bond\x00', @local, [0x0, 0xff, 0x0, 0xff], @dev={[], 0xa}, [0x103, 0x0, 0x0, 0xff, 0x0, 0xff], 0xd8, 0x110, 0x148, [@vlan={'vlan\x00', 0x8, {{0x0, 0x7, 0x800, 0x2, 0x2}}}, @cluster={'cluster\x00', 0x10, {{0x3, 0x8001, 0x7, 0x1}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@dev={[], 0xe}, 0xfffffffffffffffc}}}]}, @snat={'snat\x00', 0x10, {{@random="27052ce59061", 0xfffffffffffffffe}}}}]}]}, 0x250) 22:11:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x1b, 0x5, 0x590, 0x168, 0x168, 0x0, 0x0, 0x2a0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x3, 0xfffffffffffffffe}}, @common=@srh={0x30, 'srh\x00', 0x0, {0x73, 0x100, 0xef, 0x40, 0x0, 0x8, 0x2}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x9, @ipv4, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}, @port=0x4e23, @gre_key=0x9}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x1d}, @empty, [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0xff000000, 0x0, 0xffffff00, 0xff000000], 'dummy0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0xdf, 0x7fff, 0x2}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0x9, 0x1ff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv4=@multicast2, @ipv6=@mcast1, @port=0x4e22, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={[], [], @broadcast}, @ipv6, @gre_key=0x7, @gre_key=0x1}}}, {{@uncond, 0x0, 0xc8, 0x110}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}, @ipv6, @icmp_id=0x66, @gre_key=0x6}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) r1 = add_key(&(0x7f00000004c0)='big_key\x00', &(0x7f0000000500), &(0x7f0000000540)="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", 0x4d1, 0xfffffffffffffffd) keyctl$read(0x3, r1, &(0x7f0000000480)=""/4, 0x3edd33e67d595556) [ 236.718412] binder: 14336:14346 got reply transaction with no transaction stack [ 236.719192] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 236.725976] binder: 14336:14346 transaction failed 29201/-71, size 0-0 line 2759 22:11:20 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x700}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:20 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) r1 = accept4$inet(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x9, 0x7, 0x8, 0x5, 0xc, 0x1}, 0x2c) 22:11:20 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 22:11:20 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/67) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000100)) umount2(&(0x7f0000000200)='./file0\x00', 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x4) 22:11:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 236.853742] kernel msg: ebtables bug: please report to author: Wrong nr of counters 22:11:21 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x8005) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x3, 0x80, 0x1, 0x8001, 0xb9df308, 0x2, 0x5, 0x67, 0x2, 0x5}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)={0x2}) 22:11:21 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet6(r0, &(0x7f0000000140)="3f010000f70800000000000094bc4a91985e7b8e8fbe0d8e", 0x18, 0x0, &(0x7f0000005fe4)={0xa, 0x8100, 0x4, @dev}, 0x1c) [ 236.952997] kernel msg: ebtables bug: please report to author: bad policy [ 236.964835] Unknown ioctl -2141170668 [ 236.987449] Unknown ioctl -2141170668 [ 236.998551] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.009519] kernel msg: ebtables bug: please report to author: Wrong nr of counters 22:11:21 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140), 0xffffffae) listen(r0, 0x10102) read(r0, &(0x7f00000000c0)=""/113, 0x71) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x4, 0x4) close(r0) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x40004e23, 0x0, @loopback}, 0x1c) 22:11:21 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000012000)={0x10, 0x4, 0x4, 0x8}, 0x2c) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, &(0x7f00000001c0)=""/244, 0xf4, 0x4}, 0x10000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f000000060000008005000000020000e8040000180100000004000000000000e8040000e8040000e8040000e8040000e804000006000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x5e0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) [ 237.054314] kernel msg: ebtables bug: please report to author: bad policy [ 237.061687] binder: 14375:14376 got reply transaction with no transaction stack [ 237.069290] binder: 14375:14376 transaction failed 29201/-71, size 0-0 line 2759 22:11:21 executing program 0: prctl$void(0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:11:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x4c}}, 0xe) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) prctl$intptr(0x1e, 0x1f) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}}, 0xe) pipe(&(0x7f0000000000)) 22:11:21 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) [ 237.098706] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a", 0x4) r2 = accept$alg(r1, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x200) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="0010000025000000070000002f655c8105d4f515e559a3a63798eb359a4c962e05a6d494610fa163843b74bb54ff9e6392a1cd0adfb190bb2f5f293453a64ad8f33ce326db367f7821df36209adda75a98aaade6b307c28ec8df766f6cdf99dc5bfda2d64ec883529df3154f1e98f426650c99fbee23f719cfbc0db19939fe9a37c1bb3f59aa8f59a9ab5041bf9011b9ada0ae9b52463b8f97399e8e73cc8b57017bc131db45bfb5696e02f84181e14fe129bbc7cb34efaa9202c7956ba7fdd25b9766d4e58358d18143ee7c4323f146c8cef56569c352ec91ccacc3636b44a82d712a538562f34702b4127bfc41ad73f1b5a41eb38ea6d5c0bf6d63ad963f7333fa674be97e7ec8e701e146263c86e287818fa036b5ed0b9a6193215ee2e368a87f7892a577c8b592360bee6d74f2720b15a18c8a1d45eb61149a48ad4444baca0091481566d997693635b2dbfa69bb21723e678d37f2344d9673f6c3e3856c946445cc38c5d7c815a6fa267e686759a05cb8d56706b036fa329c3979ac8120e6bba89bc6a10ef768220b914e87f9366cba6c87e35b50045da9ec2f15ebfd540fcd82d843e74c506a7a5979f36362a93bc8b39d1c71af8bc68ca60a8bb0e049d4ba30e760c9bc307f279e10ba378a7986cf371bf4042c8b76e60ab9367a3fbdec09338997d2c49da28f9ac14a8749f89a0c8756cc7fb6e726d4b1cb4b77ded11594f3ac1c740d85410ab8381cfafcfd08f0280c81aab3f9770b96ec594c76427fb32fec640d870d16f6ba47b58da7b9fb545f8665b130d144be6dc7076f4cffb2a4460d2d36900eb9bf120611558ac6935eaaef9461cda48c48b140e4a3e03a3704a34148d6a044566a3da35b20658a408a7a2b25db6c0f6001dc957315976d0075f019e5086a35716eedf039171013c1b3c6884d575d3e5792575e389960ed7250e047be62d472e393ca860dbc4695ffbdb336e006751530e1e9c5588d3fbda6de9e0265a0c34c7edbdbc4a380d746556eb61e0a58e38bec8dd93849b8d1c13a410e91c6835ed636c727c94a4734ec5d9ba486d0d3625bd7411d0e8dd6df4b745b3e629b8b351f5628cdf24c2dc7bffbd15bbfe00c1fa08808a024e019cc58956ec50d8fda7c343c6687da104a923e10741898afb6f919d9c2ba1eb3f936d52b26a8e5e858f83385563a6a08b5e33db457c3f99cd30c50ce2623c09c51c9bec1faaa936d1329b5a56e8ed87d6b8568bbc7a4daf735e13aa5ea8c9c863e890e0ab81c20a2ee91fe456cef49096587a283a1017a362af4cb4a0cb69b347ed2da1353fbdcee27eec6748d443258a1548260b1b86e7eb0962108578a8e6a9228daf94589ebfbb7ce8bbb2a08682ec0e7e01a5fb3060816d6bd7e1a15557125a0bd01fd0a7dc0194f4caef71e27c043ee3d7ba7c9f2ec1787bb7f22f63db5479c43b9df73e86d1c23cdd630ba1171f07f1a1328f95ad44b17fbacfc3359a32c769b7a2bb8bb899c3c9fc727195a5b6a925227cd8ab912bc65f31a461fbe544f077e4744feb06b74549ca8748305a6fcf2d0e1b27c74649f401f08372186e1e786f9d2a803e06daa594e5b875f3fbb994ed1afe9062b3e200ca1c03c5be724f3ad051bebb309e87e42f830603241292df88462693e81d1d3bfd5bdb334f6b955643a47c9af2fb1c739ad8a5d12c7f1bf446638be43903dbbcb7b0e25cd29d639db8c8604f200451ef5ed8c46fbe5aed01c68647471aec768c62f8c97bf7b7ec52de7550a78990f724c472c6c0b4f6d81386271c78557d41d57a7df055656c02131608e5cee8854c0896b4f4aa904fafbdc9c016d1654eee33153afbff6139fb0ae26f8b22a5ffa979896d787c1d7d97a72cb0a314ac2136c28292ca16063122c2ccd94365f503d70929bba42106906893c651aeccace83cdd02bdec68211db8548672c1f15180099bf9648d52a6db3a8a782ca2d67e3ec8d4ae257fbac3f5988f1e43f75f79605ba55490748166b32b632bd7a348363bfe2981cbaeb7ee53b600223ab0a4f27daca06442bf81d3dab9d9319910ac24b03be1708d4ad1daf18ba7e0561e351b0a4677071ea9dfe4b945ba197532adee93526599ad718e2812437de27218194139c58670c9c7ce1c8e00667b1895785afc4043e9653e2083fcd3f5b4cb66ca3747fc3e4cc342438aef715a3911246cb6d39ebe292c3d9d8149622d5d6e28a59110bbd6eed7db72824d48691c885acb93375d05517b1ecdd32fc7a3874c915ae0adc63b9d6214bc821a6016aa8745e284b67c52b12beb07fc5b1a2ccf5448ed438eba79ba65c99d8f3015a9f5b8f2579e96318956b937b2ecd9a2a4422ad82e9f080292c1209705608aaebdb18b2ca2e09536bad6f9027066bba3a35790278e5eed7147e40903df024e22d30e3d6287fb3c61be90e7c4d7fff24329665c295ea30f55c0c728f34edd848678c2eef680e90d1b10831ad4585223f4260bd820633c668781e8afa095a0cae1dbc41905f0365e65c2e24bfd0739b1e4541af7a38863676fdb1c9f366aafaff11a5940af9fde12f4a3ff3f2024d0ee8d3a129950446108c2ed86ed8bebe86e4b38b3a4a5339217ad2ecfb843d33a7e9026ee7d2fe45c8a6c2188184bc3c4ab335dca93c4e6d8328330b98dc77a18942d761f90463e67c0cf0307b5c68b579c08d3fce635ae2c31b1dfa4a6653ac77a4af81970eb9847380fcae6cf2545307480df54f53f745fd5da85259b36ad36834d6b9704f111a6b7ae50667b1a0910cf4f69f4f66cc4769bca73f5c07124fcba92a945d02eb41804d85b231e3a6ba32a7ccb560932979d7bd403e636e3c734661394ccca3e7fe144a26fa1079c3b0b8d97100dbf20669f3a80194d97578ef956db041684cdf86de30eda1591ddc0d1f38b25fd2ba3d848af48e0686771115c3b57d1707775caaa148a0bb2990f04de26a896bf45474ee7c37e6c8b087bb3fe3bec2daacbcdf67d679e1de8878660514ad51b3f73e57ad09cce4596c638cfc098a0f829316dfc2ec470cff3fbc1426999fe569743fd0d11f67ef82f454347c4b9c96632159bc6ced808a0a78028f7780fd36770643c7edfa43d5135f58d0864f828181be6402022161167f73a47c8b796a9f7e2dce775c8231a6f7c518316542afc1ece4dd3a053310584e9bf6df065026488624827bd5a598e2f145ad1274555cecee62e37c1af900ea5248d3c4441e323c52fe96d1f1527ff7968a37802e6bf20eeb0253d7f4410727412517669dd1c29d931790cb934df919fb1da69cdb3252cf172168a56d79e6000195ba64ea5d2b41ab076f86ec7c5251d1686e15128d24ca47edfb883b57f55670c3b9e1c8ee007b046b0cbf454d32a7069d58eb01245aee002d30c58e24077ead4cd20e86fb1b30a38c8d13c1f23686fff24209230e6d400eff7985e05e4d405e5bb213bb61ff28d1ae7492dde7bf6d858fb5363661826c1d4a04898f93bc5c57971c941a3a855e2bbd0dd1852b556caf5beb4605cd51cb988391b5f469736121542dcdab26d0ef8f4f3fbffd20500aa3b4eea256ab00a7e094de07ef56a1464ee499011abd62523c425a287977a2534405b2a62d79f4ebaca20fb03d6b37865f482bc88c2362925e51cf9b41b1e847844837663246fc57fa9603d14ce1d3ab4bdfc461cf83fe072fab4be17c2bba25646fd22eab4b97780d4eee6e9a37a34d614b2c1fcdebfe24a539f3647be358892fe53ca977359e42e3504b939e753ad401237a660a39d6b9c1bb6bb44f82b20d05255ee7d23c7932371ae937b40993f1af90e290ec8d97d83563736702184416f0e517f2f77a24dad58d8ddb6957c89ef6fef6bb4ae4b336635ba2b2925c7815c8bb24189ea44907f2419dcfbecc3755ab6b7011dfa5b2bb3fd85362d55b58f6557588a91948bc3410e80bacad7daa5b82a643662354e277ae235ccb02332cb4a6a7b420519c3ee410a1445d4ada8e22c7e8813e20971873197b196c336e122f4b7779910b3ce44f763c8cd4ce510936e37a273eb7588f837b7d12d876e4c4c4f1f9f139b62c70ed6a132765da7d160c6e3734164cdd87ea76a320dfc01a2e3ad898cb5b8bc0faea26f911e8a5830b9aaf464bd97b3ad33259741bdfe1978e36f1a8c056985c08eedb2960d82e3583b4a3bf894845fd7d2439a6a0d5b4075a655a1ea6f41d1058dfc530ebaebff76eb4daaac7dfe0f7f52845e24dd2299cffce3c4ee9f7dfa4d3b464942130d69adb26629ac9ab14b9d4ec937f545ec2f4533747ed75931f4ce5c1bbb95e34c0229cb7510889440a19718de2857be9936deb30eb37dc79c8a6c0ffc2b2acec5fbe8f834cc33cce5ad6fb69a11e73ca88a0463d7db22e870b7263b1f6ab300dd6a6d03384784525b7db2b739eb6fc89f41f5badebd21d7eeab7006f175a85012f182b12a88afa0bf6197eac2fc43ca0dd7dd05a1121de628f41c9348c86545e4bf8a18e820361587eee52593cf594529a8ecb8fe3e7ad7d207791cec85d4667c0b443da15b60a90da97643899260bdc04e85be72475ee3494dd768b7328143b0c5754bbb0873e74e01b34fe19b995669218819e9916533e157f3ad9789175eb48647001f2b6b5f430b55e946fcf4970b389a7e04bc1829ce78eec0b077db7096855e603c8297d6121b7251b252f20604c04398c9c69fb80be2ef3461b7061e5405b0be12ee1f2275e7bdd245b64653f48d8d4573e70dcda73a4ddedab3fed3197c0f5f2a9eec40e2cbe2ea3894a0d05692f9c26a90d225e6d740f3c5caa62a9079e7bde532e3940d2cc2faf93742587345bccd2ba5cab4ba835fd8f4d7422877b6b9f9743925ffefaa8b5e3afa6f288cd5d28ed05fc956c95623dc995c8c963a4a4c5ae090b2564d6affa0d4cdb36bd4c857934d407efc1bc4a84ce4cc08be5591af4c91e588b3b121bc8ec2f9408d4563b912c547be2ca34db065bf72aa23aea9db230e5e5f0ce78e8b1944e93705683d79b62a9b20d4d5039a439becfa877a6363e4a9fd509c89a65b226b2a8526b10c2ba41216e1e9b727996ea4b10dde058bbb913376449db78b356392869438a81402a483017d8d2cc313041b87c943cd923fe37f1081bf0944791716cff9eb025eaf73de01f82e35b1280e95ce87ece2806e6ee2f32512d77df02f2c2d894f517f2cf66162fa801e793cbf16140608546c3de1995f72b0622a39f9fadc13eaa27c1a91d4a72196b715d59ab8edfb4c92e9e90ac664b214c48c1d6dc7f9151be82ff51b0802689101bd71f1267d1dc65d5779721bfcf13e6da3bf7b492886168632a7506ebfdbb1a7ddc50547284f253cdf7c9142fb6d461b8873442508c7d3dc9b52c9517926310460ab77af194fb310bc7b1b018b442e7e5b4723d5fc9acac60021e62bf8e099da510f0264ec6e45fc3647e6ac860e2ffb7a677b0a4e17770f8d959532a8ba25e5ab28dcfca9e558beff2411cfee50c09882ac69f1002ec47ce81034af874a4037e805398ee230906050cedbf665e80a39b802da5187d48cbd3619283582ab20f5c6b251d6223bdd55122d3fd480957077dc4b72755c780a95d1b1b1d8971d29eaaff914ade9bf2d56a1cb4520b0e8046299f01e3f69ce41df8cbc43ab988a98fc157fd3287e23b595dfddea4dfba675cdc4a86b2868d5911c0a249527e6a1bbb1bd8cb4529b50fdcd402c2b8984afcb5c232bffffb650cc0b1f5e5cf10c42269c3f651ca0a1aef21e18e6436a13df63abf40180355285247b684fb86b80875ff316a83befeebaf06c755cb3cbb4bc91cb96e"]) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x8) read(r0, &(0x7f00000002c0)=""/205, 0xcd) recvmsg(r2, &(0x7f0000000640)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/227, 0xfffffcf6}], 0x1, &(0x7f0000000540)=""/222, 0xde}, 0x0) [ 237.143208] binder: 14375:14387 got reply transaction with no transaction stack [ 237.150895] binder: 14375:14387 transaction failed 29201/-71, size 0-0 line 2759 22:11:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000002c0)="48b801000000000000000f23c00f21f835020004000f23f8b9c70200000f32f0460fc78868cc0000b8010000000f01c166b8f8000f00d866bad00466b8c26266efc441adfedcc4c19855a804000000460f1a7d046436640f07", 0x59}], 0x1, 0x0, &(0x7f00000000c0), 0x10000000000004d1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001a000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="df1f3e650f01c80f51152eef26a850a50f090f20e06635000040000f22e00f71d227267300", 0x25}], 0x1, 0x72, &(0x7f0000000380), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x70003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 22:11:21 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0xfffffffd}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:21 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x2, 0x7fff, 0x5, 0x8, 0xffffffffffffff9c}, 0x2c) read(r0, &(0x7f0000000080)=""/92, 0x5c) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xfffffffffffffc00) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) 22:11:21 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/77, 0x4d) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x8002) 22:11:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:21 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) 22:11:21 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0049d13d339c3a83b57716ee817c892fe57dda6e3ac07858a088ca4db18e363c2dea8bdb564a22c9bc8faf6c532aaab9b6ba0630f11c15b164a12d3e48f3fd"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f0000000200)=""/177, 0x70c000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)=0xe87, 0x4) [ 237.386376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:21 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x8002) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000100)) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigpending(&(0x7f00000001c0), 0x8) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000240)={{0x0, 0x1}}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0x70, 0x100000001, 0x10000, 0x70, 0x200, 0x0, 0x2, 0x1, 0x2, 0x5, 0x4, 0x2, 0x20, 0x8, 0x4, 0x4, 0x4, 0x4, 0x0, 0x7, 0x3, 0x1, 0x3f, 0x2, 0x4, 0xfffffffffffffcf1, 0x4, 0xc6ef, 0x9, 0x80000001, 0x5, 0x0, 0xb0d, 0x4, 0x0, 0x2, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0xbf, 0x40}, 0x8000, 0x8, 0xffffffffffff8001, 0x0, 0x9, 0x400, 0x1}) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80900, 0x0) [ 237.444246] binder: 14429:14431 got reply transaction with no transaction stack [ 237.452193] binder: 14429:14431 transaction failed 29201/-71, size 0-0 line 2759 22:11:21 executing program 4: r0 = request_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)='asymmetric\x00', 0xfffffffffffffffc) add_key(&(0x7f00000001c0)="6173796d312486346d657472696300e79fcaf7caebd6cf7e1d1fc94fb3048d7d40b46a414ed86c3f4a0f22f60be309dd8785f332c98eb91b3935fe28694cd8a9b0c80b19c4d2c3f5bdbb15c00970c96fd27d5d506ac85f3978dfec41be50b2e343268878616e0e68f01ff802ce8924dc7ed6460c8ab7", &(0x7f0000000000), &(0x7f0000000040)="0482", 0xfffffd8e, r0) 22:11:21 executing program 1: inotify_init() r0 = socket$inet(0x10, 0x3, 0xece0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000290007031dfffd946fa2830020200a000900000006000000000000000d00ff7e", 0x24}], 0x1}, 0x0) [ 237.514126] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.530092] binder: 14429:14443 got reply transaction with no transaction stack [ 237.537747] binder: 14429:14443 transaction failed 29201/-71, size 0-0 line 2759 22:11:21 