &(0x7f0000000700)=""/202, 0xca}, 0x0) 13:51:54 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:54 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x2, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:54 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500"], 0x32}, 0x0) [ 159.943045] binder: send failed reply for transaction 228, target dead 13:51:54 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500"], 0x32}, 0x0) 13:51:54 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000000)=@ethernet, 0x80) connect$can_bcm(r0, &(0x7f0000000140), 0x10) [ 160.015726] binder: 11770:11775 unknown command 4219648 [ 160.029739] binder: 11770:11775 ioctl c0306201 20000580 returned -22 13:51:54 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x12, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 160.078520] binder: release 11770:11785 transaction 230 out, still active 13:51:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet(0x2b, 0x1, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x0, 0x1, [0xffffffffffffffc0]}, &(0x7f0000000040)=0xa) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x9, 0x7}, &(0x7f0000000100)=0x8) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x0) 13:51:54 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@'], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:54 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000"], 0x35}, 0x0) 13:51:54 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000780)={0x1, "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"}, 0xfd2, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000340), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@ipv4_newroute={0x30, 0x18, 0xe01, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x75f}]}, 0x30}}, 0x0) [ 160.128293] binder: send failed reply for transaction 230, target dead 13:51:54 executing program 7: r0 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x3, 0x0, &(0x7f0000000140)={0x2, 0x3, @broadcast}, 0xd) close(r1) [ 160.216374] binder: 11803:11809 unknown command 4219648 [ 160.258707] binder: 11803:11809 ioctl c0306201 20000580 returned -22 [ 160.301064] binder: release 11803:11815 transaction 232 out, still active [ 160.356295] binder: send failed reply for transaction 232, target dead 13:51:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x141000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000180)={0x0, 0x0, @ioapic}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)) r3 = getpgid(0xffffffffffffffff) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x100, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f00000002c0)={0x0, 0x1, {0x1, 0x15, 0x2, 0xd, 0x3, 0x5, 0x2, 0xf5, 0x1}}) r5 = syz_open_procfs(r3, &(0x7f0000000100)='net/anycast6\x00') accept$alg(r5, 0x0, 0x0) write$FUSE_STATFS(r5, &(0x7f0000000300)={0x60, 0x0, 0x3, {{0x2, 0x6, 0x1, 0xffffffffffff38d6, 0x0, 0x9, 0x1f, 0x1}}}, 0x60) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f01c82e0f381cc266b86a008ed02666470f00594fc7442400c7000000c7442402600c0000ff2c24c422fd343ac402719c6900b9a60900000f32f30f01c966baa100b000ee", 0x45}], 0x1, 0x0, &(0x7f00000001c0), 0x0) 13:51:55 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)=@ethtool_dump={0x5}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x400000000000000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x9, 0x20, 0xff, r2}, &(0x7f0000000180)=0x10) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000001c0)={0x2, r1}) 13:51:55 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000"], 0x35}, 0x0) 13:51:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x59c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) 13:51:55 executing program 6: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x7, 0x2000) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@dev}, 0x20) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000000)='\x00') 13:51:55 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x2a, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:55 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xf0ffffffffffff, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) [ 160.739655] binder: 11835:11839 got new transaction with bad transaction stack, transaction 234 has target 11835:0 [ 160.750498] binder: 11835:11839 transaction failed 29201/-71, size 0-0 line 2879 13:51:55 executing program 7: ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="c25abda86b2dfc5e8c66442a46a5450b124bebbbafe0fe6aea8e8ef8eb13eefd0caa7d30083611fb65d5ba6dd16ee912bea2a6eeab2d4c340c7567fd997f5737a2ced981f08f624b0e6d41f6e7479bd6c6bd07b5e1302ff46b947174c4f636b0d1a8355630b2562f5259d18ee872503c2325ec3c344719a1cdf942ecca94fa63636d7c1955d3c4371bc159c4723e40d3a552bc5aa65991d498eb66c41645d45980269c8b97aab41c04ba8ce46b4613b3b6d5ea210913cea1df6ca2d5100c72d74673a15342680c57f70357c506e03eb0126bc4939d5d08bce0007efea5301c8e56a6898af5c900b1841dd3e61e88926a7f99e4cd2ee9459954422eb0af21f31be82a63e3211a8121448ea6b141a8eed6d0f8e6977b1b6a6f034264dc9a4d8e32b0c515d4d7c3738a7830145dc03af4622da5d3f0bd9a91962aae891d7d1290c68497de0b7441f8a80d7c2680492f11eb34954826cda073b1d06ce24f8e0caef2136b2799f45902823e0b19d463f1a818fa1c753051fa4885fc328342e73f1d0dcf87b1680e5536042c99c53ea794b221729c2fe3073a25e76d8c7d8c2ed3f6eb6492348af10eacc16eff14a6d2c00cc78006e3b71c433802981d10e432a6cd12a68b8c7d31cf1fee460354f140cf437cfd26ef60f3c68c4654dcc4296e0b3a3ac1eab4b4264a16459a742daa3bd9e990552461b01088e26a9584071000c62dfe10a2494f886d230636200e7eda164f5113f7eb8ab441775fe59e1540f45491385aacd768085622e77c7045a54271803fd6703c929719ab30f50260a092a002e249c9cde83ba9fbcca6f881305d7f929da086a96fd16f6e3d55230c78cc83a8d346f13eb353c9feff18149728f4d317c03efe26d67af3c3ec10cc0304e751efb4c3784c7d6662f5ad5ab69f54b0d051dcb075755c965a8a437a93965fbeffcb54ef4c1e1f736a853355ae8264d3caaabda86c4715bb20021856df73d89d0870de70b65d146972728b5b69acf95783e2f13793c8c1c44b70ece789ef1f863b32a6ea79404433b8fda707aea13768afdee08d7e455b0eb81faf30013844f00f336ab7f1b0f85bc4a4e624226872571379e4d3fac45262560f0372d8f61f8a4ded96c4b44a2ef2c1996e633c641c213204a3a31f3f74c5111202e8fb6eebd55e00d7e55ffb315b98ca304dc8e87e28250b827c2d96fcd280434f0fd4a83151509a7ac80469cb895290b3cbfbd54d21bb5a79cc2d89b9cfbd3902427cf132758306c88654d3fe9aed7d3c1c242ac33edcb31c5997690a18f8f81f5be4d41c674097d5738e80ea9e8f0397bfa114e08ecfeb00ea3772ebc0e61c56a037fd117181bcbd29d0053c6ebda341236fb3d6ca45206bfae5e6ae0eb1f86ebddeac93387591b178e9fbd616fb509c85acc896b3395ca443195d487e589f6a33853ad00b5f9a4272c1083769bb798dae45a70a04fdd7b4709aa9cc3b93c73c0435079b18252520706078f62281455506c7ca37efcecaebbcb3143df47e07ed4b2766d2275b6dc68e58d366bfdc56ac7715a6a9c5bfef56fc47100bba3d0260b455d9e94456241b25c57c1e69f58679701e528347a1a2ae72b38e1e0d01b27651e03cc9a2b2f3b425a395920ff1a5b672872134a3f6c2dc38c2e66b18461d733e7dc5bd6441bffde6277fa4b414c59e18dd14319cf9de375b1dfe52590ccc58bbcb19e16337a331f128ebc6b5bfe6346b375ff2e48942fabc50a6802f32aab40e27739b27baf9e4e447634d10045f52255c335d648a514127ed469231a03eca301c0b86967f8d4bf16139d0b3038bf419b6e90e9ab51d43aeb9d7c4586bd3cf6d221e441375db486aceaf133fae1f23a6b02e5f1efa165db338213d42926d2cdef5e650722175b465fdf847f5f2260f9ced5fcf82053cfa44d3b3e11edf8b87adb05a96b9f829a648ac3f6bd05e2327821cc730fcbe3af716e918de7578f8f952673eddd035376662bce281dfa67015b2b5fd5dfca75597d364175ba321f48db1e073f792a4cda83c34f44103e2766b3b27fbeee36fc33b2a7c235125f763d573c00f66823774a63cc5e888a5eac0975490193a9cbeb06f5f7be1ba84efc128b15c69d575eb51c84e904e416ead6ec7d838eab277dbd7537b4d527c460924bb36f9799a9efb5fc5d0a8d8e4213437fe6b44fc9a56817f7883634dfab7cf5a2b2c17c75b9056734613b4f64681fbacf73f21f9e88a34e0d62d517cbec5371ddc02534467d4afac8e46af0e3738922ff3d9a68c9a89cec6b8cec34676a0955d5994d6bd6a2e1d48aebc4d0b1c9c986c3acc55ba5e9391ad9a41f1797bff989b275c8ab8e05621deaa588ee03b60bacefec01c9e2dab9a21f41a77fad600e794bc3d198824b9696de4efa7cad737f9ce6ba3588a38b782fac9ef4c40ae7e06432ac015104044078be801a69b8d47ac71d4f4c643570724e5e65acae3f68958601178915abbed9072d512f40ef1ab29a533b0d3900dcc38c78a8b34fb67878b20ac449ef64ff337d8bd7bfbf106900ba83c994b2b15947c33bbe2cefb32f1ed8df2ca852560d2f9b371a06e2a02b99e03c5638c09ace4d2512f96ba3426782bafba1eb2bc21a38318c41d919f8dc2248a423935b0a8f126f0d47c8c413fd8765d5f0fe52d231a171ab7190793f97a2b8a76107ee4571f4c60f768931163887068da5cea9acdd36fd91868f004b8291ebb42d88ae9d6db6c7e92e37acb22cdcee7adf4a76d104f214f86f212bff0c926f730a99ce80b2af564b2b7a289e9b6c3817c1bfdee4431e02842762fb8100da22ec64788460cff7fffa1d2198511063fa5c33b33a3148d3f8b48a23c4cc29cf96d13c775ee57624328463a2a4fb212a0b7571423ca23b19ae004be7f76ff49fdf75cd4408cdabeb77203399f4d16fdf4e11bfca9b1ad4c08236f81cb56a01cb184e183e3c0c21e836812ed8228aef27bc7b422cd617e98359ba0bfe5fba2d3e6f388f3096434fc7ad794126f0de597e6e0c13cb3d04ea351ebc17d557062741074c8a40c8084a4998f9d1b66024bc8d457b68dd8da74ae939374ab5ed9935f3567a7fb56d32401b4450769e5aecaf046fbbd951cf2be8688fbc541f1b204b4fdc1c1548142f6de15d91d4938895f8526808c066607172873a32000c2bf268123fd4dd1d65c82d6de7b6934efabb7a9a8c98a50ff699c2edd2a5830b254e6cbd43e66e0d9604faeae33a6c09d134caa30b5ab2c509aa8c0d02717ed050287ace00b5aaf9f5c82a5ac64d050fe2ef5068d28b771e481d0e14a9f73aad52c94c36fc8d5e24000b9d232ee7d3a64c1e0f87dc3fd72de9fad5391597b06fb73d4d797af7787b3da2db65fc027d4bb4c822ef4933726ea58586bd537528f03759df03f227a0c68c964cbd70dcd8f7887624f01033e4ec96c527d570b300b4569bbe9cc9abb429685be47ffc22a2ee08452bf0ef08659b87776a81a796299087271ef7b8935f345c4e3e4775c785182318a7a125cd1a781a45d0ef9ccf325dd31038b0f9c910aebbe2763886a0bb312264796e9fd5a376ba42ff1b0f7e35a39a8d5d664eba11539d64409ad700dd2fcd422b4b381320e4de9b070fd3525b97f8ddc73a1605f47145bc49d2483deba76eeb84a2d5d27579ee48d62ceefda00080f3b9734536f40b8f1804fe1ec718d2fe633d46833030885548df85e7a91b986275dda66908a73613502f07bd793a655ad86748fefc39b52d68cc797637ea74bbb968025506778b2c5170fded871f2dc1a7391d15b1f23be16166cee468e98e619a313d4e387220e8b8ad6e669f8b234f35c37b080bc88a4141df3e39f820f2a835738b297e38fbeed73f07fae8bd2a6ee0a58cf3cc6e8c3946834cf38d9cdc2e5a69befda00dd270648f79d96e75a2729fad8e3c62969e4606cbaf6fd156a8da5857cfe90f9b10a8fa6e436b760c90903991bd22280be07f75ccc0472b1ff840089207674d5b45144c8c54a1b7f5e42df1202f42d67c54f2b8437414483a1799d6fdb487a2efeb320ba6cde3724caacc0b8e461bfa36fa9541f5e7a391c24e216b20712cf13dd69d5033c2c043a2ecdd3d18e9011bddb0d09f5d31892c598a8dd596780e99e63f7d47c392c68b47dd540c124a8ddc24cf983a761af5282471e71dee25aa73d602477e8485b6b81f259c71121d7d25665c2bcdf1b2f6270f42608cbf3e628086f63d1cb7cb40a743e5cadb24ccce9bdcee717594928d23e8f4844df497a4a492eb1276040419dc752542435a79e2e28ca497a83a002cea22dc4e313c6729f08c0eea3a76b7d202bf6eedf64946c84eab2288037c05e9950693c7af214a50715c683eadcd3297dc334310e7b9b7c471c5758ae52c1913d405d90466b229e85385283768f0da14df896c8c13359d9a3b19aa3e3126b63c1925d7381971dcf03d4dd45ed5dccce870b19f805ca668945de60c71945017252bdbabca94673eeef59d137d2a71a56f74d3c87602787c4a7403c4784374a280668bd8c11d7f677181e7a3d79d3884d21dfb22d514546155eb0c3b5b27046c3ed25071ab7a178b26145b79ac4ad5af3c208c6a2ac7c5ae3a9c35a46ef9962e032b1bff9f32dd89c34627093ff27372199c41aaabbd6b1a59a6d0844c8944e86cf36ae6bf838098a25503756d4506a0afb81d621201ac4472f27acd50b978a0bff3056794618172b5014a99f9c71b76fea6bf75746d2c2516bf0d95bec1fac0b034b8619d7aa6a767d25435da1a5ef58799768868a1e4fe8c8ee1db2ef30850ab7b7853b4e3d32e9d354bc2a49c84823c48b9b600c9d694050c1dcd5a1ba623f8086901a822540db5ff92fa590de901cf1b0ff9aceac3ba156b5a8fdbb09e95fda98c6d9f63c6f01f3a6f45d02f115824cd1157d45f639b51a88c7cf5cd84dc26a45c2c8e0595716293b1998b8ee9c4bfe1cf2dbec4531896f3d53c19098c5ecb95bb0a3fc14fc44810dbb2fc329c5ca95af8600ba17d6b55f805bf33a60d68aa4e0e38b889e3058e3fa91802d10f0ba07c290757c1a0fdce08a13f335f080cd7aefa7dfed1400ec4f9e8b7ea0884b947f3d8d032c92e401e91ffcc0f9e5998aad79b33b36904d0c9b9aa201bb2c6149d3559faa4e7e48999f486ebee142a7befba75c4b995191eef189dd") r0 = getpgid(0x0) sched_getattr(r0, &(0x7f0000000080), 0x30, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, &(0x7f0000000000)) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x5, 0x1) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0xfffffffffffffffe, 0x4040) renameat(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00') bind$inet(r1, &(0x7f0000001040)={0x2, 0x4e23, @multicast2}, 0x10) sigaltstack(&(0x7f0000001000/0x3000)=nil, &(0x7f0000000040)) 13:51:55 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) write(r0, &(0x7f00000001c0)='5', 0x1) r2 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xffea) 13:51:55 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000"], 0x35}, 0x0) 13:51:55 executing program 3: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x1a, 0x400000201, 0x0, 0xfffffffffffffffe, {0x2}, [@typed={0x8, 0x0, @pid}, @typed={0x14, 0xf, @ipv6=@mcast2}]}, 0x30}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000000)='./file0\x00', 0x18a) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000440)) 13:51:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") rt_sigpending(&(0x7f00000000c0), 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) [ 160.862468] binder: release 11835:11839 transaction 234 out, still active 13:51:55 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0xc, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:55 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:55 executing program 7: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x0, 0x0, 0x16}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x80000000) fcntl$getflags(r0, 0x40b) 13:51:55 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="0200000000000000100000000000000005000000000000"], 0x37}, 0x0) [ 160.943829] binder: send failed reply for transaction 234, target dead 13:51:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x3}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x101000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x13}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x5}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9074}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd95c}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) [ 161.013192] binder: release 11879:11883 transaction 237 out, still active [ 161.020359] binder: undelivered TRANSACTION_COMPLETE 13:51:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x5) sendto$inet6(r2, &(0x7f0000000440)="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", 0x11b, 0x20000008, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000380)='./bus\x00', 0x40001, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000000100), 0x8000fffffffe) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000200), &(0x7f0000000240)=0x8) sendto$inet(r5, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f00000001c0)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x800, 0x4) setsockopt$inet_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000000), 0x4) sigaltstack(&(0x7f0000ffb000/0x1000)=nil, &(0x7f00000003c0)) r6 = fcntl$dupfd(r5, 0x406, r5) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000580)={'filter\x00'}, &(0x7f0000000600)=0x44) getuid() ioctl$TIOCNOTTY(r3, 0x5422) getgid() mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='fuseblk\x00', 0x180000, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000000000004f77867cac1a2b"]) r7 = fcntl$dupfd(r6, 0x406, r6) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000100)="da43aaa971de29a0fa36c92d09a3b78fe944e826932d36f96c6b2350e998802d404011c4caa3f94eeb4651bf6d5787ec38772788678f2ee79270d3498b3d1c0bec2b4591475c10a71556642fe239e90b587ae06e5e19b7eed3b0828bf8e42a0e8d8c54a242e7c97bf5", 0x69}], 0x1) 13:51:55 executing program 3: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x1, 0x4, 0x7}, {{}, 0x100000001, 0x4}], 0x30) r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x2, 0x28002) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e24, 0x1ff, @local, 0x8001}}, 0x10001, 0x1}, &(0x7f0000000380)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000003c0)={r2, 0x1, 0x9a, "47e1a94f13d7b29e93e37470eca23346086d2f1e7703d0cdef2141c52700047e876b9bc90310fc717b4881c55a6f3a8d6e3687240a2699ccdd8292557c9def8c7300f0a0996c55d154c4df094f993a9886c1273e42df0f37daa81a4ec3964f8a9d019b6801fdef55ec5ac9eb6645184791c283f26a71d7bcd06d4b5a21d1f39a1a223f385115b682ee91abeeb3dac204c83cc914038d51813841"}, 0xa2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@ipv4={[], [], @rand_addr}}, &(0x7f0000000080)=0x14) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000004380)=""/4096) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x5, 0x200802) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x18) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000012c0)={r4, @in={{0x2, 0x4e22, @loopback}}, 0x9, 0x6, 0x1000, 0x2, 0x4}, &(0x7f0000000200)=0x98) 13:51:55 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="0200000000000000100000000000000005000000000000"], 0x37}, 0x0) 13:51:55 executing program 7: r0 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000002c0)="025cc8f1d6993453490d5abf09c7d04f528b84cad51e6f6c32074c6c1c1279567de64b06f29fa82d1dd08d104c4f545df6ad44f3fe154fdb340a5ea444b5804605f8864224c91375a12bb63edede215705b825867595663a3baa85746de47da6181c6659b4b02c6b2e24ccdb43bb196d10d131e1a89216ad4a75bf6ef8934a58f9adf6515f529cfea9b8aaa22a7ee08608f74d3509150bd4b07d9c73ea4604b5db7a9fef163ee51430dea8fd5eb36e547384e5871eaa8b68c02c7a7377fe9f15bfef34e3af88a2597d3bf19805365def2972be") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x10080) ioctl$VT_ACTIVATE(r2, 0x5606, 0x7) ioctl$BLKGETSIZE(r1, 0x80081270, &(0x7f0000000240)) 13:51:55 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 161.104252] binder: send failed reply for transaction 237, target dead [ 161.207417] binder: release 11910:11912 transaction 239 out, still active [ 161.214595] binder: undelivered TRANSACTION_COMPLETE [ 161.261951] binder: send failed reply for transaction 239, target dead 13:51:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000003ffc), &(0x7f0000002000)) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x400) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f0000002ff9), 0xc1000006, 0x0) 13:51:56 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0xd, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="021800001000000000000000000000000800120000000000000009000000000000006e39498b80bc0000000000000000e000000100000000000000265bac760000000000000000000000000000000000030006000000000002002000ac14ffbb000000000000000003000500000000000200003db28dbebb0000000000000000"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x5, 0x400) 13:51:56 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="0200000000000000100000000000000005000000000000"], 0x37}, 0x0) 13:51:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x56b, 0x8000, 0x4}, &(0x7f0000000100)=0x10) getsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000400)=""/4096, &(0x7f0000001400)=0x1000) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r3, 0x8}, 0x8) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000001440)=0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x800, 0x6, "3605d8347c9a5eb0fe8b3eb533590b72fff04fdf47b21d064008bd7e37b6a22c709d0d909d04f010a3bd700f93729ceb33603b123d29ec07bfb49f3252bd1665e789f70a144bedbb3e49725f0c0ef8e3b341dca15a649746d9bf818627804bb6dd0e7e3c10229ad4b09d64358bed06117ce6067bc692076e74af8afa7290ce0cb89de086215bb4c82e49617df7e9702b2c52d3843d46beafd1b68809c7ba618ed2bf8a05a3e66945480e2752ac5a341b70091242ebc4edf8c21e91d906f6be17b903cc33ed59845ddcdb8b18113901dc9b688ac470dc95477085c0f1996f5a3122994a218be8544bee3937df737abd10dce9082f2d57f837e586278818e429f6", 0x6b, 0x4, 0x9, 0x62e8f267, 0x8, 0x1112, 0x6}, r4}}, 0x120) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg$key(r5, &(0x7f00000001c0)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x2c, 0x1}, 0x3a8}}, 0x0) 13:51:56 executing program 2: bpf$MAP_LOOKUP_ELEM(0xd, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000280)=""/231}, 0x18) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7, 0x8003) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x1000000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) 13:51:56 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:56 executing program 7: r0 = socket$inet6(0xa, 0x40000000000005, 0x7f) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000002c0)='filter\x00', 0x3) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000440)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000540)={{0x7, 0x0, 0x100, 0x8, 'syz1\x00', 0x200}, 0x1, 0x0, 0x1f, r2, 0xa, 0xff, 'syz0\x00', &(0x7f00000004c0)=['$user{\x00', "2b47504c65746831706f7369785f61636c5f616363657373657468303a6367726f7570247d21df00", 'user\x00', '\x00', 'filter\x00', '\x00', 'user\x00', '/\x00', 'user\x00', 'yeah\x00'], 0x4e, [], [0x4, 0x3, 0xfff, 0x7]}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_out(r4, 0x5463, &(0x7f0000000480)) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000006c0)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @multicast1}, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000}) r5 = dup2(r3, r1) flock(r0, 0x40000000) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r6 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r5) socket$bt_bnep(0x1f, 0x3, 0x4) iopl(0x8) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) getitimer(0x0, &(0x7f00000001c0)) sendto$inet(r6, &(0x7f0000000680)="a6429564ed3a04f0f4799b9e7076ed0a31535d8aae53f88af0d069d9d9d348b0541ea8b020aa4e49fbe4408f5bf2025b49bb2b61cddaa7a668999a", 0x3b, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280), &(0x7f0000000300)='$user{\x00', 0xfffffffffffffff8) syz_extract_tcp_res$synack(&(0x7f0000000740), 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r6, r8, &(0x7f0000000080), 0x80000003) [ 161.380761] binder: release 11931:11936 transaction 241 out, still active [ 161.387857] binder: undelivered TRANSACTION_COMPLETE 13:51:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080), 0x2) fcntl$setsig(r0, 0xa, 0x2d) r1 = accept(r0, &(0x7f00000027c0)=@ethernet={0x0, @dev}, &(0x7f0000002840)=0x80) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000002880)=0x87f, 0x4) 13:51:56 executing program 1 (fault-call:3 fault-nth:0): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:51:56 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)}) 13:51:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xffffffffffffff80, 0x40) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080)) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000240)={0x29, 0x3, 0x0, {0x0, 0xffffffffffffff36, 0x0, "20001dc0a2000000c3d2a5e364fb402fa018ae95c97380cfeb278d1edec3b94f8e9e3ed68372a1a57511bd840f86a35cff2b4158ba4eea6083b975ea86828d81c461e639cc145fdb062d2e9ad21adf1f8865adba89eb40a2993e989d1119a207a399cacb54f4935837efac07ba0051d7702177dc7d007d6cde09db5f7b642e2e429d8564e6dc0eeb18ee37d8f749abadc9b9dd12f7c585856edc48ec14e5f8ea6b4d757b92f1d4edce53f1ebf27bda92d9bd22c3c27f891d684764ec8608a892d1325d8d37a31f9af5"}}, 0x29) [ 161.465547] binder: send failed reply for transaction 241, target dead [ 161.513642] FAULT_INJECTION: forcing a failure. [ 161.513642] name failslab, interval 1, probability 0, space 0, times 0 [ 161.525132] CPU: 0 PID: 11958 Comm: syz-executor1 Not tainted 4.18.0-rc7+ #169 [ 161.532521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.540708] binder: release 11965:11967 transaction 243 out, still active [ 161.541887] Call Trace: [ 161.541916] dump_stack+0x1c9/0x2b4 [ 161.541944] ? dump_stack_print_info.cold.2+0x52/0x52 13:51:56 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)}) [ 161.541983] should_fail.cold.4+0xa/0x1a [ 161.542008] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 161.548986] binder: undelivered TRANSACTION_COMPLETE [ 161.551561] ? find_held_lock+0x36/0x1c0 [ 161.551617] ? check_same_owner+0x340/0x340 [ 161.583105] ? rcu_note_context_switch+0x730/0x730 [ 161.588085] __should_failslab+0x124/0x180 [ 161.592367] should_failslab+0x9/0x14 [ 161.596208] __kmalloc+0x2c8/0x760 [ 161.597317] binder: send failed reply for transaction 243, target dead [ 161.599782] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 161.599806] ? sock_kmalloc+0x156/0x1f0 [ 161.599833] sock_kmalloc+0x156/0x1f0 [ 161.599855] ? __sk_mem_schedule+0xe0/0xe0 [ 161.599889] ___sys_sendmsg+0x2d7/0x930 [ 161.599915] ? copy_msghdr_from_user+0x580/0x580 [ 161.632833] ? lock_downgrade+0x8f0/0x8f0 [ 161.637000] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 161.642551] ? proc_fail_nth_write+0x9e/0x210 [ 161.647046] ? __fget_light+0x2f7/0x440 [ 161.651035] ? fget_raw+0x20/0x20 [ 161.654505] ? find_held_lock+0x36/0x1c0 [ 161.658579] ? kasan_check_write+0x14/0x20 [ 161.662811] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 161.667743] ? wait_for_completion+0x8d0/0x8d0 [ 161.672348] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 161.677890] ? sockfd_lookup_light+0xc5/0x160 [ 161.682383] __sys_sendmsg+0x11d/0x290 [ 161.686266] ? __ia32_sys_shutdown+0x80/0x80 [ 161.690682] ? __sb_end_write+0xac/0xe0 [ 161.694657] ? fput+0x130/0x1a0 [ 161.697945] ? ksys_write+0x1ae/0x260 [ 161.701759] __x64_sys_sendmsg+0x78/0xb0 [ 161.705827] do_syscall_64+0x1b9/0x820 [ 161.709717] ? finish_task_switch+0x1d3/0x870 [ 161.714211] ? syscall_return_slowpath+0x5e0/0x5e0 [ 161.719138] ? syscall_return_slowpath+0x31d/0x5e0 [ 161.724068] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 161.729441] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 161.734286] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 161.739657] RIP: 0033:0x456a09 [ 161.742851] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:51:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000100)={0x7fff, 0x400, 0xfa08, 0x2, 0x40}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000580)=0x19fc, 0x4) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='i'], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="05", 0x1}], 0x1) 13:51:56 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x21, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 161.762288] RSP: 002b:00007f75f62b7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.769997] RAX: ffffffffffffffda RBX: 00007f75f62b86d4 RCX: 0000000000456a09 [ 161.778047] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000013 [ 161.785311] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.792589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 161.799853] R13: 00000000004d30d0 R14: 00000000004c7d9e R15: 0000000000000000 13:51:56 executing program 7: r0 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc80700145f8f764070") r1 = socket$packet(0x11, 0x6, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000100)=0x200, 0x4) sendto$inet6(r1, &(0x7f0000000040)="040300000100000000000000c52cf7c21975e697b02f5c566b2b2ff0dac8897c6b11876d886b6621d8d207ccf73f257e55e86eb29406136fcfff0500000000000000c7a67e4b98a35d724459", 0x4c, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x4, @dev}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x7, 0x4) 13:51:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000540)={0xffffffffffffffff, 0x1, 0x4000000000000000, 0x5, 0x6}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x480002) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000340)) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x3, &(0x7f0000000300)=0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r2, &(0x7f0000000080)="e0", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x7}, 0x1c) listen(r2, 0x8088) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000100)=@routing, 0x8) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000400)={{0x0, 0x6000, 0x8, 0x7f, 0x1000, 0x4, 0x1, 0xe1e, 0xfffffffffffffff8, 0x5, 0x8, 0x3}, {0x2000, 0x0, 0x1f, 0x5, 0x9, 0x8, 0x8, 0x96, 0x80000001, 0x100000000, 0x4, 0xfffffffffffffff9}, {0x7004, 0x116000, 0xf, 0x86a, 0x65, 0x9e, 0xffffffff, 0x4, 0x6, 0x1, 0x1f, 0x7}, {0xf001, 0xd000, 0x1e, 0x8, 0x1, 0x8, 0x1, 0x8, 0x7ff, 0x3, 0x9b8, 0x8}, {0xf000, 0xd005, 0x1e, 0xffff, 0x1f, 0xa21a, 0x7, 0x3, 0x1, 0x80000001, 0x4, 0x6}, {0x5000, 0x5000, 0xb, 0x81, 0xfff, 0x1749, 0x3ff, 0x5, 0xffffffff, 0x9, 0xd78, 0x3}, {0x4000, 0x106000, 0x0, 0x89b4, 0x7fff, 0xb35, 0x2499, 0x9, 0xf1, 0x1000, 0x4}, {0xf000, 0xf000, 0x8, 0x4d4, 0x80000000, 0x9, 0x969, 0x2, 0xff, 0x7ff, 0x7, 0xfffffffffffffffa}, {0xf000, 0x100000}, {0x6000, 0xf003}, 0x40000, 0x0, 0x3004, 0x640000, 0xf, 0x0, 0x10f004, [0x8, 0x4, 0x1, 0x6]}) accept4(r0, &(0x7f0000000180)=@hci={0x1f, 0x0}, &(0x7f0000000200)=0x80, 0x80800) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000680)={@mcast1, r3}, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000140)={'ipddp0\x00', 0xfffffffffffffffe}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x8200, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="090000000000294b1bf398552ffa5b02a105d07850b28e7f12c76ed0e41f7cfbdd95ea61854af880b0e4d02d44f3bdb119e59497b1eee2a4830971ca046cd7ece8c99b23b728b56a0cc41b1af2131df65b5282503e895b68c8613dc306ee3f316b1164dba8a018ac7f4947d735c5650ef4a87e1cc530199a47e23f1f60f9cffbba261e74c7e33e2b877a853f5542fd22cd0a036c0691cf2bfed57b9bf76e13f5a612a90b5d6f10a5a8b955d596ebdccf77e083b23ec1d545f59da8187b3627aabc41a5bf4afd59a31647163b0038f6cbd1560ec52fa2cc8d36d75a721aee588e87c00fc68dbf867626e93dff3806"]) accept(r2, &(0x7f00005a4000)=@rc, &(0x7f0000000040)=0xd) 13:51:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x3ff) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='/dev/autofs\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) setns(r2, 0x10000000) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffff9, 0x0, 0x4}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x1, 0x0, 0x8, 0xe847, 0x3ff, 0x80000001, 0x100, r3}, &(0x7f0000000280)=0x20) [ 161.916550] binder: release 11976:11979 transaction 245 out, still active [ 161.923720] binder: undelivered TRANSACTION_COMPLETE [ 161.962467] binder: send failed reply for transaction 245, target dead [ 162.010122] Unknown ioctl 1074021064 13:51:56 executing program 7: creat(&(0x7f0000000200)='.