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) pwrite64(r0, &(0x7f0000000080)="aa4bcbdf588469d36160f7c5976c557155f33ffc5e6c879fd2adc95d5aa27f7acf9bac7a92c6a5efcd18d29760777fbaeaedf600c5cafdd4e0bd49cd6cf2d323f456b1b8804ee1f9938076631f5e5f172db55185b69fba4a9b7396e0d827c9fb0cd9ce69496203b42a0d675c079b26717c5e1817ec4d92e6fbe9c1609de60b1ae7022bc342686067baf015569163f4efb6758c9f1c00b4765d859d1104130acce33839a3ea3dfc5de3ce9879e805139b6913f954f315f02f65e45aa8ad61de04038ecc59f20d6c5fade89aab", 0xcc, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0xe3, 0x401, 0x400, "296e891e7823da59d059950336577a73a157e4fe74661b76193922d8a3a95ee4b1c337e2984b4d4f4256dda13f5bd084af41fac999fde3b26fc997e4580f8eb459a95e95d0e65c764ad522ba4d4fde2d3619977ba4141a5e79d0c3b27dfea2bd3e212f86439ccbd31e24919ad0b6d620d25923320134b5e4b98173bd3d62fad59e6054c487fa76d0bb769c89f1ca70fcaec1a13bf130d82b11913b7d1e6717cf3d45212e0f93eccee15ededdb83c13e0ac84a2f282b6ff333b563e1892150137da7a75b54b0997e4f47fe5763b3fe73f13ab83ef5f62da0570a1c745abd58ef8453090"}) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000002c0)={0x9}, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000300)=0x800, 0x4) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000340)=0x9) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000380)) syncfs(r1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000440)={0x0, 0xfffffffffffffffd, 0x7ff, 0x1, 0x6, 0x4, 0x3, 0x8, {0x0, @in6={{0xa, 0x4e22, 0xf7f, @dev={0xfe, 0x80, [], 0xf}, 0x8}}, 0x5bd3, 0x7bf, 0x8, 0x8001}}, &(0x7f0000000500)=0xb0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000540)={r2, 0x401}, &(0x7f0000000580)=0x8) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000600)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000700), &(0x7f0000000740)=0x30) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000780)={0x3, 0x0, [{0xc0000008, 0x0, 0x8, 0x1000, 0xf1}, {0x80000008, 0x9, 0x5, 0xb07, 0x5}, {0x80000007, 0x7, 0x6, 0xff, 0x8}]}) unshare(0x10000000) ioctl$KIOCSOUND(r1, 0x4b2f, 0x5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) sendmsg$can_raw(r1, &(0x7f00000008c0)={&(0x7f0000000800), 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{0x4, 0xfff, 0x4, 0x4}, 0x8, 0x0, 0x0, 0x0, "7e244b050efed781"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x10) r5 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000900)=0x30, 0x4) syz_open_dev$sndpcmc(&(0x7f0000000940)='/dev/snd/pcmC#D#c\x00', 0x7a24, 0x200) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f00000009c0)=@req={0x28, &(0x7f0000000980)={'vlan0\x00', @ifru_map={0x9, 0x6cf, 0x7fffffff, 0xff, 0x1c1, 0x8}}}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000a00)={r3, 0x400}, &(0x7f0000000a40)=0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 22:11:21 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x8002) 22:11:21 executing program 4: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000dac000), &(0x7f0000048000)=0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x10040) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x3, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x4, 0x30}, &(0x7f0000000100)=0xc) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000001, 0x0) 22:11:21 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0xc501000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:21 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) [ 237.787861] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.831920] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:22 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x80, 0xdbe, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7f, 0x60000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffff7461, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 22:11:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:22 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x9) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x6, 0x7, 0xb9fe, 0x2, 0x0, 0xffffffffffffff7f, 0x68001, 0xb, 0xffffffff80000000, 0x2, 0x1, 0x4, 0x8fc3, 0x2, 0x0, 0x8, 0xea3, 0x29, 0x7fffffff, 0x7, 0x3, 0x3, 0x6, 0xfffffffffffffff7, 0x2, 0x1ff, 0x1, 0x401, 0x89f4, 0x1, 0x6, 0x65b, 0x3, 0xffffffff, 0x3, 0x2, 0x0, 0x2000000, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x20000, 0xfffffffffffffffa, 0x5, 0x4, 0x5, 0x3, 0x101}, r1, 0x6, r0, 0x2) 22:11:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000100)={0xf096, 0x6a51, 0xea1, 0x4}, 0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f4b"], 0x3) personality(0x4100001) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget(0x2, 0x3, 0x100) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000140)=""/83) r1 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000040)=0x6, 0x4) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0xff, 0x8012, r1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000001c0)={'raw\x00', 0x44, "453c737101805a0b3ae9c2bb8d416ffb2acfed2a9e10643a00328450313ea40cea917e2ff5d344973b99683994a2c0c193fcc7c15267fe7a8318d2354465b2feffa67972"}, &(0x7f0000000100)=0xffffffffffffff42) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000080)={0x0, 0x0, [0x5, 0x49, 0x3, 0x1]}) 22:11:22 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2) 22:11:22 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x2b060000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 238.136517] binder: 14483:14489 got reply transaction with no transaction stack [ 238.144206] binder: 14483:14489 transaction failed 29201/-71, size 0-0 line 2759 [ 238.150704] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:22 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x8002) 22:11:22 executing program 1: r0 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000004c0), 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) keyctl$set_timeout(0xf, r0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f00000000c0)=""/175, 0xaf}, {&(0x7f0000000180)=""/35, 0x23}], 0x3, 0x0, 0x0, 0x7ff}, 0x40000022) getsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f00000002c0)=""/52, &(0x7f0000000300)=0x34) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x121001, 0x0) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000500)=""/243) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000240)={"5450524f58590000000000000000000000000009000000000100"}, &(0x7f0000000340)=0xfffffffffffffee6) 22:11:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget(0x2, 0x3, 0x100) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000140)=""/83) r1 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000040)=0x6, 0x4) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0xff, 0x8012, r1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000001c0)={'raw\x00', 0x44, "453c737101805a0b3ae9c2bb8d416ffb2acfed2a9e10643a00328450313ea40cea917e2ff5d344973b99683994a2c0c193fcc7c15267fe7a8318d2354465b2feffa67972"}, &(0x7f0000000100)=0xffffffffffffff42) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000080)={0x0, 0x0, [0x5, 0x49, 0x3, 0x1]}) [ 238.219446] binder: 14483:14503 got reply transaction with no transaction stack [ 238.227121] binder: 14483:14503 transaction failed 29201/-71, size 0-0 line 2759 22:11:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000130afdff00000000000000000000000008000100e023debaf46c0ab6216ec349000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 22:11:22 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfffffdfd) [ 238.283484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 238.427420] binder: 14525:14526 got reply transaction with no transaction stack [ 238.435094] binder: 14525:14526 transaction failed 29201/-71, size 0-0 line 2759 [ 238.496804] binder: 14525:14530 got reply transaction with no transaction stack [ 238.504530] binder: 14525:14530 transaction failed 29201/-71, size 0-0 line 2759 22:11:22 executing program 4: sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) getpid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000002940), &(0x7f0000002980)=0x14) accept$packet(r0, &(0x7f00000029c0), &(0x7f0000002a00)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002a40)={{{@in=@dev, @in=@dev}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000002b40)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002c40)={{{@in6=@loopback, @in6=@mcast2}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000002d40)=0xe8) getsockname$packet(r1, &(0x7f0000004640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004680)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @rand_addr}, &(0x7f0000000040)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004a80)={'team0\x00'}) 22:11:22 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) r1 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, r1) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x28, 0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x15, 0xb7, &(0x7f00000001c0)="b438045352aea44bd2099539496c5545eedd3c42d0a0bff8c82f05e169d72875d93b24bfdde452c8c4a06efc7ea4717548c0967d40849849bd6df00721fa252d3eb7b74c469f014e4c64226047457d24a5db123ea7e89c5a3669606e144b87acbe5c504c3741e44430875c52bb5136883f33fc6cd230b2a39e75eab84f67a4b8406e15d14f52c9191f04e0f5d7ba246224a53c5f19e306f79b9f331eee547836b667e1ac317d5733d5cba09c049fb08c0861d51d94d3c2"}) exit_group(0x69fa1c33) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0x8002) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="33000000060000000000000000000000000000000000000004000000000000000a000000000000002f6465762f6473702300004c0ffedce389d51a573d9d3e58d9726c0affaf13b84295534d65c9b931b360d70800da448d41d12152f6c7f2e15ea28b"], 0x33) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000100)={0x8, 0x2}) 22:11:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001400)='/dev/sequencer\x00', 0x181100, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000001440)={0x9597, 0x4, 0x1, 0x20, 0x0}, &(0x7f0000001480)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000014c0)={r2, 0x10000}, 0x8) r3 = getgid() getgroups(0x3, &(0x7f0000000100)=[0xee01, 0xffffffffffffffff, 0xee01]) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000680)={r2, 0xa, 0x3}, &(0x7f00000006c0)=0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000400)=[0x0, 0xee01, 0x0, 0x0, 0x0, 0xee00, 0xee00]) ptrace$setsig(0x4203, r5, 0xffffffff00000001, &(0x7f0000000640)={0x34, 0x6, 0x3, 0x7fffffff}) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x2010, r1, 0x180000000) getgroups(0x9, &(0x7f00000005c0)=[r3, r4, r6, r7, r8, r9, r10, r11, r12]) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000600)) r13 = memfd_create(&(0x7f0000000000)='{+^:%#,\'user-em1:$bdevkeyring[-%eth1^\x00', 0x2) ioctl$KVM_GET_VCPU_EVENTS(r13, 0x8040ae9f, &(0x7f00000000c0)) 22:11:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget(0x2, 0x3, 0x100) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000140)=""/83) r1 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000040)=0x6, 0x4) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0xff, 0x8012, r1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000001c0)={'raw\x00', 0x44, "453c737101805a0b3ae9c2bb8d416ffb2acfed2a9e10643a00328450313ea40cea917e2ff5d344973b99683994a2c0c193fcc7c15267fe7a8318d2354465b2feffa67972"}, &(0x7f0000000100)=0xffffffffffffff42) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000080)={0x0, 0x0, [0x5, 0x49, 0x3, 0x1]}) 22:11:22 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0xe0000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:22 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) close(r2) 22:11:22 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4) 22:11:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x48c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:22 executing program 0: r0 = getpid() r1 = perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x401, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000000000}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x8002) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/37, 0x25}, {&(0x7f00000001c0)=""/159, 0x9f}], 0x2) [ 238.650448] binder: 14543:14549 got reply transaction with no transaction stack [ 238.658174] binder: 14543:14549 transaction failed 29201/-71, size 0-0 line 2759 [ 238.685955] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") modify_ldt$write2(0x11, &(0x7f0000000240)={0x0, 0x1000, 0xffffffffffffffff, 0x80000000, 0x80000000, 0x8, 0x2, 0x5, 0x401, 0x80000000}, 0x10) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000002c0)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000200), 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYBLOB="2840332e01414832bd03000000000000000000000000"], 0x0, 0x0, &(0x7f0000000500)}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000180)=""/115, &(0x7f00000000c0)=0x73) 22:11:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget(0x2, 0x3, 0x100) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000140)=""/83) r1 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000040)=0x6, 0x4) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0xff, 0x8012, r1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000001c0)={'raw\x00', 0x44, "453c737101805a0b3ae9c2bb8d416ffb2acfed2a9e10643a00328450313ea40cea917e2ff5d344973b99683994a2c0c193fcc7c15267fe7a8318d2354465b2feffa67972"}, &(0x7f0000000100)=0xffffffffffffff42) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000080)={0x0, 0x0, [0x5, 0x49, 0x3, 0x1]}) [ 238.745361] binder: 14543:14557 got reply transaction with no transaction stack [ 238.753088] binder: 14543:14557 transaction failed 29201/-71, size 0-0 line 2759 22:11:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x8e04000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:22 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x8002) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000200)='net/fib_triestat\x00') ioctl$VT_WAITACTIVE(r3, 0x5607) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000001c0)={r4, r0, 0x400}) 22:11:22 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff00000000) 22:11:22 executing program 1: ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000000)={0x5000, 0x1, 0x2, 0x81, 0x40}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000100)) pipe(&(0x7f00000034c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000240)) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x4200, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000040)={0xf000, 0x118000}) tee(r0, 0xffffffffffffffff, 0x400000000008, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuseblk\x00', 0x802008, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}]}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000480)={[0x2, 0x1, 0x80000001, 0x4, 0x1, 0x1, 0x49c, 0x0, 0x2, 0x80000000, 0xffffffff, 0x6, 0x1, 0x3, 0x9, 0x24795182], 0x100000, 0x10080}) [ 238.850768] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:23 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75256400bfa100000000000007010000f8ffffffb702000004000000bf130000000000008500000006000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 238.938692] binder: 14571:14573 got reply transaction with no transaction stack [ 238.946483] binder: 14571:14573 transaction failed 29201/-71, size 0-0 line 2759 [ 239.035538] [ 239.037520] ********************************************************** [ 239.044267] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 239.051362] ** ** [ 239.058087] ** trace_printk() being used. Allocating extra memory. ** [ 239.064794] ** ** [ 239.071527] ** This means that this is a DEBUG kernel and it is ** [ 239.078233] ** unsafe for production use. ** [ 239.084952] ** ** [ 239.091680] ** If you see this message and you are not debugging ** [ 239.098398] ** the kernel, report this immediately to your vendor! ** [ 239.105122] ** ** [ 239.111837] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 239.118565] ********************************************************** 22:11:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00003e4000)={&(0x7f0000e87000), 0xc, &(0x7f0000a3bff8)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000012000902000000000000000200000000c62dd52716e033cd443a3fdd6b01d6ee8060d356b546b348da674514c37dbacaaabafbc593a16027dce1840d75579247b7bfb5c6f1fbae7b09511b36459d9c800c10c27083399ad450da281fc135c88e70f0e3924657b83c474bc0fff02f622b922f4e908bf03401305719376233200a6a1275bbf9000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000400120000000100000000000000000000000200"], 0x24}}, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000000)) 22:11:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000100)=0xba, 0x4) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4, 0xc}]}, 0x24}}, 0x0) r3 = shmget(0x3, 0x2000, 0x1800, &(0x7f0000ffc000/0x2000)=nil) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000140)=""/135) 22:11:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) read(r0, &(0x7f00000001c0)=""/86, 0x56) 22:11:23 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000003c0), r1, 0x1300}}, 0x20) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0x8002) 22:11:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:23 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) [ 239.282106] binder: 14599:14603 got reply transaction with no transaction stack [ 239.289700] binder: 14599:14603 transaction failed 29201/-71, size 0-0 line 2759 [ 239.295782] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:23 executing program 0: prctl$setmm(0x23, 0x0, &(0x7f0000ffc000/0x2000)=nil) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x8002) 22:11:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x9, 0x141280) ioctl$TIOCSBRK(r3, 0x5427) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x33, &(0x7f00000001c0), 0x10) [ 239.353499] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 239.370883] binder: 14599:14617 got reply transaction with no transaction stack [ 239.378478] binder: 14599:14617 transaction failed 29201/-71, size 0-0 line 2759 22:11:23 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ptrace(0x4207, r1) ptrace$setopts(0x4205, r1, 0x2, 0xa07000) open_by_handle_at(r2, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x10001) [ 239.418900] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:23 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 22:11:23 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0x8002) 22:11:23 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000180)={0x1, 0x2, 0x1000, 0x2, 0x8000}) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r2, &(0x7f0000465f8e)=""/114, 0x3e) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x2405, 0xffffffffffffffff) close(r2) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) userfaultfd(0x80800) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r4, 0x4040ae72, &(0x7f0000000040)={0xfffffffffffffffd, 0xb04, 0x4, 0x1, 0x2}) 22:11:23 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x3, 0x39, [], 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000140)=""/57}, &(0x7f0000000200)=0x78) r1 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000340)={{0x0, 0x7530}, {r2, r3/1000+10000}}, &(0x7f0000000380)) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000040)=""/150) getsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000240), &(0x7f00000002c0)=0x4) [ 239.545357] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 239.579370] binder: 14633:14634 got reply transaction with no transaction stack [ 239.586963] binder: 14633:14634 transaction failed 29201/-71, size 0-0 line 2759 22:11:23 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0xc501}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'veth0_to_bridge\x00', 0x1}, 0x18) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x7, 0x4) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000100)=0x5768838fa57227b4, 0x90) 22:11:23 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001cc0)) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x8002) write$binfmt_aout(r0, &(0x7f00000001c0)={{0x0, 0x7, 0x1, 0x34d, 0x9, 0x4, 0x2e9, 0x1ff80}, "181dc0101052beafb6650d1282786a03f8144bd34f35bc4fb0076b441d3fb93ec8c4e8eaa6064044fc13c4e360909fe6e338b665d88203abd520ce53c4961b", [[], [], [], [], [], [], [], [], []]}, 0x95f) [ 239.728895] binder: 14633:14650 got reply transaction with no transaction stack [ 239.736572] binder: 14633:14650 transaction failed 29201/-71, size 0-0 line 2759 [ 239.741346] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.850456] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:24 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x200) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0x4, 0x7, 0x800100}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x8002) openat(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1a4) 22:11:24 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0x6, 0x8000, 0x10000, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:24 executing program 3: r0 = socket(0x15, 0x80005, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffff, 0x1e7403) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) sched_getaffinity(r2, 0x8, &(0x7f00000000c0)) getsockopt(r0, 0x114, 0x2716, &(0x7f0000000180)=""/13, &(0x7f0000000140)=0xd) 22:11:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000000008912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="88d5fdb9b18ffd403a5ed61669dc894b8eee3e32381c581fd460afe58917567762f4af2aae"], &(0x7f0000000080)=0x23c) 22:11:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) ioctl$TCSBRK(r1, 0x5409, 0x9) sendmsg$nl_route(r0, &(0x7f0000000680)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8}]]}}}]}, 0x64}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000000)={0xfffffffffffffffb}, 0x0, 0x8) 22:11:24 executing program 1: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x2, &(0x7f0000e63ff0)={0x2000000, 0x20080000000}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/100) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 22:11:24 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x300000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 240.205969] binder: 14682:14683 got reply transaction with no transaction stack [ 240.213601] binder: 14682:14683 transaction failed 29201/-71, size 0-0 line 2759 22:11:24 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x10000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r0}) fstatfs(r2, &(0x7f0000000080)=""/68) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002680)={0xb, 0xc, 0xfff, 0x80000000006, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000000)="e8", &(0x7f0000000100)}, 0x20) 22:11:24 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x80005, 0x200) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000000)=0x3, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000080)) sendmmsg$nfc_llcp(r1, &(0x7f0000008100)=[{&(0x7f0000003cc0)={0x27, 0x0, 0x1, 0x0, 0x0, 0x2, "c19c6bf437637c86479c2209cac3506f4d80d937d79bba507b93c6e73861d5a8163b9ad2bf533a161c693298aafb20cd5ac3c1b98d6f6d9c8f362dd22a5a59"}, 0x60, &(0x7f0000004080)=[{&(0x7f0000003f00)}], 0x1}], 0x1, 0x0) [ 240.250891] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 240.274478] mmap: syz-executor1 (14691): VmData 35135488 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. 22:11:24 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xfffffffffffffffe) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x68000, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0xc95, 0x7fff, 0xfffffffffffffffd}) [ 240.294247] binder: 14682:14692 got reply transaction with no transaction stack [ 240.301869] binder: 14682:14692 transaction failed 29201/-71, size 0-0 line 2759 22:11:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000040)=0xfffffffffffffecd) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x6, 0xdc00000000000000, 0x7f, 0x40, 0x48}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r1, 0x7}, 0x8) [ 240.361623] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x26, 0x829, 0x0, 0x0, {0x3}, [@typed={0x14, 0x7, @ipv6=@remote}]}, 0x28}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40800, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001800)=0x14, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) bind$can_raw(r1, &(0x7f0000001840)={0x1d, r2}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x0, 0x0) 22:11:24 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x2000, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000200)={0x7b, 0x0, [0x6, 0x28, 0x3, 0x5]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="bd7a3a6fdbf8affdc392eb7dc60e598af388ff29365ef30646f821f00a21e2ca93a681742410f15fcdac1ce6a2d713ec616af48cfdf401bea85be0164a35d67e370e06a016635290d58bc7b9849e528cf09560a47ffaf6cf00e711961fdaf007d55a44cbc067064c591e433bc671c5c96dd87593b4ca132b776642efe8fea6c4b0ca0646c0dd8dfbe66171c5fb70"], 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:11:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x8001, 0x10040) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x80000001, 0x7, 0x1}, &(0x7f0000000300)=0x10) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@mcast1, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}}}, &(0x7f0000000240)=0xe8) getresuid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vcs\x00', 0x0, 0x0) ioctl$KIOCSOUND(r5, 0x4b2f, 0x8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000640)=0xe8) setresuid(r3, r4, r6) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000340)={r2, 0xd75}, 0x8) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r7, 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000006c0)=@assoc_value={r2, 0xce8}, 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r8, 0x0) ioctl$SIOCGIFMTU(r7, 0x8921, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000140)='/dev/dsp#\x00') ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'eql\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="3400000001010000010000000000000001400028d70c0000010000000200000040100000336a6629cb3cb8da475e4dfb53ffcea086a6648f45131b46498ce8b72f05d5c3fa024936649d"]}) 22:11:24 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x1fff5, &(0x7f0000ffc000/0x4000)=nil) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="7dfbd3d70742b6985493e09879e70ea78c985af547d3b3a792ab155e6c00600cec282eebf06129ef6db67afd8946ed99ecd89d68a0b1a16f7231639880055eaf8451b84ffe7c2c9c64b4d699dcf147bc91b795380cec8506a20b4e811b3b98078f595db7af600db163f577d99ca7a30c7bc45b78aa6c06f7d71bc56e877cb9309eab5778b4257888cf4d", 0x8a}], 0x1, 0x17) shmat(r0, &(0x7f0000000000/0x2000)=nil, 0x4000) r2 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x40) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r3, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x44) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, r1, 0x0) 22:11:24 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x8002) 22:11:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:24 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x400000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:24 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x26fdc75, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000040)=@routing={0xbc, 0x10, 0x2, 0x1, 0x0, [@ipv4, @empty, @mcast2, @mcast1, @ipv4, @mcast1, @dev={0xfe, 0x80, [], 0xd}, @mcast1]}, 0x88) r1 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2000006) r2 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) r3 = dup(r2) ioctl$TIOCSBRK(r3, 0x40044591) syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x7, 0x101000) write$evdev(r1, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0xdf) [ 240.534601] netlink: 'syz-executor3': attribute type 7 has an invalid length. [ 240.589116] binder: 14726:14727 got reply transaction with no transaction stack [ 240.596744] binder: 14726:14727 transaction failed 29201/-71, size 0-0 line 2759 [ 240.614710] netlink: 'syz-executor3': attribute type 7 has an invalid length. 22:11:24 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffff9c}) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r2 = shmget(0x3, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x6000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x8002) [ 240.652250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0x4, 0x0) r2 = dup3(r1, r1, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000440)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@local, 0x4e24, 0x3, 0x4e24, 0x0, 0x2, 0x80, 0x20, 0x4, r3, r4}, {0x4, 0x10000, 0xba7, 0x400, 0x9, 0x7fff, 0x8, 0x400}, {0x1bf09e81, 0x401, 0xe423, 0x5}, 0x6a3e, 0x6e6bb8, 0x1, 0x1, 0x3, 0x3}, {{@in6=@mcast1, 0x4d4}, 0x2, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x3, 0x7, 0x7fff, 0x100000000, 0xff}}, 0xe8) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) r6 = fcntl$dupfd(r0, 0x406, r5) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) bind$unix(r6, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000180)={r7, 0x6c}, 0x8) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") getdents64(r0, &(0x7f0000000040)=""/17, 0x11) fanotify_mark(r1, 0x1, 0x40000001, r0, &(0x7f0000000080)='.\x00') close(r0) 22:11:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='environ\x00') dup2(r0, r1) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffff9, 0xa0040) ioctl$TCXONC(r2, 0x540a, 0xc43) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x800) ioctl(r3, 0x40084146, &(0x7f0000000000)) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000040)={0x6}, 0x4) 22:11:24 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4400, 0x0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000040)) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000100)='/dev/ion\x00') fcntl$dupfd(r1, 0x406, r1) poll(&(0x7f0000000700)=[{r1, 0xffc99a3b}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000140)=""/144, &(0x7f0000000200)=0x90) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0xffffffff, 0x8, 0x1, r1}) [ 240.705755] binder: 14726:14745 got reply transaction with no transaction stack [ 240.713384] binder: 14726:14745 transaction failed 29201/-71, size 0-0 line 2759 [ 240.813664] FAT-fs (loop5): bogus number of reserved sectors [ 240.819782] FAT-fs (loop5): Can't find a valid FAT filesystem [ 240.828842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:25 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x200, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f00000004c0), &(0x7f0000000500)=0xc) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140), 0x4000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000007002e2f66696c6530000000000000"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000940)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) sendmsg$can_raw(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x1d, r3}, 0x10, &(0x7f0000000b00)={&(0x7f0000000a80)=@canfd={{0x3, 0x5, 0x40, 0x6}, 0x31, 0x2, 0x0, 0x0, "9bff485a6c68e908fb6c10898ce8d758038a5b713cf059cabde9e5ec81029daea55f78410bb5c606b1e01b70615ee4dd3531a5465f8c04e65e33cae0c91cfe92"}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000600)={0xa0, 0x19, 0x1, {0x10}}, 0xa0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000b80)=""/193) write$binfmt_script(r2, &(0x7f00000007c0)={'#! ', './file0/file0', [{0x20, '9p\x00'}, {0x20, '-vmnet1&keyring'}, {0x20, 'securitycpusetmime_type'}, {0x20, 'trans=fd,'}, {0x20, 'ð0+'}, {0x20, 'trans=fd,'}, {0x20, 'rfdno'}, {0x20, 'trans=fd,'}, {0x20, "a03a5e2c766d6e6574316c6f747275737465642d70726f6326757365726370757365742d656d3073656c66182d6d696d655f74797065"}, {0x20, '9p\x00'}], 0xa, "16c2503076c6c7b30a4368fabfbd4efd7bb4ebd9f77e71e029c635316e7cf2aea4eb3cf7abbaf3893595617790133e6336f708b196612ad09a4919a172d5dcca1d7416b3b1d69e7e37e6e5822cd7f9b83f546bec3ad4ccff8e1dd015056e"}, 0x101) r4 = socket$inet6(0xa, 0x80f, 0xffff) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4) getegid() write$P9_RGETATTR(r1, &(0x7f00000006c0)={0xa0, 0x19, 0x1, {0x4, {}, 0x100, 0x0, 0x0, 0x3, 0x0, 0x5, 0x4, 0x0, 0x3, 0x0, 0xa3c, 0x9, 0xc9, 0x0, 0x0, 0x8001}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000440)={0x23, 0x6f, 0x1, {0x2, [{0x40}, {}]}}, 0x23) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=@known="73656375726974792e65766d02", &(0x7f0000000380)=""/19, 0x10) r5 = getpgrp(0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000540)=r5) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) 22:11:25 executing program 0: alarm(0x7fff) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x8002) 22:11:25 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000000c0)={{0x3, 0x0, 0x2, 0x3, 0xfffffffffffffffb}, 0x80000001, 0x7}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000180)=@req={0x28, &(0x7f0000000140)={'veth1_to_bridge\x00', @ifru_map={0xffffffffffffffff, 0x400, 0x400, 0x7, 0x4, 0x2}}}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1}, 0xc) 22:11:25 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x2c060000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 240.924640] FAT-fs (loop5): bogus number of reserved sectors [ 240.930611] FAT-fs (loop5): Can't find a valid FAT filesystem [ 241.046593] binder: 14786:14790 got reply transaction with no transaction stack [ 241.054225] binder: 14786:14790 transaction failed 29201/-71, size 0-0 line 2759 [ 241.082563] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 241.092138] 9pnet: bogus RREAD count (24 > 12) [ 241.121149] 9pnet: bogus RREAD count (24 > 12) [ 241.138740] binder: 14786:14796 got reply transaction with no transaction stack [ 241.146376] binder: 14786:14796 transaction failed 29201/-71, size 0-0 line 2759 [ 241.174407] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f00000000c0), 0x0) sendmsg$rds(r2, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @rand_addr}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/73, 0x49}, {&(0x7f0000000580)=""/11, 0x2000058b}, {&(0x7f00000005c0)=""/30, 0x1e}], 0x3, &(0x7f0000001bc0)}, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 22:11:25 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x301240, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000100)=0x2, 0x4) 22:11:25 executing program 4: pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x16e) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="0c60633af82cefedddadba75bac76e0c553d0cb61e1c6bf60cf6800c5dafe5b3faa95a69b42b83fac6d22c6d8253897ced63f1ff6a71f1dd34358d0b9a70b524719d9e4523c5d8aea80d32856a5646037b568f3ebf648bdba666ae177b909a804094cd56420ad55d7aaae574dbee6d9913caa987fc5100003acfb3c84e86d696e5f450e312f80614e0e82a5b17d2a8032217b0", @ANYRESDEC=0x0, @ANYBLOB=',cache=loose,\x00']) mount$9p_fd(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000ac0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_client='access=client'}, {@uname={'uname', 