\x00', 0x2) r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") clone(0x0, &(0x7f0000003300), &(0x7f00000022c0), &(0x7f0000004340), &(0x7f0000001200)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r1}}, 0x18) clone(0x0, &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000280)) clone(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') pread64(r2, &(0x7f0000000280)=""/12, 0xc4, 0x0) 13:51:56 executing program 1 (fault-call:3 fault-nth:1): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:51:56 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)}) 13:51:56 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x20) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl(r0, 0x800000000000936f, &(0x7f0000000040)) 13:51:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x4, 'veth1_to_team\x00'}, 0xfffffffffffffcee) ioctl(r0, 0x800000000008982, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x18000000000, 0x9, [0xa4b, 0x9, 0x4, 0x3, 0x8, 0x7, 0x8, 0x0, 0x9]}, &(0x7f0000000080)=0x1a) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x2, 0x2, [0x401, 0x80000001]}, 0xc) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='lowlan1\x00'}, 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000180)) 13:51:56 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x2d, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:56 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201}, 0x14}}, 0x0) 13:51:56 executing program 3: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0xaf) accept(r0, &(0x7f0000000140)=@nl=@unspec, &(0x7f00000001c0)=0x80) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x1001, &(0x7f0000a06000)) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/llc\x00') unlinkat(r1, &(0x7f0000000300)='./file0\x00', 0x200) r2 = getuid() write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000340)={0x4, 0x8, 0xfa00, {r3, 0x1ce}}, 0x10) sendmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)="3660dd613d4114056d3bd09ab750380cfb0a60318b401f025845b7ac464bd6b104ac37f06bdf2cdec5ce301f98fb3e1041c1ac3793fe737a6c8ab7d8db381c779f454398eca1600cf14692b87e8bdbda85dbd456c624986fcfdb7ab5fe7bf3acc27a4d45877d93ac1e72fdcde6ab28c619e69b9f25845e417656c8a01921e116c4fb903fc8cf903f63585c6750ba3cb346091de10f3f2d45203e2f809d6025bd559411c0540a67f44b7f00bb02edc6a59af1cb016ead32c1b2990af17448eb9df31866416f4cc3b96a861f00761b7dbfb277b42437eb7a5d8889c7e891d16885ee0bc20fc17cfe7293ac4ee6", 0xec}, {&(0x7f0000000380)="a7e4b23b864dcceaa9907cb447b7d809394c5ba66a62a8fdfa8aa22c65d3bfbf7e7c36f7ef4e5bef1c6d202d8858985279d73c52a8db5c96b5ed6b147e3ca220277e3a8f26d3f45fa49aabb002fb6d43521d97e4849154d08b70397ca6135e6d3961e4f77042c12d22a31b6c6c09eb93c8cf82b399e0876ef8804aa196ad7a767ec4484a5b680289ad1b6cb84a06728792b750b72f7888b79b9e0b14fb21491603167d73df02717dc79fed94af5f2a471620b8343b711ff4be85cfbe056b582d", 0xc0}, {&(0x7f00000005c0)="9e2931800987a1fdb74c9e5ec16d0ae927ff350c40f47d4940a41b3d45309ad907891dee408022332ba62012e0ad21963e2f794894046bf6038ce469730889660099a8cf3fa3c5ea53fe78799428f545bf546c168616ecca2698a4f35738d7e93a2ea3e5a700cfa529d300edd3eb2954d8fc9e843a1b33ff33b09b5fda097c7084254726dca9fde0830219183e8f", 0x8e}, {&(0x7f0000000680)="52f06e74f5379828b64851bdcf84aa0b8bf245d17b15f381b3419be9c2905a6fc1c259ae84d63290dfeb07235923a0c3d9e2e52520a77051c5014eddf8502783717f3ac7472e6873ea9cd7e301b097d478fceec276fb310828c2edd659668ea35bc00bcba4d28ab8e57f4d2deb06229cfc8c8b", 0x73}, {&(0x7f0000000700)="b8648d61497404e74bda5709ec6eb8fd9d33c06fb51a8509ea3323cfc39f5b909f36f39f0944355f27475fd597c8e5bdd1bf858c880d71cc1d6168a05c118888c2498b34330c82c998c5dffa125afcd9a797106953ba7b675acd8f368b56dac4b9d79f643089193b42d5cb01a16f13316bba392c49d3760851aadccc8d21d570b579bc88fb982d31438f6b7b463409a2db1b918dd2e8", 0x96}, {&(0x7f00000007c0)="e67397aed93e3b5f9fc715ddfdff2ac708d005b1f654eecf76a096ae18145aa8400d9166b010b49da04353bd6844a075d3fbdc1681be41bbd694db65443ef0fe1fcf621397532f26ecc91323ec97452654ce2fb8fc8e4292016c6b84cfd64b4493c8739bcc02cdf8c775a525518938c1b3d5a450966c126f8e38af2ff7f7ee7b660f22a265547042abb99f78babb8c0c9ca184daff3b27132c3d41089a2a8e4c623dc4d2b49a3a628571ac1a3be737b8e33e199cdbcd317d4647194a3a9f64af5e2764082c9263847aa44f5d08b17ce87244f48f6c9797ce", 0xd8}, {&(0x7f00000008c0)="1843", 0x2}], 0x7, &(0x7f0000000980)=[{0xf8, 0x0, 0xe346, "df4c5bb4242ae7e90b45d6b6dadbab7c486c640c35bbaa8f05241574ac67c56f8f064b7dd2ce2b33ec1af0c5514b69edad81f156629ff20b3455dbfcee9e1bc969ae06e845d195e68e05354bcfd1a0760359c81fa9f2437f025da79aebb9b618dd7f5c7d7fe2932153810b4866bf14805c75aa67c9d15f5a21fece0a5786821fac1fb898db9f028935f47a87a32b5755912d75e35c6177ae8735bb8dbae0e0fdb07dd4ef3fa2e980a2dd2d9c9faa1ea33c509dbd3da3701a81c9c1b12345346604f57183f5da069984de803f0dec3d572c6869d33dda803aa627dc64e9e2d4a862be3e86b0"}, {0x88, 0x119, 0x7f, "8dbb661c9514b82ec728360434a22187b5cdf69135f1741d044c8252da2b6dedbe28d2869287451cce5e782466e0b055ee2da5fb9aa5a25f21ef1b43782fc34981b3d8a05d61bf42f5b47e29ebcd1e379a2c99376af4aca4680d68a8d848123c250e39f0ae6173afdaa500498d28729c86f962395ebfc6"}, {0x1010, 0x13a, 0x5, "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"}, {0x28, 0x0, 0x3ff, "f9f77b5cdca2027bf999652cc0efc90b9e747b9233"}, {0xd0, 0x104, 0x100000000, "9e1bc78eebdfd5348928c37923bbe483bd5117e8577ac14ff8e9410e21020bb82e5cdfaf72057d5e9d10f49721ab1102f16a9cbaeaae29e536c643d552ebed0bda9242deb569c500d0fd341a3be6c67a8996f951cfb5e828a6096e523222b1b7fa9d785f04eee328ae9e434ea0a6ff5402434a03b096e41e82248499a74cbd111ec502fcb431f6f77c543e91adc0f67a0450b83c188758c106f7c534603e86c45db61222059ed7564cdbb74863a2cc4b057eff01db53c358fb3c4a5ac77a6451"}, {0x30, 0x105, 0x5920, "8f37a1e9e860541478ea5acc64da65ee359fc6c737a94b8216873b"}, {0x10, 0x105, 0x4}, {0x60, 0x113, 0x3712, "4790d95299c5dffbb3df4ac10340cd1aee0eb6b450bf87dbbc2e038f8d3e71c5b99b2cb28c24ba47f70b9ed0ad9dba4e715441ce94985742fc631d16ef6aa57630531a8d5a8c8e09792f1cb665eab66e"}, {0x30, 0x10f, 0x4, "5800d641332354fe7bb033e22919411ffd65616dbcf4b1e25537ece937d6"}], 0x1358, 0x4010}, 0x1}, {{&(0x7f0000001d00)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xef, 0x20, "56df76ea4bc1dffecd3dc963de5991abba0a543ec651d3bfcf941f17aa6b895b335ddc3d8a49b2a64687d87d2c542245f19459985a77798b9068efaf276c55", 0x3b}, 0x80, &(0x7f0000005140)=[{&(0x7f0000001d80)="59e35548", 0x4}, {&(0x7f0000001dc0)="daf4b193eb407fb5cbc3d49f2922257dc5bdd48cb4d7b7e10ef5b30387909962e118c71514d2b47ecfabf8ff610bfdd031dc01484d9ed0295ae5416a168389ab6ad8f1a50069704909e1b2b446edb01e70961450db628fdd06b97544ebace54d70bdc528478b143e91d2aa548aee7aef2965c2696be1d2239225b7e1a6166408aea378122a600c86637974220dc104aaf26796746e6bdd971ffcecb91bed7d3d8ee5300e543a2fbf223e3acf3bf2bb4279db4001de593c8c4ed77c864373781784b6b8fde9e43c7ee391b6c8da42c3e24874d368a9988d67f8d213d2d86a1a5a026d79b58161d631966fb7", 0xeb}, {&(0x7f0000001ec0)="db79e086183d6ee8982907386f0595b9a7ec3ff3ad214ebb88032879f0c9b799676a618ab14bfd6fa289e358970fd91e292301d18815d0c8ff327e5b72469572ac64032f88a1684415680adbea", 0x4d}, {&(0x7f0000001f40)="a14bf35d254554eca21a03ab8e491be031ddbb33f6ecee79e16d17de2914d950b5468058a63f319b9b2d6044a91609bd", 0x30}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="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", 0x1000}, {&(0x7f0000003f80)="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", 0x1000}, {&(0x7f0000004f80)="e9f912e3a090381e51cdd6b5bd2abf6f9e5bc70d0e5f5c774cd7b04e908203de705c2a3ce3d1d0c90c614cb1dc6d3c46614bed9141f2975f545a6a83caabc79e2a1778dc4fb27691e42ebfd35708d8108a6e0e5dfe27729ea69efbd4833ffc5423e72d6b36f9b1e21f6ce9774473d0dd16c4117648b3be8958632616d2344129682305626d80f3da0310d9be2aa16a203fea6558a48f251f8e323a5a9296d482bf1018391b9418123bb0bdb9e7cbd267fd7b8e26e9a80ad7a5b9226aa03e58c65b22553487210f91449568d3fafcd16e777f0ae82aa65c447153667840c968c4e99914", 0xe3}, {&(0x7f0000005080)="9354080f338fe31d5eda57ed1c8f00b6a3fbe5de5ff678ab2e9e37cc6edf94d0018595c1d2e9a1cf4a43756fd7882bdb8982745438d38f80ed44ea5accfbeceb43bd149f3383ec56bf94c44ddc3935e4470a14dae7a9794c3872e8dcbe5aec0ef0ef755f20f347547161e24aadb9397951eaca7870cb4f666c7bf33f7af692d2f4cdb6f8ac973d53d39118e95d16a802fb22e96acb578b3530aadc470063975cad78c7fe", 0xa4}], 0x9, &(0x7f0000005200)=[{0xc0, 0x1ff, 0x6, "89e04f67c4c5316002692a8492cc9df295e35601ce71985f6acb322d6ed1a7828ac8d4ce8f4e8a6899af86a512b9492a881592f8c5d70ae1f0732080dea740b886afcb9454d9d27f4b530afc4454c6d02f677aa410e04d51e1587f5dc6457f9b2a60c3fa5733cfd4a96e41f548d54be47b8258a37f35c805a6169b7a2c2234facd74f40e45d3e790dd0eca42509cd3868b13da7d335f38d63a66b2c8d9b304af95810d51e00d82e350c4f3b616b5"}, {0x70, 0x105, 0x9e7, "c19cb3184c08295792cb4f3a96fa544adb5c9059cab26f3b984e26897926db194e078704f12f6b198ea9fb27c056b10174139af979d2c42e4bb77c33f972770c283592a48af40ccc21694d6dd5b8f64f3b3c99f1abf03f6d0e0e3b1bcd0970"}], 0x130, 0x20000004}, 0x2}], 0x2, 0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0x2ca) chown(&(0x7f0000000040)='./file0\x00', r2, r4) pivot_root(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000240)='.') 13:51:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x2, 0x0) recvmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/49, 0x31}, {&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000300)=""/9, 0x9}], 0x5, 0x0, 0x0, 0x467799e0}, 0x100) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000480)={@local, @broadcast}, &(0x7f00000004c0)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x9, 0x0, 0x25ba, 0x5, 0x8}, &(0x7f00000005c0)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000600)={r3, 0xff}, &(0x7f0000000640)=0x8) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000680)={0x0, 0x0, [0x8001, 0x51331b7f, 0xd2, 0xa345]}) [ 162.141868] binder: release 12014:12020 transaction 247 out, still active [ 162.149166] binder: undelivered TRANSACTION_COMPLETE 13:51:56 executing program 5 (fault-call:7 fault-nth:0): r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:57 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 162.249283] binder: send failed reply for transaction 247, target dead 13:51:57 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x17, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:57 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x0, 0x2, [0x0, 0x0, 0x0, 0x4000]}) 13:51:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000d85dc900000005002a358ce5ff000500000024278c39000000000ede825e45a90f3d09876e6d07d4e111a1f9d4987c73dd28ac56c606f60f28d4b2921ea4c8faa02a0900bb98b7559414d05501b53517cdf5276294339315b98a003b2cbdae01000000080000000000710e13"], 0x6e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) pipe2(&(0x7f0000000080), 0x4000) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000002000)) [ 162.342954] binder: 12038:12045 got new transaction with bad transaction stack, transaction 249 has target 12038:0 [ 162.353615] binder: 12038:12045 transaction failed 29201/-71, size 0-0 line 2879 [ 162.471931] binder: release 12038:12045 transaction 249 out, still active [ 162.505367] binder: send failed reply for transaction 249, target dead 13:51:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xfffffffffffffd64) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000440)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 13:51:57 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000000)=0x54) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mount(&(0x7f0000000200)='::2.le:\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 13:51:57 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4000000000000, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:51:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f000000c000)={0x9, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e004bcc0ae4de5d4e831c68b6c2956c2874476ee83e417454f684cab6a71b139644ea97a"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, "1ef4bc48491acd5e0c4b976cba7eef36c40efce39f2b9c125ba7a77d8dd019d6041e65648e7f165944391be5"}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x480, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0xa240, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) 13:51:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r1 = add_key(&(0x7f00000003c0)='rxrpc_s\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000440)="52e84f41af97477c", 0x8, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r1) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002515ddad7c523b116bb6e064304b1e35898a16492852ec183c85939eed0ed88fcfdaccbced660065e93dcbf9ed70a48456b32c90ddbf00438400cf1d86973757d1e02f5b18d892e7d3b9a8beb7786856eae88d37f30b7322b428d393559808724f41205de3f7b5b449822bd9f0828228d105feb3a740f0e45c2c6fdfd7955893927c9b572533929716076a"], 0x110) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(ccm(tnepres-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00004f7000)="649c47", 0x3) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002b40)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000002300)=[{{&(0x7f0000001a80)=@ax25, 0x80, &(0x7f0000001b00), 0x0, &(0x7f0000001b40)=""/31, 0x1f}}, {{&(0x7f0000002180)=@hci, 0x80, &(0x7f0000002280)=[{&(0x7f0000002200)=""/86, 0x56}], 0x1, &(0x7f00000022c0)=""/32, 0x20}}], 0x2, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x800) r5 = getpid() sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x2) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000140)) r7 = gettid() kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, r0, &(0x7f0000000000)={r6, r0}) r8 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x6, 0x400) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="cc06000002167ef71f01000000000000129a33fc1627bfcf44e2c7f214b5a01130342b776782f82f3ca262ccb50f7a65ffffd9b16eec095f959d6a3c0a2b48dd841fabfd4a4bf97963a18e5260110280ea2b01e4aa68d2a4222746b54b5b74dce0391d997d"], &(0x7f0000000340)=0xfffffffffffffeae) setsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000380)={r9, 0x2a0f, 0xd6b, 0x63b, 0x889a, 0x1000}, 0x14) r10 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r0, &(0x7f00000000c0)) ioctl$TCXONC(r10, 0x540a, 0x0) 13:51:57 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:57 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x3, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:57 executing program 4: r0 = socket(0x10, 0x20000000802, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) write(r0, &(0x7f0000000040)="240000001a0025f00018000400edfc0e80000000000000000000000008000f00f0ffff00", 0x24) [ 162.752775] syz-executor6 (11986) used greatest stack depth: 13848 bytes left [ 162.804304] libceph: parse_ips bad ip '::2.le' [ 162.816917] binder: 12081:12085 got new transaction with bad transaction stack, transaction 252 has target 12081:0 [ 162.827604] binder: 12081:12085 transaction failed 29201/-71, size 0-0 line 2879 [ 162.838583] binder: release 12081:12085 transaction 252 out, still active 13:51:57 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f00000000c0), 0x0, r2, 0x4}) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) 13:51:57 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x1000000, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 162.852832] libceph: parse_ips bad ip '::2.le' 13:51:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000000c0), 0x4) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000000)) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x5, 0x4) write(r1, &(0x7f00000001c0), 0x0) [ 162.923055] binder: send failed reply for transaction 252, target dead 13:51:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000000)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x11f004, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6d50}, {0x2004, 0x0, 0xf, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe33, 0x0, 0xb461}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x3000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc8}, {0xd000, 0x16000, 0xf}}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x18c054f0, 0x4) r5 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x37, 0x50001) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac141418ac1414b90100000004000000ac1414aaffffffffac1414117f000001"], 0x20) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13:51:57 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x23, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:57 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x2000000, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:51:57 executing program 7: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) socket$inet6(0xa, 0x0, 0x0) write$P9_RREAD(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="4300000075000038000000b83ee754e38dae4a407ae3926dd263123564a36814fcc58d90f9d10f38eab979dc36df636e1d40bc64aa015734c4e4139b5e2f361dbd9a67f2833e"], 0x43) close(r1) 13:51:57 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = getpgid(0xffffffffffffffff) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/uts\x00') setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x0, 0x0, 'sh\x00'}, 0x2c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 13:51:57 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x40000, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 163.157067] binder_alloc: binder_alloc_mmap_handler: 12132 20ffa000-20ffd000 already mapped failed -16 [ 163.182207] binder: BINDER_SET_CONTEXT_MGR already set [ 163.187668] binder: 12132:12137 ioctl 40046207 0 returned -16 13:51:57 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x2f, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 163.218625] binder_alloc: 12132: binder_alloc_buf, no vma [ 163.224422] binder: 12132:12148 transaction failed 29189/-3, size 0-0 line 2967 [ 163.234445] binder: send failed reply for transaction 255 to 12132:12137 [ 163.252309] binder: undelivered TRANSACTION_COMPLETE [ 163.257574] binder: undelivered TRANSACTION_ERROR: 29189 13:51:58 executing program 6: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x2000001, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40106309}], 0x0, 0x0, &(0x7f00000000c0)}) mmap(&(0x7f0000e83000/0x3000)=nil, 0x3000, 0x200000b, 0x2010, r0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x7) 13:51:58 executing program 7: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f0000000100)="564690f130e10d41f2b97e4d94421b02c5e241cc3de48aea6fe9af00aeb01e9337527434c47e9d122edca0f892c7b1e6f75fe5d82686bfe4bbcb9a8fb89bc7f2ef12859734", 0x45) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0x3}, 0x0, 0x1e0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x2a, &(0x7f00000000c0)={0x2, 0x0, 0x6, 0x8000}) setrlimit(0x1, &(0x7f0000011000)) r2 = memfd_create(&(0x7f000093afb8)='(}nodev.ppp1vboxnet1selinuxtrustedvboxnet0GPLposix_acl_access*\\\\md5sum@\x00', 0x0) write$eventfd(r2, &(0x7f0000500ff8), 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040), 0x8) 13:51:58 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 163.334317] binder: undelivered TRANSACTION_ERROR: 29189 13:51:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TCFLSH(r1, 0x540b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000022000104000009020000000004000000"], 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xffffffffffffff3e, &(0x7f0000000180)={&(0x7f0000000440)=@delpolicy={0x50, 0x14, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@remote}, 0x6e6bb6}}, 0x50}, 0x8}, 0x0) [ 163.407970] binder: 12165:12167 BC_ACQUIRE_DONE u0000000000000000 no match [ 163.451873] binder: 12165:12178 ioctl 5425 7 returned -22 [ 163.509302] binder: 12165:12178 unknown command 0 [ 163.514601] binder: 12165:12178 ioctl c0306201 20a20000 returned -22 [ 163.553140] binder: 12165:12183 ioctl 5425 7 returned -22 13:51:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000500)="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") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r1, r3, 0x0) tkill(r2, 0x1002000000013) 13:51:58 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:58 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x2, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:51:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000200)="0fa7981feb0b56efd9e8388c2ab300b453dd7b9265b04fc4534c5524d63200935af67ae4ed8bd836f4f0dcd3c660d73d786233322d218a66554405614afbde1ac2a048f5a753b6263ea62ea272fd") ioctl(r0, 0x10001, &(0x7f00000000c0)="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") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) 13:51:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x181000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}}, [0x80, 0x3, 0xfff, 0x8, 0x0, 0x101, 0x9, 0x4, 0x3, 0x2, 0x5, 0x1, 0x6, 0x7ff, 0x3]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={r2, 0x8f5, 0x5, 0x6}, &(0x7f0000000300)=0x10) getdents64(r1, &(0x7f0000000040)=""/246, 0xf6) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = socket$netlink(0xa, 0x6, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10d, 0xd, &(0x7f0000001ffc)=0x2, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={r3}, &(0x7f0000000380)=0x8) listen(r4, 0x0) 13:51:58 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x100, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000080)) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f00000000c0)) bind$netlink(r0, &(0x7f0000000000), 0xc) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)={0x40, {{0xa, 0x4e24, 0x973, @ipv4={[], [], @loopback}, 0xfffffffffffffffc}}, 0x0, 0x5, [{{0xa, 0x4e24, 0x52e4f01c, @remote, 0x20}}, {{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x1f}, 0xffffffffffffffbf}}, {{0xa, 0x4e23, 0x6, @mcast1, 0x2}}, {{0xa, 0x4e24, 0x8, @loopback, 0x800}}, {{0xa, 0x4e20, 0x9, @loopback, 0x400}}]}, 0x310) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r0, &(0x7f0000000340)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08001800f000f000", 0x24) 13:51:58 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x10, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xfffffffffffffd93, 0x200408d4, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) sendto$inet6(r0, &(0x7f0000000740)='K', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2200, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x101, 0x8200, 0x800, 0x40, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e21, 0x7fff, @empty, 0x6}}, 0x2, 0x4, 0x1f, 0x8}, &(0x7f0000000140)=0x98) 13:51:58 executing program 6: r0 = inotify_init() r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/222, 0xde}, {&(0x7f0000000180)=""/103, 0x67}, {&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000300)=""/255, 0xff}], 0x4) fcntl$setlease(r1, 0x400, 0x0) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x30b1, 0x5, @mcast2, 0xcf}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="025c3f0400135f8f764070") ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x3ff) rename(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file1\x00') 13:51:58 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x100000000000000, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 163.724527] binder_alloc: binder_alloc_mmap_handler: 12187 20ffa000-20ffd000 already mapped failed -16 [ 163.750146] binder: BINDER_SET_CONTEXT_MGR already set [ 163.755830] binder: 12187:12191 ioctl 40046207 0 returned -16 13:51:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x19, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xc2b2, 0x101000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000180)=[{0x0, 0x0, [0x1, 0x9, 0x7e50e80000000000, 0x5, 0x8, 0x4, 0x7, 0x4, 0x0, 0x6, 0x523, 0x3ff, 0x3, 0x8d, 0x40, 0x6]}, {0x0, 0x0, [0x1f, 0x7142b8c6, 0x0, 0x2, 0x7, 0x3, 0x1e, 0x8, 0x81, 0x8, 0x2000, 0x5, 0xffffffff, 0x5, 0x1, 0x5]}, {0x2, 0x0, [0x3, 0x9, 0x100, 0x0, 0x10000, 0x6, 0x0, 0x3d2a, 0x9, 0x80000001, 0x1, 0x3ff, 0xffffffffffff8001, 0x4, 0x8, 0x7ff]}, {0xbcc96c6906dc9fef, 0x0, [0x0, 0x3, 0x7, 0x0, 0x0, 0x3, 0x800, 0x1, 0x723, 0x3, 0x8, 0x7, 0x6, 0x6, 0x6, 0x1d]}, {0x3, 0x0, [0x0, 0x1f, 0x0, 0xffff, 0x6, 0x10000, 0x4, 0x40, 0x1, 0x61d, 0xffffffff, 0x5, 0x3, 0x94, 0x86]}, {0x20, 0x0, [0xfffffffeffffffff, 0x3, 0x1, 0x80000001, 0x1, 0x0, 0x9c9, 0x9, 0x0, 0x1, 0xffff, 0x9, 0x100, 0x89d, 0x80, 0x80]}], r2, 0x1, 0x1, 0x1b0}}, 0x20) 13:51:58 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0xa, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:58 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200008c0], 0x0, &(0x7f0000000080), &(0x7f00000008c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0_to_team\x00', 'team0\x00', 'ip6tnl0\x00', @random="332ba8a637a5", [], @broadcast, [], 0x70, 0x70, 0xe8}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x3000, 0x0, "a635501f760dbbcc40ed47ab1f7cfc92126f3aea60227ac7e55b962553c6c6cac2328d67f4c4fea332686396eac43e47551c45ddc3b37c7958d3ef9a0af53ea3"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1f0) [ 163.806468] binder_alloc: 12187: binder_alloc_buf, no vma [ 163.812412] binder: 12187:12215 transaction failed 29189/-3, size 0-0 line 2967 [ 163.820854] binder: send failed reply for transaction 258 to 12187:12191 [ 163.840230] binder: undelivered TRANSACTION_COMPLETE [ 163.845514] binder: undelivered TRANSACTION_ERROR: 29189 13:51:58 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 163.874480] binder: undelivered TRANSACTION_ERROR: 29189 13:51:58 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x200000000000000, @multicast1}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:51:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bc04000052f2ac73d2843e6888324f2c9875e5670cd6d70b30acf677462fcf1d8361d26f71f8f0a124b0cc2419cfb10a19f6d39b6030c2c7bdb77d12e9f3c0311e4cc66173f4a60a8f554a200ef06d0e1fdd1df71c79b0862e767d34d7857bd45a1033cce3cadc74cd16a4e92c458dffbf587b195e27688a390245e4770a76c529fd98ab59fc40d5979eb63a9abc90f9efa5151228c787908d2f84ea8f3f2dfccf6ff562c92a3eec45c946f5b1ea3ef70cb1e47656cb54e65b746cf5bd402f588e4fd77f7c32caee44b9a4f658af47b69f1ed79c5ce1a82dec1f9f8b434da68acc9a25b4bfe18a017f000000000000009e68e7fd36a19e888c940dc0c0de1db3370b16cef2e28d7e2da8ea6a9310760b207e4633c78a36c7a3a8e99d43b5b9f466dacc027193fc90a374461cf4c270441db1f4660e864b203dbae79ddf19cf0df72af72fd0addd1515f9381b3bf773de0781bf77c739d5e4eaee4af2e9616f9d9f688e036c3bac0e5166eb90971d22c2c265f393a5342e249816dfed70aeef1138912da6c5f13bf8afb0362fa2f4ab27c842169e0ad1f415c9efa263a1a3a6e3849b2f988d6828cad122508df65d3e728c4e061e86abdbce2ec90ecfc736417db69c8c6fd4794f261c97e2eaf69857e27309fae3815a032cf705a3decb6b944b96ae02ede75f51efd547d9518cb2e9633177d5c5d9cb618dd9a469bc42e7c4a0881c4c90ab2158f868615b5aa4cb93f336a70424371abfba32340a32e80ad983f460a2872aedb714d1ef79bc4a9149bd135232fae3425d32c9329da7b83a2f220ccc259770e87adc31268ae7cf875628af8d19838331e93987117f91486824e2fa38ac867dcc00b06e27e780d56dbdbb15e41be54afe9c598a7584126905c75df0921401d6f17a149684b518290d028ace983cfec3512aa66ac7e5fc71d2815a833081cecb76bd60117eb0d481ed6a075679413928e2b348d9c18f5eacd47a9983c01be9e8621fa8e5d2b33a15543600d632b5eb973c038928627ca1246d5d81df0cb453e0c2309acbae403d9a5c6483f0acc12ab46eefdf1e5a326991baafb8d326da9eef18b7a756209a1aa680ded1526d92a35b0008c3d6c84f610bc24cc4f7dca4b44d8aa977eeae2941ba203a937e792486cf6042bd0e19478edff047dfed57afa324e73318a2b3f37866205aaa350c94a78918188a1843a84eafc0d2e82afb7e082f634460a08f6573dba01c54d9db88d30a3ce7992f52761477b8b4b969fcdb789aee1abcf2b9457080c640027337210000fa2d38bc948594d2821e88dda0aada9a51203bc3ff4b850f7268605264c41641e078a88bd359499a9e38bc77afbc466fcd1631a5ae75d4f104aec452277bce963cfe77532ada1d3f066d4a947dc01d1786b7bec4bf23e900666e9203d97bdcd234b33a5f911e2e9394413fe91e20454e92dd39c0016fe728c6d02d3b07d944604acae6e57064ef6151e7fe956ddfdc671cab26245bb8b345f963a4bfcef2c0250f50b7a17d918cf5ac4e6cd14281660be520501805e86bd441c8537957c21c886f85750dbc0c6f365f2bc1e3c7829c40c8f27a74e4bc0f3c839c1be00bd04a123146abc2e7a173d65f6cfa90a2e6e07159416f40fc4d055c85dc762c271cfff2da21deb17e1d1651d5fdec32c7e65e041fc54117d0cce75377b7acab7adb8392a9502fdabbedc5cff9fb08ab498c03"], &(0x7f00000001c0)=0x1) chroot(&(0x7f0000000180)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000fc0)="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") syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 163.977417] binder_alloc: binder_alloc_mmap_handler: 12238 20ffa000-20ffd000 already mapped failed -16 [ 164.002156] binder: BINDER_SET_CONTEXT_MGR already set [ 164.020583] binder: 12238:12240 ioctl 40046207 0 returned -16 [ 164.063708] binder_alloc: 12238: binder_alloc_buf, no vma [ 164.069467] binder: 12238:12254 transaction failed 29189/-3, size 0-0 line 2967 [ 164.083745] binder: send failed reply for transaction 261 to 12238:12240 [ 164.093155] binder: undelivered TRANSACTION_COMPLETE [ 164.098474] binder: undelivered TRANSACTION_ERROR: 29189 [ 164.131106] binder: undelivered TRANSACTION_ERROR: 29189 13:51:58 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0xffffffffffffffff, 0x688881) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffff255}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}]}, 0x38}}, 0x80) setsockopt$inet_tcp_int(r0, 0x6, 0x21, &(0x7f0000000140), 0x184) 13:51:58 executing program 3: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000280)={'TPROXY\x00'}, &(0x7f00000002c0)=0x1e) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x40040) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000100)=""/255, 0xff}, &(0x7f0000000080), 0x8}, 0x20) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001100090469001b00810800000700fd3f03000000450001070000001419001a0004002300030000000200000809c99183a8a5000200", 0x39}], 0x1) fcntl$addseals(r1, 0x409, 0x1) 13:51:58 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000080)}, &(0x7f00000000c0), 0x8}, 0x20) mmap(&(0x7f000027c000/0x4000)=nil, 0x4000, 0x3, 0x40031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200002047d778acf9edd80bc5c2e2000000e600010000c055f6ffff0400000003000000cc90000070f10000010100000000000000000000000000000f000080c50000000000000004000000090000000900000005000000000000000000000000000000"]) ioctl$int_out(r0, 0xc2604111, &(0x7f0000000040)) 13:51:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x8ee, 0x400) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440), 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000009c0)="8a07581ef836f12279ec27f910cf7bc96e35d61f000000000000005f07671ffb844380bd0352b8db3c4db25789c1f9067a11c462ac67da88209e54d47f962bb4ad94000a32a40d271be1adf1dbcb448f293ab2689229dcf8a7174b279b5d4e39925b97c837e44f10960bbbf61ab3b3d326ec1929eddb0d9d49d0e7d3501608a9e6538fe60000000000000000", 0x8c, r2) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, r3) r5 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000180), &(0x7f0000000500)="f1cbe34bf25f5581eada5d08db6e204f5db682e73e422ae1ec75b1a9a0c9056476d78fa568f69b9b85bc15c482bea6c28cbfd7a5083a285af1eb5a27695c017ea87feacc18ead2a27c5787950253e8deda751e5f2f8ae4680d99306ccb5c25e1149d7e9c7bd17722fe467f9654132543f0e743b4528870", 0xffffff79, 0xfffffffffffffff9) request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)='\x00', r4) r6 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000140), &(0x7f00000007c0)="b33ab76079ebe0d14f729cd653e520d29ad7ef0000000100000044c249b544230b9387fb8bd6ed266ccf59ee70995bf2e8e2ecd3fff32853747eda22d29be9b36119ec53dc60e2c80b3e9ffa1b81a808ca27e0ec82a1256a8e9a4febf85f2d925493f62113e3575f8c7eba67fc19a9497f5b07e5849d2e875b0687d6401d36616fe0f3c3002801b4621de1632a89525e8e81f750a86eb580fb46c1523b8a25e71690ea52246bd3d32b1a91f944edb74b1f50ae08c5387ed8fd0598b600579f3af3f864e1c324f6928f6672f98f7e149bd61bd78b506e8bd71824cec9a8db26823cdd5259e688752d5491bd542b2ca7d08bdb777695db99f0401294aca81ab60da1a3ba871c128146ac85f3ea40b4ee1122d161c0634b4a20fca2ef693e419a22f96d44442ac0cd4b848bb0c4e66c080de7a02e0b8cd03280c21603b18c0df78b7eb08224c047d41095c8908dfe7f402de625f2cad098eb1fa856b96848378c92a6278e00a3ecebc05a987395f961d1980f0636883c3310a82c3af765570fbc100c61e0fecb39e9357818e3e8430a6471b41cd72941d9bd126457b2ee7b72c49bafc8efa8f72fda778d", 0x1a9, r4) r7 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)="2f6465612f7675746f66730719", 0x0) keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r5, r6, r7}, &(0x7f00005cd000), 0x0, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'ghash-generic\x00'}, &(0x7f0000000000)}) 13:51:58 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x24, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:58 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000002}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:51:58 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:58 executing program 7: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x4000000) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000000c0)=""/98, 0x62}, &(0x7f0000000140), 0x40}, 0x20) ioctl(r0, 0x8913, &(0x7f00000002c0)="0a5cc80700315f857140702bacdfe36db3abc623f25e27ccbe82d582361011a92c00e782858939c20175001254cd711e2c5f760ef770580a73a185004d03dce2219b01b2fa4a69f65cf435d9980d4e889cb9f08f8f5c52e15e4865b92ddd4f4a0dd58fcb1b1e3f37813e711a02455de87fb0a7b9bd9a1bacbc7b6a5cd422f154838720903ea64bda44eda430232758c3d2882f25336742a452b6e2c5c868da") r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ppp0/-5]$wlan1\x00'}, 0x10) ioctl$RTC_WIE_ON(r2, 0x700f) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 164.276571] binder_alloc: binder_alloc_mmap_handler: 12271 20ffa000-20ffd000 already mapped failed -16 [ 164.293220] binder: BINDER_SET_CONTEXT_MGR already set [ 164.298771] binder: 12271:12274 ioctl 40046207 0 returned -16 [ 164.305771] binder_alloc: 12271: binder_alloc_buf, no vma [ 164.311464] binder: 12271:12280 transaction failed 29189/-3, size 0-0 line 2967 13:51:59 executing program 2: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e23, @loopback}}) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff04, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 13:51:59 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x280, 0x0) accept$unix(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000580), 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x10000, 0x80) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000080)=0x1) [ 164.322204] binder: send failed reply for transaction 264 to 12271:12274 [ 164.330651] binder: undelivered TRANSACTION_COMPLETE [ 164.335966] binder: undelivered TRANSACTION_ERROR: 29189 13:51:59 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0001300}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:51:59 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x20101000) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000080)={0x2, 0x8f8, 0x8001, 0x1, 0x7874, 0x65afa351}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) getsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000280)=""/82, &(0x7f0000000000)=0x52) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000000c0)={0x9, 0x80000001, 0x100, 0x100000001}) r2 = shmget$private(0x0, 0x3000, 0xb529bf891c44ddce, &(0x7f0000ffc000/0x3000)=nil) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x1000) r3 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x2000) shmdt(r3) [ 164.374587] binder: undelivered TRANSACTION_ERROR: 29189 13:51:59 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306202, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:59 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x28, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:59 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300001000000000000000000000000200130000000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000020000000005000500000000000a00000000000000ff0100000900000000000000000000010000000000000000"], 0x80}}, 0x0) 13:51:59 executing program 7: r0 = memfd_create(&(0x7f0000000040)=',em0self$nodev\x00', 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r0, 0x7, 0x3}, 0x14) ioctl(r0, 0x2, &(0x7f0000000480)="698d6a9e2699127b6324bab2b94d6c1cb10c9d36952f8aa9269f85527611c928e0d7acafde559228d183ebf6a201e0029f602df341a3c2e824136a32e84f8f6ba06d819041790b94256d2954b67384e08f16f52bb1682c83126f50572712b91188bd48d750d13467d0f19c0779a1a56344b1e1decc62c400cf563052ffad4de20d82daecb51523272c3566b5c33e9c328a1fb6d0f05bc927b385e9332f07a3ed2f9b8fc144f5a4ef483b76511b9c4d51f16282a780db693bfdad3178b43531c0ae3131109de635c89e24bbd076af5124e844275f42288ccbe7") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0xb, 0x20040000032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x2000000c}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000240)=0x9) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000380)=""/217) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x80000) bind(r4, &(0x7f0000000140)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000002c0)="48b801000000000000000f23c00f21f835020004000f23f8b9c70200000f32f0460fc78868cc0000b8010000000f01c166b8f8000f00d866bad00466b8c26266efc441adfedcc4c19855a804000000460f1a7d046436640f07", 0x59}], 0x1, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close(r1) [ 164.530114] binder: 12315:12317 ioctl c0306202 20000140 returned -22 [ 164.581254] binder_alloc: binder_alloc_mmap_handler: 12315 20ffa000-20ffd000 already mapped failed -16 [ 164.606269] binder: BINDER_SET_CONTEXT_MGR already set [ 164.611686] binder: 12315:12317 ioctl 40046207 0 returned -16 [ 164.621261] binder_alloc: 12315: binder_alloc_buf, no vma [ 164.626946] binder: 12315:12336 transaction failed 29189/-3, size 0-0 line 2967 [ 164.640147] binder: undelivered TRANSACTION_ERROR: 29189 [ 164.662161] binder: send failed reply for transaction 267 to 12315:12317 13:51:59 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x20, 0x410000) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080)=0x7fff, &(0x7f00000000c0)=0x4) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') sendfile(r2, r3, &(0x7f0000000140), 0x97) 13:51:59 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x200000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:51:59 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000000c0)=0x6) 13:51:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[]], 0x1c7) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x1813, r1, 0x0) syncfs(r0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 13:51:59 executing program 6: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$P9_RXATTRCREATE(r0, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x40}) read(r1, &(0x7f0000000300)=""/128, 0x80) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0), 0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000440)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)=""/94, &(0x7f00000001c0)=0x5e) 13:51:59 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x13, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 164.680186] binder: undelivered TRANSACTION_COMPLETE [ 164.685413] binder: undelivered TRANSACTION_ERROR: 29189 13:51:59 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:51:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) membarrier(0x41, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x10) close(r2) close(r1) 13:51:59 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x4000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 164.766682] binder_alloc: binder_alloc_mmap_handler: 12351 20ffa000-20ffd000 already mapped failed -16 [ 164.792233] binder: BINDER_SET_CONTEXT_MGR already set [ 164.797717] binder: 12351:12355 ioctl 40046207 0 returned -16 [ 164.799277] Unknown ioctl 4711 13:51:59 executing program 2: r0 = socket(0xa, 0x802, 0x88) r1 = socket$netlink(0x10, 0x3, 0x41e) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7, 0x80000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x400, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000012c0), 0x4) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000200)=r3) recvmmsg(r1, &(0x7f0000006f40)=[{{&(0x7f0000005b40)=@sco, 0x80, &(0x7f0000006e80), 0x0, &(0x7f0000006f00)=""/27, 0x1b}}], 0x1, 0x0, &(0x7f0000001340)={0x77359400}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000001380)={{0x2, 0x1, 0x4, 0x0, 0x6}, 0xed8a, 0x8}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000001300)=0x80000001) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) accept$packet(r4, &(0x7f0000000080), &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000001240)={0x0, 0xfffffffffffffeff}, &(0x7f0000001280)=0x8) lookup_dcookie(0xfffffffffffffffe, &(0x7f0000000240)=""/4096, 0x1000) 13:51:59 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 164.828770] binder_alloc: 12351: binder_alloc_buf, no vma [ 164.836948] binder: 12351:12368 transaction failed 29189/-3, size 0-0 line 2967 [ 164.851254] binder: send failed reply for transaction 270 to 12351:12355 [ 164.863072] Unknown ioctl 4711 [ 164.867199] binder: undelivered TRANSACTION_COMPLETE [ 164.872388] binder: undelivered TRANSACTION_ERROR: 29189 13:51:59 executing program 6: r0 = socket$inet6_sctp(0xa, 0x445, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x14, &(0x7f0000000000)={0x0, 0x200}, 0x8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0xffff, @local, 0xfff}, 0x1c) open_by_handle_at(r0, &(0x7f0000000080)={0xa5, 0xff, "ddf818abe4912e0664ced0ec1e61b4ab95ca9f219bbf1a854b90ec6dfd84bd22e9be7663c98304a02860861d035af409078082b6a39a41110d750b053c6864211a7900b2abf57a7770b5cc115f18135b70d48bf59e14ef1e21bd6997a2038646b38e23cc1d45df9085ab199afd6412bab44cf4e1cda4c77475c03a14cfab5a1018bbbdb19e3acbe31535065dfdfa1b3d458eb57c60fb5fa9441b612a51"}, 0x40) 13:51:59 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x30, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:59 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x1000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:51:59 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000001400)=""/4096, &(0x7f00000013c0)=0x1000) [ 164.948701] binder: undelivered TRANSACTION_ERROR: 29189 [ 164.976649] binder_alloc: binder_alloc_mmap_handler: 12385 20ffa000-20ffd000 already mapped failed -16 13:51:59 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80000001, 0x200) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000100), 0x8) [ 165.002992] binder: BINDER_SET_CONTEXT_MGR already set [ 165.010764] binder_alloc: 12385: binder_alloc_buf, no vma [ 165.011278] binder: 12385:12388 ioctl 40046207 0 returned -16 [ 165.016565] binder: 12385:12399 transaction failed 29189/-3, size 0-0 line 2967 [ 165.035531] binder: send failed reply for transaction 273 to 12385:12388 [ 165.053844] binder: undelivered TRANSACTION_COMPLETE [ 165.059108] binder: undelivered TRANSACTION_ERROR: 29189 [ 165.128228] binder: undelivered TRANSACTION_ERROR: 29189 13:51:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket(0xa, 0x20000000001, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") fcntl$notify(r2, 0x402, 0x80000010) preadv(r2, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) 13:51:59 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x25, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:51:59 executing program 2: memfd_create(&(0x7f0000000280)="012f47767db3d2cdd0cb4e2546969663a0a75a41be8ce379e9bfb6fff4f2c9409fbb478c56144758c35749cdf9f9cdc466c15c3e04e115cfa8c48d1c010dd09fdc509355a9184a03b30f32887db58bbfb195860572984c4a9ef788825fa547f002fe0400c9a3ed0f2091195401edb2fcf9edb1a849177d977593aa9a686c9592325560f4d472fca614f2b80f0bae30db3c69fcebe7b8b1aec85c1ab6fe4e8a59ecd7ed12115d85b1655793d87bfd0c2e9d892f011ae93589668022b220a69500d01ddf47c9ea943ad713060b06f92a", 0x2) r0 = memfd_create(&(0x7f0000000040)="012f47767db3d2cdd0cb4e2546969663a0a75a41be8ce379e9bfb6fff4f2c9409fbb478c56144758c35749cdf9f9cdc466c15c3e04e115cfa8c48d1c010dd09fdc509355a9184a03b30f32887db58bbfb195860572984c4a9ef788825fa547f002fe0400c9a3ed0f2091195401edb2fcf9edb1a849177d977593aa9a686c9592325560f4d472fca614f2b80f0bae30db3c69fcebe7b8b1aec85c1ab6fe4e8a59ecd7ed12115d85b1655793d87bfd0c2e9d892f011ae93589668022b220a69500d01ddf47c9ea943ad713060b06f92a", 0x7) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @loopback, 0x6}, 0x1c) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}) 13:52:00 executing program 3: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x359e}}, [0x561c, 0x7, 0xfffffffffffffff9, 0x0, 0xb4, 0x8, 0x1, 0x2, 0x0, 0x3c6, 0x8, 0xffffffff, 0x67dc9e16, 0x8, 0x7]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r1}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000040)=0x81, &(0x7f0000000080)=0x2) ioctl$KVM_RUN(r4, 0x4004ae8b, 0x0) 13:52:00 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x2000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:00 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:00 executing program 6: r0 = msgget$private(0x0, 0x80) msgctl$MSG_INFO(r0, 0xc, &(0x7f00000000c0)=""/43) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x450, &(0x7f0000000680)="0a5cde0700315f857140705c677ff0ee73adedc15115006b9ed1bbf15584090722a3525bfb47eda24b8632dfeb44fe3a226af455e69f371191a7a4ad58c382a26f52a2c409e7cf58677884049de693d8bde9ac4c21ee9ac0b5ce9dd164d1a2c053f5b269b51dc39f6e40917445a00b97c69f7e71a6961045a6b35c8809717120ca439e2e181f2b238486359a6210fb7c4fd9516a00d2a57b94d548c4da83e6f138b74491b05fbbb77ea4e9a0f6e8426e1c3eecaf7eb8f8b57bbd20406da253aa7c4e9b1a16e824ef0000000000000000000000000000") r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x4, 0x800) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000180)={0xffffffff, 0x1, 0x1, 0x1, 0x3, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000000)=0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000200)={0xd000, &(0x7f00000001c0), 0x4, r4, 0xa}) io_submit(r5, 0x2000000000000045, &(0x7f0000000300)) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x500000010, 0x7, 0x0, r3, &(0x7f0000000040)="100000", 0x3}]) 13:52:00 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x90200) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000001c0)=0x400000001, 0xffffffffffffff7c) seccomp(0x4000000000000001, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x407ffffffd}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) 13:52:00 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000001640), &(0x7f0000001680), 0xfdf, &(0x7f0000394000/0x1000)=nil, 0x3) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x40002) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x9}, 0x4) 13:52:00 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x32, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x3) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x3f, 0x0, 0x0, {0x0, @hdata="f0168d71407924d521779cf1aa8283de17fe074f2a92ce7f4ef5f48896f46be854e52d2bfc5120614716a4f78496d791e477b082", {"6e14"}, @esp_ip6_spec={@loopback, @ipv4={[], [], @rand_addr}}, {'\a\t', @dev}}}}) close(r1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r2) close(0xffffffffffffffff) 13:52:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") unshare(0x2000400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) accept4(r1, &(0x7f00000000c0)=@ax25, &(0x7f0000000040)=0xfffffffffffffdff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socket$inet6(0xa, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000000240), 0x0, 0x20000003, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) [ 165.897777] binder_alloc: binder_alloc_mmap_handler: 12441 20ffa000-20ffd000 already mapped failed -16 13:52:00 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x7, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 165.956713] binder: BINDER_SET_CONTEXT_MGR already set [ 165.962811] binder_alloc: 12441: binder_alloc_buf, no vma [ 165.968512] binder: 12441:12459 transaction failed 29189/-3, size 0-0 line 2967 [ 165.968783] binder: send failed reply for transaction 276 to 12441:12446 13:52:00 executing program 6: pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x9, 0x2) 13:52:00 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x40000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 166.007130] binder: 12441:12458 ioctl 40046207 0 returned -16 13:52:00 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 166.059219] audit: type=1326 audit(1532958720.786:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12438 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x456a09 code=0x0 [ 166.078811] audit: type=1326 audit(1532958720.787:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12438 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=157 compat=0 ip=0x456a09 code=0x0 13:52:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = socket$inet6(0xa, 0x803, 0x3) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000e5bef8)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd4d06f52600303a00fe8000000000000000000000000000ffff02000000000000000000000000e80180f58c907800f90000600a07ec00002100fef7ce18225c3ff9594e464a291907000000000000ff00000000000000000000000000000000000000"], &(0x7f00000016c0)) 13:52:00 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x4]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 166.136357] binder: undelivered TRANSACTION_ERROR: 29189 [ 166.161606] binder: undelivered TRANSACTION_COMPLETE [ 166.166850] binder: undelivered TRANSACTION_ERROR: 29189 13:52:00 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x8, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 166.199613] binder_alloc: binder_alloc_mmap_handler: 12482 20ffa000-20ffd000 already mapped failed -16 [ 166.226105] binder: BINDER_SET_CONTEXT_MGR already set [ 166.236862] binder: 12482:12483 ioctl 40046207 0 returned -16 [ 166.253331] binder_alloc: 12482: binder_alloc_buf, no vma [ 166.259067] binder: 12482:12492 transaction failed 29189/-3, size 0-0 line 2967 [ 166.267232] audit: type=1326 audit(1532958720.827:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12438 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x456a09 code=0x0 [ 166.287470] binder: send failed reply for transaction 279 to 12482:12483 13:52:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) listen(r1, 0xfffffffffffffffd) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0x4008ae6a) 13:52:01 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x80800, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000480)={r1, 0xa5, "a6ec22076b6d0d465bbe0faee389a0434092769e1cb3d710c0330c67e1c7e8418f04f1085a4b23662e3bb0d9ea65045f611e3a8926c45c35ef876a5d0d32e24ddf8b92b6243e2a7d3713887cf8945ded3142a912445451cff22f83286f4df1e6915e136208f9f5a643927df79074bfd731595168f16a9e7a028227397ae175eb92aaea7d71c2ab5ee385215976f8271f0568c6e11b9b28f93d54b53c885c9916144c99c3e7"}, &(0x7f0000000540)=0xad) r2 = socket(0x1e, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6174000000000000000033b635d7ed35a0ef8726e70d00000000000004000000000000000000000000000005002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x78) bind(r2, &(0x7f0000afb000)=@generic={0x1e, "0103000000000000004700004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x2c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x800) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4020000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000009050000277b65f7c35399c65229bd700003e371be9934977491170b6cd70000000a008006040046000c008ad2955aa4c56d21ce5e39874c4a8be4f578b67389649e5c"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') 13:52:01 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x2]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:01 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 166.299928] binder: undelivered TRANSACTION_COMPLETE [ 166.305209] binder: undelivered TRANSACTION_ERROR: 29189 [ 166.314249] binder: undelivered TRANSACTION_ERROR: 29189 [ 166.439851] binder_alloc: binder_alloc_mmap_handler: 12509 20ffa000-20ffd000 already mapped failed -16 [ 166.464943] binder: BINDER_SET_CONTEXT_MGR already set [ 166.479876] binder: 12509:12512 ioctl 40046207 0 returned -16 [ 166.480221] binder_alloc: 12509: binder_alloc_buf, no vma [ 166.491512] binder: 12509:12518 transaction failed 29189/-3, size 0-0 line 2967 [ 166.502238] binder: send failed reply for transaction 282 to 12509:12512 [ 166.510517] binder: undelivered TRANSACTION_COMPLETE [ 166.515907] binder: undelivered TRANSACTION_ERROR: 29189 [ 166.553601] binder: undelivered TRANSACTION_ERROR: 29189 13:52:03 executing program 7: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x1) r2 = inotify_init() read(r2, &(0x7f00000004c0)=""/170, 0xffffffffffffff5a) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x2000000) inotify_rm_watch(r2, r1) 13:52:03 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc08c5102, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3}) getsockopt$sock_buf(r0, 0x1, 0x1, &(0x7f0000000080)=""/62, &(0x7f00000000c0)=0x3e) prctl$intptr(0x3f, 0x1000) ioctl$TIOCSCTTY(r0, 0x540e, 0xc25) 13:52:03 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x100000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:03 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x19, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:03 executing program 3: r0 = shmget(0x3, 0x1000, 0x54000401, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000100)={0x14, 0x13, 0x2, {0x4, 0x0, 0x5}}, 0x14) io_setup(0x6, &(0x7f0000000a00)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0}) io_getevents(r2, 0x1, 0x1, &(0x7f0000000000)=[{}], &(0x7f00000000c0)={r3}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') r4 = socket$unix(0x1, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f00000026c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)}]) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000280), 0x8) r5 = semget(0x3, 0x7, 0x208) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000300)={0xffff, 0x9}) semctl$GETALL(r5, 0x0, 0xd, &(0x7f00000002c0)=""/30) 13:52:03 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20081, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000040)={{0x6, 0x7}, 0x20}, 0x10) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) 13:52:03 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'ifb0\x00', {0x2, 0x4e24, @local}}) listen(r0, 0xfffffffffffffe00) r1 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x2e11}, 0x8) shutdown(r1, 0x0) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) [ 168.909162] binder: BINDER_SET_CONTEXT_MGR already set [ 168.924093] binder: 12529:12533 ioctl 40046207 20000140 returned -16 13:52:03 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x2]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x10002) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000100)="6258bc3f51930464067cd7f59643bd870bc060d4e919cf2cbc428a8384304ef34f04a9fdd2389843a88684f4dc878298ea2724ca6ad2ad3a72ea040bdeee230d9e28412c94b4e0fe6fe17ee281c6f59440c26012059585b6ce0b996d3aa800d9702ad2fa661120053beff27be0a23300a3ab90cb1f365f040fc22c07edf1c277854e5512e5e28d53ad5cbd") 13:52:03 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x29, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 168.963879] binder_alloc: binder_alloc_mmap_handler: 12529 20ffa000-20ffd000 already mapped failed -16 [ 168.992502] binder: BINDER_SET_CONTEXT_MGR already set [ 169.004115] binder: 12529:12533 ioctl 40046207 0 returned -16 13:52:03 executing program 6: socketpair(0x15, 0x5, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x401, 0x1, 0x103, 0x0, 0x3f, 0x10001, 0x200}, &(0x7f0000002500)=0x20) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000024c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8002}, 0xc, &(0x7f0000002480)={&(0x7f0000000100)={0x2374, 0x6, 0x9, 0x100, 0x70bd28, 0x25dfdbfd, {0xf, 0x0, 0x1}, [@typed={0x4, 0x44}, @generic="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", @nested={0x11c8, 0x22, [@generic="e191ea7f53de3830fb20172b56ac9f86f91ccaed0852fb9d9f1a614c682d798517e04a878a0859940a5c07456cba2da85a", @typed={0x8, 0x25, @ipv4=@broadcast}, @typed={0x1004, 0x3e, @binary="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"}, @generic="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", @generic="0fc63d21880a697e808a0564a2668897cd979445c2f5b8cbdd631913e6e2e55fb712c68d485cb0b4a8e4e873514b990bd15785428ed795fe54db117bb08789e203b0b8944139744a5cbb6c72a7b7d4333c38c4a23656124b554219dcd8b410c2bdcfcf1a81213fba10bebbd19a649e8f5cde95037397eb5a2a0e002a39c5265e068095133c05b4"]}, @nested={0x194, 0x59, [@typed={0x8, 0x4a, @u32=0xd0a}, @generic="52c2c8e10b4bbcdb7ecef9e5b4c6678bcec7349280faeb2851c08357a4d456830fb50773b6f30ca82b180564a29340178777615edca53137ac288dec883d179d293e45485126657d01f87307c08fa8ce04b9cacf8722df4c47564cf1c54c0c5e0cc55225b62921beab5969debaa8eeaa0d012fe4570232c6b813726c8b41579f00ad61935a8629212a6a0e7e9c88e568e1ba8fdaae281093397e70b2923db7d970013c3dd159cd0e49e695a3f0179dcc9af29ccd0343f417a5376ef727cbea0c4d5422455a", @generic="6c46d25ab6c9198b3bd107c6ecfeaff87af24725aa839236611ea9944a048c28c89064a063212d346bbaa9ef7dccde4fc9e069bde0cf3e3b830c1037e8d1e4d6b20432798e7adfd008cb7c2e7037ca453a93e1a5a3dd3739b54f7b1aa7af613c4fabb559e7395edec9e715f46c1bad1ffc8cdcb5f665be931f8afeb9d0676082a383581dd5780970df39c676d16c4ef6d564090959de9d57ba189f", @typed={0xc, 0x7f, @u64=0x6}, @typed={0x14, 0x89, @ipv6=@remote}, @typed={0x8, 0x4a, @ipv4=@broadcast}]}]}, 0x2374}, 0x1, 0x0, 0x0, 0x80}, 0x1) shutdown(r2, 0x0) 13:52:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) r1 = getpgid(0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000080)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) getpid() 13:52:03 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:03 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x100000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 169.038566] binder: send failed reply for transaction 285 to 12529:12533 [ 169.060167] binder: undelivered TRANSACTION_COMPLETE [ 169.065439] binder: undelivered TRANSACTION_ERROR: 29189 13:52:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095b230270d4237580bc514d144a8b66fbe810bcf6d54a017c887d32fe64d9f5a81e144e6d01f7ac65e9758bb2111346a82e3a46a898e57ba96cddc04bf522927c153c4055d28066827d46cc91e0fd2de3346f3cd3954bf92242aec4ff817bd5b731160ab259f8084350bb98220b47a03ee83fdde3d5cc46a4bab5fa09e8b9d1a6183102bbdd9efa56f9e7134"]}) 13:52:03 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x22, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:03 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') exit(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x20) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="6c6f67696e7569640039dad3c444de4a35f0fd223db6aa1e2fdd63c9f35f389e4669e0af6522c225bbb645ae9e0f46c87cd44db4919c1a34ab1d00bb4157f79b23912e9b96566ebf23618dfdd331fcacfeccdb938974f48d420c49e5b37f94bdb651b9c102659034f4192f") sendfile(r0, r2, &(0x7f00000000c0), 0x1) [ 169.171277] binder: release 12580:12583 transaction 287 out, still active [ 169.178381] binder: undelivered TRANSACTION_COMPLETE [ 169.204161] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 169.211633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 13:52:03 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x200000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:03 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x500) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x7ff, 0x2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000140)={r2, 0x4}, 0x8) pread64(r0, &(0x7f0000002180)=""/4096, 0xffffff06, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 13:52:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0xc}]]}}}]}, 0x3c}}, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x5, 0xa, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000000c0)) [ 169.286707] binder_alloc: binder_alloc_mmap_handler: 12580 20ffa000-20ffd000 already mapped failed -16 [ 169.302399] binder: BINDER_SET_CONTEXT_MGR already set [ 169.310136] binder_alloc: 12580: binder_alloc_buf, no vma [ 169.315881] binder: 12580:12601 transaction failed 29189/-3, size 0-0 line 2967 [ 169.328817] binder: send failed reply for transaction 287, target dead 13:52:04 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x83, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 169.329974] binder: 12580:12583 ioctl 40046207 0 returned -16 [ 169.395070] binder: undelivered TRANSACTION_ERROR: 29189 13:52:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="260f01d1f68e2b9755a83f0f01d1f018ab84397f72c7442400a9b00000c74424026e000000c7442406000000000f01142466baf80cb864103388ef66bafc0c66edc4e109ed1e46875a00f0453100450f01c9", 0x52}], 0x1, 0x0, &(0x7f00000001c0), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@local, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000006c0)=0xe8) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:52:04 