0x3d, '[lo'}}, {@loose='loose'}]}}) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10001, 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="4900e31bbd9f24bd17e07a7e631d7e6fb937a257368d588ddc273e5eda8364574cd74bf855646fa129d671f86b3966c0408ec4ba499dcd5c5d3d36d898907999c9d2a5b90333b98cef9333acec7c4658f0d9d4e08652df34df975d407aa1c5", @ANYRES16=r3, @ANYBLOB="200826bd7000fbdbdf250e000000180001000c000700120000001000000008000800050000000800040001000000"], 0x34}, 0x1, 0x0, 0x0, 0x40884}, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) nanosleep(&(0x7f0000000900)={r4, r5+10000000}, &(0x7f0000000a80)) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) 22:11:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r0) 22:11:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100000000000000000000090000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120010000100697001677265746170000000040002000a0001000000000000000000"], 0x44}}, 0x0) 22:11:25 executing program 3: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x80000000011, 0x20000000004, 0x8000000000000004, 0xb}, 0x12a) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="636071c3bcacb695b76ab7fab173ffbfa044f0303fcc4dbd0a080bccaf54ef41bc16d1d972741859f651f28c541da84e1df1b8ada3cce72f7715029a552e9941c0"}, 0x10) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r1, &(0x7f0000000040), &(0x7f0000000180)=""/181}, 0xe) setsockopt(r0, 0x2, 0x9, &(0x7f0000000080)="2fae5c019593b1e3806b88d012face1038755543c151c8e706c5bbb38aa289f1b5965b94dafe972d3a", 0x29) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000240)={0x33, 0x6, 0x0, {0x5, 0x1, 0xa, 0x0, '[loselinux'}}, 0x33) 22:11:25 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x2000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 241.428499] binder: 14808:14820 got reply transaction with no transaction stack [ 241.433574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 241.436092] binder: 14808:14820 transaction failed 29201/-71, size 0-0 line 2759 [ 241.457918] 9pnet: Insufficient options for proto=fd 22:11:25 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x8002) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x402280, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)={0x4f10, {{0x2, 0x4e24, @loopback}}, 0x0, 0x2, [{{0x2, 0x4e22, @remote}}, {{0x2, 0x4e21, @loopback}}]}, 0x190) [ 241.488597] binder: 14808:14828 got reply transaction with no transaction stack [ 241.496221] binder: 14808:14828 transaction failed 29201/-71, size 0-0 line 2759 22:11:25 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_out(r2, 0x2, &(0x7f00000000c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind(r0, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2}, 0x2, 0x1, 0x1, 0x4}}, 0x80) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = gettid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x2f9, &(0x7f0000000100)=""/248) splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x86000080) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000440)="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", 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000000), 0x2000005) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000200)={0x2, r1}) 22:11:25 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e9e688d35a978813c38add66548d7575727ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f49338003280cba762268e62b14b7ae78571512fc3b589f402db1c08513f0ded6e40a03a29efca39bafbf63e3e4b60fd268675326ae396833e48daee94e887af86d74dc202b0681331461d67bf873f30dc4cd3dc8ab7c59f0a259c30a06b0ec37d7759c5d6b073b3feea2a72e1af5503e259d30b98dc98d67d3354bb9f06b63a78e235189e3497a62f98bfa9e165775ec29af5ca492de44304ac33aaea65b45383b33376830b4b206bdfb97e36afff62b71c9487b7d6d0fcd07d8dc654bbc4d52f550825f34ccb1c1162dfe3d66eb159d98b130ee24a936e431c8c04bb0e28bdb0f8358be2b72aa5f42eb66279573adc6058764ced002325c0acf0029e9840d6a4b2e7924733d7d94bd0db5c901a3c1415a1ea6f4a4d15d7f91bdac94fca88c98d5a022f8439f253d76a0e23968c48b26c00c84683359d42c3c1ecf93f7118a582e4d21c59b85d50c5e0b16681f017a0658a0e195fe322fab16f51d1eeaf4a9b702ff44a9dcddcc8b531ca00dcfa3e8770ecc918bebf379925253ddea9e53d6232202d77974aa3978bd9d51ddb1417780aa16498dce71760b346bc4f38939f3deeda2551e84087a2797e00175fb1af143724d969cead04999af8ee2de0799941ca5be211d2eb379f274fecbbf2659cf97a7e27453b88f9369f2e6a01ad155ec008d086acaa7e3d20d4f2f929d3cdfaf6e95d4c8a42e9a3863a3f7de05b8e71b12", 0x1000) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10001) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x100008912, &(0x7f0000000000)="9897880700145f8f764070") sendfile(r0, r1, &(0x7f0000002000), 0x12000) 22:11:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:25 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0x8002) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @reserved}, 0x10) [ 241.625581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0xfff) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000180)="ab153e85c96c751996827980120615254ffaa4ee9f752b3e95b3db0cf6dcc7953954f4a20a1ac3732e", 0x29) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) [ 241.670578] binder: 14844:14845 got reply transaction with no transaction stack [ 241.678248] binder: 14844:14845 transaction failed 29201/-71, size 0-0 line 2759 22:11:25 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x4000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:25 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @local}, &(0x7f0000000080)=0xfffffffffffffd58) r2 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@rand_addr=0x6, @in, 0x4e21, 0x4, 0x4e20, 0x3, 0xa, 0x80, 0xa0, 0x0, r1, r2}, {0x1ff, 0xee5c, 0x1, 0x7fff, 0x0, 0x800, 0x9, 0x9}, {0x4, 0x0, 0x3, 0x1}, 0x400, 0x6e6bb3, 0x1, 0x1, 0x2, 0x3}, {{@in6=@ipv4={[], [], @loopback}, 0x4d3, 0x3c}, 0xa, @in6=@mcast2, 0x3504, 0x4, 0x3, 0xffffffff, 0x5, 0x3, 0x80000000}}, 0xe8) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x5e3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) [ 241.752619] binder: 14844:14853 got reply transaction with no transaction stack [ 241.760421] binder: 14844:14853 transaction failed 29201/-71, size 0-0 line 2759 [ 241.912873] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 241.958840] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:26 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) accept4$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x80000) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000300)=""/4096) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4080002}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@bridge_newneigh={0x5c, 0x1c, 0x200, 0x70bd29, 0x25dfdbfc, {0x1f, 0x0, 0x0, r2, 0x4, 0x9b, 0x3}, [@NDA_PROBES={0x8, 0x4, 0x8000}, @NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_LLADDR={0xc, 0x2, @local}, @NDA_PROBES={0x8, 0x4, 0x68fcbdfe}, @NDA_LLADDR={0xc, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NDA_LINK_NETNSID={0x8, 0xa, 0x6}, @NDA_PROBES={0x8, 0x4, 0xfffffffffffff801}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x880) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=""/53, 0x100000, 0x1000, 0x8}, 0x18) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300000c000000000000000000000002001300ac0000000000000000000000030006000000000002000000e0000001000000000000000002000100000000000000000000000000030005000000000002000000e00000010000e9ff00000000"], 0x60}}, 0x0) 22:11:26 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x20000000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc06, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x9) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x8004) 22:11:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x806, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x501202, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2b, 'rdma'}, {0x0, 'cpu'}, {0x2b, 'pids'}, {0x0, 'rdma'}, {0x2b, 'io'}, {0x2b, 'memory'}, {0x2d, 'pids'}, {0x2f, 'rdma'}, {0x2d, 'cpu'}]}, 0x34) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfd, 0x400000) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000080)={0x5, 0x1, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 22:11:26 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r3) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="be073e390e9c6fe6716ba270cba15088dfb323830efb212bcfbeb7dd137be7653c06dd55984784ad810a1d4e3c762f191b92f1628a3ed3aed50048dacca52cbb9aa78cb6ba6e0d64ebf34136868a367386708541f98d4dd79be3dd190e07fd42bd859339fbb2a1705a03fb749a73aef68a65d4d22695bb9274528805eb463acbae849709c3904d6b333a0c468efcd00333c4cfa8404ba05eec8d6c4166230f324f64b625f24af92c1b305ec66abb8c0fc8fa0227f0790deceb85e254113d07fe0aaf91cfc63c4c5b3dd6e88b47d89649b1e4b55587a93407f1dc472150d59fe027e3c35fa1f729d7ac3404dd77d96462080029ec"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp(0x1, 0x1, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x1, 0x8001, 0x1, 0x6}, {0x400, 0x100, 0x7, 0x1000}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x840, 0x8) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000400)={{0x0, @loopback, 0x4e21, 0x0, 'sed\x00', 0x2, 0x8, 0x53}, {@empty, 0x4e21, 0x2003, 0xd3, 0x100000001, 0x6}}, 0x44) 22:11:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:26 executing program 3: r0 = socket$inet6(0xa, 0x80806, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200802, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x99) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4000004e20, @loopback}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) write(r4, &(0x7f0000001200)="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", 0x220) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r2, r3}) recvmmsg(r4, &(0x7f0000006e40)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000004880), 0x0, &(0x7f00000048c0)=""/219, 0xdb}}], 0x4000000000000cf, 0x0, &(0x7f0000004c40)={0x0, 0x1c9c380}) 22:11:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0xa, 0x0, @dev}}, 0xfffffffffffffffd}, 0x90) 22:11:26 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x2}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 242.242390] 9pnet: Insufficient options for proto=fd [ 242.245124] 9pnet: Insufficient options for proto=fd [ 242.296731] binder: 14886:14888 got reply transaction with no transaction stack [ 242.304307] binder: 14886:14888 transaction failed 29201/-71, size 0-0 line 2759 [ 242.328740] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.331237] binder: 14886:14899 got reply transaction with no transaction stack 22:11:26 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x8002) socket$kcm(0x29, 0x7, 0x0) [ 242.342886] binder: 14886:14899 transaction failed 29201/-71, size 0-0 line 2759 22:11:26 executing program 4: r0 = inotify_init1(0x0) r1 = dup(r0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)) shutdown(0xffffffffffffffff, 0x0) uselib(&(0x7f0000000100)='./file0\x00') setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x3, 0x9, 0x40, 0xffffffffffffff59}, {0x80000001, 0x7ff, 0x1ff, 0xf0}, {0x2, 0x7fff, 0x9, 0x1}]}, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ptrace(0x4207, r2) waitid(0x1, r2, 0x0, 0x2, &(0x7f0000000000)) 22:11:26 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x520, 0x0, 0x110, 0x0, 0x0, 0x3c8, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, &(0x7f00000000c0), {[{{@ip={@broadcast, @empty, 0xffffffff, 0x0, 'gre0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x0, 0x1}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}, @inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x100}}}, {{@ip={@broadcast, @local, 0xffffffff, 0xffffff00, 'yam0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0xc, 0x2}, 0x0, 0x98, 0xc0}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x3, 0x2}}}, {{@ip={@empty, @multicast1, 0xffffffff, 0xffffffff, 'irlan0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x10}, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x1}}}, {{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x9, [0x7, 0x2, 0xfffffffffffffffb, 0x57c, 0x20, 0xbb4c], 0x9, 0x81, 0x8}}}, @common=@unspec=@connbytes={0x38, 'connbytes\x00', 0x0, {0x8, 0x80000001, 0x2}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9cf}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a3a870700315f85714070") clock_nanosleep(0x8, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000003c00)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000002c0)}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 22:11:26 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="c7"], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x29, 0x3, 0x0, {0x0, 0x8, 0x0, 'vboxnet0'}}, 0x29) 22:11:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x8d04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 242.468750] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.533843] binder: 14916:14917 got reply transaction with no transaction stack [ 242.541454] binder: 14916:14917 transaction failed 29201/-71, size 0-0 line 2759 22:11:26 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0xfffffffffffffd85, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)=0x10001) 22:11:26 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/zero\x00', 0x20100, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000bc0)=0x401, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000200)={r3, r3, 0x3, 0xfffffffffffffe01, &(0x7f00000000c0)="52db888c549b0c6413cc5a615b36074536f45fbd8219a3b33e82bd0d355cc671041744584f8905ba6c0a6fa25affe967285a6c526977b2e033feac7aa9a9863b67aa9cebd105635425ab2eade34ac52b65471f8bc4a313f6e1116b35683fcb0ad0230acacc6d9f641c9728311683b858d7460fa3e94e63a22ca95a1b1ebd575e2875aa847f6973dd2f6513582c58f5808881940bad6fd6dace90532d41451ec50e5d7151239f404d0c5e779eeea6df7ff9ee79c9cf8981e543be1e", 0x7f, 0x4, 0x81, 0x4, 0x3, 0xddd, 0x2, "29d7b10d90ff848202145a8a55b273748f0d3813ecf9d2da9e8af55c"}) 22:11:26 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1f8}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 242.621283] binder: 14916:14923 got reply transaction with no transaction stack [ 242.628920] binder: 14916:14923 transaction failed 29201/-71, size 0-0 line 2759 22:11:26 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)=r0) r1 = memfd_create(&(0x7f0000000100)='wlan0wlan0\x00', 0x200000001) ftruncate(r1, 0x1000000) ftruncate(r1, 0x0) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 22:11:26 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2480, 0x0) pwrite64(r0, &(0x7f0000000040)="bbdfa6487a2fb0a6ed3094efa5142e067f8beccac08fbdadd347d48088", 0x1d, 0x2) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x4) 22:11:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x13cc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 242.775404] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) ioctl$EVIOCGREP(r0, 0x40107446, &(0x7f0000000040)=""/174) dup3(r0, r0, 0x0) [ 242.856946] binder: 14943:14944 got reply transaction with no transaction stack [ 242.864584] binder: 14943:14944 transaction failed 29201/-71, size 0-0 line 2759 22:11:27 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x8002) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x1dd4, 0x6, 0x3}, 0x8) [ 242.946192] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.958600] binder: 14943:14952 got reply transaction with no transaction stack [ 242.966383] binder: 14943:14952 transaction failed 29201/-71, size 0-0 line 2759 22:11:27 executing program 3: r0 = gettid() r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="025c3f0a00145f8f764070") socket$kcm(0x29, 0x0, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xc0109207, 0x20000000) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req={0x0, 0x3800000, 0x7, 0xff}, 0x10) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) fallocate(r2, 0x8, 0x8001, 0x4) tkill(r0, 0x15) 22:11:27 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000300)) 22:11:27 executing program 1: r0 = semget$private(0x0, 0x6, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x20000000001, 0x0, 0x0, 0x3e}, 0x0) semop(r0, &(0x7f0000000000)=[{0x80000003, 0xff}, {0x0, 0xfffffffffffffffd}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0xdf0, 0x0, 0x0, 0x7fff]) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x8010, r1, 0x0) 22:11:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x5, 0x1, 0x3ff, 0x5}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x101000) clock_gettime(0x4, &(0x7f00000006c0)={0x0, 0x0}) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000040)={@multicast2, @empty, @broadcast}, &(0x7f0000000080)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000001c0)={{0x0, 0x6, 0x8, 0x7fffffff, 'syz1\x00', 0xfffffffffffffffa}, 0x0, [0x2, 0x1, 0x1, 0x6, 0x7fff, 0x1, 0x400, 0x7, 0xc629, 0x1, 0xc7, 0x3, 0x8, 0x7, 0x100000001, 0x5, 0x5, 0x9e5, 0x0, 0x8001, 0x7, 0x7, 0x401, 0x0, 0x1, 0x2, 0x2, 0xffffffff, 0x3, 0x3f, 0x8, 0x101, 0x8001, 0x3, 0xffff, 0xc000000000000000, 0x1f, 0x9, 0x5, 0x5, 0x5, 0x80000000, 0x1, 0x3, 0x80000000, 0x7fff, 0x81, 0x7fffffff, 0x1, 0x1, 0x5, 0x1f, 0x2, 0x1, 0x9, 0x7ff, 0x7, 0x6f869fac, 0xe060, 0x4823, 0x10001, 