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, r0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000003c0)=""/210, &(0x7f00000004c0)=0xd2) sendto$inet6(0xffffffffffffffff, &(0x7f0000001faf)="54f914a0d2c0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c928c4bb573d18be7f79dfbfdff18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = accept(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000180)=0x80) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) listen(r0, 0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000500)={0x5, 0x8, 0x3f7e1d96, 0x0, 0x0}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000580)={r3, 0x1f}, &(0x7f00000005c0)=0x8) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14070000fbdbdf25000000000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) r4 = semget$private(0x0, 0x6, 0x102) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000040)=[0xfffffffffffffffa, 0x5]) bind$inet6(r0, &(0x7f0000001ffd)={0xa, 0x0, 0x0, @loopback}, 0x20) capset(&(0x7f00001e4ff8)={0x20020071026}, &(0x7f0000001fe8)={0x20}) sendto$inet6(r0, &(0x7f00000002c0)='z', 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote, 0xc2b5}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0x4, @ipv4={[], [], @rand_addr}, 0x8}, {0xa, 0x4e24, 0x5, @mcast2, 0x1000}, 0x1, [0xffffffffffffff1c, 0x80000001, 0x4, 0x7, 0x100000001, 0x0, 0x7, 0x80000001]}, 0x5c) 13:52:04 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x4000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:04 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x8, 0x2, 0x8, 0x9, 0x3, 0x0, 0x8, 0x190, 0x40, 0x3a6, 0x8, 0x2a, 0x38, 0x1, 0x40, 0x8, 0x400}, [{0x0, 0x8, 0x5, 0x6, 0x2, 0x6, 0x7, 0xff}, {0x1, 0xff, 0x1, 0x2, 0x40, 0xffffffff7fffffff, 0x101, 0x7bb}], "26b3a7ba4990b242aec472c6f528d78957cf1c75d4ac9333c7e78891", [[]]}, 0x1cc) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f0000000040), 0x5) 13:52:04 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f00000000c0)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80}, 0x0) 13:52:04 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0xf, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:04 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x1000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 169.569000] binder_alloc: binder_alloc_mmap_handler: 12638 20ffa000-20ffd000 already mapped failed -16 [ 169.593506] binder: BINDER_SET_CONTEXT_MGR already set 13:52:04 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x14, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:04 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x900, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x280000000, &(0x7f0000000080)="86ca190706a56dceda53cb1a0b22d96ef602f1018571cd75") socket$pptp(0x18, 0x1, 0x2) set_mempolicy(0x3, &(0x7f0000000000)=0x10000, 0x1db7) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff94}}) close(r0) [ 169.615283] binder: 12638:12649 ioctl 40046207 0 returned -16 13:52:04 executing program 6: socketpair$inet(0x2, 0xf, 0x9, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e) r2 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x100) r3 = msgget(0x3, 0x600) getresuid(&(0x7f0000000800), &(0x7f0000006340)=0x0, &(0x7f00000006c0)) fstat(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r10 = getpid() r11 = gettid() msgctl$IPC_SET(r3, 0x1, &(0x7f0000000480)={{0x3f, r4, r6, r7, r9, 0x41, 0x6}, 0x3, 0x5, 0x62bfe7aa, 0x9, 0xade, 0x6, r10, r11}) r12 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r13 = getpid() ioprio_get$pid(0x3, r13) r14 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r14, 0x8912, &(0x7f0000000180)="025cc80a2b345f8f762070") execve(&(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000540)='trusted\x00', &(0x7f0000000580)='selinux\\\x00'], &(0x7f0000000680)=[&(0x7f0000000600)='NETMAP\x00', &(0x7f0000000640)='NETMAP\x00']) r15 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x800015, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ec, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xb36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000240)) prctl$intptr(0x2a, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x4003f, 0x401, 0x8000, r13}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r16 = socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000006800)={0x0, 0x0}) recvmmsg(r16, &(0x7f0000006600)=[{{&(0x7f0000000840)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/225, 0xe1}, {&(0x7f0000000300)=""/36, 0x24}, {&(0x7f00000009c0)=""/4, 0x4}, {&(0x7f0000000a00)=""/243, 0xf3}, {&(0x7f0000000b00)=""/135, 0x87}, {&(0x7f0000000bc0)=""/99, 0x63}, {&(0x7f0000000c40)=""/111, 0x6f}, {&(0x7f0000000cc0)=""/16, 0x10}, {&(0x7f0000000d00)=""/212, 0xd4}], 0x9, &(0x7f0000000ec0)=""/135, 0x87, 0x3}, 0x9}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/130, 0x82}, {&(0x7f0000002040)=""/219, 0xdb}], 0x3, &(0x7f0000002180)=""/4096, 0x1000, 0x4381}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/253, 0xfd}], 0x2, &(0x7f00000042c0)=""/164, 0xa4, 0x100000001}, 0x6d}, {{&(0x7f0000004380)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000004700)=[{&(0x7f0000004400)=""/54, 0x36}, {&(0x7f0000004440)}, {&(0x7f0000004480)=""/10, 0xa}, {&(0x7f00000044c0)=""/9, 0x9}, {&(0x7f0000004500)=""/83, 0x53}, {&(0x7f0000004580)=""/11, 0xb}, {&(0x7f00000045c0)=""/241, 0xf1}, {&(0x7f00000046c0)=""/29, 0x1d}], 0x8, &(0x7f0000004780)=""/207, 0xcf, 0x84}, 0xe9e}, {{&(0x7f0000004880)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004900)=""/137, 0x89}, {&(0x7f00000049c0)=""/7, 0x7}, {&(0x7f0000004a00)=""/27, 0x1b}], 0x3, &(0x7f0000004a80)=""/69, 0x45, 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000006040)=[{&(0x7f0000004b00)=""/129, 0x81}, {&(0x7f0000004bc0)=""/85, 0x55}, {&(0x7f0000004c40)=""/154, 0x9a}, {&(0x7f0000004d00)=""/252, 0xfc}, {&(0x7f0000004e00)=""/229, 0xe5}, {&(0x7f0000004f00)=""/4096, 0x1000}, {&(0x7f0000005f00)=""/104, 0x68}, {&(0x7f0000005f80)=""/42, 0x2a}, {&(0x7f0000005fc0)=""/32, 0x20}, {&(0x7f0000006000)=""/49, 0x31}], 0xa, &(0x7f0000006100)=""/195, 0xc3, 0x471a}, 0x9}, {{0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000006200)=""/146, 0x92}, {&(0x7f00000062c0)=""/45, 0x2d}], 0x2, &(0x7f0000006340)}}], 0x7, 0x0, &(0x7f0000006840)={r17, r18+30000000}) ioctl(r16, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r20 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x1ff00000000000, 0x4, 0x1, 0x0, 0x1, 0xffffffffffffffff}, 0x2c) ioctl$PERF_EVENT_IOC_QUERY_BPF(r12, 0xc008240a, &(0x7f0000006380)=ANY=[@ANYPTR64=&(0x7f0000006580)=ANY=[@ANYRES64=r8, @ANYRES64=r10, @ANYRESHEX=r15, @ANYRESHEX=r20, @ANYRESOCT=r20, @ANYRESHEX=r0, @ANYRES16=r16, @ANYPTR=&(0x7f0000007fc0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r16], @ANYRESDEC=r19, @ANYRES32=r5]]) getsockopt$inet6_tcp_int(r14, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000700)=0xfff9) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) [ 169.650536] binder_alloc: 12638: binder_alloc_buf, no vma [ 169.656362] binder: 12638:12661 transaction failed 29189/-3, size 0-0 line 2967 [ 169.666881] binder: send failed reply for transaction 290 to 12638:12649 [ 169.677525] binder: undelivered TRANSACTION_COMPLETE [ 169.682885] binder: undelivered TRANSACTION_ERROR: 29189 [ 169.740529] binder: undelivered TRANSACTION_ERROR: 29189 [ 169.848732] *** Guest State *** [ 169.852287] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 169.861368] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 169.871196] CR3 = 0x0000000000000000 [ 169.875104] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 169.881133] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 169.887149] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 169.893863] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 169.901881] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 169.909903] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 169.917954] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 169.926076] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 169.934486] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 169.942515] GDTR: limit=0x00000000, base=0x0000000000000000 [ 169.950538] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 169.958719] IDTR: limit=0x00000000, base=0x0000000000000000 [ 169.966765] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 169.974782] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 169.981228] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 169.988735] Interruptibility = 00000000 ActivityState = 00000000 [ 169.994997] *** Host State *** [ 169.998254] RIP = 0xffffffff811f3d34 RSP = 0xffff88019a18f350 [ 170.004275] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 170.011172] FSBase=00007fe214f2e700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 170.019036] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 170.024952] CR0=0000000080050033 CR3=00000001cadd6000 CR4=00000000001426e0 [ 170.032045] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86c01380 [ 170.038756] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 170.044862] *** Control State *** 13:52:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = gettid() process_vm_readv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1, &(0x7f0000000340)=[{&(0x7f0000000240)}, {&(0x7f00000002c0)=""/83, 0x53}], 0x2, 0x0) r3 = gettid() r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f00003ce000/0x2000)=nil, 0x2000, 0xf) madvise(&(0x7f000018e000/0x600000)=nil, 0x600000, 0x8) 13:52:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'irlan0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="03"]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x800, 0x721001) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000180)=0xcf, 0x4) read$FUSE(r2, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x0) symlinkat(&(0x7f0000000080)='./file0/file1\x00', r4, &(0x7f00000001c0)='./file0\x00') read$FUSE(r2, &(0x7f00000030c0), 0x1000) read$FUSE(r2, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r2, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r2, &(0x7f0000003000)={0x90, 0x0, 0x3}, 0x90) 13:52:04 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x2000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_dev$admmidi(&(0x7f0000000440)='/dev/admmidi#\x00', 0x1, 0x200000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') ioctl$TIOCSTI(r1, 0x5412, 0x80000000) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20010000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x74, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe0a}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r4 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r4, 0x5414, 0x70c000) 13:52:04 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x2c, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 170.048353] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 170.055075] EntryControls=0000d3ff ExitControls=0023efff [ 170.060568] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 170.067606] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 170.074311] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 170.080949] reason=80000021 qualification=0000000000000000 [ 170.087311] IDTVectoring: info=00000000 errcode=00000000 [ 170.092813] TSC Offset = 0xffffffa1d66c751b [ 170.097175] EPT pointer = 0x00000001af44801e 13:52:04 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000002c0)=')') r3 = getpgrp(0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x80, 0x3, 0x9, 0x6, 0x0, 0x4, 0x8, 0x4, 0x3ff, 0x6, 0x0, 0xfffffffffffffffb, 0x4, 0x6, 0x2, 0xedd0, 0x80, 0x1, 0x7, 0xffffffff, 0x4, 0x5, 0x6, 0x9, 0x4, 0x80, 0x401, 0xffffffff, 0x1000, 0x800, 0x0, 0x2, 0x2, 0x7, 0x1f, 0x7, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0xcd}, 0x40, 0x0, 0x1000, 0x0, 0xa5, 0x5, 0x25}, r3, 0xe, r0, 0x1) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x20400, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000280)) 13:52:04 executing program 4: r0 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000001c0), 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000), 0x0, 0x0, r2) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)) getrlimit(0x0, &(0x7f0000000400)) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00), &(0x7f00000000c0)="7f", 0x1, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)="ea639aab25de4c0970477bc54cf3143d0006271df610f69b1279a56342117c72d71209f3f801ae42c6dced344e955f1a28b97900121c1b1183ad8ba659be004922246297a112a4bd0cb52f558389cf2207e4cd085ad32f515c717a09cd19260700d9a92aa9eb007a01", 0xffffffffffffff4e, r2) keyctl$dh_compute(0x17, &(0x7f0000000340)={r4, r5, r5}, &(0x7f0000000600)=""/132, 0xff33, 0x0) 13:52:04 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:04 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x40000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clock_getres(0x80000003, &(0x7f0000000240)) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/73) 13:52:04 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x15, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:05 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x2b, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 170.269127] QAT: Invalid ioctl [ 170.279947] QAT: Invalid ioctl [ 170.299390] QAT: Invalid ioctl [ 170.299924] binder_alloc: binder_alloc_mmap_handler: 12714 20ffa000-20ffd000 already mapped failed -16 [ 170.312817] QAT: Invalid ioctl 13:52:05 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={r0}) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000007000000000013002dd4106205001a000000c600000000e0001b00012128adc1f52dfb12df3f661bade99648165191001525ba5a"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x352, 0x0) 13:52:05 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x4]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 170.322182] binder: BINDER_SET_CONTEXT_MGR already set [ 170.328428] binder_alloc: 12714: binder_alloc_buf, no vma [ 170.334192] binder: 12714:12726 transaction failed 29189/-3, size 0-0 line 2967 [ 170.355220] binder: 12714:12722 ioctl 40046207 0 returned -16 [ 170.355341] binder: send failed reply for transaction 293 to 12714:12722 13:52:05 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000400)=""/246) ioctl$EVIOCGREP(r0, 0x4008744b, &(0x7f0000000000)=""/174) 13:52:05 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306276, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 170.392254] binder: undelivered TRANSACTION_COMPLETE [ 170.398134] binder: undelivered TRANSACTION_ERROR: 29189 [ 170.465612] binder: undelivered TRANSACTION_ERROR: 29189 [ 170.565676] binder: 12758:12759 ioctl c0306276 20000140 returned -22 [ 170.573902] binder_alloc: binder_alloc_mmap_handler: 12758 20ffa000-20ffd000 already mapped failed -16 [ 170.584096] binder: BINDER_SET_CONTEXT_MGR already set [ 170.589788] binder: 12758:12759 ioctl 40046207 0 returned -16 [ 170.596287] binder_alloc: 12758: binder_alloc_buf, no vma [ 170.602156] binder: 12758:12762 transaction failed 29189/-3, size 0-0 line 2967 [ 170.610679] binder: undelivered TRANSACTION_ERROR: 29189 [ 170.616536] binder: send failed reply for transaction 296 to 12758:12759 [ 170.623828] binder: undelivered TRANSACTION_COMPLETE [ 170.629155] binder: undelivered TRANSACTION_ERROR: 29189 13:52:05 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x31, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:05 executing program 3: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400000, 0x0) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r0) keyctl$unlink(0x9, r0, r0) 13:52:05 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x100000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:05 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000040)={0x1f}) r4 = dup2(r2, r0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000080)={0x1, 0xfffffffffffffff8, 0x0, 0x100000001}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000072]}) 13:52:05 executing program 6: unshare(0x8000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) fstatfs(r0, &(0x7f00000000c0)=""/118) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4040, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000180)) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xffffffffffffffff, 0x48000) 13:52:05 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306225, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:05 executing program 2: r0 = memfd_create(&(0x7f0000000300)="2d4253e349c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb295f4960139c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b9893dc9da5159a4616248b19eaefe3abb6a52434d6fe3700e7d924ca20ab4eaec9bdd36740e127730e90f2cd72b82859c25cbf77fdbd064c7bc5dabe9914df76b027", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ioctl$sock_ifreq(r0, 0x893f, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x1, 0x7}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f00000000c0)=""/102, 0x66, 0x10000, &(0x7f0000000140)={r1, r2+30000000}) sendfile(r0, r0, &(0x7f0000317000), 0xff8) rmdir(&(0x7f0000000040)='./control\x00') 13:52:05 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000), 0xc, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb4, 0x2}}, 0xb8}}, 0x0) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xffffffffc2d5bcc9, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000140)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)=r2) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x5) 13:52:05 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x200000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 170.991409] binder: 12771:12779 ioctl c0306225 20000140 returned -22 13:52:05 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000002340), 0x0, &(0x7f0000002380)=""/2, 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0xf503}, 0xc, &(0x7f0000000000)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x200000) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x25, 0x4) 13:52:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0xffffff80]}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x80}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffe01, 0x101000) ioctl$VT_DISALLOCATE(r2, 0x5608) 13:52:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0xd0b) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x180, 0x0) r4 = fcntl$dupfd(r2, 0x1000406, r3) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000080)) sendmsg$unix(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18070040000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00&\x00'], 0x18}, 0x0) sendmsg$unix(r1, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="000100ea00afb6617815ca187ce0777231c75f65c207e05230ae635bf1ae56c7ae2fe1491a293a029b1a6ec96de977a407fc9f0031ad5f734d41ec4df274eb8f13cba73903e85231b2172000000000000000c316997e490914c107e7923cacd75824b5411842ee0200baabf8f98d0e349c4a1139ba8f7877abd80d5fe87dddd5603cc2271c26ba9ea82ddef1c41c9ea437e6ebf30496c21a1bb1a70769f8678b27a22423fce33018eb254bfbfa561e79985549d4e50e752fce94eb47800e0f1f02d0583119d5812bb3f1a6c4b98857d0a0672d6d6def064ddde8fbd50f83b9d1046b7a28349cf015eee7ffffaeb2d5c103fd6dd43f07250c98312ed1187f70b34f12ce30fffa56f734b75e26e0bbcab0d115f9948dd076f2229c4b5545d13bb495f87b4552bdcbe59ea991d66a1960be16f9e94ac87215cbbd22d0053f33ffdf4fc63ee5a3f002ba258a7c0a96e4cd42cf4650878c5b55866debfb1c9e4f76a6fa033cd067b6c41e29e15e6bbb75a7f70e438753be1bf2d15f48ecb4a69c7609db586f93", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) close(r1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="030aaa4489abeca2ba5738fcdb7de329b98fc2bb4d516796da6d623b43337c18c03ca575053abfb10ccf7f332a1640a713778bdb084a7448d0d62fbf58c99fc9c622f194c55f7eaad5f1593644f41b4286ae1acc1096cd97c1788a0c5668a90a831e48a46022983ae36297aaa806a27662d0a6341658fa8b022063dc4905f709196b6177683b57526657ea3643ab2098d7ce7f673f1e93cba6ad73318abc27f2a731a71e0c5f67165b53268470e5039fa63d", @ANYRES64=r5], 0x15, 0x0, &(0x7f0000000340)="4ccf49c44505cd11d8f3b79984c48ed38071289ac7"}) close(r0) [ 171.042352] binder_alloc: binder_alloc_mmap_handler: 12771 20ffa000-20ffd000 already mapped failed -16 [ 171.067598] binder: BINDER_SET_CONTEXT_MGR already set 13:52:05 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x2e, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) setpgid(0x0, r1) [ 171.105807] binder: 12771:12779 ioctl 40046207 0 returned -16 [ 171.107874] binder_alloc: 12771: binder_alloc_buf, no vma [ 171.117641] binder: 12771:12805 transaction failed 29189/-3, size 0-0 line 2967 [ 171.129568] binder: send failed reply for transaction 299 to 12771:12779 13:52:05 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x4000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 171.153245] binder: undelivered TRANSACTION_COMPLETE [ 171.158477] binder: undelivered TRANSACTION_ERROR: 29189 13:52:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000ac0)=@broute={'broute\x00', 0x20, 0x4, 0x938, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000b40], 0x0, &(0x7f00000001c0), &(0x7f0000001540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001100000000000000000076657468300000000000000000000000697036746e6c3000000000000000000062637368300000000000000000000000626f6e645f736c6176655f3100000000aaaaaaaaaabb0000000000000180c20000000000000000000000d80200004003000070030000627066000000000000000000000000000000000000000000000000000000000010020000000000000100000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006d61726b00000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000434f4e4e5345434d41524b00000000000000000000000000000000000000000008000000000000000000000000000000434c4153534946590000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff010000001f00000000000000000069703667726530000000000000000000677265300000000000000000000000007665746830000000000000000000000076657468305f746f5f626f6e64000000aaaaaaaaaa000000000000000180c20000000000000000000000c0000000c0000000f00000006e66616363740000000000000000000000000000000000000000000000000000280000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff020000000900000000000000000073797a6b616c6c657231000000000000726f73653000000000000000000000007465616d5f736c6176655f31000000007663616e300000000000000000000000000000000000000000000000aaaaaaaaaa0000000000000000007000000070000000a0000000434f4e4e5345434d41524b00000000000000000000000000000000000000000008000000000000000000000000000000110000000000000000006e72300000000000000000000000000079616d30000000000000000000000000697036746e6c300000000000000000007465616d5f736c6176655f3000000000e60000000000000000000000aaaaaaaaaa000000000000000000f802000048030000780300006270660000000000000000000000000000000000000000000000000000000000100200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068656c7065720000000000000000000000000000000000000000000000000000280000000000000000000000746674702d323030303000000000000000000000000000000000000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000b57f1470c0a8e6bea47b0d36dfd73abc4912893fa59242eaa777242bc772e2df4fd4219da39fe92c73723a00df41958180999e5739432c0542ec4da59855ff5d3a2844a9638a788e9c8077edafb0e0a2215a197d18964894fbcf8857480b8d9249990bc6191e8906fc8e56b2b4f80f191ac251130f8e65f8d6aaf51947a640e2fdc9e37cca0f072ac40f0ebbd2af5a"]}, 0xa3f) 13:52:06 executing program 3: utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x1, 0x5e}) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x240000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'gre0\x00', 0x400}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001900050c0005000000000000010a00000000000000140000001400050000000000000096b74477000000000000000000000f87fc7e962a2d621f26a372ec536d15361f05b63bbc00ffffff7f14902fdfc38dc7d16b3a7142d1e23cc515c8da8ee2753ec3fbd1a2f49f498288aa968b5b551012a8316a5ccf6368f90f03000000376a1f9fd7fe9a10ae3027ceb14d7bc9ab4355de5ec922e1d98d15cbba2f249c384c34c034f1303a46ae86ebf952087822f13f151e5f7c574fddeb519930351f621aa08311d70cceea0f7d7ed8c3a136555ae9b5583f42ad89046200bf39ec8603ddaf5f2ee98ac774ccc4dbb8406b1691f131f476d1c7338c519a65441c2b96b1de05931b047b83192032440000000000c02284681e612d"], 0x30}}, 0x2) 13:52:06 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0xd, 0x3) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xd}]}}}]}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'ip6gretap0\x00', {0x2, 0x4e21}}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x88000, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000080)={0x0, 0x6, 0x13, 0x3, 0x3, 0xcb9, 0x5, 0x4e, 0x1}) 13:52:06 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/199, 0xc7) [ 171.237244] binder: undelivered TRANSACTION_ERROR: 29189 [ 171.317373] kernel msg: ebtables bug: please report to author: Wrong len argument [ 171.361321] netlink: 'syz-executor7': attribute type 13 has an invalid length. [ 171.446113] netlink: 'syz-executor7': attribute type 13 has an invalid length. 13:52:06 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x800000c0045006, &(0x7f0000000000)=0x102) 13:52:06 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {}, [@RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x24}}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="4500000007010038002824257365637572697479282173797374656d6370757365747b656d317365630100697479254024a073797374656d6b657972696e672c27feffffff"], 0x45) r2 = dup(r0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000000)=0x200) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000100)={0x9, 0x1, 0xfffffffffffffe00, 0x217, '\x00', 0x7}) 13:52:06 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306254, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:06 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x1000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:06 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'\nilter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:06 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x8, 0x1, 0x1, 0x4, 0x2, 0x81}) socket(0x10, 0x80003, 0x0) 13:52:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") set_mempolicy(0x1, &(0x7f00000000c0), 0x40) ioctl$int_out(r0, 0x0, &(0x7f0000000040)) set_mempolicy(0x0, &(0x7f0000000000), 0x1) set_mempolicy(0x0, &(0x7f0000000080)=0x2, 0x90000000000000) 13:52:06 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1}, 0x50) r2 = open(&(0x7f0000000940)='./file0/file0\x00', 0x0, 0x10) read$FUSE(r0, &(0x7f0000001000), 0x1000) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)={{0x1cf, 0xffff, 0xfff, 0x296, 0x3e6, 0x80000001, 0x326, 0xb8}, "9fd8272748efc408be0a05a4f4d0b49ceda4689a654a1c7ed14edda313affb3aafd7395066b7487b0ef02b103a7e27352913cf7b5046c38f23c40fbe9924f1e3975aab58a3aef5f38194589d7348f2d537f8f7eeb7651b26224a9d88c05a5865d7f00f076d6450f3ed18dfff3aed2a2214fc53d3ccc8c8586aed6c43ef69fe594cc8c8", [[], []]}, 0x2a3) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) close(r0) fsync(r3) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f00000001c0)={@multicast1, @local, @multicast2}, 0xc) getresuid(&(0x7f00000003c0), &(0x7f0000000740), &(0x7f0000000780)=0x0) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x800001, &(0x7f0000000880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}]}}) 13:52:06 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x2000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 171.546762] binder: 12867:12868 ioctl c0306254 20000140 returned -22 [ 171.565612] binder_alloc: binder_alloc_mmap_handler: 12867 20ffa000-20ffd000 already mapped failed -16 [ 171.590118] binder: BINDER_SET_CONTEXT_MGR already set 13:52:06 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000340)=""/28, &(0x7f0000000380)=0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000280)={r4, 0xd13}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYBLOB="8a00030004004e8c0000"], &(0x7f0000000200)=0xe) read(r1, &(0x7f00000000c0)=""/91, 0x5b) [ 171.595647] binder: 12867:12868 ioctl 40046207 0 returned -16 [ 171.600964] binder_alloc: 12867: binder_alloc_buf, no vma [ 171.607264] binder: 12867:12884 transaction failed 29189/-3, size 0-0 line 2967 [ 171.623704] binder: send failed reply for transaction 302 to 12867:12868 [ 171.639620] binder: undelivered TRANSACTION_COMPLETE 13:52:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) r3 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}, r5}, 0x14) r6 = perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000004ffc)=0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6c851494, 0x200) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in6=@dev}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x1) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000d80)={@mcast1}, &(0x7f0000000dc0)=0x14) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r7, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") memfd_create(&(0x7f0000000000)="000000000010000000004300000000", 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc1105517, &(0x7f0000001000)) 13:52:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = userfaultfd(0x80800) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0xffffffffffffff9c}, 0x10) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000140)) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000f8dfe0)={{&(0x7f00002a9000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000300)={{&(0x7f000069f000/0x4000)=nil, 0x4000}}) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 13:52:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x1, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x1ed) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101900, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000080)={{0x0, 0x1, 0x7f, 0x0, 0x8}, 0x50, 0x1}) sendto$inet6(r1, &(0x7f00000003c0)="040400000700000000000000fff55b4202938207d9fb3780398dad75000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035060f118d0000f55dc626000095000000faffffff00000000aeb46245004bae1356642490a7b5fc88046afd77fc7ae664f65bfc370ad30c2750684ad6a7c011b677081c14445c06232055397880d89abad699a7485f036c70bbb8a784105a9cdae077", 