0xf52, 0x200, 0x8, 0x69bc, 0x3, 0xfffffffffffffff8, 0xfffffffffffff907, 0xff, 0x9, 0x1, 0xa21, 0x0, 0x2, 0x5, 0x200, 0x1, 0x6, 0x6, 0x4, 0x100000001, 0x490, 0xe44, 0x800, 0xa050, 0x9, 0x1f, 0x6, 0x0, 0x100000000, 0x101, 0x3ff, 0x7, 0xe127, 0x6, 0x400, 0x101, 0x152c, 0x5679, 0x1ff, 0x80, 0x5, 0x3ff, 0xbd9, 0x0, 0x6, 0x3, 0x6, 0x100, 0x1, 0x7b5, 0x4, 0x3, 0x9, 0x10001, 0x3ff, 0x7, 0x19a, 0x0, 0x20, 0x6, 0x5, 0x6, 0xffffffffba92beba, 0x1ff, 0x7f, 0x6, 0x5], {r2, r3+10000000}}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:11:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0xffffff9e}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_newroute={0x30, 0x18, 0xe0b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xc0fe}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x111) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) 22:11:27 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0xa00000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:27 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x2) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") chroot(&(0x7f0000000040)='./file0\x00') write$sndseq(r0, &(0x7f0000000200)=[{0x81, 0x4, 0x0, 0x0, @tick, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0x30) tee(r0, r1, 0x100, 0x7) 22:11:27 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='/dev/kvm\x00', 0xffffffffffffff9c}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10a000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=@gettaction={0x25c, 0x32, 0x220, 0x70bd28, 0x25dfdbfd, {0x0, 0x8, 0x7}, [@action_gd=@TCA_ACT_TAB={0x9c, 0x1, [{0x14, 0x20, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x10, 0x10, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x12, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x14, 0x5, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x14, 0xb, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x14, 0x8, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x14, 0x8, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x10, 0xf, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0xa0, 0x1, [{0x10, 0x1f, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x2, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x10, 0x2, @TCA_ACT_KIND={0x8, 0x1, 'xt\x00'}}, {0x10, 0x12, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1e, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x20, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x1f, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x10, 0x19, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0x14, 0x1a, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x10, 0x12, @TCA_ACT_INDEX={0x8, 0x3, 0xd3}}, {0x10, 0xe, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x17, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x14, 0x10, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x10, 0x11, @TCA_ACT_INDEX={0x8, 0x3, 0x100000000}}, {0x10, 0x17, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x4, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x6, @TCA_ACT_KIND={0x8, 0x1, 'xt\x00'}}, {0x18, 0x4, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x1f, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1a, @TCA_ACT_INDEX={0x8, 0x3, 0x5f}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) ptrace$setregset(0x4205, r4, 0x0, &(0x7f0000000100)={&(0x7f0000001140)="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", 0x1000}) 22:11:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) io_setup(0x135b, &(0x7f0000000100)=0x0) io_submit(r4, 0x8, &(0x7f0000001800)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x8, r2, &(0x7f00000002c0)="22e4c21e1fa37cde952e86345d83025f932752ea20a8817cf89ac4476daf85eeb8705768ea97f01e1bbfb90605e180d620dcf1c031d1aeca03e1f78174e3e3f8096dd5d84411e9d360a8b0f37aa83e0d007671477c01e58f5cb814287f1185a4d010932c7149d680536e975db4dd80339fffa8d4862866ce52bf5661dc6dcbb6a033295f6ce5f97061441ccd27bd4108299d6faa8cb99943214e960308102b1849c8f071e2b6eece20171f761c79acf5fca0e90f77263cc448cf15a6ef1ddd4607", 0xc1, 0x7fff, 0x0, 0x1, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x6, r2, &(0x7f00000003c0)="7630c0cdca2b2667163614d313102268ce6fef30d32bcd0d90b77f69d16a767a960a6ab74074f87ce27c0a2f27f830fc5218dccc88ec44f08d4f1c8efe7190deb09f7b73bcde7e2351e4bd5219a53d11f2619b05cc2c73c799179ccb43e5833c05b54b2a87e0d028f0bdf8c4f2e80d4596812ac44f183dc45e02cdd089c67b2a46c9a1ba9d2952ba2d0137b8b9dc5d28977ebf83920fd24c23f83b668afe72e34ad91bdcb9d85f6788831b0f507ef078f30c8e32c6bec4b0a6b655ec8af92bea0c9e917d912bb5438a9ad10bfca1e7a555aa11e7ca76a3dbdf1a9db63052f7ef118fa8fdea6092188c819bc975cc683c021411", 0xf3, 0x9, 0x0, 0x1, r3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x9, 0x7, r2, &(0x7f0000000240)="c43e6d24fa3f787c6c17ee97005801174063cf20", 0x14, 0x40, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0xe, 0x3, r2, &(0x7f0000000500)="de6124f94450c1bb0992b8a0ad1969901f2b06254b3ab73ce5200a83a1b2a08ebea4b8f08f03fccec99060667de9ab5f1106c69425f5360afd34c5a4a9bd521400a335cbcc5009424ca811365c67dbe162ff0ffad8ad482834e1ef147262ae7d2f537e23cad71c6d77f3", 0x6a, 0x9, 0x0, 0x99add3252a0d9113, r3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xf, 0x3, r2, &(0x7f00000005c0)="c19089b6943aeca6", 0x8, 0x10001, 0x0, 0x0, r3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0xd564, r1, &(0x7f0000000640)="abcd92c348fd93341940f34fed89cb2d45aacdcbb2923b443a704bf3178e10ead3d5455ca880f1e08d6f0746ad635b4276352658c1445c88d04eee27222e5fd9eb9a219aa4bb0a5df4282541be3ead1691a8ec2e08fd64a5d245f0610e9b977712a9237091292f6e0559146f261e8efa9b7cfa85061147729ad7c674a1cfc721befef22da2f55e6df7356915307c7d402a305fee4b712d418726c7823cf9d4321de52dd5cb39ed01c4ab8469dfd490ee", 0xb0, 0x14, 0x0, 0x1, r3}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x4, r2, &(0x7f0000000740)="f6371c89d3894e30fb4007fd8d97e685", 0x10, 0x1, 0x0, 0x1, r3}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x8, 0x5, r2, &(0x7f00000007c0)="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", 0x1000, 0x101, 0x0, 0x0, r3}]) r5 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r5) r6 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x1000000000002, 0x0) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x101042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4) ftruncate(r7, 0x80003) sendfile(r0, r7, &(0x7f0000000080), 0x8000fffffffe) recvmmsg(r6, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0xa9}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) 22:11:27 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffe, 0x20000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x400, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x20, 0x3, 0x11, 0x5, 0x4, 0x6000, 0x6, 0xc2, 0xffffffffffffffff}) r2 = fcntl$getown(r1, 0x9) clock_gettime(0xfffffffffffffffd, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r0, 0x208}, {r1, 0x8}, {r1, 0x4500}], 0x3, &(0x7f00000001c0)={r3, r4+30000000}, &(0x7f0000000200)={0x5}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000480), 0xc, &(0x7f0000000100)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="5d80fb912d084d64e13e7a0734e0992de152a07fc8294d7b1b18cb2d9f0bd6b29321eeeb4507e83a8efbac57d3a0b467dd08019cda07efde0eff0898f7cf7a9624a302b5affa77135ce195da2731a0ae6d1b70ea148e6d93f0e24c5e2448c3b8e90e3f4b079a8bf2b5db1221d6750c6b6fa9a8b58b6e611533e80e6097b26fd5c6bbe1b5b1669d26b724798cf26665446665963f33f5b946fc0557022f6bc379127d47b4941bd70c28748cd3a7394c8d3c7e0d8e0e6bc9a912104a0c9607a805eeac0a431c5461081a17d0d48b04c1d1fecc3e871f34d61b7356d8d674ec1f16c918e6f6e1c6d4f21a2362fcd5bab1a938bb91b27c93069fdad989fd49c25f22d79ffe84cf96172d6258b73387ab04a8bf75d76b4586f3580358e33d0d29419cb33153d51ddab2b982b3f2a93dc6e0722bf7d89fcb3ba12c275f78f9eceb7aab51a52f9d394d196ca5e66e122a63b6e745464f9a747aeddd06f6c084c8c34872dd9a83f284d3b3427b28c7111c589cf34129ff97141f478eff0594d5ad6b44aecb46408ba6a53487749ea7463a911673989baafa08005f00000000b2ca684bd41005e7842ba2383f5a165f51c0874f67181270e65abaee6876510eff56f73096cee2b142aa59f825ab78c2e0124cdaa6c97440dae670b9ae6423c44fd531a08c4f63087f34973a8e5dbd0732533055f4f850f4fcd132dd607f2158bebdf273dcf7c1b2092c658aef5ba94a26cb7e9412204ba77fa643e00ed55dd5ba776a9e49ed5e3aadca9fa8004600586b044c2785caa2a85b860be748610391ed95edf9b34f2024de8af50f49b5fc6160842ed024aceee8c0fcf5dd0e95718773348cd94648249e74af1e9941aafbea8c8d87f57d40d5bdd4856625c42cb83db5ea4ef8f77af8affa8e2035e25050ee1eb794ed1a6d3836c7ccf2be10c0c7fb54bccf225085b1a5b1c5ccf752af9763a8487fb04a2404b5477790400b60b374d09fb7b6b4bb25f3ba98eab30997189d9a0ba3"], 0x4dc}}, 0x0) 22:11:27 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x2001fffe) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x800000000000001, 0x0, 0x0, 0xfffffffffffffffe}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/106, 0x6a}], 0x1) [ 243.416349] binder: 14998:15004 got reply transaction with no transaction stack [ 243.423935] binder: 14998:15004 transaction failed 29201/-71, size 0-0 line 2759 [ 243.427203] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/tcp\x00') unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) sendfile(r0, r0, 0x0, 0x4) 22:11:27 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=0x77) bind$can_raw(r0, &(0x7f0000000000), 0x10) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x9, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100)=0xffffffffffffffff, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000200)=""/21, 0x100000, 0x1000, 0x6}, 0x18) setsockopt(r0, 0x65, 0x1, &(0x7f0000000040)="92a88ed40ca365e96b138d573ae703afe0680a8d7ef762f39fd5f790ffffffdf137dc737f5953735c9e86297d2a3cbc679e5a12ea1e14a8b68f6cdcd62e119311b04ba5e0effc1dd46fbba8099ea73aa23f5de9a0523e61fafb03fe7682d9ce61c0450032e369ce18a7ea3bd10e75a4efdecd23143c9bd8d", 0x78) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x20) 22:11:27 executing program 4: r0 = socket$inet(0x28, 0x0, 0xfffffffffffffffc) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) poll(&(0x7f0000000100)=[{r0, 0x5002}, {r0, 0x3000}, {r1, 0x4402}, {r1}, {r1}, {r0, 0xea9b082d3ff252df}], 0x6, 0x1) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x4, r2, 0x1, 0x6, 0x6, @random="b5d99f553132"}, 0x14) 22:11:27 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x2f, @local, 0x4e21, 0x0, 'dh\x00', 0x2b, 0x7, 0x39}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @broadcast}, {0x4, @local}, 0x64, {0x2, 0xfffffffffffffffd, @rand_addr}, 'bridge_slave_0\x00'}) [ 243.536185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:27 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) r3 = shmget$private(0x0, 0x3000, 0x54000800, &(0x7f0000001000/0x3000)=nil) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x480, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000280)={r5, 0x8f}, &(0x7f0000000300)=0x8) shmctl$SHM_INFO(r3, 0xe, &(0x7f00000000c0)=""/173) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:27 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0xf0ffffff}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000000000)={0x10, 0x6c}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) connect$packet(r1, &(0x7f0000000ac0)={0x11, 0x4, r2, 0x1, 0x2, 0x6, @remote}, 0x14) [ 243.626282] binder: 14998:15028 got reply transaction with no transaction stack [ 243.633978] binder: 14998:15028 transaction failed 29201/-71, size 0-0 line 2759 22:11:27 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) mq_timedreceive(r0, &(0x7f0000000d00)=""/162, 0xa2, 0x2, &(0x7f0000000e00)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000540)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x2000000000000040, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) 22:11:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000001c0)={0x7fff}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)) dup2(r1, r3) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r4, &(0x7f00000003c0)=""/182, 0xb6) getdents(r4, &(0x7f0000000180)=""/8, 0x8) 22:11:27 executing program 1: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000c7001e00fb034d564b00000000f2"]) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0xca80000000000000}) [ 243.741200] netlink: 'syz-executor5': attribute type 16 has an invalid length. 22:11:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x8e04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000004c0)="04", 0x1}], 0x1) write(r1, &(0x7f0000000040)="2300000014000707c0f635c63f280f550b21120f0a0811000100f5fe0012ff00a36baf", 0x23) 22:11:28 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket(0x9, 0x3, 0x200) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0x7, @empty, 0x1}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22}, @in={0x2, 0x4e20, @rand_addr=0x768}, @in={0x2, 0x4e22, @multicast2}], 0x8c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl(r0, 0x9, &(0x7f0000000140)="d84728bd16380f7d") ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000300)={[{0x4, 0x7, 0x6, 0x6, 0x7fff, 0x1, 0x100000001, 0x80000001, 0x934d, 0x3, 0x5, 0x3, 0x4}, {0x35, 0x4, 0x7, 0xfffffffffffffbe9, 0x80000000, 0x1ff, 0x8, 0x0, 0x5, 0x1, 0x3ba, 0x3f, 0x7f}, {0xffffffffffffffde, 0x3b5, 0x5, 0x100, 0x1f, 0xbf, 0x4, 0x2, 0x7, 0x1f, 0x8, 0x1f, 0x200}], 0x1}) syz_mount_image$ceph(&(0x7f0000000180)='ceph\x00', &(0x7f0000000380)='./file0\x00', 0x4, 0x5, &(0x7f0000000700)=[{&(0x7f00000003c0)="412c07969f068529de2c64f2352c3bc027ef8b76abe712e36e3a93ed0a86a30e94471ce57e8341476a32be8400add42bee7e16670b3dc3ef03940285abf47d068667ced0c05440b2ec8dd52a8469f9f71f0d086348a15bc3bf95e74ca251c6cb907732d80afb378334de7f1f9a374944f94ff05d74b516de77fec2aad78220b5132081677c7ff173e88c34e91cb5bd8186a93ad2b4afda3a55d32187c4c37c2d44882d7f61725b21169d", 0xaa, 0x4}, {&(0x7f0000000480)="2841d3b6f2d2a0af93d97f21b4198178c5320a0aeae07b7cdd6f48ba90f63bdbc14bfac5df9c7e0bdca0f776d0734a02ccc141f6a198cf5e5b911ebe10a7a7d33bb85d8433c5d95d00deff940996d27739c329a3c4e67cec232d3075eb9ce26e671f10eb990b1a85", 0x68, 0x2}, {&(0x7f0000000500)="14bdf4e576fefce6fcad189f065bc0290bb54148d5b5b600c3247eb42141d07991eb8d5fea5ada957a392f8d262f6051e741219549fd2c164cbb7021362f32728ac2ccee21e1eb70aa2d1318302807f9e0e18f4788ad1d69a3ed69889e93c9aa3a8f91c7c224e8bd21ccb3b34b64bb66de0b1ee107b9f19efc79a0c5abdeac0ff1d4fdeaf3572b9b6cde674d9cfa67c6218cdf915a1568076ac44c1661b52f615a6650d5897e746532896377", 0xac, 0xfffffffffffff3eb}, {&(0x7f00000005c0)="4e9e378e1255ff2d6de2c6256d5f57424e34a03ce249e9175e2b55e42dbb8aece34d0bcfca1901c23b64a218ce44579a202af49ead66d762e7002bca4de86dc9a58ba69ff1cdeece2580a4b9e4dc3181979ffd8f744cc0bc74d240c68175831541dd", 0x62, 0xc2}, {&(0x7f0000000640)="c28b064605675d29790ab46b6c937b5b02f79a9d845a9d7339e27b48c68b25d6fb286d292be904b1402ae7d4146b5c6d32b1b25865ccc8fe531968a7053bafaa087528ab2c06305fb10e1f270c9e409dd5290ea82fcd61acad2561b638f658396d6573ecb1c80d3150e90676f03048a60710e1054d3bf8865e2c734f9a3f4c2e91b203116a65119f8a9ea3cc35fcec78a653b54032fe338b43aa872622da544c79ac8087b911e23f111f1a473e1b", 0xae, 0x800}], 0x808, &(0x7f0000000780)='/dev/kvm\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 243.890418] binder: 15066:15067 got reply transaction with no transaction stack [ 243.898250] binder: 15066:15067 transaction failed 29201/-71, size 0-0 line 2759 [ 243.918750] bridge0: port 1(bridge_slave_0) entered disabled state 22:11:28 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000100)) r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x8, 0x8c83) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0xafd8, &(0x7f0000000200)=0x1) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) [ 243.940418] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.952940] binder: 15066:15070 got reply transaction with no transaction stack [ 243.960566] binder: 15066:15070 transaction failed 29201/-71, size 0-0 line 2759 22:11:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101000, 0x1c) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = socket(0xa, 0x3, 0x8) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000000)="5da2e19cf50d58d0040988de8a05dc9c92335983e2712c1f47") ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89a2, &(0x7f0000000040)={"6272696467653000000100"}) 22:11:28 executing program 0: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="2d710f014f9af09f56e2a9f3d12bc2b5", 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYPTR64, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYPTR64, @ANYRES64=r0, @ANYRES16=0x0, @ANYRES16, @ANYRES64], @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYPTR64, @ANYRES64=r0, @ANYBLOB="bd582a3ac3deac47b3301b909647eb2b342cd5fd32588ca165a4ac13aa7772ae479d6e0e925d02bae5a3989b83040af382c1693a6ce24be8111a5d3139719795c95171624dbc5fd8ae9234419e587364bddfd35f4b0262f4e80dd5f8353642e32d1e17acf03e6f29a1353743a7244417526fe2b3856ae54abcfea440b8d874d0f714a026f1615975da8fbc6a4642eeb428500b"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64=r0]], @ANYRES32=r0, @ANYBLOB="03f4c33ea364664ca8e2164cee2a846d8098057928e9b1b950a30316685c18963cbc1abc87c6a045740c52ecd08a602e39a9ec20cee8bbd42ba25de873", @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES64=r0], @ANYRESOCT=r0]) getpid() syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000001880)={[{@noquota='noquota'}, {@pquota='pquota'}, {@grpquota='grpquota'}, {@filestreams='filestreams'}, {@inode64='inode64'}]}) [ 244.007433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(r0) syz_emit_ethernet(0x358, &(0x7f00000001c0)={@local, @dev, [], {@x25={0x805, {0x3, 0x362, 0x0, "be69100a8ded56e41be826e45b00431df415d2bf"}}}}, &(0x7f0000000100)) [ 244.092342] netlink: 'syz-executor5': attribute type 16 has an invalid length. [ 244.105437] ceph: device name is missing path (no : separator in /dev/loop6) [ 244.137207] binder: 15081:15083 got reply transaction with no transaction stack [ 244.144878] binder: 15081:15083 transaction failed 29201/-71, size 0-0 line 2759 [ 244.170498] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3f, 0x0) read(r0, &(0x7f00000001c0)=""/105, 0x69) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x20000000) mq_unlink(&(0x7f0000000000)='/dev/usbmon#\x00') [ 244.203129] ceph: device name is missing path (no : separator in /dev/loop6) 22:11:28 executing program 5: r0 = add_key(&(0x7f00000007c0)='user\x00', &(0x7f0000000800), &(0x7f0000001440), 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)='selinux!)