0xa4, 0x0, &(0x7f0000000240)={0xa, 0x200800800, 0x1d, @loopback}, 0x1c) msgget(0x0, 0x40) recvmmsg(r1, &(0x7f0000003580)=[{{&(0x7f0000002000)=@pppol2tpv3, 0x80, &(0x7f0000003500)=[{&(0x7f0000003440)=""/152, 0x98}], 0x1, &(0x7f0000000040)}}], 0x1, 0x0, &(0x7f0000003600)) [ 171.645008] binder: undelivered TRANSACTION_ERROR: 29189 13:52:06 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x40000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:06 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'%ilter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:06 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306209, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 171.718514] binder: undelivered TRANSACTION_ERROR: 29189 [ 171.743857] IPVS: ftp: loaded support on port[0] = 21 13:52:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x705c00, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000140)) [ 171.858285] binder: 12915:12919 ioctl c0306209 20000140 returned -22 [ 171.879890] IPVS: ftp: loaded support on port[0] = 21 [ 171.885341] binder_alloc: binder_alloc_mmap_handler: 12915 20ffa000-20ffd000 already mapped failed -16 [ 171.905144] binder: BINDER_SET_CONTEXT_MGR already set [ 171.917320] binder: 12915:12919 ioctl 40046207 0 returned -16 [ 171.970552] binder_alloc: 12915: binder_alloc_buf, no vma [ 171.976272] binder: 12915:12933 transaction failed 29189/-3, size 0-0 line 2967 [ 171.985012] binder: send failed reply for transaction 305 to 12915:12919 [ 172.006224] binder: undelivered TRANSACTION_ERROR: 29189 13:52:06 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/21, 0xfff, 0x800}, 0x18) fcntl$getown(r0, 0x9) 13:52:06 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x0, 0x101000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200000, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000008c0)=""/73) write$binfmt_elf64(r0, &(0x7f0000000c40)=ANY=[@ANYPTR=&(0x7f0000000740)=ANY=[], @ANYPTR=&(0x7f0000000840)=ANY=[], @ANYRES16=r0, @ANYRES32, @ANYPTR=&(0x7f0000000a40)=ANY=[], @ANYPTR64=&(0x7f0000000880)=ANY=[], @ANYRES32], 0x2a) r2 = dup(r0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=0x0, &(0x7f00000004c0)=0x4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000500)={r3, 0x1ff, 0x1}, 0x8) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x800, 0x0) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000400)=""/154) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000200)={0x80000000, 0x3}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) sendfile(r0, r0, &(0x7f0000000000), 0x2) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000300)={0x6, 0x20}) write$binfmt_elf64(r0, &(0x7f0000000a80)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r0, @ANYRES64=r0, @ANYPTR=&(0x7f00000007c0)=ANY=[@ANYRESOCT, @ANYRESHEX=r0, @ANYRESOCT=r4, @ANYPTR, @ANYPTR64, @ANYPTR, @ANYBLOB="fc7640714a1c8599d5c0c7f5ba81e1568fb824724b75be5c048c66bcabb3b12aabfbcfb6", @ANYRESHEX=r4]], @ANYRESOCT=r4, @ANYPTR=&(0x7f0000000780)=ANY=[], @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYBLOB="a387cea32a0f08802718a4ab6cbd81810b0bf89594c9c36dd6b14ba049823e477f5a5a0abfc7406896c3fbda06ce3a9a66e283bd663417ece7f4e986efdd98acbcf7e8a68c15b133d7738ea27988ce2737df9e5fbf16a0800027f480e882e43f2f411e7f270693920c8f64e647bdb90c5efd30cb0a15d7c2c9beb2778a27e28f63e49d80efb5da339dc5e42cf740fa3190022cf5f506aa66842700c8629bf899ab649e3390722a383582b60332fcd7ed664dbb66449d801a1e3874510b84827e95535c8d391c00571f1b3a401d90565981d8ab521e452767c352eb30", @ANYRES16=r0, @ANYBLOB="f7513103a1dbfd2c7228e7b319e0495cc833cea29856b3b0e9fc968906bf10141b7495b4184909130b853496e89d1f8d1e09b3e091a9a5e43d52756623220cc6f7afdab1bebed9e76444c2884e384811b2d8226191de406374addff5a07908f4650ab583a4be754367dda2bc60fdb6df08b911b3e92c600492a42c9b77040bc6885784c353b8f14c63842e88f23cb8f34bb1a355d28e4171911e8bd9e7490145d0a75de4c7f897adef24d37d3c", @ANYRES64=r4, @ANYRESOCT=r4, @ANYRESOCT=r4, @ANYRESDEC=r4], @ANYRESDEC, @ANYRESOCT=r0, @ANYRES16=r4], 0x5c) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000180)) 13:52:06 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='attr/fscreate\x00') stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xfffffffffffffffe, 0x6, {0x4, 0x1, 0xfe0, 0x607, 0x200, 0x1, {0x5, 0x6, 0x6, 0xfffffffffffffffb, 0x800, 0x7, 0x7fffffff, 0x100000001, 0x45, 0xfffffffffffffffd, 0x0, r2, r3, 0x3, 0x1}}}, 0x90) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x3) sendfile(r1, r1, 0x0, 0x2) 13:52:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x400000b0]}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000002c0)=0xc) fstat(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r4, &(0x7f0000000380)={0x78, 0x0, 0x8, {0x8, 0x4, 0x0, {0x6, 0x60d5, 0xffffffffffff71fc, 0x3, 0x2, 0x80000001, 0x1000, 0x9, 0x6, 0x1, 0x200, r5, r6, 0xffff, 0xee80}}}, 0x78) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'team_slave_1\x00', 0x2b2}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x2, 0x0, @pic={0x101, 0x9, 0x5, 0x3f, 0x260, 0x3, 0x200, 0x40, 0x800, 0x2, 0x3, 0x3f, 0x9, 0x2ef, 0x2, 0x7}}) 13:52:06 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x4]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:06 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:06 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'fiuter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 172.019372] binder: undelivered TRANSACTION_COMPLETE [ 172.024706] binder: undelivered TRANSACTION_ERROR: 29189 13:52:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x101, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) [ 172.102153] binder_alloc: binder_alloc_mmap_handler: 12945 20ffa000-20ffd000 already mapped failed -16 [ 172.127193] binder: BINDER_SET_CONTEXT_MGR already set [ 172.132714] binder: 12945:12949 ioctl 40046207 0 returned -16 13:52:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x6002) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1f) r2 = socket$inet(0x10, 0x3, 0x40000000000010) recvmmsg(r2, &(0x7f0000000080)=[{{&(0x7f0000000500)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/71, 0x47}}], 0x1, 0x0, &(0x7f0000001b80)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000017000)=[{&(0x7f0000004000)="240000001d0003ffff3cc0023da2830101eee6cd7986c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) [ 172.161540] binder_alloc: 12945: binder_alloc_buf, no vma [ 172.167311] binder: 12945:12963 transaction failed 29189/-3, size 0-0 line 2967 [ 172.175930] binder: send failed reply for transaction 308 to 12945:12949 [ 172.185586] binder: undelivered TRANSACTION_COMPLETE [ 172.190871] binder: undelivered TRANSACTION_ERROR: 29189 [ 172.255139] binder: undelivered TRANSACTION_ERROR: 29189 [ 172.285095] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. 13:52:08 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'fi\nter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:08 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x2]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x100) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x14, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 13:52:08 executing program 3: mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x6013, 0xffffffffffffffff, 0x81000000) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0xa8102) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x2051, r0, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x2) 13:52:08 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:08 executing program 7: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0xee01]) getgroups(0x2, &(0x7f0000000100)=[0xffffffffffffffff, 0xee01]) setregid(r0, r1) mincore(&(0x7f0000000000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/99) 13:52:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r1, &(0x7f0000458000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x30) recvmmsg(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/148, 0x94}], 0x1, &(0x7f00000007c0)=""/4096, 0x1000}}, {{&(0x7f00000017c0)=@generic, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/240, 0xf0}], 0x1, &(0x7f0000001e40)=""/74, 0x4a}}], 0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="290000001800190000003fffffffda0602000000fde80001024000040d000500000500000005000000", 0x29}], 0x1) close(r1) 13:52:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfffffffffffffc01, 0x200) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x1}, &(0x7f0000000100)=0x8) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x2}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x77, &(0x7f0000000200), 0x8) close(r4) close(r3) 13:52:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9300000000000000000000000000000000000000"], 0xff8f) 13:52:08 executing program 7: r0 = gettid() wait4(r0, &(0x7f0000000000), 0x8000000a, &(0x7f0000000040)) exit(0x0) ioprio_set$pid(0x1, r0, 0x0) 13:52:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077a6df5ab82b4c4f8d", 0x0) ftruncate(r1, 0x40001) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x1, r2}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000), 0x0) sendfile(r0, r1, &(0x7f000000a000), 0x7ffff) [ 173.604525] binder_alloc: binder_alloc_mmap_handler: 12993 20ffa000-20ffd000 already mapped failed -16 [ 173.629163] binder: BINDER_SET_CONTEXT_MGR already set [ 173.635363] binder: 12993:13008 ioctl 40046207 0 returned -16 13:52:08 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x100000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 173.676279] binder_alloc: 12993: binder_alloc_buf, no vma [ 173.682080] binder: 12993:13020 transaction failed 29189/-3, size 0-0 line 2967 [ 173.693296] binder: send failed reply for transaction 311 to 12993:13008 [ 173.714294] binder: undelivered TRANSACTION_COMPLETE [ 173.719529] binder: undelivered TRANSACTION_ERROR: 29189 13:52:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000180)=0x80000000, 0x4) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000002200010000000000000000000400000008003c7f7978fe34f9f64a6f6e73251fbd585899a5b4f3009d1cb968f36c1d18012f46c010cfa1117fab6ee8b131853f5af69822a0e6f436af6445204fbe72eef571ad19d7280b0e692e22f6dd95201aade341eeba33132c60d1d6429d2aad0ab7e3d0936f9fb3eaf048e0ea44578a7bdfd29578a23ee444270e32b469ce115cb33b3f7dd39e1ed75db6eaf7575f6c884496d627e35facbf41678dec6e83fb2f353cca5745f48d8fcd100540a5e72f6eb5c50b06f8186e07f5f3039718cc8150f3b42f934a08f03c2acc16e522a8b36f97ac628354f75eef", @ANYRES32=0x0], 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, &(0x7f00000003c0)=0x100) recvmsg(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x0, 0x0, @multicast1}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/217, 0xd9}, 0x0) 13:52:08 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x200000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") read$FUSE(0xffffffffffffffff, &(0x7f0000005000), 0xe83) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) r1 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x6, 0x200) read$FUSE(r1, &(0x7f0000003000), 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x48) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000001c0)={r3}) sendmsg$nl_generic(r2, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x36200}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0xffce, 0x2e, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0xc, 0x0, [@typed={0x62, 0x9, @ipv4}]}]}, 0xffce}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) fstat(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000005c0)=[0xffffffffffffffff]) sendmsg$unix(r1, &(0x7f0000001680)={&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000340)="8135424ade92e010fb77ed387db9e5404e232c845691765026c690d5788451fc501d9d03459d45cf8a002716c757823645c668eb797e5d134b4d2b60b4ee88f457d6c2027147efea6eaae3c07b9059dead486bde86bc2ccc23b2794cebd9fa8b81ef3f3a71dec0d89a9f8cf167d43f4b066c610ee2780fbb43c9d74b9544fa27e203c0a6af839fd826934d", 0x8b}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000400)="2153ec18af19419f3eca0be2745d0bf592257de8156613c7549b7193af6c60db521b879787d6f076ada71159cc4d1e6e1ae7d5f328cfbff426e62c7bdb3b4023a54c406f0ebf4fb4e849d129c0ee79dcb06daa971dc4cdc6dcf1892d21782d8d6b3a95f0d118608116dbf00dbceabf7ed4ddc31eb806951bc9de318b889a6da305ab50b4ea7953222361c630402ec6601365e87492", 0x95}, {&(0x7f00000004c0)="dc806e62b6727b507b3aaafcc49fe65654548612586758c944b140a92a768c99fe065faacaa76cb2351eb83b5da7bd82e124da341bd6a63a331824480e85753941d719df0bb24787ce9b19a416df0cf8465b1df93406d6a2a4a512bd202eb0", 0x5f}], 0x4, &(0x7f0000000600)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}], 0x20}, 0x4000000) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=0x0) ptrace$getenv(0x4201, r7, 0x100000000, &(0x7f0000000040)) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000640)={0x20}, 0x20) ioctl$FICLONE(r1, 0x40049409, r0) ioctl(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000b40)) [ 173.779365] binder: undelivered TRANSACTION_ERROR: 29189 13:52:08 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'fi%ter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:08 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:08 executing program 6: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x8, 0x4) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/null\x00', 0x10000, 0x0) flistxattr(r0, &(0x7f00000000c0)=""/4096, 0x1000) 13:52:08 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x4000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 173.902256] netlink: 65362 bytes leftover after parsing attributes in process `syz-executor3'. [ 173.911426] openvswitch: netlink: ufid size 94 bytes exceeds the range (1, 16) [ 173.918857] openvswitch: netlink: Flow set message rejected, Key attribute missing. 13:52:08 executing program 2: r0 = socket$inet6(0xa, 0x8080f, 0x4000108) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000000c0), 0xffffff9b) tee(r2, r1, 0x1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000140)=0x8a) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) getpgid(0xffffffffffffffff) ioctl(r0, 0x3, &(0x7f0000000180)="b362c5f8d533a811a4dbe51e11b783120055794b0485f5193945d3cb7c4c744b536d4b4f817c02633e7a780c3f696f7450d2e67dd39fc8bbda19321d7efa72a0d0f26e66d1fd2b4a996d795ebdfe3f96267ee0ee5b0c316a6f399177759a0e88eeefa49238d94876705b82f6628764904c21a7d319c26f27303ec51cdff1a3213a2ca2b23a9016c333929eb831604e") r4 = fcntl$getown(r1, 0x9) tkill(r4, 0x39) bind(r1, &(0x7f00000000c0)=@ax25={0x3, {"1cb1adb8584fe3"}, 0x1}, 0x80) read(r0, &(0x7f0000000340)=""/250, 0xfa) openat(r3, &(0x7f0000000040)='./file0\x00', 0x400000, 0x81) [ 173.950799] binder_alloc: binder_alloc_mmap_handler: 13053 20ffa000-20ffd000 already mapped failed -16 [ 173.976138] binder: BINDER_SET_CONTEXT_MGR already set [ 173.987813] binder: 13053:13057 ioctl 40046207 0 returned -16 [ 174.002333] binder_alloc: 13053: binder_alloc_buf, no vma [ 174.008129] binder: 13053:13071 transaction failed 29189/-3, size 0-0 line 2967 [ 174.028740] binder: send failed reply for transaction 314 to 13053:13057 [ 174.039779] binder: undelivered TRANSACTION_COMPLETE [ 174.045116] binder: undelivered TRANSACTION_ERROR: 29189 13:52:08 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x1000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:08 executing program 6: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8000, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="66643db3cc1f69879fe1d8ff8946fa4431cd0136bcfacc0a41c73f6d16ab804c73033eda48f35676d68858474cdfaed000235269b95a0c07b9e7b7d7b7c0fbf8d99c9c1e115e370494c91b11e22c7ade23597b5771c7317cba849acb748827ac25047eb977c04ff7649c3975a50c20afbd1b8f12ec4453c4f9a4412d36513e1a9fb89a0424300b9cf3bb205d4e09abca6e0c2124fff0cba9f5d2c50bb0f1fd3bea3e06dcb9f39c6eb2d03c1a70cd79f6ed07b8852b01aa64bfa3952cfbd42559", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR64]], @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 174.056295] netlink: 65362 bytes leftover after parsing attributes in process `syz-executor3'. [ 174.065199] openvswitch: netlink: ufid size 94 bytes exceeds the range (1, 16) [ 174.072644] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 174.128195] binder: undelivered TRANSACTION_ERROR: 29189 13:52:09 executing program 4: r0 = socket$inet6(0xa, 0xa, 0xffffffffffffffff) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000007c40)=[{{&(0x7f00000068c0)=@sco, 0x80, &(0x7f0000006a00), 0x0, &(0x7f0000006a40)}}], 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000100)=0x4c69, 0x165) read(r2, &(0x7f0000000180)=""/153, 0x447) 13:52:09 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'fi.ter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:09 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 174.323314] binder_alloc: binder_alloc_mmap_handler: 13098 20ffa000-20ffd000 already mapped failed -16 [ 174.333711] binder_alloc: 13098: binder_alloc_buf, no vma [ 174.333771] binder: BINDER_SET_CONTEXT_MGR already set [ 174.339439] binder: 13098:13103 transaction failed 29189/-3, size 0-0 line 2967 [ 174.352307] binder: undelivered TRANSACTION_ERROR: 29189 [ 174.352763] binder: 13098:13100 ioctl 40046207 0 returned -16 [ 174.360484] binder: send failed reply for transaction 317 to 13098:13100 [ 174.373590] binder: undelivered TRANSACTION_COMPLETE [ 174.378876] binder: undelivered TRANSACTION_ERROR: 29189 13:52:09 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000006c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) io_setup(0x5, &(0x7f0000000000)=0x0) r3 = eventfd(0x3) r4 = dup(r0) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x400000, 0x96) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x20800, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r8 = syz_open_dev$dmmidi(&(0x7f0000000740)='/dev/dmmidi#\x00', 0xb1d8, 0x329a00) r9 = eventfd2(0x200000000, 0x80001) io_submit(r2, 0x8, &(0x7f0000000840)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x80000001, r0, &(0x7f0000000040)="0e691b5f023ba286040aaf2b265d4b9af767088fafb7892c29ea72096cb47e4d59b8d7f575477499f33840807c082867cace8eae7862", 0x36, 0x58df, 0x0, 0x0, r3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x80000001, r0, &(0x7f00000000c0)="55d31313b69df15412f02c7598c7dfee62227315ab63392a2450a57d59459ecf7b504438ea39ad2edf53eacf47640fbc42d154308eed8b7f98611282ce1fb8a4a4940d207af629074d85bee905494b1d225faf14f4f5fb309204", 0x5a, 0xfffffffffffff000, 0x0, 0x1, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000200)="0104441547292cca", 0x8, 0xfffffffffffffff7, 0x0, 0x0, r4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x3, r1, &(0x7f0000000280)="c93e3e08fcf1f4f1f05d3b7330040a457b4cd8121493197fb5e65c1709c7a3dc49", 0x21, 0x79f0, 0x0, 0x0, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340)="d461432735b4aed1739a98fc0fcc526fad455cd7402c810efcbfc81d8530a7bf6feb6ed07fbf9ffc628ff8e80f1bcc1cc385600f82cd9f2969c45ead0048eb86efbbbc43136c046d18b2db8606f12f6a273410570aea5d7adae302e9dda02aa04adae69dbcfe8cbeb6ba9c1fca7703c2a4f09743e8f8db697b34aedc1ab3ea94db055916484e6d18b7", 0x89, 0xd2, 0x0, 0x0, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x5, r1, &(0x7f0000000480)="7144fd864194317388f7dfaa99df9588fe400774b5321088283ff3fb03200a55caf737d853d185d7ab140bfd4586e5eb59d3ffd57c91e03528417c4383322982cf3b102670926e86816586e2d5661186d5510c7d1baa2ef7899ba4db8c55620769710dbd7c411df954e10b8e48df0b6ec07025d4e454c5f39f2ebcb182c3d2cdb156040b09e3d6d80f6e56868eb9e35a1888809b10de19e67743e79e02b797ee80c4f4af57868bd1c2e567e83cdbc4f042bcc59833e6", 0xb6, 0x2, 0x0, 0x1, r7}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x3, 0xfffffffffffffff9, r0, &(0x7f00000005c0)="0388705e91a2486996d04f305f4ece0529aabcc6a8b3b7866d2ed2a10af5218f08808172e4c9c2c75d29c36a7049db819930aeed0fe72e2e35cf2fd7ec3b278d8f1af05c8d412ac8bc3e449df33602a44737adee953d8054686615543db78d16885c3b3a57e6c8970ae5570e61d5031991d90961f3a0ed04b140653e5532a9175afce97517f3c75925722e9e8bc5609fe4e86dff868c99cc7db29e7b99751702f88ef60b6974250efdc56885ca38c8b12d7c76bece89a0e914c9f86183aae97fdb01af018878b9728c94704e38fe5e87dfa34d6af57ff9c86a4bf0340a9955f27fbc3f809359018039eb9143b26a0af50b268dfa0f52025b", 0xf8, 0x80000000, 0x0, 0x0, r8}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f00000007c0)='\f', 0x1, 0x800, 0x0, 0x0, r9}]) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x3) 13:52:09 executing program 3: unshare(0x2000400) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x2c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x2, @empty, 0x3}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000480)={r3, 0x3, 0x10}, 0x2c3) write$P9_RXATTRCREATE(r1, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) ioctl(r0, 0x8914, &(0x7f0000000280)="0a5cc80700315f85714070") getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="73bf4f23a9543c41b1d5d17c7931ab606c16293c1640918a0183d0821aeace0dc046431c024c3cddd2ce6e3dbc9ca488dd80ec8729ad7d8cee2ba99211eee8942e9e283e94e4fa0000000000"], &(0x7f00000002c0)=0x4a) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000300)={r4, 0x80000000, 0x9}, 0x8) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000380)={0xb6b3, 0x1b, 0x80, 0x800, "2ed1b9888f6121545b7db3d9a40476ff503d5d2c32ab8ba4decada319584a7ac"}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f00000004c0)=""/137) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x1b98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0xea, @mcast1, 0x2}}, 0x3, 0x40}, &(0x7f0000000180)=0x90) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r6}, 0x8) epoll_create1(0x80000) 13:52:09 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306263, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:09 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) unshare(0x400) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/94) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 13:52:09 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x2000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:09 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'fiLter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:09 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}]) getgroups(0x1, &(0x7f0000000000)=[0xee00]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0x2b8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r3, r4, r5) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sync() io_destroy(r2) tee(r6, r1, 0x8, 0x0) vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0) [ 174.554738] binder: 13120:13124 ioctl c0306263 20000140 returned -22 13:52:09 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x40000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:09 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x250441, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000014c0)={0x2, 0x5, 0x3, 0x5, [], [], [], 0x4, 0x8, 0x3, 0x7fff, "aece78ff169a60e7c1afda10651ed819"}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a933d6659e164c990a0028e00", 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 174.601469] binder_alloc: binder_alloc_mmap_handler: 13120 20ffa000-20ffd000 already mapped failed -16 [ 174.623412] binder: BINDER_SET_CONTEXT_MGR already set [ 174.636785] binder: 13120:13124 ioctl 40046207 0 returned -16 [ 174.641511] binder_alloc: 13120: binder_alloc_buf, no vma 13:52:09 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'fil\ner\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 174.648388] binder: 13120:13146 transaction failed 29189/-3, size 0-0 line 2967 [ 174.667625] binder: send failed reply for transaction 320 to 13120:13124 [ 174.684216] binder: undelivered TRANSACTION_COMPLETE [ 174.689496] binder: undelivered TRANSACTION_ERROR: 29189 [ 174.715246] binder: undelivered TRANSACTION_ERROR: 29189 13:52:09 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/92, 0x5c}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x400000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000300)) finit_module(r0, &(0x7f00000002c0)='\'\x00', 0x3) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x10, 0x0, [0x2, 0x90, 0x3dcef49e, 0xfbcc, 0x3f, 0x0, 0x4c, 0x9, 0x80, 0x41b, 0xaee, 0x7, 0x0, 0x1, 0x6, 0x1]}, {0x5, 0x0, [0x5, 0x80000000, 0xfffffffffffffffe, 0x3, 0x9, 0x8, 0x2, 0x5, 0x9, 0x6, 0x4d, 0x5, 0x7f, 0x6, 0x8, 0x2]}], r2, 0x1, 0x1, 0x90}}, 0x20) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r3, 0xc0305710, &(0x7f0000000100)) 13:52:09 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025c3f0a00145f8f764070") r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000112000)={0x0, 0x5, 0x5}, 0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x184, r3, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x21fc}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcbbc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5538}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x89}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000340), 0xfffffffffffffe72, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x18, 0x20000032, 0x1ff, 0x0, 0x25dfdbff, {0x17}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000000)={0x8, 0x3000}) 13:52:09 executing program 6: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}}, {{@in=@rand_addr, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0x3c) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000907800000000e00180000000000000000000"], &(0x7f0000000040)) write$P9_RLOPEN(r1, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x40, 0x3, 0x1}, 0xfff}}, 0x18) 13:52:09 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x4]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r1, 0x100, &(0x7f00000001c0)="0270") listen(r0, 0x100000000009) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000180)=0xc) accept(r0, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)) listen(r0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x210000, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000080)) 13:52:09 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x54, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x109800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000000c0)={0x7, 0x2, 0x100}) r2 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[]}}, 0x0) write(r0, &(0x7f0000000080)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000180)={r2}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e23, @multicast2}}, 0x9, 0xffffffffffffff01, 0x5cb0, "713fc96298a665a9e17ade1d7951fd84d4d94758f1224c1ffffeec3d9e8a954a1b945d87d0f273bf18686e75cf9e2e605454ee6f9b5ab8de9c2bad3e7f70c9b847f8c6eb5dea0cc90ceae67d00c7228c"}, 0xd8) 13:52:09 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'fil%er\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:09 executing program 6: r0 = socket$inet6(0xa, 0x80000, 0x40000000800001) ioctl(r0, 0x4, &(0x7f0000000280)="025cc80700145f8f764070") fadvise64(r0, 0x0, 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240)=0x990, 0x4) sendmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000040)=@can, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/198, 0xc6}], 0x1, 0x0, 0x0, 0x9}, 0x40000000) [ 174.929182] binder: 13183:13190 got new transaction with bad transaction stack, transaction 323 has target 13183:0 [ 174.939927] binder: 13183:13190 transaction failed 29201/-71, size 0-0 line 2879 [ 174.953873] binder_alloc: binder_alloc_mmap_handler: 13183 20ffa000-20ffd000 already mapped failed -16 13:52:09 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0xfffffffffffffffd) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000002c0)={{0x9, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [], {r1, r2+30000000}}) [ 174.979135] binder: BINDER_SET_CONTEXT_MGR already set [ 174.988118] binder: 13183:13190 ioctl 40046207 0 returned -16 [ 175.018110] binder_alloc: 13183: binder_alloc_buf, no vma 13:52:09 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x2]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 175.023824] binder: 13183:13206 transaction failed 29189/-3, size 0-0 line 2967 [ 175.033215] binder: send failed reply for transaction 323 to 13183:13190 [ 175.044564] binder: undelivered TRANSACTION_ERROR: 29189 13:52:09 executing program 3: r0 = semget(0x0, 0x1, 0x20) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000000)=""/3) r1 = memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') readv(r2, &(0x7f0000002240)=[{&(0x7f00000022c0)=""/104, 0x68}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x2) 13:52:09 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'filt\nr\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 175.073498] binder: undelivered TRANSACTION_ERROR: 29189 13:52:09 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x76, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:09 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x8000000000, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000280)={0x8}, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x82) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e21, @broadcast}}, 0x2, 0x3, 0x1ffc000, "3481a440eec96445aef32b5fbf44b194e0496729ea86001969a3517cea4bea2ae31215f325158177e8d1b96739956762b9cc8d295b10bc749649ef2996bb3cec4318ec7d75a3c66551641de93e4618e1"}, 0xd8) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000003c0)) 13:52:09 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 175.177529] binder: 13223:13225 got new transaction with bad transaction stack, transaction 327 has target 13223:0 [ 175.188183] binder: 13223:13225 transaction failed 29201/-71, size 0-0 line 2879 13:52:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x7fffffff) writev(r0, &(0x7f0000000440)=[{&(0x7f00000004c0)="18", 0x1}], 0x1) sched_yield() [ 175.282069] binder_alloc: binder_alloc_mmap_handler: 13223 20ffa000-20ffd000 already mapped failed -16 [ 175.307608] binder: BINDER_SET_CONTEXT_MGR already set [ 175.349188] binder: 13223:13225 ioctl 40046207 0 returned -16 [ 175.356644] binder_alloc: 13223: binder_alloc_buf, no vma [ 175.362336] binder: 13223:13251 