#{cpusetproc\x00', r0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000580)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000240)=0xe8) r8 = getegid() r9 = getuid() fstat(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000940)=ANY=[@ANYBLOB="28030000feffffff040000000000000005000000000000000300000000000000dd00000000000000010400000000000006000000030000000100000000000000000400000000000002000000000000000500000000000000d6000000000000000800000000000000050000007f000000030000000400000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0100000002000000000000000000000000000000001000000000000005000000010000007573657200000000050000000000000002000000000000000600000000000000070000000000000007000000050000000200000000000000e00c000000000000ffffff7f0000000000000000000000000600000000000000590000000000000008000000ff7f0000ea000000230f000006000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1f000000020000000000000003000000000000000100000000000000000000000100008005000000000000000200000000000000090000000000000000040000000000000700000006000000020000000000000000000000000000000400000000000000da00000000000000080000000000000002000000000000000101000001000100010000000000000001010000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000009000000000000000500000000000000010000000000000008000000010000006b657972696e67000200000000000000030000000000000006000000000000000700000000000000b3a40000df0b0000060000000000000004000000000000003ee200000000000007000000000000000000000000000040a30b00000000000004000000841e0000080000000200000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="070000000400000000000000020000000000000007000000000000000800000001f0ffff6269675f6b6579000600000000000000010000000000000007000000000000002000000000000000000000000101000000000000000000000100000000000000050000000000000004000000000000000000000000000000a10f0000000000000200000009000000000000001400000007000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="06000000010001000000000006000000000000100101000005000000050000000000010073656c665c000000"], 0x328) r13 = add_key$keyring(&(0x7f0000001400)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r13) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0), &(0x7f00000003c0)='selinux!)#{cpusetproc\x00', 0x0) [ 244.247567] binder: 15081:15109 got reply transaction with no transaction stack [ 244.255326] binder: 15081:15109 transaction failed 29201/-71, size 0-0 line 2759 22:11:28 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mknod(&(0x7f0000000200)='./file0/file1\x00', 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000002500)=@req={0x400, 0x3, 0x2, 0x9}, 0x10) [ 244.295540] XFS (loop0): Invalid superblock magic number 22:11:28 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0xfa01000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:28 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x8c1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc1105511, &(0x7f0000000000)=ANY=[]) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$getown(r0, 0x9) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r2, r3, r4}, 0xc) 22:11:28 executing program 3: syz_mount_image$gfs2(&(0x7f00000001c0)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x0, &(0x7f0000002580)={[{@localflocks='localflocks'}]}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000040)=""/238) 22:11:28 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0xdf, 0xc01) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="be566388f861b3c4ab6bb96e7a6138c2ff5dda5cdbcb14ff4abdfd61e206f48330c2410f00009c79e9b3007544adfe3874fd67372bc671a3f2c903bb37ceac594a3dff7afeb34faf1ad90e66f4618b87c9c45c20ef45cbc2283f79be518c231a8422bc85a302c713af4f72b9df063b95439d5d2f3c51429b0dec6320d534e0c015e7755518000000000000000000"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000300)=""/178, &(0x7f0000000280)=0xb2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000140)=0x800, 0x4) 22:11:28 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') lseek(r1, 0x4d, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x80, @remote}, 0x1c) 22:11:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:28 executing program 5: r0 = add_key(&(0x7f00000007c0)='user\x00', &(0x7f0000000800), &(0x7f0000001440), 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)='selinux!)#{cpusetproc\x00', r0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000580)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000240)=0xe8) r8 = getegid() r9 = getuid() fstat(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000940)=ANY=[@ANYBLOB="28030000feffffff040000000000000005000000000000000300000000000000dd00000000000000010400000000000006000000030000000100000000000000000400000000000002000000000000000500000000000000d6000000000000000800000000000000050000007f000000030000000400000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0100000002000000000000000000000000000000001000000000000005000000010000007573657200000000050000000000000002000000000000000600000000000000070000000000000007000000050000000200000000000000e00c000000000000ffffff7f0000000000000000000000000600000000000000590000000000000008000000ff7f0000ea000000230f000006000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1f000000020000000000000003000000000000000100000000000000000000000100008005000000000000000200000000000000090000000000000000040000000000000700000006000000020000000000000000000000000000000400000000000000da00000000000000080000000000000002000000000000000101000001000100010000000000000001010000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000009000000000000000500000000000000010000000000000008000000010000006b657972696e67000200000000000000030000000000000006000000000000000700000000000000b3a40000df0b0000060000000000000004000000000000003ee200000000000007000000000000000000000000000040a30b00000000000004000000841e0000080000000200000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="070000000400000000000000020000000000000007000000000000000800000001f0ffff6269675f6b6579000600000000000000010000000000000007000000000000002000000000000000000000000101000000000000000000000100000000000000050000000000000004000000000000000000000000000000a10f0000000000000200000009000000000000001400000007000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="06000000010001000000000006000000000000100101000005000000050000000000010073656c665c000000"], 0x328) r13 = add_key$keyring(&(0x7f0000001400)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r13) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0), &(0x7f00000003c0)='selinux!)#{cpusetproc\x00', 0x0) 22:11:28 executing program 4: socketpair(0x2, 0x4, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x12, r0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xe, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x2c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffffffffffe53, &(0x7f00001a7f05)=""/251, 0x0, 0x1}, 0x48) [ 244.508216] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 244.531156] gfs2: not a GFS2 filesystem 22:11:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r2 = accept$alg(r0, 0x0, 0x0) sendto(r2, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) socket$alg(0x26, 0x5, 0x0) recvmmsg(r2, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:28 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="7a0af8ff62e35d64bfa100000000000007010000f8ffffffb702000003000000bf130000000000008500000006000002b7000000000000009500000000000058007dac8a5eefe0b9dc4f2fb471cb04923b4a981c9b146415bd926646bc2e945329dbff8f95976ffdaac85854c3438f0002f0f24717fe9ee6fb1837ec08468e0676589622529a8142d542f7ea29760afd010008862e8897ba8f05ed24da305b52fba90ae7cb9b87dd912caf53ec666e6837ed6196d79f382fee2fe74cd7fc1fde8ad7ea325a2253ebc100000000000000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x100000005000505, 0xe, 0x100, &(0x7f0000000300)="070000b02cf2f83df212d25910e7", &(0x7f0000000140)=""/256}, 0x28) syz_mount_image$f2fs(&(0x7f0000000340)='f2fs\x00', &(0x7f0000000380)='./file0\x00', 0x2, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000540)="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", 0x1000, 0xde65}, {&(0x7f0000001540)="fa3fa5134a3cf797e8614ad4c4b9df4121d4d6197dab883c0050a48eed3e2eb62273b44453c409bae7dc2d2a047da4a7bd24e83c915666c129c2c5c8d48f635cce90c59201563bed4eb90fe68eb4d84b01bd73d8f428895f73e759ae5c23b182b95738a36d0b2778d1de66132e4cef6e12996d6b31ba52126c71729ba8d3c4fe2e2072a12ce0424383d8ea7fab06d7a423fb7c323789ba667b2109bc2373da02fda0e228c930473f21e3ddab429d615306b8d3ccf16c509e1bb9425e6ebd1cb9f8568b", 0xc3, 0x1}, {&(0x7f0000001640)="6d63eecf9516e879cd6dd55216ec391f307379d1e13f963057992f337ba67d3911e31bd1cf7569519233269cd9c38d55448000d3e2f1de69a080d1728e15c87174661e0508becb46b7c0e24ebad2101e4c2fc4dd0d85a2ebd7bb436f85f5b558085b8b2a11b83e62a1f6bfa091456199c43e0c8d9b9f5c1ce2c40a8af9e336302b8ab2e095cb8793fed6e3690cf7ae1b383288278e75875668ecde466d", 0x9d, 0x65f4}, {&(0x7f0000001700)="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", 0x1000}], 0x1, &(0x7f0000002700)={[{@norecovery='norecovery'}, {@heap='heap'}, {@alloc_mode_reuse='alloc_mode=reuse'}, {@noquota='noquota'}, {@noinline_data='noinline_data'}]}) syz_read_part_table(0x1, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000240)="8d6d9647604f7843c5b74499f476d8c44bbfae16ee9b2cca2a3e835d90b4ed78ceeced387677bed61c1d25d2af060d3f55dfd697ec010980d2ea064d237f380a2521e3730454495a54d1221144026d35cc2257083ac8a7e77c031e9ea7479fd71fd6d2f66ab5237e23ce0dfbbdeaa01f65cf1eb794d03bd59c9b152e28", 0x7d, 0x7}, {&(0x7f0000000080)="8adebdebbb711d054d8d8138161de3b302d525404907f87b902730f372fb90b1b9e118", 0x23, 0x1}]) [ 244.625490] binder: 15151:15158 got reply transaction with no transaction stack [ 244.633231] binder: 15151:15158 transaction failed 29201/-71, size 0-0 line 2759 22:11:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f857140709bfb3c1a3648c5424345dd433b73bc9b03749d3ec97837eb000000000000") r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) [ 244.701366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:28 executing program 5: r0 = add_key(&(0x7f00000007c0)='user\x00', &(0x7f0000000800), &(0x7f0000001440), 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)='selinux!)#{cpusetproc\x00', r0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000580)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000240)=0xe8) r8 = getegid() r9 = getuid() fstat(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000940)=ANY=[@ANYBLOB="28030000feffffff040000000000000005000000000000000300000000000000dd00000000000000010400000000000006000000030000000100000000000000000400000000000002000000000000000500000000000000d6000000000000000800000000000000050000007f000000030000000400000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0100000002000000000000000000000000000000001000000000000005000000010000007573657200000000050000000000000002000000000000000600000000000000070000000000000007000000050000000200000000000000e00c000000000000ffffff7f0000000000000000000000000600000000000000590000000000000008000000ff7f0000ea000000230f000006000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1f000000020000000000000003000000000000000100000000000000000000000100008005000000000000000200000000000000090000000000000000040000000000000700000006000000020000000000000000000000000000000400000000000000da00000000000000080000000000000002000000000000000101000001000100010000000000000001010000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000009000000000000000500000000000000010000000000000008000000010000006b657972696e67000200000000000000030000000000000006000000000000000700000000000000b3a40000df0b0000060000000000000004000000000000003ee200000000000007000000000000000000000000000040a30b00000000000004000000841e0000080000000200000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="070000000400000000000000020000000000000007000000000000000800000001f0ffff6269675f6b6579000600000000000000010000000000000007000000000000002000000000000000000000000101000000000000000000000100000000000000050000000000000004000000000000000000000000000000a10f0000000000000200000009000000000000001400000007000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="06000000010001000000000006000000000000100101000005000000050000000000010073656c665c000000"], 0x328) r13 = add_key$keyring(&(0x7f0000001400)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r13) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0), &(0x7f00000003c0)='selinux!)#{cpusetproc\x00', 0x0) [ 244.753640] binder: 15151:15175 got reply transaction with no transaction stack [ 244.761290] binder: 15151:15175 transaction failed 29201/-71, size 0-0 line 2759 22:11:28 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xe27, 0x40000) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000005c0)) recvfrom$unix(r3, &(0x7f00000004c0)=""/133, 0x85, 0x22, 0x0, 0x0) mkdirat(r3, &(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x7, @loopback, 0x401}}, 0x7, 0x2b63, 0x2, 0x60000000, 0x2}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={r4, 0x2e, 0x30}, &(0x7f0000000440)=0xc) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = fcntl$getown(r1, 0x9) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000580), 0x4) ptrace$setsig(0x4203, r5, 0xf65f, &(0x7f0000000480)={0xe, 0x1, 0x8001, 0x9}) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) 22:11:28 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x40, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000080)={0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000700)}) [ 244.805951] f2fs_msg: 2 callbacks suppressed [ 244.805990] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x69744812) [ 244.818314] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 22:11:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r2 = accept$alg(r0, 0x0, 0x0) sendto(r2, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) socket$alg(0x26, 0x5, 0x0) recvmmsg(r2, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:28 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0xfe000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:29 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000100)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000d1df52)=""/174) 22:11:29 executing program 5: r0 = add_key(&(0x7f00000007c0)='user\x00', &(0x7f0000000800), &(0x7f0000001440), 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)='selinux!)#{cpusetproc\x00', r0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000580)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000240)=0xe8) r8 = getegid() r9 = getuid() fstat(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000940)=ANY=[@ANYBLOB="28030000feffffff040000000000000005000000000000000300000000000000dd00000000000000010400000000000006000000030000000100000000000000000400000000000002000000000000000500000000000000d6000000000000000800000000000000050000007f000000030000000400000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0100000002000000000000000000000000000000001000000000000005000000010000007573657200000000050000000000000002000000000000000600000000000000070000000000000007000000050000000200000000000000e00c000000000000ffffff7f0000000000000000000000000600000000000000590000000000000008000000ff7f0000ea000000230f000006000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1f000000020000000000000003000000000000000100000000000000000000000100008005000000000000000200000000000000090000000000000000040000000000000700000006000000020000000000000000000000000000000400000000000000da00000000000000080000000000000002000000000000000101000001000100010000000000000001010000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000009000000000000000500000000000000010000000000000008000000010000006b657972696e67000200000000000000030000000000000006000000000000000700000000000000b3a40000df0b0000060000000000000004000000000000003ee200000000000007000000000000000000000000000040a30b00000000000004000000841e0000080000000200000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="070000000400000000000000020000000000000007000000000000000800000001f0ffff6269675f6b6579000600000000000000010000000000000007000000000000002000000000000000000000000101000000000000000000000100000000000000050000000000000004000000000000000000000000000000a10f0000000000000200000009000000000000001400000007000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="06000000010001000000000006000000000000100101000005000000050000000000010073656c665c000000"], 0x328) r13 = add_key$keyring(&(0x7f0000001400)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r13) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0), &(0x7f00000003c0)='selinux!)