transaction failed 29189/-3, size 0-0 line 2967 [ 175.369339] binder: send failed reply for transaction 327 to 13223:13225 [ 175.394356] binder: undelivered TRANSACTION_ERROR: 29189 [ 175.441175] binder: undelivered TRANSACTION_ERROR: 29189 13:52:10 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) socket$inet6(0xa, 0x7, 0x2) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl(r2, 0x8912, &(0x7f0000000080)="02e6c80700145f8f764070") r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={r1, 0x2}, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), r4, r3}}, 0x18) unshare(0x400) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1}, &(0x7f0000000180)=0x8) 13:52:10 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'filt%r\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:10 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:10 executing program 2: r0 = msgget$private(0x0, 0xfffffffffffffffe) msgrcv(r0, &(0x7f0000000080)={0x0, ""/83}, 0x30f, 0x4, 0x3000) r1 = msgget$private(0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400400, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0x0, 0x2, 0x5, 0x7f, 0x6fb}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001640)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000001740)=0xe8) getresgid(&(0x7f0000001780), &(0x7f00000017c0)=0x0, &(0x7f0000001800)) lchown(&(0x7f0000001600)='./file0\x00', r3, r4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000140)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) sendmsg$nl_xfrm(r2, &(0x7f00000015c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000013c0)=@getsa={0x1fc, 0x12, 0x200, 0x70bd29, 0x25dfdbfb, {@in6=@ipv4={[], [], @rand_addr=0x9}, 0x4d4, 0xa, 0x32}, [@extra_flags={0x8, 0x18, 0xffffffffffff239a}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd2d, 0x70bd25, 0x70bd2b, 0xa70e}}, @algo_auth_trunc={0x8c, 0x14, {{'rmd256\x00'}, 0x1f8, 0xa0, "37f83560a4f3824a30c0af0d65e733387cebf1b43c179e1b7d9556d56b0374676d2768a876b2a41a7af7cf6ca01bd0e4295fec6abcbc084cc1514637cfa13e"}}, @sec_ctx={0x3c, 0x8, {0x35, 0x8, 0x1, 0x6, 0x2d, "d2684c96e7e1152af5428d374b2605bbb20b325526d493d3ca5d430113563240eb8d2fe95d737a496fc64ae32d"}}, @coaddr={0x14, 0xe, @in=@multicast2}, @policy={0xac, 0x7, {{@in=@remote, @in6=@mcast2, 0x4e23, 0xfff, 0x4e21, 0x4, 0xa, 0xa0, 0x20, 0x33, r5, r6}, {0x80000000, 0x3ff, 0x8, 0x6ce, 0x5, 0x1, 0x5, 0x8ad2}, {0x4a9, 0x4f55, 0x44f, 0xfffffffffffffffd}, 0x1, 0x6e6bb6, 0x0, 0x1, 0x3, 0x3}}, @address_filter={0x28, 0x1a, {@in=@loopback, @in=@rand_addr=0x4, 0xa, 0x1000, 0xd8}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) msgsnd(r1, &(0x7f00000003c0)={0x3, "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"}, 0xfd1, 0x0) msgrcv(r1, &(0x7f0000000240)={0x0, ""/79}, 0xfc99, 0x0, 0xa4a3ad41a879dde0) 13:52:10 executing program 3: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x5) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x8000, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000180)={0x6}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x70, 0x2, 0x446, 0xffffffff, 0x2, 0x0, 0x8, 0x8200, 0x1, 0x10000, 0x5, 0x2, 0x8, 0x5, 0x5, 0x2, 0x800, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 0xe999, 0x5, 0x6e3, 0x5, 0x3, 0x9, 0xe99, 0x893, 0x5, 0x3, 0x8001, 0x0, 0x7, 0x0, 0x800, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000080), 0xa}, 0x60, 0x44, 0x280000000, 0x7, 0xffffffff, 0x7, 0x4}) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 13:52:10 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x3cb, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:10 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_stats={0xf}}) close(0xffffffffffffffff) 13:52:10 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x8000000000002b) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001140)="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", 0x8c}], 0x1000000000000151, &(0x7f0000000080)}, 0x0) 13:52:10 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f0000000240)={&(0x7f00000003c0)={0x5, 0x400, 0x8, {}, {r4, r5/1000+10000}, {0x2, 0x10000, 0x0, 0x9}, 0x1, @can={{0x1, 0x6, 0x6, 0x8a44}, 0x0, 0x0, 0x0, 0x0, "a306f25d04f0b59b"}}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000800) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f0000000280), 0x400000000feb) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@nfc, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123}], 0x0, &(0x7f0000000680)=""/108}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/164}], 0x3c3}, 0x3}], 0x1b1, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x204000, 0x20) sendfile(r1, r2, &(0x7f0000000040), 0x400000000000000) [ 175.764861] binder: 13275:13278 got new transaction with bad transaction stack, transaction 331 has target 13275:0 [ 175.775578] binder: 13275:13278 transaction failed 29201/-71, size 0-0 line 2879 [ 175.781430] sctp: [Deprecated]: syz-executor7 (pid 13283) Use of int in maxseg socket option. [ 175.781430] Use struct sctp_assoc_value instead 13:52:10 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000100)={0x322, 0x0, 0x200, 0x6}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0f09650f01bfa6c30f070f01d10f20c06635000000400f22c00f20c06635020000000f22c0baf80c66b8e817458166efbafc0c66ed6766c7442400f2ffffff6766c7442402fd26b3e46766c744240600000000670f011424baf80c66b86e02978e66efbafc0cb80900efba4300b80900ef", 0x71}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) mmap$binder(&(0x7f0000fe9000/0x4000)=nil, 0x4000, 0x4, 0x100010, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000002c0)={0x0, 0x0, @ioapic}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="f2410f1b1c74460fc71a66430f3881a00a0000000f20e035004000000f22e066ba6100b00deeb805000000b9a82e00000f01d966ba4000ed663ed9f7c442c1aac6c4c1245ce4", 0x46}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0xc018ae85, &(0x7f0000000240)={0x10004}) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000500)) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f00000000c0)={0x9, 0xb024, 0x1}) 13:52:10 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'filte\n\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 175.880763] sctp: [Deprecated]: syz-executor7 (pid 13289) Use of int in maxseg socket option. [ 175.880763] Use struct sctp_assoc_value instead [ 175.886176] binder_alloc: binder_alloc_mmap_handler: 13275 20ffa000-20ffd000 already mapped failed -16 [ 175.911385] binder: BINDER_SET_CONTEXT_MGR already set [ 175.923982] binder: 13275:13278 ioctl 40046207 0 returned -16 13:52:10 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 175.985301] binder_alloc: 13275: binder_alloc_buf, no vma [ 175.991062] binder: 13275:13314 transaction failed 29189/-3, size 0-0 line 2967 [ 176.004538] binder: send failed reply for transaction 331 to 13275:13278 [ 176.016669] binder: undelivered TRANSACTION_ERROR: 29189 13:52:10 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x14480, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0x49b) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r1, 0x18, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8710}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x9c}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000240)={@dev}, &(0x7f0000000280)=0x14) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000002c0)={0x8, 0x3, 0x2, 0x100000000}, 0x10) ppoll(&(0x7f0000000300)=[{r0, 0x2001}], 0x1, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={0x2}, 0x8) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000003c0)={0x7, 0x3, 0x40, 0x7fff}, 0x10) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000400)) write$FUSE_INTERRUPT(r0, &(0x7f0000000440)={0x10, 0x0, 0x1}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa0, r1, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x691}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000740)={0xb, 0x10, 0xfa00, {&(0x7f0000000600), r2, 0x200}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000780)={{0x101, 0x4}, 'port0\x00', 0x1, 0x20c00, 0x100000001, 0x80000001, 0x7, 0x0, 0x100, 0x0, 0x2, 0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000840)={0x2, 0x10, 0x1, r0}) getsockname$netlink(r0, &(0x7f0000000880), &(0x7f00000008c0)=0xc) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000900)) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000940)={0x2, 'team0\x00'}, 0x18) r5 = getpid() fcntl$setownex(r3, 0xf, &(0x7f0000000980)={0x1, r5}) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x16fb) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000b00)={&(0x7f00000009c0), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x88, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5e5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x7ff}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x14}, 0x90) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000bc0)={0x16, 0x98, 0xfa00, {&(0x7f0000000b80)={0xffffffffffffffff}, 0x1, r2, 0x30, 0x0, @in6={0xa, 0x4e23, 0x7fffffff, @remote, 0x100000001}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000c80)={0x11, 0x10, 0xfa00, {&(0x7f0000000b40), r6}}, 0x18) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000cc0)={0x4c84, {{0x2, 0x4e20, @loopback}}}, 0x88) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000d80)={0x15, 0x110, 0xfa00, {r2, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}, @in={0x2, 0x4e20, @multicast1}}}, 0x118) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000004f40)={'bcsf0\x00', &(0x7f0000000ec0)=@ethtool_per_queue_op={0x4b, 0x100000000, [0x70, 0x3, 0x200, 0x8, 0x8e, 0x1, 0x7ff, 0xffff, 0x800, 0x4, 0xffff, 0x7, 0x7, 0x3ff, 0x7fffffff, 0x95, 0x4, 0x9, 0x7, 0x4, 0x3, 0x3, 0x622c, 0x80000001, 0x9, 0x3, 0x9, 0x401, 0xf7, 0x7d, 0x0, 0x8, 0x5, 0x5, 0x1d, 0x2c51, 0x29, 0x81, 0x81, 0x9, 0x5, 0x3ff, 0x10000, 0xff, 0x0, 0x95bbc2a, 0x9b, 0x400, 0x3, 0x145e000000, 0x7, 0x4, 0x81, 0x4, 0xa9, 0x7, 0xffffffffffffff7f, 0x400, 0x6, 0x3, 0x1000, 0x3, 0x9, 0x1, 0x9, 0x2, 0xfffffffffffffff7, 0x1, 0x200, 0xf338, 0x101, 0x20, 0x4, 0x3, 0x4, 0x24a, 0x2, 0x7, 0x3, 0x4, 0x1, 0x8, 0xfffffffffffffff8, 0x1ff, 0x415, 0xb99b, 0x6, 0x800000000000, 0x9, 0x0, 0x6, 0x7, 0x6, 0xcb78, 0x7f, 0x3f, 0x4, 0x125, 0x5, 0x12, 0x7, 0x7, 0x2, 0x29, 0x9, 0x101, 0x9, 0x100000001, 0x101, 0x401, 0xa257, 0x1, 0x7, 0x7, 0x3, 0x2, 0x5, 0x65f, 0x2, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x7, 0x7fff, 0x7, 0x7, 0x6, 0x800, 0x100, 0xe283, 0x400, 0x4, 0x8, 0x9619, 0x100, 0x4, 0x3, 0x5, 0x8000, 0x3fd2, 0x9, 0x0, 0x80000000, 0x800, 0x2, 0x5, 0x7fffffff, 0x4, 0x9, 0x40, 0x0, 0xffffffff, 0x5, 0x10001, 0x800, 0x80000000, 0x9b69, 0x9, 0x7fffffff, 0x1, 0x800, 0x8, 0x6, 0xee5d, 0x0, 0x4, 0x8, 0xd74, 0x41c0, 0xffffffff80000001, 0x9, 0x7fff, 0x8000, 0x9, 0xfb, 0x73, 0x6, 0x7ff, 0x5, 0x2, 0x7d, 0x2, 0x16f, 0x4, 0x6, 0x6, 0x5, 0x3, 0x6, 0x4, 0xa770, 0x7, 0x64, 0x8, 0x8000000000000000, 0x1, 0x9, 0x5, 0x0, 0xffffffffffffff41, 0x0, 0x401, 0x6, 0xfffffffffffffff7, 0x1, 0x1, 0xffff, 0x10000, 0x3a, 0x2, 0x9, 0x7bc, 0x4, 0x17bd, 0xffffffffffff77d4, 0x41, 0x8000, 0x2e, 0x8001, 0x1, 0x3, 0x9, 0x1, 0x1ff, 0x3, 0x8, 0x8, 0x7, 0x8, 0x3, 0x9, 0x38, 0x7f, 0x1, 0x2, 0x3, 0x81, 0x1f, 0x856a, 0x8000, 0x6, 0x100000000, 0x4, 0x952, 0xc27a, 0x7fff, 0x69a, 0x43d9c393, 0x0, 0x8d4, 0x100000000, 0x29, 0x0, 0x12000000, 0x1ff, 0x5, 0x1000, 0x3f, 0x8, 0xc3e, 0x0, 0x40, 0x1, 0x236, 0x8000, 0x9, 0x8, 0x8, 0x1, 0x1, 0x9, 0x4000, 0x3, 0x7ff, 0x0, 0x40, 0x5, 0x3, 0xb7c7, 0xb95d, 0x100000000, 0x4, 0x3, 0x2, 0x8000, 0xffffffff, 0x7, 0x4, 0xfffffffffffff44c, 0x6, 0x1, 0x9, 0x4, 0x7014, 0x3b, 0x3, 0x1821e807, 0x1ff, 0x100, 0x100000001, 0x6, 0xff, 0x1, 0x10000, 0xfffffffffffffff8, 0x0, 0x7, 0x800, 0xc07, 0x8000, 0xe21, 0x4, 0xffffffffffff8001, 0x10000, 0xee6, 0xf137, 0x0, 0x4, 0x2, 0x5, 0xffffffff00000001, 0x5f8, 0x0, 0xf358, 0x8000, 0x7, 0x469, 0x10001, 0x1, 0x0, 0xffff, 0x200, 0x0, 0x4, 0x1f, 0x203d, 0x7, 0x6, 0x81, 0x4, 0x3, 0x3ff, 0x0, 0x100000001, 0x7, 0x6, 0xe224, 0x100, 0x101, 0x8, 0x8, 0xbb54, 0xffffffff, 0x8, 0x9, 0x3, 0x101, 0x2000000, 0x200, 0x3c7, 0x21ce, 0x355, 0x7ff, 0x3, 0x3, 0x5, 0x8, 0x7, 0x4, 0x5, 0x101, 0xdf2, 0x7, 0x40000000000, 0x0, 0x5b312fec, 0x7, 0x20, 0xa30, 0x9c, 0x7f, 0x3f, 0x7fff, 0xf31, 0xfffffffffffff800, 0x5, 0x854, 0x81, 0x7, 0x6, 0x200, 0x6, 0x3, 0x2, 0x401, 0x1000, 0x6, 0x1, 0x5, 0x7, 0x8001, 0x3, 0x9, 0x4, 0x100000000, 0x1, 0x4, 0x3, 0x1, 0x3d9a, 0x6c4, 0x800, 0x1, 0x98, 0x9, 0x101, 0x5, 0x7, 0x8, 0x7, 0x9, 0x200, 0x1000, 0x10000, 0x200, 0x4, 0x8000, 0x10001, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x6, 0x7fffffff, 0x6a39, 0x6, 0x2, 0x1f, 0x1b8, 0x1, 0x7, 0x7ff, 0x7, 0x8, 0x0, 0x417, 0x4, 0x0, 0x2, 0x8001, 0x9, 0x3f8, 0x2, 0x7, 0x4, 0x7, 0x10000, 0xffffffffffffffff, 0x60e, 0x0, 0x2, 0x0, 0x7fff, 0x7, 0xfffffffffffffff8, 0x1000, 0xffffffff, 0x2, 0x7fff, 0x60000, 0xe7, 0x1, 0x5, 0x9a, 0x9, 0x47, 0x9, 0x5, 0x7f, 0x5, 0x5, 0x1f, 0x1, 0x1, 0x1f, 0x5, 0x7, 0xff, 0x67, 0x1000, 0x1, 0x5, 0x9, 0x5a, 0x9, 0x8, 0x100000001, 0x0, 0x3, 0x3, 0x6, 0x100000000, 0xffffffffffffffff, 0x1, 0xfffffffffffffffe, 0x5, 0x10000, 0x2, 0xfff, 0x2, 0x3699, 0x32af, 0x9, 0xfff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffffff7, 0x40, 0x7f, 0x0, 0x1, 0x3, 0xbb2c, 0xffff, 0x2, 0x1, 0x3, 0x800, 0x100, 0x5, 0xffff, 0x7f, 0x401, 0x8001, 0x81, 0x6, 0x80, 0x216, 0x7, 0x1, 0x4, 0xf4d, 0x2, 0x6, 0x7f, 0x2, 0x8001, 0xfff, 0x1, 0xb1e0, 0x800, 0x1, 0x1, 0xfffffffffffffff8, 0x5, 0x8c9, 0xff, 0xfffffffffffffff9, 0x8, 0x10000, 0x80000000000000, 0x1000, 0x5, 0xffffffffffffff76, 0x6, 0x7, 0x4, 0x7fffffff, 0x0, 0x7f, 0x2, 0xffffffffffffffa0, 0x8, 0x3ff, 0x6, 0x9, 0x7ff, 0x800, 0x1000, 0x101, 0x7fff, 0x7f, 0x5, 0x80, 0xf3f, 0x9, 0x100000, 0x80000000, 0xff, 0x4, 0xfffffffffffffffc, 0x2e8000, 0x9, 0x380, 0x7fff, 0x0, 0x7, 0x8, 0x8, 0x3, 0x80000001, 0x2, 0x9, 0x6b8, 0x4, 0x40, 0x7, 0x7, 0x4714, 0x4, 0x4, 0x8, 0x776d, 0x0, 0x8, 0x100, 0x7, 0xffff, 0x8, 0x1000, 0xb4a, 0x9, 0x401, 0x1, 0x2, 0x8, 0x55, 0x74, 0x7, 0x1, 0x4d, 0x8, 0x35d4, 0x1, 0x7ff, 0xfff, 0x7b, 0x5, 0x7, 0x5, 0x5, 0x9, 0x9d, 0xfffffffffffffffb, 0x1, 0x6, 0x5, 0x9, 0x8, 0x4, 0x5, 0x3, 0x5, 0x6, 0x2, 0x5e0, 0x2, 0x9, 0x6, 0x0, 0x2, 0x54, 0x6, 0xfffffffffffffffd, 0x9, 0x9, 0x3, 0x100000000, 0x1f, 0x80, 0x8000, 0xe2, 0xffffffffa271bbf9, 0x80, 0x0, 0xfc6, 0x9, 0x40, 0x2d0ca9d5, 0x4, 0x7, 0xbc0, 0xd32, 0xffff, 0x8, 0x7fff, 0xfffffffffffffff8, 0xbe, 0x7, 0x100, 0x3ff, 0x3f, 0x1000, 0x0, 0x1ff, 0x6, 0x400, 0x2e9e, 0x3, 0x0, 0x8, 0xfff, 0x5, 0xe4fd, 0xa2, 0x9, 0x80, 0x3, 0x800, 0x8, 0x9, 0x2, 0x20, 0x0, 0x7f, 0x1, 0x0, 0x9, 0x9, 0x1, 0x9, 0x5, 0x6, 0x7, 0x9, 0x6, 0x7, 0x4, 0x3, 0x2, 0x8000000, 0x1, 0x80000000, 0x4, 0x8000, 0x4, 0xf6ef, 0x1000, 0x4, 0x4, 0x9, 0x60, 0xc52, 0xfff, 0x7, 0x684, 0x6, 0x4, 0x7e9, 0x8, 0x100, 0x1, 0x5, 0x8001, 0x6, 0x8, 0x48, 0x6, 0xae, 0xf840, 0x4, 0x7, 0x0, 0xc0eb, 0x52, 0x8, 0xffff, 0x4, 0x2d35, 0x7, 0x1, 0x4, 0x8, 0x7, 0xac4, 0x2, 0x1000, 0x1f, 0xffffffffffff1013, 0xa8, 0xffff, 0x3, 0x1d21cd88, 0x1208, 0xe4c, 0x8, 0x20, 0x0, 0x7, 0x0, 0x81, 0xfff, 0x1, 0x6, 0x14fe, 0x8, 0x20, 0x1, 0x8, 0x40, 0x1, 0x2, 0x0, 0x9, 0xfff, 0x2, 0x0, 0x2000000000, 0xe1, 0x7ff, 0xffffffff, 0x8, 0x4, 0x8, 0xffffffffffffffe1, 0x7fffffff, 0x0, 0xfffffffffffffffa, 0x1, 0x100000000, 0x2, 0x8, 0x10000, 0xfffffffffffffffa, 0x400000, 0x3e, 0xd412, 0x3ff, 0x1, 0x80, 0x80000000, 0x5, 0x5, 0x3, 0x9, 0x9, 0x8001, 0x2, 0xb0f3, 0x9, 0x8, 0x7, 0xff, 0x5, 0x4, 0xfffffffffffffffa, 0x80000001, 0x5, 0x1ff, 0x8, 0x3, 0x80000001, 0x1750, 0x1, 0xad9a, 0x80000000, 0x101, 0x85, 0x100000001, 0x4, 0x46b0, 0xb9, 0x7, 0x7, 0xa068, 0x1ff, 0xffc000000000000, 0xffffffffffffffe1, 0x7, 0x0, 0x7, 0x7, 0x5, 0x1f, 0x2, 0x2, 0x7f, 0x100000001, 0x0, 0x80000000, 0x6c4, 0x7, 0x101, 0x9, 0x9, 0x7fffffff, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x40, 0xfffffffffffffff8, 0x3, 0xfff, 0x9, 0xcd6, 0x1, 0x76, 0x32a, 0x80000001, 0x0, 0x3, 0x100, 0x1000, 0x8000, 0x8, 0x3, 0x9, 0x5, 0x4, 0x101, 0x6, 0x9, 0x80000000, 0x80000001, 0x0, 0x7fffffff, 0x7, 0xfffffffffffffffe, 0x2, 0x3, 0xfff00000000, 0x8, 0x9, 0x3ff, 0x5, 0x0, 0x9, 0x5, 0x401, 0x1f, 0x4, 0x3, 0x3, 0x5, 0x6, 0x1f, 0x986, 0x0, 0x0, 0x2, 0xdf4, 0x10000, 0x2, 0x9b, 0x1, 0x0, 0x2, 0xfffffffffffffff7, 0x6, 0x80000000, 0x5, 0x5, 0x2, 0x3, 0x1, 0x40, 0xb1, 0x3, 0x2b, 0x8, 0x1, 0x51b, 0x560, 0x2, 0xda72, 0x8, 0x7, 0x401, 0x9, 0x8, 0xfffffffffffffffd, 0x5, 0x7fff, 0x20, 0x5, 0x7, 0x1, 0xa160, 0x10000, 0x4, 0x9, 0xfffffffffffffbff, 0x1, 0x7, 0x1, 0x2, 0x9d, 0x5, 0x7f, 0x100000000, 0x5, 0x4, 0x9, 0x7f, 0xa159, 0xff, 0xffffffffffff7fff, 0xea, 0x0, 0x8, 0xff, 0x3, 0x1ff, 0x7716, 0x6, 0x9, 0x1f, 0x8000, 0x7f, 0x7, 0x5, 0x6, 0x0, 0x5, 0xdbc, 0x100, 0x2, 0x6, 0xfffffffffffffff7, 0x200, 0x1, 0x3, 0xe5, 0x9, 0x2, 0xc19, 0x0, 0x39e, 0xe88, 0x8001, 0x8, 0x6, 0x2, 0x7, 0x0, 0xfffffffffffffff9, 0x2, 0x40, 0x40, 0x2, 0x9, 0x7fffffff, 0x9, 0x9, 0x8001, 0x9, 0xf6, 0x7, 0x908, 0x4, 0x3, 0xfff, 0x1, 0x10001, 0x1, 0x10000, 0x7576, 0x8, 0x100, 0x6, 0x6000000, 0x80000000, 0x3f, 0x2, 0xff, 0xde39, 0x101, 0x200, 0x5, 0x2d09, 0xa5, 0x7ff, 0x8, 0xfff, 0x5, 0x100000000, 0xf8, 0x0, 0xffffffffffffff7f, 0x6, 0xfffffffffffffffe, 0xc00000000000, 0xfffffffffffffff7, 0x0, 0x1, 0x80000000, 0x7, 0x8, 0x3, 0x5, 0x6, 0x7, 0x400, 0x401, 0x8, 0x81, 0x5, 0x4, 0x7f, 0x67, 0xbc64, 0x1a2, 0x2, 0x80000000, 0x0, 0x1e, 0x8001, 0x3, 0x31, 0x7, 0x3, 0x7fff, 0x5, 0x4, 0x8, 0x0, 0x14b, 0x37, 0x0, 0x3, 0x5, 0x1f, 0x8000, 0x9, 0x80, 0x9, 0x10001, 0x7, 0x8, 0x3, 0x10001, 0x4, 0x4, 0x81, 0x2, 0x657, 0x6b1, 0xa1c7, 0x3, 0x6, 0x7fffffff, 0x3, 0xffff, 0x1, 0x1, 0x5, 0x6, 0x1, 0x200, 0xffe0000000000000, 0xfffffffffffffffb, 0xffffffffffffffc0, 0x7f, 0x5, 0x1, 0x8, 0x9, 0x8, 0x10001, 0xffff, 0x0, 0x6, 0x8, 0x97c2, 0x6, 0x7, 0x7d3a, 0x80000001, 0x5, 0x5, 0x2, 0x1, 0x101, 0xea, 0x200, 0xfffffffffffffffa, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x2, 0x80000000, 0x9, 0x60000000, 0xb9, 0xfffffffffffffff9, 0x3, 0x8, 0x5, 0x6, 0x5, 0x0, 0xfffffffffffff06a, 0x8001, 0x8, 0x80, 0xff, 0x2, 0x9, 0xfffffffffffffff8, 0x101, 0x2, 0x6, 0x9, 0x3f, 0x1ff, 0x9, 0x3, 0x6, 0x7f, 0x3f, 0x8, 0x40004000, 0x7fff, 0x70, 0x4, 0x4, 0x5, 0x1ff, 0x8000, 0x8, 0x8, 0x7f, 0x8, 0x7, 0x8, 0x5, 0x0, 0x1, 0x4, 0x6, 0x6, 0x1, 0xe0c, 0x6, 0x5, 0x3, 0x401, 0x80000000, 0x8001, 0xa59c, 0x9, 0x9, 0x3ff, 0x3, 0x8, 0x4, 0x9, 0x1, 0x5, 0x3, 0x6, 0x1, 0x3, 0x3, 0x8, 0x558, 0x200, 0x9c, 0x400, 0x100, 0x800000000, 0xffff, 0x200, 0x6, 0x5, 0x800, 0x768, 0x4, 0xe09, 0x85, 0x5, 0x22aa, 0x80, 0x0, 0x8001, 0x5, 0x2, 0x820a, 0x7d, 0x0, 0x1d31, 0x7fffffff, 0x304, 0x1, 0x9, 0x7e8, 0x0, 0x800, 0x2, 0x0, 0x6, 0x6, 0x100000001, 0xd6, 0x401, 0x401, 0xfff, 0x4, 0x9, 0x5, 0xd3, 0x7, 0x5, 0x9, 0x0, 0xffffffffffffff2c, 0x2, 0x3, 0x7, 0xffffffff80000001, 0x431b, 0x12c, 0x800, 0x8001, 0x6, 0x400, 0x8, 0x1, 0x100000001, 0x1, 0xfa, 0x7, 0x5, 0x8, 0x8, 0x6, 0x2, 0xffff, 0xb059, 0x80, 0x10001, 0x7, 0x5, 0x0, 0x1000, 0x10000000, 0x10000, 0xfff, 0xffff, 0x3, 0xff, 0x6, 0xaf1, 0x40, 0x10000, 0x800, 0x3, 0xef, 0x81, 0x5, 0x101, 0x1, 0x9, 0x81, 0x7000, 0x2, 0x9, 0x4, 0x4, 0x6, 0x20, 0x80, 0x1000, 0x2, 0x25, 0x7, 0x8, 0x9, 0x0, 0x1, 0x1, 0x7, 0x3f78, 0x69ac, 0x3, 0xfc7f, 0x5, 0x0, 0x0, 0x100000001, 0x0, 0x10000, 0x0, 0x95a1, 0x9, 0x4, 0xfffffffffffffffd, 0x12000000, 0x5, 0xcc2, 0x0, 0x8, 0x9, 0xffffffffffffff00, 0xb7, 0x8000, 0x7, 0x8, 0x2, 0x1, 0x8, 0x6, 0x8, 0x5, 0x7fff, 0x0, 0x3f, 0x1, 0x10000, 0x8001, 0x400, 0xfb75, 0x1, 0x31e, 0x1f, 0x9, 0x65, 0x101, 0x6, 0x4ed, 0x800, 0x3, 0x3c9770e0, 0x0, 0xfdc, 0x8, 0x200, 0x7, 0x1000, 0x0, 0x6, 0x81, 0x1, 0x1, 0x92, 0x97a, 0xaa, 0x401, 0x101, 0x1f, 0xdd, 0x8, 0x101, 0x180, 0x800, 0xcc, 0x3f, 0x20, 0xc04a, 0xffffffffffffffe1, 0x7, 0x7, 0x4, 0x4f41, 0x2, 0x1996, 0x6, 0x4, 0x5d9, 0x41a9ba10, 0x4e7d, 0x7, 0x45, 0x98e1, 0x2, 0x0, 0x99f, 0xef, 0x3, 0x2, 0x2, 0x8, 0x5, 0x7, 0x971, 0x0, 0x6, 0x34a, 0x4b36, 0x6, 0x80000001, 0x80000000, 0xb96, 0x101, 0x3, 0x0, 0x6, 0x9, 0x100000000, 0x5, 0x80000001, 0x0, 0x7, 0x9, 0x4edb, 0xc8, 0x4, 0xa63, 0x6, 0x91d7, 0x8000, 0x7, 0xf92, 0x10e, 0x200, 0xfffffffffffffffc, 0x100000000, 0x1ff8, 0x6, 0x4, 0x3, 0x8001, 0x4f, 0x7fffffff, 0x73, 0x2, 0x1, 0x1, 0xffffffffffffffe1, 0x400000000000000, 0x3ff, 0x1000, 0x3, 0x4, 0x10000, 0xc46, 0x6, 0x4, 0x0, 0xfffffffffffffffa, 0x41, 0x2, 0x9, 0x8, 0xfff, 0x7, 0x4, 0x20, 0x9, 0x80, 0x6, 0x9, 0x3, 0x8, 0x80000001, 0x1, 0x808000, 0x8, 0x3, 0x3ff, 0x1, 0xe6ce, 0x4, 0x4, 0xbf, 0x1, 0x9, 0x0, 0x4, 0x800, 0x7f, 0xffffffffffffff80, 0x2, 0xfffffffffffffffc, 0x4, 0x7ff, 0x2, 0x80, 0xa3, 0x0, 0x400, 0x5, 0xfffffffffffffffd, 0x8, 0x3, 0x3a, 0xffffffffffff5759, 0x4, 0x0, 0x0, 0x4, 0xcffd, 0x9, 0x71e2, 0x0, 0x1, 0x6, 0x1000100, 0x0, 0x9, 0xf84e1e6, 0x10001, 0xedf, 0x5, 0x3, 0x100000000, 0x7, 0x32f, 0x7, 0x20, 0x1, 0x6, 0x3, 0x3da, 0x8, 0x5, 0x3, 0x1, 0x3, 0x3, 0x6, 0x3, 0x3ff, 0x100, 0x2, 0x6, 0xff, 0x2, 0x5, 0x9, 0x10000, 0x3, 0x3, 0xfffffffffffffffb, 0x0, 0x58b, 0x9, 0xd5f0, 0x1, 0x1f, 0x1ff, 0xe0fa, 0x40, 0x100, 0x126, 0x0, 0x7, 0x716b, 0x5, 0x4a91, 0x1, 0x800, 0x27f, 0x7, 0x0, 0x7f, 0x6, 0x1, 0x7, 0x2, 0x3ff, 0x40, 0x8, 0x8, 0x9, 0x7f, 0x3d, 0x8000, 0x6, 0x7, 0xffff, 0x1, 0x2, 0x101, 0x1, 0x10000, 0x9, 0xffff, 0x7, 0xd11, 0xffffffff, 0x6, 0xfffffffffffffff7, 0x8, 0x7, 0x2, 0x0, 0x5, 0x3, 0x9, 0x5, 0x0, 0x1, 0x3, 0xffffffff00000000, 0x10000000000000, 0x704, 0x3, 0x3, 0x101, 0x100, 0x34b, 0x4, 0x9, 0x0, 0x3, 0x7, 0xff, 0x7f, 0x1, 0xffffffffffffff36, 0x1, 0x3, 0x2, 0x800, 0x400, 0x7f, 0x1, 0x4, 0x1000, 0x100, 0x40, 0x3, 0xfffffffffffffffe, 0x800, 0x4, 0xfffffffffffffff7, 0x5, 0x800, 0x5ae0, 0x7, 0x9, 0xffffffff, 0x6, 0x5, 0x80, 0x0, 0x1, 0x9, 0x3, 0xa2, 0x1, 0x44ff298a, 0xfffffffffffffff8, 0xe620000000000000, 0x4, 0x1ff800000000000, 0x8001, 0x7fffffff, 0x6, 0x2e, 0x3f, 0x9, 0x7, 0x2, 0x4, 0x9b9, 0xd9, 0x1000, 0xae, 0x4, 0x2, 0xffff, 0x200, 0x4, 0x7fffffff, 0x982, 0x7, 0x0, 0x5, 0x9e2d, 0x6, 0x0, 0x1, 0x9, 0x1800000000000, 0xcf68, 0x80000001, 0x2, 0x3, 0x0, 0x4, 0x7, 0xffffffffffffce02, 0x2, 0x4, 0x2, 0x8, 0x8, 0x65c, 0x100, 0x8, 0xc8, 0x8, 0x20, 0x3, 0x7, 0x1f, 0x4, 0x7, 0xb0, 0x9, 0xfb11, 0x6d7, 0x0, 0xecb, 0x9, 0x35, 0x80000001, 0x6, 0x7a5a, 0x6, 0x4, 0x1, 0x7, 0x5, 0x38000000, 0x9, 0x1, 0x8, 0x7, 0x7f, 0x300000, 0x8c1d3b8, 0x6, 0xb8, 0x0, 0x0, 0x4, 0x2, 0x0, 0x200, 0x1ff, 0x6, 0x2, 0x6, 0x100, 0x8, 0x8, 0xc000000000000000, 0x9, 0x4, 0xffffffffffffffa9, 0x4, 0x9, 0x9d84, 0x3d, 0x5, 0x5, 0x0, 0x7, 0x40, 0x8001, 0x9, 0x1f, 0x3, 0x800, 0x101, 0xfffffffffffffff7, 0x8, 0x5, 0x5, 0x1, 0x83, 0x9, 0x69, 0x6, 0xf22, 0x4, 0xffffffff, 0x3, 0x8, 0x2, 0x7fff, 0x7, 0x2, 0x7, 0x1000, 0xffffffffffff0000, 0x7, 0x8, 0xff, 0x9, 0x8000, 0xffff, 0x0, 0x7, 0x1, 0x89d, 0x3, 0x63b, 0x6, 0xffffffffffff8aa7, 0x0, 0x1, 0x7fff, 0x1ff, 0x9, 0x5, 0x7ce, 0x6, 0x7, 0x7fffffff, 0xd4, 0x2, 0x7, 0x173, 0x4, 0x4, 0x5, 0x3, 0xf1eb, 0x0, 0x3ff, 0x8, 0xffff, 0xa8ed, 0x1f, 0x10000, 0x8, 0x7fc000000000000, 0x1, 0x40, 0x21, 0x9, 0x401, 0x5, 0xffffffff, 0xaa4, 0x2, 0x8, 0x48e, 0x7, 0x5a, 0x200, 0x20, 0x0, 0x6, 0xa, 0x8, 0x2, 0x400, 0x100000000, 0x5, 0x4, 0x9, 0x3f, 0x3ff, 0x1000, 0xffffffff, 0x8001, 0xffffffffffffff81, 0x8000, 0xffffffffffffaee2, 0x4, 0x5, 0x1, 0x3, 0x0, 0x5, 0x616f, 0x7, 0x10000, 0x3ac7142d, 0x80000000, 0x80000001, 0x7f, 0x4, 0xff, 0x7f, 0x3ff, 0x2, 0x5, 0x3ff, 0x3, 0x1, 0x8, 0x100000000, 0xfffffffffffffffd, 0x6, 0x7, 0x5, 0x100000001, 0x4, 0xfff, 0x1, 0x2, 0x7, 0x8, 0x7, 0xf713, 0x2, 0x1, 0xfffffffffffffffe, 0xde, 0x187, 0x3, 0x7, 0xf3, 0x3, 0xfffffffffffffffe, 0x40, 0x0, 0x80000001, 0x43b75d00, 0xc724, 0xffff, 0x7fffffff, 0x3, 0x3, 0xa0000000, 0x9, 0x4212, 0x0, 0x3, 0x2, 0x9, 0x0, 0x7, 0x4e5f, 0x8000, 0x0, 0x5, 0x4, 0xef, 0x3, 0x2, 0x6, 0xf57b, 0x0, 0x1, 0x2, 0x4, 0x5, 0xfffffffffffffffe, 0x8000, 0x5, 0xf4, 0x31d, 0xfffffffffffffffc, 0x1, 0x5, 0xfffffffffffffffa, 0x7fff, 0x10000, 0x200, 0x4548, 0xfffffffffffffffc, 0xa731, 0x7fffffff, 0x8, 0x7, 0x8, 0x7f, 0x1ff, 0x1, 0x5, 0x8, 0x100000001, 0x81, 0x3ff, 0x5, 0x7, 0x6d, 0x10000, 0x4, 0xfffffffffffffffd, 0xb4, 0x3, 0x2, 0x1000, 0x8f, 0x100, 0x7, 0x4, 0x1, 0x7, 0x80000001, 0x4, 0x0, 0x414, 0x73, 0x6, 0x7, 0x1000, 0x2a, 0x10000, 0x2, 0x7ac2b049, 0xfffffffffffffad0, 0x9, 0x4, 0x7, 0xff, 0x0, 0xa88a, 0x1, 0x5, 0x5, 0x1000, 0x10001, 0x3f, 0x2, 0x1a, 0x91, 0x1, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x5, 0x9, 0x2843, 0x400, 0x3, 0x7, 0x800, 0xf686, 0x4, 0xfffffffffffffffb, 0x8, 0xcc72, 0x101, 0x20, 0x4, 0x200, 0x8000000000000000, 0x7, 0x6, 0x3, 0x2, 0x7, 0x2, 0x7f, 0x4e3df664, 0x2, 0x4, 0x7, 0x4a, 0x0, 0x7, 0x0, 0xfffffffffffffcab, 0x400, 0x7ff, 0x3, 0x8, 0x1ff, 0x0, 0x80000000, 0x80000001, 0x8, 0x3, 0x5, 0x400, 0x1, 0x3, 0xff, 0xf0d, 0x80, 0xffffffff, 0x7, 0x2, 0x3, 0x5, 0x6, 0x9, 0x5, 0x3, 0x1f, 0x4, 0x3f, 0x7, 0x9, 0x6, 0x3, 0x7, 0xd0fa, 0x4, 0x1, 0x3, 0x7, 0x7, 0x7, 0x4, 0x9f3d, 0x1de, 0x2, 0x7, 0x9, 0x3f, 0x3ad81777, 0x5, 0x7, 0x8001, 0x5, 0x8ebe, 0x7ef5, 0x1, 0x9c, 0x3, 0x100000001, 0x6, 0x102, 0x1000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, 0x6, 0x5, 0x100000001, 0x0, 0x3, 0x400, 0x8, 0x3, 0x1f, 0x200, 0x55f208a3, 0x100000001, 0x94e, 0x1, 0x1, 0x2, 0x3, 0x9, 0x3, 0x3, 0x2, 0xfffffffffffffffd, 0x81, 0x4, 0x0, 0x9, 0xca83, 0x4, 0xffffffffffffff4b, 0x4370, 0x114d, 0x9, 0xeae7, 0x8, 0x640, 0xf2b, 0x1, 0xce, 0x848b, 0x8000, 0x4, 0x3, 0xffff, 0x4, 0x2, 0x5, 0x80, 0x4, 0x9, 0x7, 0x7f, 0x80000001, 0x100000000, 0x401, 0x4, 0x4, 0x2, 0x8000, 0x2, 0x0, 0x3, 0x80000000, 0x8, 0x1, 0x40000000000000, 0x9, 0x8000, 0x8, 0xffffffff7fffffff, 0x4, 0x4, 0x9, 0x3, 0xeafd, 0xfffffffffffffff8, 0x81, 0xffffffffffff7fff, 0x1, 0x80000000000, 0x7fffffff, 0xd9f2, 0x0, 0xa235, 0x6, 0xfffffffffffffeff, 0x3fff800, 0xffff, 0x3, 0x3531, 0xf72, 0x8820f3da0000, 0x2000000000000, 0x3, 0x67d, 0x1, 0xb22, 0x8, 0x9, 0x0, 0x3, 0x3f, 0xff, 0x1ff, 0x1f, 0xdc, 0xfff, 0xd425, 0x7f, 0x9, 0x101, 0x80000001, 0x80, 0x4, 0x4, 0x6, 0x7fff, 0x5, 0x5, 0x3800, 0x1, 0x100, 0x8001, 0x7d40a2b8, 0x8001, 0x401, 0x8, 0x1, 0x7, 0x3, 0x8000000000000000, 0x1, 0x8, 0xcb, 0x4, 0x800000000000, 0x7, 0x8000, 0xfffffffffffffffb, 0x1, 0xfffffffffffff238, 0x4456, 0x401, 0x5, 0xfffffffffffffff7, 0x7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xfffffffffffffff8, 0x8000, 0x5, 0xa2, 0x3, 0xc7d, 0x5, 0x400, 0x10001, 0x0, 0xffffffffffff99f2, 0x5, 0x100, 0x2, 0x1, 0x10000, 0x3ff, 0x5, 0x0, 0x1, 0x9, 0x2, 0x5, 0xc8f0, 0xa9, 0x5, 0x4682f262, 0xca, 0x7c7, 0x1ff, 0xfffffffffffffff7, 0xe8af, 0x45, 0x5, 0x80000000, 0x7, 0x0, 0xafec, 0x8, 0x100000001, 0x1, 0xea, 0x3, 0x5e, 0x3, 0x2, 0xbbb, 0x4, 0xffff, 0x9, 0x7, 0x9, 0x8, 0x1, 0xe75, 0x2, 0x9, 0x8, 0x9, 0xffffffff, 0x5, 0x2, 0x7, 0x100000000, 0x2cf, 0x6, 0x4, 0x100, 0x0, 0xbb8d, 0x10000, 0x1, 0x2, 0x17f, 0x83, 0x1f, 0xced, 0xffff, 0x7, 0x0, 0x5f9e3c8d, 0x5, 0x401, 0x10001, 0x3, 0x6, 0x4, 0xf72, 0xffffffffffffff81, 0x7ff, 0x7, 0x7, 0x2, 0x57, 0x400, 0x3, 0x60, 0x7fff, 0x80, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x400, 0xffffffffffffffff, 0x5, 0x2fcf, 0x6, 0x1, 0xaf9, 0x548, 0x7f, 0x5, 0x4ad, 0x1, 0x6, 0x401, 0x72ee, 0x8000, 0x93cf, 0x1, 0x4, 0x0, 0x3, 0x80, 0x5, 0xffffffff, 0xfffffffffffffffa, 0x8e48, 0xfffffffffffffffb, 0x10000, 0x1, 0x80000000, 0x8, 0x4, 0x4, 0x200, 0x40, 0x5, 0x1000, 0xc5, 0x6, 0x7, 0x200, 0x9, 0x3ff, 0x1f, 0x1, 0x7000000000000000, 0x5, 0x200, 0x6, 0x3800000000000, 0x7, 0x2, 0x3ff, 0x99, 0xcc8, 0xffffffffffffffe0, 0x2b0, 0x0, 0x0, 0x6, 0x8, 0xbee6, 0x4, 0x5, 0xf2, 0x2c58, 0x400, 0x9, 0x7, 0xffff, 0xd29d, 0x10000, 0x4, 0x4, 0x3, 0x8, 0x3e, 0x7, 0x3f, 0x3, 0x2, 0x8, 0x8000, 0x3, 0x6, 0x6, 0x1, 0x10000, 0x3ff, 0x1ff, 0x0, 0x3, 0x60, 0x7, 0x4, 0xcbab, 0x80000000, 0x9, 0x1f, 0x90d, 0x7, 0x3, 0x4, 0x1f, 0x1ff, 0x2, 0x100000000, 0x80000001, 0x1ff, 0x5, 0x5, 0x5, 0x4c5b, 0x2, 0x8001, 0x400, 0x5, 0x1, 0x3, 0x83b9, 0x1ff, 0x1f, 0x5, 0xfffffffffffffffa, 0x8001, 0x9, 0x100000000, 0x8, 0x40, 0x5, 0x1, 0x200, 0x1, 0xfffffffffffffffd, 0x0, 0x14, 0x1, 0xb3, 0xc3, 0x1, 0x0, 0x3f, 0x8001, 0x2000000000, 0x1ff, 0x1, 0x7, 0x2, 0x6, 0x7, 0x100, 0xfff, 0x7, 0x7fff, 0x4, 0x200, 0x8, 0x80000001, 0x5, 0xd0d, 0xb3ec, 0xfffffffffffffffd, 0xfffffffffffffffa, 0x8, 0x101, 0x1ff, 0x4, 0x0, 0x5, 0x8, 0x400, 0x3, 0x6, 0x80, 0xfff, 0x200, 0x4, 0x9, 0x5, 0xffffffffffffff7f, 0x2, 0xfffffffffffffff9, 0x100, 0x0, 0x7fffffff, 0x3, 0x3, 0x1, 0x6, 0x10001, 0x7, 0x1, 0x81, 0x8, 0x595, 0x3ff, 0x1f, 0xdf7d, 0x85c0, 0x3, 0x40, 0x101, 0x80, 0x5, 0x80, 0x6, 0x5, 0xa3, 0x6, 0x3, 0xff, 0x8, 0x81, 0x5, 0x2449858b, 0x2, 0x5, 0x6, 0x9c, 0x4, 0x1, 0x3, 0x9, 0x6, 0x5, 0x4800000000000000, 0x8, 0x5, 0x2, 0x100, 0x2, 0x1, 0xfffffffffffffffa, 0x7, 0x1, 0x4, 0x1, 0x3927, 0xfffffffffffffbff, 0x7, 0x7f, 0x0, 0x0, 0x2, 0xffffffffffff8000, 0x3, 0x80000001, 0x9, 0x825, 0x4, 0x6d, 0x2, 0x7, 0x800, 0x20, 0x0, 0x7, 0xe7, 0xdd4, 0x47e, 0x4, 0x5, 0x101, 0x7fff, 0x9, 0x3, 0x7, 0x3, 0x1, 0xfffffffffffffe01, 0x3ff, 0x6, 0x1f, 0x3, 0x8, 0x8, 0x0, 0x4, 0x8, 0x3, 0x6, 0x4, 0x8, 0x4, 0x7, 0x0, 0x1, 0x200, 0x0, 0x2, 0xffffffffffffffc0, 0xfffffffffffffffa, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x9, 0x8001, 0xa595, 0x5, 0x1c, 0x9, 0x8, 0x20, 0x4, 0x7, 0x80000000, 0x6, 0x3, 0x9, 0x0, 0x1, 0x1, 0x6, 0x511, 0xff, 0x7ff, 0xfffffffffffffc01, 0x9, 0x7fffffff, 0x80000001, 0x100000000, 0x0, 0x8001, 0x401, 0xb, 0x8, 0x7, 0x80, 0x4000000, 0x8, 0x0, 0x468d, 0x9, 0x6, 0x8, 0xffffffffffffffe0, 0x4, 0x9a, 0x2, 0xd42a, 0xffffffffffffffff, 0x68a9, 0xffffffffffffff1e, 0x9, 0x88a9, 0x7, 0xff, 0x9, 0x101, 0x0, 0xe1, 0x3, 0x3, 0x4, 0x1, 0x8, 0x7, 0xb0c, 0x3, 0x2df, 0x3, 0x9, 0x7083, 0xfffffffffffffff9, 0x401, 0x3, 0x0, 0x10000, 0x1000, 0x8001, 0xc, 0x9, 0x6, 0xfff, 0x2, 0x37, 0x10d4, 0xe5, 0x4, 0x100, 0x5, 0x2, 0x100000000, 0x1, 0x1, 0x63, 0x81, 0x7fffffff, 0x5, 0x9, 0x3, 0x1, 0x6, 0x7f, 0xf69f, 0x1, 0x7, 0x5, 0x80000000, 0x578aca40, 0x2f4, 0x3, 0x0, 0xabed, 0x35, 0x9, 0x7ff, 0x8, 0x97, 0x8, 0x401, 0x10000, 0x61, 0x9, 0x80000000, 0x100, 0x7f, 0x1, 0xb576, 0x8, 0x1c9800, 0x0, 0x3, 0x1, 0xfffffffffffffffe, 0x1, 0x4cea, 0x400, 0x5, 0x8, 0x2, 0xedb, 0x0, 0x4, 0x8, 0x3, 0x8, 0x2be, 0x5, 0x22537ccb, 0x2, 0x7, 0x1, 0x7, 0x8, 0xfffffffffffffffc, 0x5, 0x326, 0x9, 0x8, 0x200, 0x9, 0x8, 0x1, 0x1, 0x2, 0x0, 0x3, 0x7, 0x1, 0x6, 0x7ff, 0x9, 0xfffffffffffffffd, 0x2, 0x0, 0x81, 0x1f, 0xff, 0xff, 0x6, 0x4, 0x1ff, 0x4, 0x0, 0x4, 0x1c0000000000, 0x8, 0x7, 0x6, 0x1, 0x4, 0xae5, 0x100000001, 0x2, 0xffffffffffffffff, 0x7ff, 0xfffffffffffffffd, 0x6, 0x2, 0x20, 0x6, 