#{cpusetproc\x00', 0x0) [ 244.918686] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 244.925854] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 244.950717] md: could not open unknown-block(0,0). [ 244.956099] md: md_import_device returned -6 [ 245.027547] binder: 15206:15207 got reply transaction with no transaction stack [ 245.035207] binder: 15206:15207 transaction failed 29201/-71, size 0-0 line 2759 [ 245.063774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r2 = accept$alg(r0, 0x0, 0x0) sendto(r2, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) socket$alg(0x26, 0x5, 0x0) recvmmsg(r2, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x5, @multicast1}}]}, 0x60}}, 0x20000004) [ 245.075318] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x69744812) [ 245.083196] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 245.110851] binder: 15206:15216 got reply transaction with no transaction stack [ 245.118516] binder: 15206:15216 transaction failed 29201/-71, size 0-0 line 2759 [ 245.139712] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 245.146948] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 22:11:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000380)={0xae8, 0x202, 0x5cf1, 0x5, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000400)={0x429, 0x1, 0x4, 0x1, r3}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x26, 0x1, @tid=r4}, &(0x7f0000000040)) r5 = dup3(r2, r1, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x200000, 0x0) r6 = accept$inet(r1, &(0x7f0000000200)={0x2, 0x0, @rand_addr}, &(0x7f00000002c0)=0x10) getsockopt$inet_dccp_int(r6, 0x21, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) close(r1) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x400, 0x0) sendto$llc(r7, &(0x7f0000000100)="cabff8996d0a6a50d27b30c0b329b4afd49270dc9e82c27b88797977369caaf9bf4229da217e70e9e2774b47f023d41eb4dc1723c4ae7832e84102668c0a70d032a888bfb178a67b600c28f01a55d1c620293aaa202affc4c284016fa7facdb52f0fb2c3cddcc20af9a6db875b597927cdb85f66c807087982c38f519b0e47deb59feeefe37ce4304a7c6730f98abbfb4ec5ae25c537ae73c2860225757881942bb6cb7b320942bfd0021a", 0xab, 0x20000010, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x3, 0x8, 0x1000, @dev={[], 0x1a}}, 0x10) [ 245.185666] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:29 executing program 6: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r0, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 245.230755] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x69744812) [ 245.238537] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 22:11:29 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x6, 0xfff, 0x4}) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x44000, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0, 0xffff}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={r3, @in={{0x2, 0x4e23, @loopback}}, [0x401, 0x40, 0x9, 0xf982, 0x7ff, 0x0, 0x0, 0x4, 0x3, 0xb6d, 0x1e129021, 0x100000001, 0x33, 0x224, 0x8001]}, &(0x7f0000000440)=0x100) setsockopt$packet_buf(r1, 0x107, 0x1000000006, &(0x7f0000000040)="ec98a89de8d49ad3354294f4182b2b3010430b0a54178088dcc12c47639e99e2caa34891c15e3cf8c76653cb7e23c397f1fd0a3160ea6b0a20d359483ab0a99c3eb76db252423eee83d741324ce3c764aab05b013fae40d5c6e01dc9b396c2369a78619017e023b3f41594aac680b514c0be7c593f12a7c9c9bea77437973e7fd09662eb76532b5126c74e0e5aae3e77c7c090241bf88e4d053f0b23f3c41f3a5f7a6ee69377696a0185ad0e066674a06c41eeb50bb10ad052cb118bf360b66b8ba4d9c7485fe570d51e2e06f8443b62db05a3f8", 0x1fa) r4 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x6857b21ff1155d93) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000140)=0x80000000, 0xcf11d58e) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000240)={0x0, 0x3, 0x1, &(0x7f0000000200)=0x7}) ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0) ftruncate(r4, 0x10001) fcntl$lock(r4, 0x7, &(0x7f0000027000)={0x1}) ftruncate(r4, 0x0) 22:11:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:29 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x36) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = dup(r1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) ftruncate(r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x3, 0x7, 0x80, 0x1, @remote}, 0x10) 22:11:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)="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", 0x2761, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40286608, &(0x7f0000000080)={0x23}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) 22:11:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r2 = accept$alg(r0, 0x0, 0x0) sendto(r2, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) socket$alg(0x26, 0x5, 0x0) recvmmsg(r2, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:29 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x8000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:29 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) rt_sigsuspend(&(0x7f0000000040)={0xffff}, 0x8) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000109000/0x3000)=nil, 0x3000, 0x2, 0x910, r1, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000000)=0xfff, 0x4) ioprio_get$pid(0x2, r0) 22:11:29 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x5a541c02) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:11:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r2 = accept$alg(r0, 0x0, 0x0) sendto(r2, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r2, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 245.416813] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 35 (only 16 groups) [ 245.428530] binder: 15242:15243 got reply transaction with no transaction stack [ 245.436192] binder: 15242:15243 transaction failed 29201/-71, size 0-0 line 2759 [ 245.517109] binder: 15242:15254 got reply transaction with no transaction stack [ 245.524693] binder: 15242:15254 transaction failed 29201/-71, size 0-0 line 2759 [ 245.526892] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x4000}, {r0, 0x2000}, {r0, 0x1}, {r0}], 0x4, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000100)={0x1}, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x101100, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000001400)={0x51, 0xee, 0x8, 0x5, 0x2, 0x0, 0x9, 0x1f, 0x0}, &(0x7f0000001440)=0x20) sendmsg$inet_sctp(r1, &(0x7f00000014c0)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x7, @empty, 0x16a}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000280)="266dde4559e955b87429ce8f8970fd552bdda4cbd9ae35edf201da697690ca2e37f3f79486dd0e04148d555b304a0fd9dd17d45399c1c87593287a8886feee89bd47ffc00118b85168f9a43c34743ec21387b55c6cd6d99a37c73de8aa08e03f1213ba", 0x63}, {&(0x7f0000000300)="fba465aa3db170b2c3e4363bf8e52e80bf5c2f04e2bf07e5a5cf66bc9192a9b9c097b2ed4ff62455", 0x28}, {&(0x7f0000000340)="c97ac536acbbb22965ee9f47ae5b80c1fc020de80c74316d34ab0a8a79271a13bd9bc41b6bc2c3ce65a73c21497e2802a572a652c4785bdad6a71b54d29b70499c75ef0109780e1d2f5c88e7e1c115db0b709c101b8959f10a4076101bbabb399df75bbf2bc0e2a60c9d0bf3ccd2d91d7d8e13eb13d65c8f81923cb847fed496a95250f24bc6f1efcee15edb87e02c7414bd88f63b0796c9f275b9a220dd83e2b7fec25425cd30ca2fd3fc492987d3a7f84d5be96df8272243efb8fd07d6ccb82b345eebc9948c1bd21fa7e8249a33bc72730d35a1dc985bd6619dfdfbaffab28e9c0d718cc08350c9e5d0fb88d80e59149b3dbbf46b1cba99493b2a854a28eaaca9f85a6309f634534ef02727dd6bc8a2ded66afd49471c9e032d68c0e54610d823c9ddb97716fdfe9e678c32cdc80e2076961706cabf6f2582497c1a05396d2189d5c2a44c98eb2712e6cd7233e1e505e09fe84af8711b718ef9c80a7284a6525fb4bfcf2670479cbc0b0bf6eddaff8a54a53faf9ad9878039fe7c46d6421581eb256d2f41bcc43babc3a2f04df425419408591eb670e2926b07224c2333c59c54e2fcaf062175e68cb6e4a1ef343850c101322b124be258b0d90f76f04e7269dc232f51393b16fb94ea0eef873430de9913a445b3ea4590fced3771959889e75017d90f5012854ed73c07748c7928ea8293a2f769cf8864573a2b2bd3e8e8362b6f9055b633914dc1c4c3b18438b1a7f3a9b95b7bc1489c4cf22c5b9b1c2ddb299333d6d422e25465411613c8c58623ecde4d06b41b7ba83c4fd83ef5b1fe4a195cc597c526ef7307425161bfd4a02ab31b7f7b64e44bd877080a222830ab60ca174ca3fc22d70a10d6a7238a3481a85f48c1330194a4f2a74684331000979a4e70100172693f2fbc5b47fa6ed8e887283de9e68b1c926c57ff953e6197919a309512d12cd3a03f1a52e9e461ff3f363864fd8508f72cb65d9dd29e5c29d230ac812cf30eb9587f64a4a6e14f0dcb007cc83706adc8bca9384d320dc41ddd822f8b5f6a36a3b826eed875179e09ac47704652e1a61904fa077a5ce4f76e3027add7b96f2834ff5b61a064b2fe7be0359115dc897dd8768006becb9a7e3c64e606df734de8969467433516c78f588ea0e95f35106f2ff843f1633cc50d7b5322305d6a0e8904e5617837d8b04d4fc59a87d55030b480bf39af32c79b8aaa8149220e7e8872983799c89e30e88df1d28a36351595eb19c0da3879968d6a9b0ca5723d013849ff93425a337851fb1e210e316676dbc1e18ec27939764d34dbf9725debe2367e7643a5522472c81f469c713919e00b4248452f38e35c5b6807519eeaf73424f64f94e8c26893bf795bb327d6eb30c7cd953a927de0ea7c24648fb726eaf779c37204676cda3e8001e95f728b88a915db1935242e1024994b63a501296cf559021b0091b1eb1b4c192fbef229df03ccbb0a8cb0357016540171e4bc59c16716c494d30b6b15ae52ceae1bfdf9ab2427382d2690557ba7ac601840deb8c26f8622f47dd080f8d8c83f3665d6b6d355d4dd11693c9ca463ac983585f10a172a066345ce81fd73e44cd43c5175f3db6afa49ba34848bf5facc04bbcdfb1e6a0ce9b7ce6d261b4e8c5e53f1bef884bf44b553c5a8cf9232716e03fa683a6bf6fe3c01b0549604ca9b3522d405ad8edc67461aca4fbbad5c479bf8cba6678885bddd2d19535605e007e78feab0b1e7ab2b35b89a423b2f479ba4c011f60197e6eda2300cc5f6eec5da58540cecb7f510d0839556df5b6701189f18928490079e5ad6e97b58507617f485988b99de6526f2fe512ed25d2e838a7876eb606b7455d311851389f054db516661cd72618590c715df803d0b589d237270ac314a8959155bcaf1541568ca9345b50d5fb0250ba315a027ef854addddcf37705e12ad6f427d08dc6dcadc00566127796b1707e6a1a8dedac6d43fc80d62883823585566295290dd2278b9a2bd8925935bb65b537a7b19b0125f8a58149adaa713ef56eecdceba382721076be3bfbec994f010bb26b2bcc1e904c9cc6625dfa31e27bb0c64d9df51631859de44d58cca55dd9c9e1ba9f7eef48bcf9b6e71829c8f22eee8e475354bdd9c6fa89897c2e21f27670ec1af83bfce3f2f64120e334e7f4aa3d7464ffad9fb3180d9c938e6b404beaae8a99c1f2faa9133d3725d8de92a84d6994ae84ee51794c6c24304d429123656a41ca0a7c0a507d03e5776cbf085984c7d0a8a88e3e8a9e6971e255ccf1ebdd3326ef075001582258c63dea95b0e881d1b64a631a0b8a0716629f6fff66387f2b03bfe87948da23bf35458d20b36c4d86ffd653cb2e631eaed1bdc11a3361d037a8d6180b76d77f4604e1da265721479cad99d7097809257622154d03f7dc9c2acc3abdf2375c3c56b177cf444bb9e073ac18af78a42e777ad183a62311911032507ad9413d6ef0d54aa489059c67347a987d277651410da5bfac162419514e1339d373add1b6fcfe1169c912b1c8b1e664ac360d855d309cb9935e339fb0d260a1e611a4994a88ec775c1038d1c8d4467c6d7b67285af713aba02483e9a113001cf0382902146db62660315cb2baa1d43464dac6db693cdab97ac83b8a87aa81d009fe0673f4fabff3636b7e160265b2d09586cce508c991a12fc69433a73af0f19b5d503fde724fcde9fe25f61d7ddc5c1c1121184e17d8c5ab625446dbb559f84dce57abe3ecf0d608c8842eebf7619d65852d4ccd64187a6042a0216971f1ce079c45f1ccb6f343159c42e522a39052acc884dee51c31ccc3ef6605bc285a9e3a065bd5f81b0840fa17385896e782c78988bb68c8f91cbdecfdceb1021c7c224a1828ac49e68eef6d4687630ec03af01577061ff23dbb3a0d565251b2c46441806844adc1ea070f179d90160b71a8ae4fdb37d61ee86d29c018c596ab92b5f11bdc5abfe554bdfab3d9fd76089f91477044f5f2d90ee74f929e535f393b8dff2ca0c7bace6f8e0bacbfa02024b52ef6dfa78db99bf2975371cebbc9f0a0f05ca2987165f83600c77a0e593c7100dfaf8679bec98c4a96700b3c9f595b77bfa666981b7185520d50325a6aaddb9385f2a0cc0ce24a4d6ed32bd5ba700c2f2e50a4b586756f263a565505f388b33b383c3111a7c008e31992b304f28b645db7404b26015ef294518749f4a2d243431820e1f534bef496fcb612045a9a38de9068ef850f92d80f0e0e881354eff89eca15f9438031c1c018a43c614e640f398c65ae17be525c48ef230951920c4236708cf0f91c73153cbb9ab53abf21364dd21387811896c6f42311b2c5b52ccb262b3318822dabbd8b045a10e7e34ec42bc974cb1e26bcffd7105108a5402c011f903a252a3624fb6b192159d04f60f2855705087440d8427869f373ba9074ae371d5dd819b0cc6d1bd1b0fbfde80a5f812ddfd7af8bc337326106a157ef49fb2fbc24713d6384be600b78186de4e2585d639ff0a74ff1dcfa40c23ea9ebcce5bf0fb3d761aa9f4f00c75a1cf9399ac3b42cd3998151864248a0f390e8fb100930b9d3616c3e5f66db69fce99e4b8e87ad4b65ff499118abe57d057ea63346819a6bf5ee0cd1ccf6f0796e413834be61fa5cc1a23f455ce8c5132e308f5671179f9c292e22e6937e9e15b3126f574e349cc4aa834cdf049e1d8da5a1ed935618b9155b9c42f9d18fe3a2000f7186b7493748754b413e77923c7a71a0a84af20eff2bdefbc13e18eaab111da76b0702f0656110a279d8080ef26a20bee9f65ae29b3396e0404a6fb0afa23a0c39514c175428393a32c9a6111b16958ae973e099e0c89e14dda254d22e81f39504a71875891ee8d548e821f44c6bb827b88e09a7774433478e50dbf4744db290ea73dc6dd61bb24c58d792c54fd841587635baaba353a35d585addc0d8b8ac2020325687c8d7106b8cedc3b1742b9c57544c17121d9fec320c2bdb660ac8a8db39163f65bfeb00ab748230f32146de7444b0e7e99a369de35a0f4e3ff257c633330abacecedfd75f3f71e937c0155fb7c5319a915ccda6afc80bc3ab8ad3afba0c87cc24a911f4e09bd5c1e09de23a1364618f46034d41b8db830037aae0b6d2ff0c4a3b9b64c9f6aa239a61d9de1a6f3977494970e25219beeced44ca8d2f6b6e0b2c98b4becb27f8d71153e3c164ffb1661c72328740bb67de77312575278d7e38381c636583bc4b8aa23be28f9aa8e530a83805c344130b6de38d1d6db5886729809efe8c5cb7885693545e67b17d316f12138b33e3cc0d1534bea6f0c44f3070854bc9733b52d91b921021ef69f41f7a3d8643ed584dcf01ac23ccec33fa4c46947485ad808371fe08d5a6dcf752b705fbfe6563c2724613c141ca8b63c7bdef849c067dc01f34d04196d0f5f8af2e4303fb789241338d9ee8b491cd0efdf353c937dcb2bcf040d0a7b928805245fd430966809f0001b268dcb26a0c23625812c379a2d4ff80fe286bc54ad91136396013e9c7c492fcdd4da228778cf089b687abe60e2b75aee8c38afac2703f0d0eb423d5ae104b0e11da66f505f3d0e68678af53baa7d291f9df70b3ab9725cfd870473738425154fa64655d4d0026f5bff8310d992665cdeb037cd5f74e1c9f8eb20c2bd2956c9cf1e80742f68873face8d76764bb46e1695a3365fc54c7bbdc3211a7604679809053dedb09225847eab37ffb6a53cc2a135f0f5e88f7513fc8845ee1bc8c8e50ee45de28d23696de1c69363d20a17b01b49e8d9111a1bd3da0d788b27ffb9cb287a02a12a5f8d2628e184dadcd298fdce1151505cd03e24633a1a75e6d7b8e4c91c1c36b271c16b9b6c2ca8b951914a8493f36bfe09487078234ffc6db030b859804c686e2d110c4440f42ed2c9af13c26eb675724dd744c5cb5118f8a3b4cb3dbabc7f05ce622a3b84dae8ccf7a300e6e3e3baf4d73017354815bea2a10c60ae14fa071b94527a14cc22abd29c0238fb8884c64f3b676f607cf931a1fffb3024bac858376316a98aaaab5ac0daadcd6574134bfb146b883550eaffb90d8c7fc5f51ce46bd4ecc9f9e60b4d8ddb9823d383a769d0303cce69bf436ff589e94fde0f198e0346450d7b2618e4ec9815707d6587a240f4d4d69f50d8b6ff05ede3cd308e978001de5b145a82b4549b2b1c94440c22d309c98135931f0b1eca3ae6cccfbd851d39142860a9de9efb94684c66b714f1ed8f69141291581b1e2d14039098553526897d002e57a7ec02db805fed39d1e3495415b03a9754efa7750ae2a161476b173f5cc548199498f5ab60a50c1e5265979620b8177e9e31796c07b4b35fb09624f10a926f480b8f6187a08d6ed680bf41f4b598a374e00c73a72eff16492abd3ddc2bf125f818ef4fdd65aa18e835c31aa79223b84ece8108d125bbdf3fdb0851eee5421ebdf04eba60d02e69a565d09002fabca26a2d3275c02cfd1e37f904b6d067327e61e050f91befb73ad17bff754152d48c3d2234c78204b272657cdaa8d968dfa52cd75ef2a36404897076ee6ccc8d8c2e456508b8bc233411d221ccc4f89e382c6d82d5a04b8cdc2ccdc59614825d00b0b687ea57c4897730c4a9921546ed5aeab5f53a2535ed2f5d8971664f325d470d96e2dfdbbc96a8d9ffdb0c32c68a3ea1bf6221c24072c8f402b1a44b4563b00f528f7b70be9029c1285514d768f1bc14442757930aa69c48b6bbbeaf6d7172b5af34794fa2300a0dbb3efeec52f109d99793c2c622baf15ddcbe9d0b0510f1cc8701119", 0x1000}, {&(0x7f0000001340)="8a354d5573b918cd1ddb883278b88bbd21c9fc2fadfef81f61a9a246ca2ffb6c18e4353ac8164e28d0f88c5160fde78092875a2fe38301e4fc7af77939240f45c0461f329b3528bfae", 0x49}], 0x4, &(0x7f0000001480)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x4, 0x5, 0xa9, r2}}], 0x20, 0x4008880}, 0x20000000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, "4f019b55a1be58df7b55762023ad56d08f16133d2099807ad4d300"}) 22:11:29 executing program 4: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x4140, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, 0x5, {0xda, 0x3, 0x0, {0x0, 0xfffffffffffffffa, 0x1ff, 0x0, 0x0, 0x7f, 0xfffffffffffffff9, 0x43ab, 0x7fffffff, 0x2, 0x100000000, r2, r3, 0x800, 0x8000}}}, 0x78) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x208000) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000180)=0x7fff) setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000080)="d5c822719aec7172193393f4b273690de03f86db1e2ea1929cd7c5fd4b3360ec8e63d588432244d1b622a59df0f108b6735b8845f928fd1fa06489f1bd1172200edfe84d8a7ebaf7f58bc1f1", 0xff4b) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000480)={r0, 0x0, 0xe5e, 0x1f, 0x101}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000100)={0x7b, 0x0, [0x90000001]}) 22:11:29 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup3(r2, r2, 0x80000) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x1, 0xffffffffffffffb0, 0x4, 0x8001, 0x1, 0x8, 0x10000, 0x4, 0x7, 0x6}, 0xb) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:11:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 245.741761] binder: 15279:15281 got reply transaction with no transaction stack [ 245.749413] binder: 15279:15281 transaction failed 29201/-71, size 0-0 line 2759 22:11:29 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000c40)='.bdevuser(posix_acl_access\x00'}, 0x10) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x2}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r0, 