0xd3, 0x1000, 0xe4ff, 0x1, 0x1, 0x8, 0x5, 0x7, 0x3, 0x6ca3, 0x4, 0x8, 0x7, 0x4, 0x81, 0x100, 0xffffffffffffff81, 0xfc3, 0xb65, 0x4, 0xee6, 0x1ff, 0x6e7, 0x86f, 0x6, 0x5, 0x7f, 0x14b, 0xbc4, 0xfff, 0x8000, 0x6, 0x4, 0x2, 0x1000, 0x4, 0x7, 0x3, 0x100000001, 0x5, 0x6, 0x0, 0x9, 0x2, 0x4, 0x5, 0x1, 0xffff, 0x7fffffff, 0x0, 0x200000, 0xdfa, 0x4, 0xfffffffffffffffa, 0x8001, 0x5680, 0x100, 0x5e, 0x1, 0x7470, 0x7fff, 0xead, 0x61b8, 0x4, 0x4, 0x4, 0x4, 0x10000, 0xec, 0x100000000, 0x10001, 0xffffffff, 0x1, 0x7, 0x8, 0x1, 0x8b8, 0x6, 0x3, 0x1, 0x5, 0x34, 0x3, 0xf, 0x3ff, 0x100000000, 0xffffffff00000000, 0x8, 0x9, 0x7, 0x6, 0x7, 0x5, 0x6373, 0x9, 0x3, 0x4, 0xed, 0x100000001, 0x1, 0x80000000, 0xff, 0x2, 0x6, 0x9, 0x4, 0x7ff, 0x8, 0xffff, 0x9, 0xb8, 0x37216bf6, 0x2, 0x4, 0x2, 0x5b50, 0x9, 0x1, 0x80000000, 0x2, 0x2, 0x2, 0x9, 0x5, 0x1ff, 0x4, 0xfffffffffffffffe, 0x2, 0x5, 0x101, 0x3, 0x3, 0x9, 0x347b70f0, 0x400000, 0x5, 0x2, 0x1000000000000, 0x401, 0x0, 0x4, 0x1, 0x7, 0x0, 0x5, 0x4a0, 0x2, 0x8, 0x5, 0x9, 0x3, 0x5, 0x7, 0x7ff, 0x5, 0x100000000, 0x302, 0x8b2, 0x6, 0x80, 0x4b, 0xffffffff, 0x4, 0x20, 0xf4, 0x449, 0x5, 0x2, 0x7, 0x7f000000, 0x1, 0x1a8c1b1d, 0x9, 0x100, 0xfffffffffffffffd, 0x0, 0x100000001, 0x9, 0x89f, 0x1, 0x7, 0x4, 0x4, 0x800, 0xb3, 0x101, 0x4, 0x8, 0x4, 0x9934, 0x6, 0x10000, 0xffffffff, 0x1, 0x101, 0x0, 0x0, 0xfffffffffffffffb, 0x1, 0x4, 0x8, 0x0, 0xc7, 0x8, 0x9, 0x3, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x8, 0x401, 0x1, 0x3, 0x1f, 0x5, 0xdc, 0x80000001, 0x7, 0xffffffff, 0xfff, 0xfffffffffffffffd, 0x200, 0x9, 0x400, 0x81, 0x4, 0xfffffffffffffe00, 0x3, 0x3, 0x28, 0x100000000, 0x4, 0xc5f, 0x3, 0x7, 0x6, 0xffffffff, 0xffff, 0xb4, 0x2, 0x10000, 0xffffffff, 0x6, 0x6, 0x6, 0x10000, 0x1, 0x18, 0x1, 0x200, 0x85, 0x8, 0x91d, 0x0, 0x40, 0x3, 0xfffffffffffffffb, 0x8, 0x3, 0x9, 0xfffffffffffffffd, 0x1f, 0x2, 0x200000000000, 0x2, 0x84e3, 0x29cf, 0x8, 0x4, 0x8, 0x2, 0x100, 0x50, 0xa4dd, 0x2, 0x6, 0x4, 0x6, 0x1916, 0xc325, 0x10000, 0x0, 0x2, 0x1, 0x114, 0x7, 0x0, 0x5, 0x1, 0x9, 0x8000, 0x20, 0xff, 0x1, 0x10000, 0x80, 0x10001, 0x4, 0x6, 0x7, 0x401, 0x92d, 0x1, 0x9, 0x122, 0x2, 0x100000001, 0x2d1, 0x100000000, 0x4, 0x2, 0x5, 0x7fffffff, 0x0, 0x1e9a, 0x21, 0x400, 0x10000, 0x3, 0x80000001, 0x1f, 0x57a, 0x1, 0x0, 0x8, 0x7, 0x9e10, 0xfffffffffffffffb, 0x3, 0x9e, 0xb1, 0x4, 0x6, 0x9, 0x2, 0x7, 0x6, 0x1, 0x7ff, 0x6, 0x0, 0x5, 0x80000001, 0x80000001, 0x10001, 0x0, 0x2, 0x7f, 0x8, 0x5, 0x413e, 0x3, 0x3ff800000000, 0x8, 0x1, 0xffffffff, 0xfffffffffffffff9, 0xdb, 0x9, 0x3, 0x7, 0x1, 0x0, 0x400, 0xfffffffffffffff9, 0x0, 0x2, 0xc6e, 0x80, 0x80000000, 0xfffffffffffffffc, 0xb2, 0x4, 0x6, 0x4, 0x0, 0x1, 0x20, 0x8, 0xfffffffffffffff9, 0x1000, 0x3, 0x9, 0x1, 0x101, 0x9, 0x7795a147, 0x6ea, 0x2000000000, 0x3, 0x788, 0x4, 0x401, 0x7, 0x80, 0x1f, 0x81, 0x1, 0x5, 0xffff, 0x8000, 0x389, 0xfffffffffffffff7, 0x80000000, 0x5, 0x6b86, 0x8001, 0x5, 0x84a, 0x2, 0x10000, 0x40, 0x6, 0x1, 0x79, 0x1, 0x0, 0x400, 0xe9, 0x2, 0x20, 0x8427, 0xafa1, 0x80000000, 0x1b, 0x7, 0x7, 0xb28, 0x1, 0x1f, 0x8, 0x1ff, 0x5, 0x8, 0x81, 0x0, 0x20, 0x8, 0x0, 0x2, 0x3, 0x0, 0xfffffffffffffffc, 0x6, 0x5, 0x1, 0x3, 0x0, 0x5, 0x6, 0x1, 0x2, 0x7fffffff, 0x67a, 0x7ff, 0xdc00, 0x3f, 0x7f, 0xffffffff, 0xfffffffffffffffc, 0x3, 0x7f, 0x9, 0x8001, 0x6, 0x5, 0x71d000000000000, 0x400, 0xfffffffffffffffd, 0x80, 0x4, 0x4, 0x100, 0x20, 0x5, 0x7, 0x81, 0x1, 0x3, 0x5, 0x9, 0x2, 0x8, 0x8000, 0x800000000000, 0x3, 0x9, 0x6d1ab695, 0x7, 0x0, 0x3, 0x1, 0x100, 0xffffffff, 0x8, 0x9, 0x7ff, 0xde6c, 0x3, 0xfffffffffffffffb, 0x80, 0x8, 0x5, 0x1b, 0x8, 0xff, 0x98, 0x825, 0x2, 0xfffffffffffff801, 0x1, 0xfffffffeffffffff, 0xfff, 0x9a, 0x80, 0x85, 0x1f, 0x70c9, 0x9, 0x5, 0x0, 0x3d2c, 0x6, 0xffffffff, 0xffffffffffffff3f, 0x3, 0x6, 0x7fff, 0x400, 0x49e90188, 0x200000000, 0x8d, 0xffffffff, 0xffffffffffffffc0, 0x8, 0x8, 0x0, 0x2, 0x3ff, 0xffffffff, 0x101, 0x6b, 0xfffffffffffffba5, 0x8, 0x80000000, 0x9, 0x7, 0xfffffffffffffff5, 0x90, 0xf, 0x4, 0x81, 0xfffffffffffffffc, 0x9, 0x1ff, 0x1, 0xfc, 0x9, 0xffffffff, 0x10000, 0x7f, 0x100000000, 0x3b1, 0x6, 0x4f, 0x2, 0x5, 0x20000, 0x546, 0x0, 0xf8b, 0x6, 0x9, 0x3, 0x2, 0x8, 0x6b91, 0x7, 0x10001, 0xff, 0x200, 0x100000000, 0x43b9, 0x1, 0x6, 0x7ff, 0x4, 0x5, 0x80000001, 0x6, 0x7f, 0x8, 0x6, 0x9, 0x5, 0x6000000, 0x9, 0x10001, 0x7c1, 0x1ff, 0x9, 0x1ff, 0x3, 0x7a49, 0x9, 0x4, 0x6, 0x200, 0x48b6, 0x1000, 0x1f, 0x3, 0x100, 0x2, 0x0, 0x5, 0xe28, 0xffff, 0x7f, 0x7, 0x3, 0x81, 0x2, 0x10001, 0x3, 0x7, 0x9, 0x1, 0xd3a, 0x2, 0x10001, 0x81, 0x7, 0x8, 0x9, 0xecf, 0x753, 0x9, 0x7, 0x6, 0x7, 0xcf, 0x0, 0x9, 0xd1a, 0x1, 0x81, 0x400, 0x7, 0x7ff, 0x3, 0x9, 0x2f, 0xffffffffffffffff, 0x101, 0xffffffff, 0x4, 0x8001, 0x800, 0x0, 0x2f7f, 0x400, 0xfe9, 0x3, 0x3, 0x5, 0x7, 0x0, 0x81, 0x4, 0x0, 0x6, 0x2, 0x35, 0x2, 0x401, 0x6, 0x7, 0x3, 0xffffffffffffffff, 0x1, 0x7b, 0x1f, 0xb07, 0x0, 0x67e, 0x6, 0x9, 0x2, 0x100000000, 0x7fffffff, 0x8, 0x0, 0x8001, 0x1, 0x8, 0x9, 0x2, 0x3, 0x8001, 0x1ff, 0x100000000, 0xfe0, 0x5, 0x7fffffff, 0x9, 0xfe2b, 0xeb5, 0x2ff, 0x2, 0xfffffffffffffff9, 0xf1ca, 0x6, 0x1, 0x325, 0x3, 0x2, 0x6f, 0xf0, 0x9, 0x1, 0xfffffffffffff9cc, 0x80000001, 0xffffffffffffff01, 0x7f, 0x20, 0x7, 0x0, 0x7ff, 0x58, 0x3, 0x100, 0x0, 0x45daf2f, 0x5, 0x800, 0x0, 0x7d56, 0xfffffffffffeffff, 0x1f, 0x6, 0xfff, 0x4, 0x7, 0xffff, 0x3ff, 0x8, 0x7f, 0x1ff, 0x67, 0x8b0f, 0x6, 0x0, 0x0, 0x20, 0x248ed72, 0x100, 0x7, 0x101, 0x7, 0x7, 0x4, 0x2, 0x40, 0xffffffffffffffc1, 0xbed, 0x8, 0x5c6, 0x0, 0x6, 0x101, 0x5, 0x9, 0x200, 0x1f, 0x4, 0x446, 0x1, 0x6, 0x1, 0x80000001, 0x5, 0x7, 0x3ff, 0x6, 0x7, 0xaee, 0x0, 0x2, 0x1f, 0x3, 0x2, 0x2, 0x8, 0x80000001, 0x5, 0x0, 0x5, 0x5, 0x6bc5d013, 0x401, 0x0, 0x7178, 0x9, 0x8001, 0x2, 0x7fff, 0x7fffffff, 0x4, 0x70, 0x100, 0x80, 0x1, 0xa27, 0xff, 0x8, 0x101, 0x400, 0x0, 0x5, 0xe1, 0x7fff, 0x1, 0x29c, 0x200, 0x5, 0x80, 0x20, 0x3, 0x2, 0x7fffffff, 0x2, 0xffffffffffffffff, 0x6, 0x80, 0x1252, 0x3ff, 0x1, 0x10001, 0x3, 0x8, 0xffffffff00000001, 0x101, 0x7, 0x4, 0x101, 0x7fff, 0x401, 0x4, 0x7ff, 0x8, 0x9, 0xffffffff, 0x7, 0x2, 0x3, 0x5, 0xffffffffffffff01, 0xee, 0x6, 0x7, 0x1, 0x9, 0x2, 0x8, 0x7fff, 0xc21, 0x5, 0x7e9, 0xef6e, 0x0, 0xb847, 0x3, 0x0, 0xfc2b, 0x20000000000000, 0x1400000, 0x50f, 0x5, 0x3, 0x1, 0xffff, 0x100, 0x4076, 0x9, 0x100, 0x100, 0x3f, 0x5, 0x5, 0x1, 0x40, 0x8, 0x3a644480, 0x5, 0x2, 0x100000000, 0x80000001, 0x6, 0x9, 0x1, 0x81, 0x7, 0x2, 0x100000000, 0x245d, 0x9, 0x1800000000000, 0x7, 0xfffffffeffffffff, 0x9, 0xf93, 0x91e6, 0xfffffffffffffffa, 0x2, 0x2, 0x40, 0x80000000, 0x3ff, 0x5f, 0x8000, 0x80000001, 0xca4, 0x7fffffff, 0xffffffffffffff88, 0x1, 0x210, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x8, 0xfff, 0x2, 0x86, 0xfffffffffffffffb, 0xcd, 0x2, 0x9, 0x200, 0x401, 0x9, 0x7, 0x8, 0x7fffffff, 0x7, 0x1, 0x3ff, 0x8, 0x0, 0x4, 0x3, 0x800, 0x55d0000000000000, 0x6a7, 0x7, 0x80000001, 0x9, 0x2, 0xfff, 0x4, 0x8, 0x8, 0x8, 0x8, 0x9, 0x8, 0x8, 0x4, 0x9, 0x8, 0x0, 0x1, 0x9, 0x6, 0x3, 0x3, 0x8001, 0x8, 0x0, 0x8000, 0x7, 0x1fc, 0x18, 0x4, 0x3, 0x0, 0x3, 0x8, 0x29, 0x5, 0xfffffffffffffff9, 0x100000001, 0x7, 0x81, 0x0, 0x5, 0xb, 0x100000001, 0x232, 0x9, 0x3, 0xffff, 0xd10b, 0x800, 0x80000000, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x1f, 0x28000000000, 0x3, 0xba7, 0x5, 0x1, 0x5, 0x4, 0x100000000, 0x1f, 0x7, 0x5, 0x8, 0x8, 0x3, 0x5, 0x7ff, 0xfffffffffffffbff, 0x5, 0x4, 0x3, 0x5, 0x0, 0x0, 0x3, 0x9, 0x9, 0xb9, 0x0, 0xff, 0x100, 0x80, 0x4, 0x2, 0x65, 0x5, 0x80, 0xffffffffffff3536, 0x3f, 0x100000000, 0x1, 0x4, 0x2, 0xa7, 0x4, 0x8, 0x800, 0x20, 0x80, 0x6b, 0x1195, 0x8, 0x7, 0x9, 0x800, 0x2, 0x401, 0x8, 0x101, 0x83, 0xfff, 0x80, 0x8000, 0xfff, 0x0, 0x9d, 0x1, 0x9, 0x0, 0x5, 0xff, 0x7fff, 0x62a8, 0x1f0000000000, 0x52b, 0x100000000, 0x0, 0x9, 0x7, 0x7f, 0x29, 0x622c, 0x200, 0xdcb, 0x3ff, 0x81, 0x1, 0x7, 0x80000001, 0x1, 0x7, 0x3, 0x5, 0x4, 0x1, 0x8, 0x8000000000, 0x9, 0x7fff, 0x9, 0x5, 0xf82c, 0x200, 0xa21, 0x101, 0x3, 0x1ff, 0x12a5, 0x6, 0x7ff, 0x8293, 0x4, 0xffffffff, 0x3, 0x7, 0x80000000, 0xebe0, 0x3, 0x0, 0x3, 0xdab, 0xece, 0x3, 0x4, 0x2, 0x4, 0x0, 0x8], "c62a09955e41e50abc04374a8cce6eb3791e7219c1ba3d0d2dd745717136f641feb7cb64320c23a7fe64d15defc7b31df59305614b4b0eb5efb51878bec2eee6873aca"}}) mq_notify(r0, &(0x7f0000004f80)={0x0, 0x1f, 0x3, @tid=r5}) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) 13:52:10 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x6013, r0, 0x81000000) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x4, 0xc5f}}, 0x28) [ 176.047466] binder: undelivered TRANSACTION_ERROR: 29189 13:52:10 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x72f, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:10 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'filte%\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:10 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x2]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:10 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000020607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0xa}, 0x15}}}, &(0x7f00000001c0)=0x84) socket$kcm(0x29, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000440)={0x0, 0x2bbc3ffa, 0xc2d, 0x10001, 0x9, 0x401}, &(0x7f0000000480)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000004c0)={0x0, 0x60d2, 0xfffffffffffff800, 0x20}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000540)={0x0, 0x1000, "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"}, &(0x7f0000001580)=0x1008) sendmsg$inet_sctp(r0, &(0x7f00000016c0)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x1f, @mcast2, 0x7ff}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="a1213e2a31f7e5bbbec8b50718616f92666175cc428ad06af60770c7d711972486836f3e30a24a0929797cf97ccb6bb102afe67e327edba2e0449f8c83d19bfddf8a0a73f7f5bdda703f4c5af75aefc1a5ece71dfd8a7467d83dd0916abd87920c00a28fc3eebfdf2c08d7b2cba29df2116c0226536be9c9e0eadf752944b4ee9c78a55c86ff756985b9aa8f15267a1d8419c6882e4e823bba68006a163c7772ef", 0xa1}, {&(0x7f0000000140)="935c7d832b040fc99c28f4c8fbbb663e387f", 0x12}, {&(0x7f0000000280)="ea42feeb76b043cc842f53ba5a3b12619490be780a958513ad9febdb8905869f113beaea80d8d594e146c3f63636f1e2934f8136278f319af0d2d382264e48ce86ddef9a76037784e277b7c7d2de128abf16fd28212cf52e41ce324766133daadabc450dc4e726adba583d146334d15ba6998eb9c7ec735fe638c16647b2022e2cc5fc0692c2503b83d5d944ebc248535b14fa500f7b507781f3dfaad19283e6ca11fa6ab6da429d77ec0f17a0697647f7b2260538b845e258bf5b0666bf2ea76020238addaa74afc104a849e1ee877d5ed6506eedcd854739c8aa3e673c614d53b86ddbfdb316a5baf84a05a890015b22d025e3", 0xf4}], 0x3, &(0x7f00000015c0)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndinfo={0x20, 0x84, 0x2, {0x7fffffff, 0x8, 0x6, 0xd199, r1}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x2, 0x1, 0x1000, r2}}, @sndinfo={0x20, 0x84, 0x2, {0x7fffffff, 0x7, 0x1000, 0x6, r3}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x2, 0x2, 0x0, 0x3, 0x5, 0x3, 0x4, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x100, 0x40000}, 0x4) [ 176.227464] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 176.245529] netlink: 'syz-executor3': attribute type 1 has an invalid length. 13:52:11 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={"66696c7465720500", 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xd5, 0x140) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000100)={0xffffffffffffffe0, 0xf707}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x10, 0x105}, 0x14}}, 0x0) 13:52:11 executing program 4: r0 = socket$inet(0x2, 0x2, 0x20002000000088) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x1, 0x4) 13:52:11 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:11 executing program 3: r0 = socket$inet6(0xa, 0x4000000001, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000680473ca48a6d5a0dd0ab12e32b7b93136a337e287f94d2e3e2b32ab4afda610da8c07f81aa07f6e218e867269403856af082e1e8d0cc2bb3fc0ed18c5e9090000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11000000000000001100000000000000000000000000000000000000000000000000000000000000000000000000000000000000e711450920c99dcc6ca101aef0f5f08c80da5d4a4b159d74b539bd312719c42f2bd63f", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYBLOB="0400000000000000"]}) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r4 = socket$inet6(0xa, 0x3, 0x6) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x20000, 0x0) ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f0000000140)={0x1, {r6, r7+30000000}, 0x100000000000000, 0xfff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x11, &(0x7f0000000300)={@local}, &(0x7f0000000340)=0x20) [ 176.600376] binder: BINDER_SET_CONTEXT_MGR already set [ 176.608545] binder: 13365:13366 ioctl 40046207 0 returned -16 [ 176.629126] binder: 13365:13378 unknown command 17 [ 176.638367] binder: 13365:13378 ioctl c0306201 200003c0 returned -22 [ 176.667347] binder: BINDER_SET_CONTEXT_MGR already set [ 176.674477] binder: 13365:13378 ioctl 40046207 0 returned -16 [ 176.687423] binder: 13365:13378 unknown command 17 [ 176.694110] binder: 13365:13378 ioctl c0306201 200003c0 returned -22 [ 176.703013] binder: release 13365:13366 transaction 337 out, still active [ 176.710162] binder: undelivered TRANSACTION_COMPLETE 13:52:11 executing program 6: open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000440), 0x19) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) dup2(r0, r1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") write$cgroup_pid(r1, &(0x7f0000000100), 0x12) syz_open_dev$loop(&(0x7f00000007c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340), 0x0, 0x81806) 13:52:11 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:11 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'filter\x00\x00\x00\a\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:11 executing program 2: r0 = socket$inet(0x2, 0x1000000000000001, 0x3) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='\x00'}, 0x10) socket$inet(0x2, 0x2, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000080)={0x100000001, 0x40}) r2 = dup2(r0, r1) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) 13:52:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') pipe(&(0x7f0000000080)) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="2503090000000000000000000000"], 0x14}}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) sysfs$2(0x2, 0x6, &(0x7f0000000280)=""/197) [ 176.730796] binder: release 13365:13378 transaction 336 out, still active [ 176.737957] binder: undelivered TRANSACTION_COMPLETE 13:52:11 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(0xffffffffffffff9c, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003f00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="e2", 0x1}], 0x1, &(0x7f0000000700)}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006080)=""/160, 0xa0}], 0x1, &(0x7f00000061c0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000007380)={0x0, 0x1c9c380}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xd6f8ceb29486580e, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000040)={0x3, 0x6}) 13:52:11 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000180), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000c9b5a214000000000001000000000000"], 0x14}}, 0x0) [ 176.957427] binder_alloc: binder_alloc_mmap_handler: 13336 20ffa000-20ffd000 already mapped failed -16 [ 176.979151] binder: BINDER_SET_CONTEXT_MGR already set [ 176.985190] binder: 13336:13425 ioctl 40046207 0 returned -16 [ 176.991517] binder_alloc: 13336: binder_alloc_buf, no vma [ 176.997205] binder: 13336:13428 transaction failed 29189/-3, size 0-0 line 2967 13:52:11 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x7a00000000000000, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:11 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x1f, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl(0xffffffffffffffff, 0x8910, &(0x7f0000000180)="0a5cc80700315f57edac98b244c71f0ad3bc795b03151d85714070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000002240)=ANY=[@ANYBLOB="01000000", @ANYRES32=0x0], &(0x7f0000003a40)=0x8) unshare(0x24020400) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7b, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x14, &(0x7f0000000000)={r3}, 0x8) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x148) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0xf1, 0x45, &(0x7f0000000280)="562b9576dede78bb7bd4a2406df38590d146cc41d738a5efab153707005f296833dcea4e54eba85494e5ec825f295162e99f138caf015d6253888a234d6abb06d7adc29053843691fb2a5648db5097bdee8a2b3a7ecca766178bbdd88940d3b579c5bf95e65ebdce480bc76e973096219a728dfd4aada2b2d4ff9b84bb7440ed72ff7c5c17ae508057a58726042f3bed72010cbf8c32afd2fd21f79c47bd61b3843a7972ca83f7e171ea019462942c1663bb98b0449e20c6bc5bdfd9d25e593610a5e09b31c9312625c5c72510a80f6a701de190eeca21377b9fd648d6d4db41a4af8a589fe26e2a4820305681573a5577", &(0x7f0000000380)=""/69, 0x1}, 0x28) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x6, 0x9}) 13:52:11 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x101100) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000040)={"c09acdcff404da70c192e4329d0bcc434293a47d16f2f615b6df68eeb684bf41494c9b8e0930ef542fa4838878dd2c657264ce9f5059822d935b02745d7143ce08626cb9efd2af738a7181dcd43c85b92dbd8f2408c49cbc6a5b83d87a1fcaf9b4f8db2ba04dff3831b3c8965143b15497c78e8539be83bd523dd535ecfec6641ff441ef584712655754d76ecc6b543fd69ae74eeec9c288a333a4e5bf495d60b3a09d1396cee472381db545d08d7de69db9ebc9f5702693c7de6eec970c2a410861dd4a45b2611832991a6ab1c65347b693424d00881e870efbbfe8551109e634d04078bdc2cb7cafaaf5e845d3c4ec8cfed5c1ebaa404e15bc59ce6d387efe7e9955024e7bc91f34097e0e2a9a9c4cf47e8462ce61f5f49efde3308bf64dab508d7d88caeb10964a27afb818770349ab41718ec577317f76c18696c0dba98b7487725b2065fab4b734a24542b12038ddcca1413edd0a7336b5b3b979c722a803a10668f5b07aa29ea1999a0e5339696345b362f14a92a341b87be4c911ef5900381c644eecaa779fed18e4cbc0e49849a5a7fa09f9f79e192bf549ad95ceece63c43c9c8cce63bd9a1b879bf07a24f8200c09c11820c82fdce67d1d92e144ed91079043264e6f632f63ec240857bc69bc03f7a76f3f0e189fc52626378b2b032c35c4e37e7051e4f308767ad79a5d6ac6433d3da6940c6fcc37e31bbabfb593bc0da3bf07e259781d78393167992bf7a71e1db49554ef66a8e7f0a16e6fd7c96b9ee869379f3c45ad4a97cf7aab3d39bd94b8feff68a5ffdd5f9561a4a2c7ad5c37c5c5de91a8174577d1e3b478b2c069fad03952d1ff3a5421e0ceba7a8e0d3ab9b9546194dcc061ae750c4450b643ba81f1d5becc630820790501ece9582b6ffd4bd93e09fc247c541f4c2f57662bdcfd76dbdd0193ed3a26176550f8eedfab65e97ccb96c82109b08ca86334ffbaa75604c8d658851975d793299890056475e2c60ea10bb3e36c564b8148b82ac166796b2c3b5213834082b2bc107ea9bbbddaf98c288594735616a1ecdb7b8884b1a124a18f96fa952f31646b10ad959774977c9a2bedb78e3b2094fbf39929912278ad0ac1612ec75f0c31aa041ba9a2058bc278eab6e808f84f831d06a2eb410d806ee0fb10002bf1abdff8e0190e8a3db520852bb723909f2bd3e2ade36b878aa8467079e372f3dcd26ea56ba4509c55ca2fb7f5f4d53fd245149a787f39d5e570e6af73b0debcaea4b734612f05bf2b930ea096c83105732bfa8c7211740c4278d9934c4601583ce5c02d06b81ebe92f2af8d2b785d07375e8a32875486cb99cf79c74d72ca237c3548191a8db539db1de56fc080827f230f78886d2f3649cfac11daa7cb3fcf6b2aa2dca04e483e533cce59e6e2dc1264decf7eba69f334062d7b991b92773732baa18b49ba49e"}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000440), 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000480)=0x1) getpeername$netlink(r0, &(0x7f00000004c0), &(0x7f0000000500)=0xc) write$P9_RWALK(r0, &(0x7f0000000540)={0x3d, 0x6f, 0x1, {0x4, [{0x0, 0x0, 0x2}, {0x0, 0x1, 0x2}, {0x2, 0x4}, {0x3c, 0x4, 0x7}]}}, 0x3d) sysinfo(&(0x7f0000000580)=""/167) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000640)={0x17, 0x2f, 0x7, 0x5, 0x3, 0x8, 0x1, 0x167, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000680)={{0x2, 0x1, 0xffffffffffff1493, 0x7, 'syz0\x00', 0x3}, 0x0, [0x7, 0xd3, 0xffff, 0x7, 0x1, 0x0, 0x11a2, 0x10000, 0xfffffffffffffffb, 0x1, 0x3, 0x80000001, 0x2, 0x400000000000000, 0x2, 0x100000000, 0x9, 0xa0, 0x8, 0x1ff, 0xffffffff80000000, 0x40, 0x0, 0x7, 0x3, 0xfffffffffffffffe, 0xc6, 0x9, 0x3, 0x5, 0xfffffffeffffffff, 0x101, 0x6, 0xffffffffffffffff, 0x0, 0x8001, 0x5, 0x4, 0x7ff, 0x1, 0x9, 0x4, 0xffff, 0x9, 0xfffffffffffffff8, 0x2, 0x4, 0x8001, 0x0, 0x5d, 0x5, 0x100000001, 0x0, 0x3db, 0x10000, 0x2, 0x2, 0x8001, 0x3, 0xffffffffffff8001, 0x7, 0x9, 0x0, 0x7, 0x4, 0x81, 0xffff, 0x800, 0x0, 0x6, 0x0, 0x6, 0x1f, 0x1, 0x1c1, 0x7fff, 0x3180, 0x2, 0x4, 0x6c25, 0x0, 0x7, 0xfffffffffffffffa, 0x4, 0xfd4d, 0x0, 0x58, 0x400, 0x4, 0x7ff, 0x9, 0x81, 0x72, 0x7, 0x0, 0x3ff, 0x0, 0x4, 0x501, 0x50000000000000, 0x5, 0x1, 0x1, 0x9, 0x6, 0xfffffffffffeffff, 0xfffffffffffff800, 0x3, 0x6e, 0x40, 0x29, 0x0, 0x0, 0x6, 0x6, 0x1, 0x400, 0xc4, 0x638aa9c6, 0x1, 0x9, 0x3ff, 0x28, 0x3ff, 0xfffffffffffffffc, 0x8000000000000000, 0x6, 0x80000000]}) r1 = accept$alg(r0, 0x0, 0x0) sysinfo(&(0x7f0000000b80)=""/185) ioctl$VT_RELDISP(r0, 0x5605) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000c40)) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000c80)) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000cc0)=0xfffffffffffffffd, 0x4) ioctl$VT_ACTIVATE(r0, 0x5606, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xa8, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x15}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf57}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x4040050) fcntl$setlease(r1, 0x400, 0x2) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000ec0)={{0xa, 0x4e21, 0x3, @remote, 0x3f8}, {0xa, 0x4e21, 0x10000, @remote, 0x2}, 0x4, [0x7f, 0x9, 0x1, 0x1, 0xe06c, 0x0, 0x13db, 0xfffffffffffffffa]}, 0x5c) set_robust_list(&(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)}}, 0x18) r3 = shmget(0x2, 0x3000, 0x100, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r3, 0xb) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001000)=0x0) r5 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r1, &(0x7f0000001040)={r0, r1, 0x4}) sched_setparam(r4, &(0x7f0000001080)=0xfff) inotify_init1(0x80800) stat(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454cc, r6) 13:52:11 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x81, 0x80000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040080) futex(&(0x7f0000000380), 0x4, 0x1, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400), 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x80) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet6_buf(r2, 0x29, 0x18, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) 13:52:11 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={"66696c746572830500", 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:11 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="f20fbcbd0080000066b81f008ec8c4e205bcab27000000b8d13200000f23d80f21f835000000900f23f8c4e2fdb80d0b00000066baf80cb8bc068586ef66bafc0cec660f38820265f2af0fd2c9b8000001000f23c80f21f8350000b0000f23f8", 0x60}], 0x1, 0x80000037, &(0x7f0000000180), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{}, {0x0, 0x0, 0x0, 0x347, 0x5}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c744240044e4a6b2c7442402eb000000c7442406000000000f011c24660f388120c4e22d90641b200f20d835200000000f22d80f060f06676464260f0f301d660f388211b9800000c00f3235000400000f3066baf80cb8d0e59c88ef66bafc0ced", 0x61}], 0x1, 0x10, &(0x7f00000002c0)=[@flags={0x3, 0x200000}, @vmwrite={0x8, 0x0, 0x1a, 0x0, 0x401, 0x0, 0x80, 0x0, 0x6}], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 177.005832] binder: send failed reply for transaction 335 to 13336:13339 [ 177.012789] binder: send failed reply for transaction 336, target dead [ 177.019541] binder: send failed reply for transaction 337, target dead [ 177.026549] binder: undelivered TRANSACTION_ERROR: 29189 13:52:11 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(r0, &(0x7f00000054c0)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1, &(0x7f00000001c0)=""/102, 0x66, 0x100000001}, 0x8}, {{&(0x7f00000002c0)=@nfc, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000100)=""/62, 0x3e}], 0x2, &(0x7f0000000400)=""/201, 0xc9, 0x5}, 0x7}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)=""/89, 0x59}], 0x1, 0x0, 0x0, 0x80000001}, 0x3}, {{&(0x7f00000005c0)=@ipx, 0x80, &(0x7f0000001900)=[{&(0x7f0000000640)=""/44, 0x2c}, {&(0x7f0000000680)=""/26, 0x1a}, {&(0x7f00000006c0)=""/163, 0xa3}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/6, 0x6}, {&(0x7f0000000840)=""/93, 0x5d}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/23, 0x17}], 0x8, 0x0, 0x0, 0x6a4}, 0xff}, {{&(0x7f0000001980)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000001a00)=""/106, 0x6a}, {&(0x7f0000001a80)=""/68, 0x44}, {&(0x7f0000001b00)=""/3, 0x3}, {&(0x7f0000001b40)=""/178, 0xb2}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/59, 0x3b}, {&(0x7f0000003c40)=""/180, 0xb4}, {&(0x7f0000003d00)=""/96, 0x60}], 0x9, &(0x7f0000003e40)=""/139, 0x8b, 0x5}, 0xfff}, {{&(0x7f0000003f00)=@ipx, 0x80, &(0x7f0000004f80)=[{&(0x7f0000003f80)=""/4096, 0x1000}], 0x1, &(0x7f0000004fc0)=""/93, 0x5d, 0xfffffffffffffffa}, 0xfffffffffffffbff}, {{&(0x7f0000005040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000053c0)=[{&(0x7f00000050c0)=""/3, 0x3}, {&(0x7f0000005100)=""/234, 0xea}, {&(0x7f0000005200)=""/237, 0xed}, {&(0x7f0000005300)=""/83, 0x53}, {&(0x7f0000005380)=""/23, 0x17}], 0x5, &(0x7f0000005440)=""/94, 0x5e, 0x6}, 0xc56}], 0x7, 0x0, &(0x7f0000005680)={0x77359400}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") shutdown(r0, 0x1) [ 177.057583] binder: undelivered TRANSACTION_COMPLETE [ 177.062929] binder: undelivered TRANSACTION_ERROR: 29189 [ 177.128749] *** Guest State *** [ 177.132318] CR0: actual=0x0000000000000021, shadow=0x0000000000000001, gh_mask=fffffffffffffff7 [ 177.141308] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 177.150192] CR3 = 0x0000000000000000 [ 177.154006] RSP = 0x0000000000000f80 RIP = 0x0000000000008006 [ 177.160058] RFLAGS=0x00000046 DR7 = 0x0000000000000400 [ 177.166180] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 13:52:11 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:11 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast1}, &(0x7f0000000080)=0x8) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='\x00', 0xffffffffffffff9c}, 0x10) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000240)=""/79, 0x4f}, &(0x7f00000002c0), 0x8}, 0x20) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x1bc, &(0x7f0000000140)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 13:52:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"626f6e643000000000f98b00"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000040)="0f425f69f20f38f10b650feda5000066b9800000c00f326635004000000f30b80d008ec86666de3c0f01cf260f01cb2665660f3a618c0060540fc76b39", 0x3d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 177.172899] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 177.180926] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 177.188955] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 177.196981] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 177.205015] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 177.213138] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 177.221191] GDTR: limit=0x000007ff, base=0x0000000000001000 13:52:11 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x2000000000000) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) r0 = syz_open_dev$dspn(&(0x7f0000004ff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0xb9, 0x4, 0x722, 0xdd, 0x4, 0x200, 0x2, 0x7, 0x1, 0x7}) poll(&(0x7f0000ce5fd8)=[{r0}], 0x1, 0xffffffffffffffe1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x800800c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f000070f000/0x2000)=nil, 0x2000, 0x7, 0x12, r0, 0x0) [ 177.229230] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 177.237262] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 177.245330] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 177.253371] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 177.259856] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 177.267367] Interruptibility = 00000008 ActivityState = 00000000 [ 177.273684] *** Host State *** [ 177.276954] RIP = 0xffffffff811f3d34 RSP = 0xffff8801962b7350 [ 177.283006] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 177.289495] FSBase=00007fb17ab10700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 177.297388] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 177.303327] CR0=0000000080050033 CR3=00000001d078a000 CR4=00000000001426f0 [ 177.310410] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380 [ 177.317125] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 177.323235] *** Control State *** 13:52:12 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={"66696c746572000000000000058300", 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 177.326765] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 177.333523] EntryControls=0000d1ff ExitControls=0023efff [ 177.339045] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 177.346058] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 177.352770] VMExit: intr_info=00000000 errcode=00000000 ilen=00000006 [ 177.359409] reason=80000021 qualification=0000000000000000 [ 177.366759] IDTVectoring: info=00000000 errcode=00000000 [ 177.372312] TSC Offset = 0xffffff9df3dddbbc [ 177.376690] EPT pointer = 0x00000001ca76801e 13:52:12 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:12 executing program 2: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) timer_create(0x3fffffffc, &(0x7f0000000080)={0x0, 0x3b, 0x0, @tid=r0}, &(0x7f0000000140)=0x0) timer_settime(0x0, 0x0, &(0x7f0000001000)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f0000000000)) timer_settime(r1, 0x8, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000040)) [ 177.473741] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 177.489219] *** Guest State *** [ 177.492660] CR0: actual=0x0000000000000021, shadow=0x0000000000000001, gh_mask=fffffffffffffff7 [ 177.501639] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 177.510609] CR3 = 0x0000000000000000 [ 177.514425] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 177.520541] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 177.526707] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 177.533937] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 177.542064] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 177.550101] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 177.558152] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 177.566190] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 177.574251] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 177.582294] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 177.590529] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 177.598568] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 177.606625] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 177.614656] EFER = 0x0000000000000001 PAT = 0x0007040600070406 13:52:12 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={"66696c7465720000000500", 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) [ 177.621139] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 177.628645] Interruptibility = 00000008 ActivityState = 00000000 [ 177.634952] *** Host State *** [ 177.638207] RIP = 0xffffffff811f3d34 RSP = 0xffff88019526f350 [ 177.644274] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 177.650762] FSBase=00007fb17aace700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 177.658620] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 177.664587] CR0=0000000080050033 CR3=00000001d078a000 CR4=00000000001426e0 [ 177.671671] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86c01380 [ 177.678416] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 177.684275] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 177.684712] *** Control State *** [ 177.692101] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 177.695515] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 177.695527] EntryControls=0000d1ff ExitControls=0023efff [ 177.706765] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 177.710660] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 177.710671] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 177.710680] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 177.710688] reason=80000021 qualification=0000000000000000 [ 177.710695] IDTVectoring: info=00000000 errcode=00000000 [ 177.710702] TSC Offset = 0xffffff9df3dddbbc [ 177.710711] EPT pointer = 0x00000001ca76801e [ 177.764480] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 177.888761] binder_alloc: binder_alloc_mmap_handler: 13449 20ffa000-20ffd000 already mapped failed -16 [ 177.898566] binder: BINDER_SET_CONTEXT_MGR already set [ 177.904171] binder: 13449:13516 ioctl 40046207 0 returned -16 [ 177.904380] binder_alloc: 13449: binder_alloc_buf, no vma [ 177.915948] binder: 13449:13517 transaction failed 29189/-3, size 0-0 line 2967 [ 177.925988] binder: send failed reply for transaction 340 to 13449:13452 [ 177.933332] binder: undelivered TRANSACTION_ERROR: 29189 13:52:12 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x6000000000000000, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xffff, &(0x7f0000000000)="025c15254a3726b514eabf0cb5700000000000000000") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = dup(r1) sendmsg$netlink(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000540)=[@cred={0x20}], 0x20}, 0x0) 13:52:12 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={"66696c746572058200", 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:12 executing program 4: r0 = socket(0x200000000000011, 0x803, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000020c0)={'vcan0\x00', r2}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000004c0)={@empty, 0x0}, &(0x7f0000000500)=0x14) getpeername(r0, &(0x7f0000000580)=@can={0x1d, 0x0}, &(0x7f0000000600)=0x80) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={0x0, @loopback, @multicast1}, &(0x7f00000006c0)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000700)={@loopback, @broadcast, 0x0}, &(0x7f0000000740)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={0x0, @dev, @broadcast}, &(0x7f00000007c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@mcast2, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000900)=0xe8) getsockopt$inet_buf(r0, 0x0, 0x38, &(0x7f0000001080)=""/4096, &(0x7f0000002080)=0x1000) r11 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r11, 0x80605414, &(0x7f0000000fc0)=""/172) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000940)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000a40)=0xe8) getsockname$packet(r0, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b00)=0x14) getsockname$packet(r0, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b80)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000f80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="80030000", @ANYRES16=r1, @ANYBLOB="00012cbd7000ffdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="ac0102003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000004000080003000b000000080004000500000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ff00000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e0000000800040001cc000008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="b001020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400bdf10000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000900000008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="40000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r13, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14], 0x380}, 0x1, 0x0, 0x0, 0x40004}, 0x40) setsockopt$inet6_tcp_TLS_TX(r11, 0x6, 0x1, &(0x7f0000000a80), 0x4) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') openat$zero(0xffffffffffffff9c, &(0x7f0000002200)='/dev/zero\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00000000cc6f619164e20659253dffba47ff370c07d05718676978997f1e95e0df029bec9e550a0c172add5a75f38825c715df6ae199a928af1d8d2bfb4ed90d4dfaa3f81f8b7454d2ad1c38bd694de95e82e98de06158308496a800833287d2e8357e5715b75af82b0c401a4381d6d7ca47df6ab01937d6826f196c95db8f46de806cd538c635a211adfe072cdcd692af6e001a52af14026c018ba64a8e39c8ee4132f8536affa5deef", @ANYRES16=r15, @ANYBLOB="10022bbd70ffdbdf250200000008000600ffffffff280003000800010000000000140002007665746831000000000000000000000008000500ac1414aa14000100080002003c00000008000b0073697000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x1) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000540)=0x1, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x40000000, 0x2000}, 0xffffffffffffffe9) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) sendmsg$can_raw(r11, &(0x7f00000021c0)={&(0x7f0000002100)={0x1d, r2}, 0x10, &(0x7f0000002180)={&(0x7f0000002140)=@can={{0x0, 0x5, 0x5, 0xffffffffffffffc2}, 0x1, 0x1, 0x0, 0x0, "e70231b845587721"}, 0x10}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000040) 13:52:12 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:12 executing program 7: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x80000, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000200)={0x2, 0x5b}) socket$netlink(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x800003e, 0x0) r2 = socket(0x10, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, 0x6e) sendmsg$nl_route(r2, &(0x7f0000000000)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000000780)=@setlink={0x40, 0x13, 0x711, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xc, 0x4, @remote}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}]}, 0x40}}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000300)={{0x2, 0x3f, 0x3, 0x8, 0x2d, 0x9}, 0x1, 0x5, 0x8, 0xfffffffffffffffc, 0x1, "d76810a76365b841d86c2c2179de859bc5b77ae8a783a30d7cbfed827cca7e408cc90194f93b95a865de374f85eb41ca81370eda25a718161dcf4df235a31e850c94f36d5469ae6825c064cc28425b814562855ef13e833f65581e5ef8daaafad9089a602e54f2570557ebd15a010be37320bc297192a63e2b36a54bf9a698b7"}) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={r3, @local, @multicast1}, 0xc) fsync(r2) write$tun(r1, &(0x7f0000000100)={@void, @val={0x1, 0x4, 0x4, 0x2, 0x6, 0x3ff}, @x25={0x2, 0x1f, 0xf, "6c79d609e63e3088cef2848183cde5f89818658d2985bde48f80ccbe90202942f41d3f5e468e218ed317125901bd89c0ea82a5e6761c361deddc9e"}}, 0x48) 13:52:12 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair$inet6(0xa, 0x4, 0xfffffffffffffff8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000001200)={r1}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bind(r2, &(0x7f0000000a00)=@in={0x2, 0x4e24, @multicast2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0xf0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f00000000c0)) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000200000000000000006100000000000000"]) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r6, 0x500, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcbd}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x1) accept4$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) recvmsg$kcm(r0, &(0x7f0000001040)={&(0x7f0000000dc0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000e40)=""/122, 0x7a}, {&(0x7f0000000ec0)=""/244, 0xf4}], 0x2, &(0x7f0000001000)=""/60, 0x3c, 0x1}, 0x10000) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000680)="7027244a93b90a1de7bfc1ed0e95876df0d074347d046d60f44959b7fdfcd5e61a703636c5ebe0773ad10ea9bc3018566824463898e81aad5629e71e5d30f2b5b68d8a497d8f19d491f51d8585f2e0eeed54220fbe69d7d01491f2edd5c5cfc90c22d5e048fcdab7e8e413dc479c7bf4b4fc86e17013aca658aade625505ebc392cac63082c42cbcd02827e2a0ad26f559ef4c1cfb60a8ee9c9b5412935bc290d54f34c4d04e06839006ac9ce34c1738b9951ffae2fa452b08d3d7e1803a1c868489e5a63f710937692c7ee58f334cccd05805c5cef9103dcd01e4ffd34e389b26498318c74651b5b86b3af64e16545f85235d33e171b4112479ede24d83d1f161b933d261eefca2c28faa27b7911f1bb07e0b836aa5253aa1a8cef07170f3f750fd807f3dcf176f31d902f17f688490364d596f2623499e2221a9f81a7a9ddd3062f7ca1055ea8b555e8b1a9272e977ce051d77cbf9c89625b1981becba833adaedc1328b3c2a8071078ec5c04467e9cca168fa01937e7f568fae5cdff21bba6fb056434b04d9c3ce5e59d84983e8a7dab117c376d3e7de357d456fc172f2f5b189afd8a5221f9b141b08", 0x1ab}], 0x1, &(0x7f0000002900)}, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000840)=0x4, 0x8) sendmsg$kcm(r7, &(0x7f00000013c0)={&(0x7f0000000880)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000900)="c42d2e3141f79cc224d3d47eab4f27d04b6886e908f9fd06c5b48998fac52fb23ee549e8dc1a4507832eea7ddb573dc00f3fa3a00b85169005e482fd2d1ab07fbfcee91adc686bc35bc596ffd8b9ab19187bc32d55376d617389b91d0a7ad90cf7912330f5c12513bf30986d1c181f6d639bad805fef4f5c780c4d6ba87a29fc8c6615555aac400cb3abc0eb4ec6f30e74fe34f1777335151b65ec8e70d8f1280b1862dae936756da348a0365299ec3fcf61509a08b45c019b07fd6b045bd2ae64b3a0", 0xc3}], 0x1, &(0x7f0000001340)=ANY=[]}, 0x8800) sendmsg(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000002c0)="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", 0x48a}], 0x1, &(0x7f0000001580)}, 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='securityfs\x00', 0x100021, &(0x7f0000000480)) [ 177.938950] binder: undelivered TRANSACTION_COMPLETE [ 177.944314] binder: undelivered TRANSACTION_ERROR: 29189 13:52:12 executing program 2: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xffffffffffffff62) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x6, 0x2000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000002c0)=r4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000140)=0x10) [ 177.991845] netlink: 'syz-executor7': attribute type 4 has an invalid length. [ 177.999323] veth1_to_team: Invalid MTU -1431655766 requested, hw min 68 13:52:12 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 178.022773] proc: unrecognized mount option "LDʺza Q)c@{ e >?K|d18<ê2b&E*"4H։atx[DfC mڥl0!5#JX~=[t6n"I[rx!y'%"&τ pxrX 2oSlNi)B;[Dv[_u'0edLFVw̪F4k']*DQ [ 178.022773] l&It?/GjJ͖xQcWZ:HgLM͊ٗtLg40\4nZOL27Kp  fZU& [ 178.039693] netlink: 'syz-executor7': attribute type 4 has an invalid length. [ 178.066828] veth1_to_team: Invalid MTU -1431655766 requested, hw min 68 13:52:12 executing program 7: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000040)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0xffffffffffffff53, 0x80, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5}, 0x8) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, 0x7, @random="2ffa6125ace5", 'bcsh0\x00'}) r2 = accept(r0, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000080)=0x80) r3 = gettid() wait4(r3, &(0x7f00000002c0), 0x80000000, &(0x7f0000000300)) getsockopt$inet_dccp_buf(r2, 0x21, 0x80, &(0x7f0000000240)=""/31, &(0x7f0000000280)=0x1f) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000100)={{0xf4, 0x8}, {0xfffffffffffffffc, 0x6}, 0xb13, 0x5, 0x2}) ioctl$RTC_WIE_ON(r4, 0x700f) 13:52:12 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={"66696c7465728800", 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:12 executing program 6: pipe(&(0x7f0000000040)) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") listen(r0, 0x14040004) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0xffffffffffff0001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f00000007fa)="97", 0x1, 0x0, &(0x7f00006f9000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 13:52:12 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:12 executing program 2: r0 = socket$inet6(0xa, 0x7, 0xf7ffffffdfffeffa) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x109400, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000040)={0x5, 0x4, 0x8001}) r2 = socket(0x400020000000010, 0x2, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x7f}, &(0x7f00000000c0)=0x8) flock(r2, 0xb) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r3, 0x81}, &(0x7f0000000140)=0xc) write(r2, &(0x7f0000a1cf6c)="1f00000054000d0000000000fc07ff1b070404390000000007000100010039", 0x1f) 13:52:13 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:13 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x240000) r1 = dup(0xffffffffffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0xa0, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x20, @empty, 0x3}, @in6={0xa, 0x4e20, 0x3, @local, 0xfd65}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0xfc7, @dev={0xfe, 0x80, [], 0xc}, 0x80000}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x3, @loopback}, @in={0x2, 0x4e20, @rand_addr}]}, &(0x7f0000000200)=0x10) setns(r1, 0x20000000) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80180001}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x101, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x2000c805) link(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') getsockopt$inet6_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000400)=""/182, &(0x7f00000004c0)=0xb6) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000500)={r3, 0x6}, 0x8) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [{0x20, "5d012b657468312c6d696d655f747970657b2a2f"}, {0x20, '}cpuset$}{GPLem1nodevPcgroup\'ppp0'}, {0x20, '@ppp1systemtrusted'}, {}, {0x20, '/dev/dmmidi#\x00'}, {0x20, '-()-vmnet1'}, {0x20, 'fou\x00'}], 0xa, "c6a02898aeb0136319b958443644"}, 0x82) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000600)={r2, 0x1f}, 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r0, &(0x7f0000000640)="b530ab513ceb0a4d90f0a5c9ec9b0816aa68fbe0144b5ece8e0fa11844a30722c99e43e85c8b76b238032a4b7dfb9d105961e65b2de092996d13f20dedf1ea23a6fb482a4dd038d6e6dcd4b8e4d28c526ca7bc8ff206fcbcd788a56e140e8d6864d23db5346b8f2fd37f33a9095d2c9161b5d545ea43320ad5a02559d9c7cec98a96c145a7f50f1bc9352d682f196b0e3450e2ba860cc42fbb5d92a53f71716dc3e026a7fe31384ea9b79c6a43117c3fe3ef04c6e97989b16fd750fb15c4f933289fc315682721d7edaf9c3cdb2c11292d02c183f10f7e600857fadff9", &(0x7f0000000740)=""/102}, 0x18) ioctl$sock_ifreq(r0, 0x897b, &(0x7f0000000800)={'bridge_slave_1\x00', @ifru_mtu=0x5}) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000840)=0x100000, 0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000880)=0x2, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/nullb0\x00', 0x218000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000900)={{0x0, 0x9}, 'port0\x00', 0x10, 0x1000, 0x30, 0x1, 0x0, 0x1af5, 0x80000001, 0x0, 0x4, 0xfffffffffffffeff}) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000009c0)={0x4, 0x6}) r5 = syz_open_dev$audion(&(0x7f0000000a00)='/dev/audio#\x00', 0x149, 0x2080) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000a40)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000b00)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000b80)={{0x8, 0x7, 0x800, 0x800, 'syz0\x00', 0x8}, 0x5, 0x30, 0xdaf7, r6, 0x6, 0x9, 'syz0\x00', &(0x7f0000000b40)=['#! ', 'port0\x00', 'bridge_slave_1\x00', "5d012b657468312c6d696d655f747970657b2a2f", 'port0\x00', '/dev/nullb0\x00'], 0x3e, [], [0xff, 0x48c, 0x101, 0x771]}) rmdir(&(0x7f0000000cc0)='./file0\x00') getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000d00)={r2, 0x1, 0x5, 0x3}, &(0x7f0000000d40)=0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000e40)={{0x0, 0x5, 0xdc3f, 0xf87, 'syz1\x00', 0x7}, 0x0, 0x20, 0x7b, r6, 0x7, 0x2, 'syz1\x00', &(0x7f0000000d80)=['%nodeveth0self\\*-mime_typemd5summime_type-/(\x00', '$md5sum-user^eth0}eth1$^\x00', '%*vboxnet1\x00', 'em0vmnet0$$vmnet0bdev-userppp0[}nodevself&)securitymd5sum*self\x00', "f42f00", 'port0\x00', 'port0\x00'], 0x9f, [], [0x1, 0xd71c, 0x4, 0x3ff]}) write$P9_RREADDIR(r1, &(0x7f0000000f80)={0x49, 0x29, 0x2, {0x0, [{{0x1, 0x4, 0x5}, 0x4a, 0xf3f, 0x7, './file0'}, {{0x8, 0x0, 0x1}, 0x800, 0x5, 0x7, './file0'}]}}, 0x49) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001040)={0x1, &(0x7f0000001000)=[{0x6, 0x3f, 0x200, 0x101}]}, 0x10) [ 178.269311] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 178.292263] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 178.801731] binder_alloc: binder_alloc_mmap_handler: 13529 20ffa000-20ffd000 already mapped failed -16 [ 178.811533] binder: BINDER_SET_CONTEXT_MGR already set [ 178.816913] binder: 13529:13599 ioctl 40046207 0 returned -16 [ 178.817111] binder_alloc: 13529: binder_alloc_buf, no vma [ 178.828656] binder: 13529:13600 transaction failed 29189/-3, size 0-0 line 2967 [ 178.836893] binder: undelivered TRANSACTION_ERROR: 29189 [ 178.842480] binder: send failed reply for transaction 343 to 13529:13533 13:52:13 executing program 5: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0xfdfdffff, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 13:52:13 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000040c0), 0xae7) read$FUSE(r1, &(0x7f0000001000), 0x1000) close(r1) setsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000340)="39ebc0ec24afb7d73bfd7030d90f2ed16eaa2a1ee502a4e11a1eefc221243d66864872c5d0502ab8403c0e52e3d67bdfb2902273d2ed56b488c564ec281abdedf2f721c93384fc9fcae366ce49291d2e3f2a4a2c0925ab2a8b449a890958e3bb7a72b8c4dd5e8c34a28ed2fc0e022b01211174bfe9f7a62bf2c78d57348372f984e68e3bf22c3fcaab521f5ea67de04a512dc1ef3691", 0x96) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000240)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x9, 0x0) 13:52:13 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={"66696c7465720000000100", 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:13 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:13 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x481, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0xfffffffffffffff9, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500a000090780000119ea2f4000000000000000b17b8bcab4e2336e0dd69429349adbf58d67b1566f3b89842d869063bc3ca49c4c5664c47476c61b40c916fbd77c218"], &(0x7f00000002c0)) 13:52:13 executing program 4: r0 = inotify_init1(0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000fa4000)={0x0, r1}) fcntl$getownex(r0, 0x10, &(0x7f00000045c0)) 13:52:13 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0xfffffffffffffee2) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/48, 0x30}, 0x0) [ 178.849618] binder: undelivered TRANSACTION_COMPLETE [ 178.854787] binder: undelivered TRANSACTION_ERROR: 29189 13:52:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025c3f0a00145f8f764070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x6d031, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 13:52:13 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) [ 178.945203] ================================================================== [ 178.952876] BUG: KASAN: slab-out-of-bounds in request_end+0x98e/0xb20 [ 178.959569] Read of size 8 at addr ffff8801aa271438 by task syz-executor6/13610 [ 178.967025] [ 178.968673] CPU: 1 PID: 13610 Comm: syz-executor6 Not tainted 4.18.0-rc7+ #169 [ 178.976045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.985414] Call Trace: [ 178.988026] dump_stack+0x1c9/0x2b4 [ 178.991713] ? dump_stack_print_info.cold.2+0x52/0x52 [ 178.996952] ? printk+0xa7/0xcf [ 179.000274] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 179.005058] ? request_end+0x98e/0xb20 [ 179.008968] print_address_description+0x6c/0x20b [ 179.013894] ? request_end+0x98e/0xb20 [ 179.017811] kasan_report.cold.7+0x242/0x2fe [ 179.022261] __asan_report_load8_noabort+0x14/0x20 [ 179.027218] request_end+0x98e/0xb20 [ 179.030974] ? fuse_get_req_for_background+0x30/0x30 [ 179.036115] ? lock_downgrade+0x8f0/0x8f0 [ 179.040311] end_requests+0x296/0x460 [ 179.044139] ? perf_trace_lock+0xde/0x920 [ 179.048362] ? request_end+0xb20/0xb20 [ 179.052290] ? graph_lock+0x170/0x170 [ 179.056121] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 179.061688] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 179.067258] ? locks_remove_file+0x402/0x5c0 [ 179.071700] fuse_dev_release+0x18c/0x2e0 [ 179.075879] ? fsnotify_first_mark+0x350/0x350 [ 179.080491] ? fuse_abort_conn+0x1580/0x1580 [ 179.084929] ? fsnotify+0x14e0/0x14e0 [ 179.088768] ? fuse_abort_conn+0x1580/0x1580 [ 179.093207] __fput+0x355/0x8b0 [ 179.096535] ? fput+0x1a0/0x1a0 [ 179.099841] ? _raw_spin_unlock_irq+0x27/0x70 [ 179.104370] ____fput+0x15/0x20 [ 179.107684] task_work_run+0x1ec/0x2a0 [ 179.111603] ? task_work_cancel+0x250/0x250 [ 179.115955] ? exit_to_usermode_loop+0x8c/0x370 [ 179.120686] exit_to_usermode_loop+0x313/0x370 [ 179.125304] ? syscall_slow_exit_work+0x500/0x500 [ 179.130185] do_syscall_64+0x6be/0x820 [ 179.134105] ? finish_task_switch+0x1d3/0x870 [ 179.138629] ? syscall_return_slowpath+0x5e0/0x5e0 [ 179.143591] ? syscall_return_slowpath+0x31d/0x5e0 [ 179.148558] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 179.153946] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 179.158881] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 179.164082] RIP: 0033:0x456a09 [ 179.167261] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 179.186517] RSP: 002b:00007f2981760c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.194244] RAX: 0000000000000030 RBX: 00007f29817616d4 RCX: 0000000000456a09 [ 179.201508] RDX: 0000000000001000 RSI: 0000000020001000 RDI: 0000000000000015 [ 179.208785] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 179.216053] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 179.223325] R13: 00000000004d2680 R14: 00000000004c76ca R15: 0000000000000000 [ 179.230594] [ 179.232210] Allocated by task 13610: [ 179.235923] save_stack+0x43/0xd0 [ 179.239366] kasan_kmalloc+0xc4/0xe0 [ 179.243071] kmem_cache_alloc_trace+0x152/0x780 [ 179.247730] fuse_dev_alloc+0xbd/0x500 [ 179.252051] fuse_fill_super+0xd39/0x1ee0 [ 179.256209] mount_nodev+0x6b/0x110 [ 179.259830] fuse_mount+0x2c/0x40 [ 179.263272] mount_fs+0xae/0x328 [ 179.266634] vfs_kern_mount.part.34+0xdc/0x4e0 [ 179.271477] do_mount+0x581/0x30e0 [ 179.275004] ksys_mount+0x12d/0x140 [ 179.278638] __x64_sys_mount+0xbe/0x150 [ 179.282604] do_syscall_64+0x1b9/0x820 [ 179.286490] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 179.291674] [ 179.293285] Freed by task 2095: [ 179.296557] save_stack+0x43/0xd0 [ 179.299998] __kasan_slab_free+0x11a/0x170 [ 179.304231] kasan_slab_free+0xe/0x10 [ 179.308026] kfree+0xd9/0x260 [ 179.311131] rcu_process_callbacks+0x1004/0x1850 [ 179.315889] __do_softirq+0x2e8/0xb17 [ 179.319687] [ 179.321301] The buggy address belongs to the object at ffff8801aa2713c0 [ 179.321301] which belongs to the cache kmalloc-128 of size 128 [ 179.333964] The buggy address is located 120 bytes inside of [ 179.333964] 128-byte region [ffff8801aa2713c0, ffff8801aa271440) [ 179.345832] The buggy address belongs to the page: [ 179.350796] page:ffffea0006a89c40 count:1 mapcount:0 mapping:ffff8801dac00640 index:0x0 [ 179.358943] flags: 0x2fffc0000000100(slab) [ 179.363180] raw: 02fffc0000000100 ffffea0007267248 ffffea0007289cc8 ffff8801dac00640 [ 179.371072] raw: 0000000000000000 ffff8801aa271000 0000000100000015 0000000000000000 [ 179.378944] page dumped because: kasan: bad access detected [ 179.384655] [ 179.386265] Memory state around the buggy address: [ 179.391192] ffff8801aa271300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.398547] ffff8801aa271380: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 179.405913] >ffff8801aa271400: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 179.413270] ^ [ 179.418452] ffff8801aa271480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 179.425811] ffff8801aa271500: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 179.433162] ================================================================== [ 179.440693] Disabling lock debugging due to kernel taint 13:52:14 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000040)=0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1003200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x1014, 0x38, 0x4, 0x70bd2a, 0x25dfdbfb, {0x4}, [@generic="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"]}, 0x1014}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 13:52:14 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev}, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xd1, &(0x7f0000000000)=0xffc99a3b, 0x4) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x200005fe, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0), 0x6) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 13:52:14 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000014010000010000003f00000007000000", @ANYBLOB='Q\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="020000000000000010000000000000000500000000000000"], 0x38}, 0x0) 13:52:14 executing program 0: socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f8571") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'filter\x00\a\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000380), 0x0, [{}, {}]}, 0x98) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028000500000000000000000001000000080000000f0000008331f0d9618f6e51be04a91c6c8834c9fe1cae6d3fb1d70c68449ad81b7b8babdc51ed41e4957f389121c6acc2d140960cd5909ffe94002ce6252bc4b0ba1dc02eb8c2b325f01d59a6"], 0x1}}, 0x0) 13:52:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000340), 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f00000001c0), 0x0, r3}) unshare(0x100002000400) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000000), 0x0, r3, 0x4}) 13:52:14 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c833, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000002c62137814d879573400000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000000140)=""/195}, 0x16f) [ 179.446549] Kernel panic - not syncing: panic_on_warn set ... [ 179.446549] [ 179.453947] CPU: 1 PID: 13610 Comm: syz-executor6 Tainted: G B 4.18.0-rc7+ #169 [ 179.462733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.462738] Call Trace: [ 179.462763] dump_stack+0x1c9/0x2b4 [ 179.478317] ? dump_stack_print_info.cold.2+0x52/0x52 [ 179.483518] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 179.488301] panic+0x238/0x4e7 [ 179.491519] ? add_taint.cold.5+0x16/0x16 [ 179.495694] ? do_raw_spin_unlock+0xa7/0x2f0 [ 179.500125] ? do_raw_spin_unlock+0xa7/0x2f0 [ 179.504556] ? request_end+0x98e/0xb20 [ 179.508467] kasan_end_report+0x47/0x4f [ 179.512463] kasan_report.cold.7+0x76/0x2fe [ 179.516805] __asan_report_load8_noabort+0x14/0x20 [ 179.521752] request_end+0x98e/0xb20 [ 179.525469] ? fuse_get_req_for_background+0x30/0x30 [ 179.530583] ? lock_downgrade+0x8f0/0x8f0 [ 179.534752] end_requests+0x296/0x460 [ 179.538548] ? perf_trace_lock+0xde/0x920 [ 179.542690] ? request_end+0xb20/0xb20 [ 179.546586] ? graph_lock+0x170/0x170 [ 179.550395] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 179.555933] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 179.561460] ? locks_remove_file+0x402/0x5c0 [ 179.565859] fuse_dev_release+0x18c/0x2e0 [ 179.570006] ? fsnotify_first_mark+0x350/0x350 [ 179.574590] ? fuse_abort_conn+0x1580/0x1580 [ 179.579000] ? fsnotify+0x14e0/0x14e0 [ 179.582800] ? fuse_abort_conn+0x1580/0x1580 [ 179.587198] __fput+0x355/0x8b0 [ 179.590475] ? fput+0x1a0/0x1a0 [ 179.593831] ? _raw_spin_unlock_irq+0x27/0x70 [ 179.598418] ____fput+0x15/0x20 [ 179.601686] task_work_run+0x1ec/0x2a0 [ 179.605578] ? task_work_cancel+0x250/0x250 [ 179.609891] ? exit_to_usermode_loop+0x8c/0x370 [ 179.614566] exit_to_usermode_loop+0x313/0x370 [ 179.619153] ? syscall_slow_exit_work+0x500/0x500 [ 179.623988] do_syscall_64+0x6be/0x820 [ 179.628021] ? finish_task_switch+0x1d3/0x870 [ 179.632508] ? syscall_return_slowpath+0x5e0/0x5e0 [ 179.637427] ? syscall_return_slowpath+0x31d/0x5e0 [ 179.642353] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 179.647709] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 179.652544] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 179.657719] RIP: 0033:0x456a09 [ 179.660890] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 179.680097] RSP: 002b:00007f2981760c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.687793] RAX: 0000000000000030 RBX: 00007f29817616d4 RCX: 0000000000456a09 [ 179.695051] RDX: 0000000000001000 RSI: 0000000020001000 RDI: 0000000000000015 [ 179.702312] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 179.709572] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 179.716827] R13: 00000000004d2680 R14: 00000000004c76ca R15: 0000000000000000 [ 179.724683] Dumping ftrace buffer: [ 179.728217] (ftrace buffer empty) [ 179.731909] Kernel Offset: disabled [ 179.735532] Rebooting in 86400 seconds..