0x10102) read(r0, &(0x7f00000000c0)=""/113, 0x71) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000c00)) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000000a40)=[{{&(0x7f0000000140)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f00000002c0)=""/174, 0xae}], 0x2, &(0x7f0000000240)=""/42, 0x2a, 0x1}, 0x200}, {{&(0x7f0000000380)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/238, 0xee}, {&(0x7f0000000500)=""/247, 0xf7}, {&(0x7f0000000600)=""/69, 0x45}], 0x3, &(0x7f00000006c0)=""/24, 0x18, 0x5}, 0x600000000000000}, {{&(0x7f0000000700)=@alg, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)=""/88, 0x58}], 0x1, 0x0, 0x0, 0x3}, 0x2}, {{&(0x7f0000000840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/255, 0xff}], 0x1, &(0x7f0000000a00)=""/62, 0x3e}}], 0x4, 0x22, &(0x7f0000000b80)={r4, r5+30000000}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)={r3}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x4, 0x4) close(r0) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x40004e23, 0x0, @loopback}, 0x1c) [ 245.798525] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") fstat(r1, &(0x7f00000000c0)) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0xb, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) [ 245.871405] binder: 15279:15291 got reply transaction with no transaction stack [ 245.879015] binder: 15279:15291 transaction failed 29201/-71, size 0-0 line 2759 22:11:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0xfffffffffffffffc) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f00000000c0)='eth0\x00') 22:11:30 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x700000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:30 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@remote, @in6=@dev}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@rand_addr}}, &(0x7f0000000180)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setuid(r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="69c2312373f03cad3e321b50d38d994ffe3ca60000000000000000000000000000"], 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000400)={0x6000, 0x10000, 0x40, 0x3f, 0x3}) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000200)=""/147) 22:11:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:30 executing program 4: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0x2) r1 = socket(0x40000000015, 0x5, 0x0) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x200) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x40) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000240), &(0x7f0000000140)=0xfffffffffffffe85) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000000c0)={0x2, 0x0, [{}, {}]}) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000f7db7f), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback, [0x3e000000]}, 0x10) 22:11:30 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) times(&(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000080)) mount(&(0x7f0000000140)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0xd, &(0x7f0000000100)) [ 246.081127] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.188405] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080), 0xc, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000025bd7000000000000f000000"], 0x14}}, 0x0) sysfs$2(0x2, 0x10001, &(0x7f00000002c0)=""/204) 22:11:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:30 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7a6c06"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0xcff3c8916f4dcc5f, 0x0) socket$netlink(0x10, 0x3, 0x15) accept$alg(r3, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000100)={0x94, "266b2f550731ab44f5f927184b02718252f5abce23c1f2d7a9be7fdeaf70ed748e707419e481e36fa64d6270b0db61fea3193293872ce466473bf55725e7a81d102df881f4aa0517e0d11736abcd8ee61e4faba9cf8f0da07f0eed3dbf147c38307a1ed53975afcf601bcd2e9073b9f79ec808d98122756ddbae599e6de96f099a843c8bfca7c23295da4f6a5c8522e3b7142788"}) 22:11:30 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x28a00100}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x4000002e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x2000, @ipv4={[], [], @broadcast}}}, {{0xa, 0x4e23, 0x0, @mcast1}}}, 0x108) socketpair(0x2, 0x80006, 0x6, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000003c0)) accept$unix(r0, &(0x7f0000000700), &(0x7f0000000340)=0x6e) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000400)=ANY=[@ANYBLOB="ffff00060000007f000001e0000002e0000002ac1414aaac1498ff40bf7fe67fcc780e1714000000000000000000"], 0x28) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x6, 0x3, 0x8, 0x393, 0xe1, 0x7, 0xff, 0x4cd1, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x100000000, 0x3, 0x1ff}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000440)={r2, 0xfff, 0xffff, 0x3, 0x2c8, 0x6}, 0x14) 22:11:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0xce, &(0x7f0000000180)=""/206, 0x0, 0x1}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x800, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000003c0)={0x0, @empty, @broadcast}, &(0x7f0000000400)=0xc) bind$bt_hci(r1, &(0x7f0000000440)={0x1f, r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x5}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x0, 0xe, 0x1000, &(0x7f00000002c0)="a7ad5699603372a3dbadf3e39e7a", &(0x7f0000001800)=""/4096}, 0x28) [ 246.542923] binder: 15334:15336 got reply transaction with no transaction stack [ 246.550925] binder: 15334:15336 transaction failed 29201/-71, size 0-0 line 2759 [ 246.578569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.630839] binder: 15334:15354 got reply transaction with no transaction stack [ 246.638583] binder: 15334:15354 transaction failed 29201/-71, size 0-0 line 2759 22:11:30 executing program 3: r0 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x840, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000140)={r0, r3}) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") io_submit(r1, 0x1, &(0x7f00000019c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000000c0)}]) io_submit(r1, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x121}]) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) accept$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) sendmsg$can_raw(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x1d, r5}, 0x10, &(0x7f00000002c0)={&(0x7f0000000340)=@canfd={{0x3, 0x10000, 0x5, 0x8}, 0x2e, 0x3, 0x0, 0x0, "e5faf6c8f5363bf458a1d3b8fe3fd1a38016ee2edaaae571e3352f147785cf5d9f30961ebb7eac2b0c0c5cdca27f3f565e5a4440bfe82155cb1a6fcc7d06598d"}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f00000000c0)) 22:11:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) sendto(0xffffffffffffffff, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x800455d1, &(0x7f0000001000)) 22:11:30 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x4, 0x20082) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000001040)=[{{&(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/115, 0x73}, {&(0x7f00000005c0)=""/251, 0xfb}, {&(0x7f00000006c0)=""/211, 0xd3}, {&(0x7f00000007c0)=""/86, 0x56}, {&(0x7f0000000840)=""/123, 0x7b}, {&(0x7f00000008c0)=""/194, 0xc2}, {&(0x7f00000009c0)=""/10, 0xa}], 0x8, 0x0, 0x0, 0x9}, 0xffff}, {{&(0x7f0000000a80)=@can, 0x80, &(0x7f0000000f80)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/2, 0x2}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/221, 0xdd}, {&(0x7f0000000cc0)=""/120, 0x78}, {&(0x7f0000000d40)=""/205, 0xcd}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/42, 0x2a}, {&(0x7f0000000e80)=""/211, 0xd3}], 0x9, 0x0, 0x0, 0x8}, 0x6}], 0x2, 0x40002002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000031c0)={'nr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000003200)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003240)={'team0\x00', 0x0}) accept$packet(0xffffffffffffff9c, &(0x7f0000003380)={0x11, 0x0, 0x0}, &(0x7f00000033c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000003400)={'vcan0\x00', 0x0}) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f00000010c0)=0x7ff) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000035c0)={0x0, @loopback, @remote}, &(0x7f0000003600)=0xc) r12 = accept4$packet(0xffffffffffffff9c, &(0x7f0000003640)={0x11, 0x0, 0x0}, &(0x7f0000003680)=0x14, 0x800) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000003740)={@ipv4={[], [], @multicast2}, 0x0}, &(0x7f0000003780)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000037c0)={0x0, @dev, @dev}, &(0x7f0000003800)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003840)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000003d40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x6ef19029415e806f}, 0xc, &(0x7f0000003d00)={&(0x7f0000003880)={0x444, r4, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0xf0, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xb1}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x2b0, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x1, 0x9, 0x8001, 0x1}, {0x4, 0x8000, 0x80}, {0x5, 0x0, 0x0, 0x3}, {0x5, 0x7fff, 0xfffffffffffffffe}, {0x6, 0x7f, 0x1, 0x3840000000}, {0x9, 0x40, 0x8001, 0xffffffffffffffff}, {0x1000, 0x8, 0x0, 0x7}, {0x22f, 0x7, 0x3, 0x3f}, {0xfffffffffffeffff, 0x5, 0x5, 0x8}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x78, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}]}, 0x444}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r17 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x10000) r18 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') write$P9_RWRITE(r17, &(0x7f0000009200)={0xb, 0x77, 0x1, 0x7}, 0xb) sendmsg$IPVS_CMD_GET_CONFIG(r17, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x64, r18, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5f37}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0xa}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000009240)=ANY=[@ANYBLOB="be7ae46f67ba528d5520e946be6067dad608eee23289b945d868ade633af3641de788fcbf9f79993c4ffd1e01d5d0f11937a0defd17ed15a33dadb1fde55822966a32b10785b0b417b5b14b06fb92bd7281347a04923cd7e2494f4a1f599ef56a956546de8d64131ee9aee42d1389505a51247e505dcae8a555ce6739aaa0517a1ee4d"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvmmsg(r12, &(0x7f0000009080)=[{{&(0x7f0000003140)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003280)=""/60, 0x3c}, {&(0x7f0000003440)=""/253, 0xfd}, {&(0x7f00000032c0)=""/108, 0x6c}, {&(0x7f0000003540)=""/19, 0x13}, {&(0x7f0000003d80)=""/133, 0x85}, {&(0x7f0000003e40)=""/224, 0xe0}], 0x6, 0x0, 0x0, 0x92}, 0x1}, {{&(0x7f0000003f40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003fc0)=""/139, 0x8b}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/4096, 0x1000}], 0x3, &(0x7f0000006080)=""/198, 0xc6, 0x76}, 0xfffffffffffffffb}, {{&(0x7f0000006180)=@nfc, 0x80, &(0x7f0000006800)=[{&(0x7f0000006200)=""/98, 0x62}, {&(0x7f0000006280)=""/151, 0x97}, {&(0x7f0000006340)=""/245, 0xf5}, {&(0x7f0000006440)=""/255, 0xff}, {&(0x7f0000006540)=""/35, 0x23}, {&(0x7f0000006580)=""/229, 0xe5}, {&(0x7f0000006680)=""/129, 0x81}, {&(0x7f0000006740)=""/158, 0x9e}], 0x8, 0x0, 0x0, 0x8000}, 0x54b}, {{&(0x7f0000006880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000006900)=""/4096, 0x1000}, {&(0x7f0000007900)=""/2, 0x2}, {&(0x7f0000007940)=""/83, 0x53}, {&(0x7f00000079c0)=""/167, 0xa7}, {&(0x7f0000007a80)=""/188, 0xbc}, {&(0x7f0000007b40)=""/78, 0x4e}], 0x6, &(0x7f0000007c40)=""/134, 0x86, 0xd0}, 0xffffffffffff8000}, {{&(0x7f0000007d00)=@can, 0x80, &(0x7f0000008040)=[{&(0x7f0000007d80)=""/246, 0xf6}, {&(0x7f0000007e80)=""/167, 0xa7}, {&(0x7f0000007f40)=""/240, 0xf0}], 0x3, &(0x7f0000008080)=""/4096, 0x1000, 0x100000000}, 0xfffffffffffffffd}], 0x5, 0x60, &(0x7f00000091c0)={0x77359400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 246.711394] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) getsockname$inet6(r0, &(0x7f0000000040), &(0x7f0000000080)=0x1c) chmod(&(0x7f0000d3f000)='.', 0x5398fffb08fec7ed) creat(&(0x7f0000000180)='./file0\x00', 0xe4fffffe) 22:11:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:30 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000040000006a0a00fe00000000850000000b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$VT_RELDISP(r1, 0x5605) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x10, 0xee, &(0x7f00000001c0)="dc06b54327969304cc81e1f78c922042", &(0x7f00000003c0)=""/238}, 0x28) 22:11:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x48000, 0x0) accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r2 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f00000000c0)) 22:11:30 executing program 3: r0 = semget(0x0, 0x6, 0x8) semop(r0, &(0x7f0000000040)=[{0x2, 0x0, 0x800}, {0x0, 0xbbe5, 0x1800}, {0x3, 0x93e, 0x800}], 0x3) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x44, 0xc, 0x7, 0x0, 0x0, [{}, {}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x0, 0x536]}) 22:11:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) sendto(0xffffffffffffffff, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:31 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x900}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 246.898289] binder: 15377:15380 got reply transaction with no transaction stack [ 246.905940] binder: 15377:15380 transaction failed 29201/-71, size 0-0 line 2759 22:11:31 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xfffffffffffffe14}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose'}]}}) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffff9c}) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000002c0)='veth1_to_bridge\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) 22:11:31 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) ioctl$KVM_GET_REG_LIST(r0, 0x400452c8, &(0x7f0000000040)={0x2, [0x0, 0x100000000]}) [ 246.992679] binder: 15377:15393 got reply transaction with no transaction stack [ 247.000292] binder: 15377:15393 transaction failed 29201/-71, size 0-0 line 2759 22:11:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) sendto(0xffffffffffffffff, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:31 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0x1f, &(0x7f0000000140)=0x8, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x1, 0xfffffffffffffffe, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(r0, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x5, 0x0, [{0xbdf, 0x0, 0x100000000}, {0x857, 0x0, 0x8}, {0xb59, 0x0, 0x5}, {0x2d9, 0x0, 0x8}, {0xbcd, 0x0, 0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$packet(0x11, 0x2, 0x300) getsockopt(r1, 0x3000000000000, 0x100, &(0x7f0000000000)=""/210, &(0x7f0000000100)=0xd2) r2 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x59, 0x2) epoll_pwait(r2, &(0x7f0000000200)=[{}, {}, {}], 0x3, 0xcc, &(0x7f0000000240)={0x4}, 0x8) [ 247.058958] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:31 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000f7db7f), 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=0x0, &(0x7f0000000300)=0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000340)={r1, 0x3, 0x6, 0x480000000000000, 0x32cd, 0x2}, &(0x7f0000000380)=0x14) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xb0, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @loopback, 0x5}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, @in6={0xa, 0x4e21, 0x542a9310, @local, 0x8001}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x1, @loopback, 0x6}, @in6={0xa, 0x4e22, 0x3, @mcast2, 0x264e}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={r3, 0x2}, &(0x7f00000001c0)=0x8) 22:11:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000002240)={0x1, [0x0]}, &(0x7f0000003a40)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x6d, &(0x7f0000000140)={r2, @in6}, &(0x7f0000000000)=0x3a6) 22:11:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r2 = accept$alg(r0, 0x0, 0x0) sendto(r2, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r2, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 247.202951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:31 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x2200) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x80000000, 0x30, 0x10001, 0x7}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000001c0)={r3, 0x9ea, 0x30, 0x7fffffff, 0xee11}, &(0x7f0000000200)=0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000500)=@setlink={0x20, 0x13, 0x309, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x1000000}}, 0x20}}, 0x0) 22:11:31 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) unlink(&(0x7f0000000240)='./file0\x00') read$FUSE(r0, &(0x7f00000030c0), 0x1000) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) umount2(&(0x7f0000000180)='./file0\x00', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000619fcd3823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f0004000000000000000000000000"], 0x90) 22:11:31 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0xf801}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 247.298968] binder: 15427:15431 got reply transaction with no transaction stack [ 247.306589] binder: 15427:15431 transaction failed 29201/-71, size 0-0 line 2759 22:11:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) mlock2(&(0x7f00009b5000/0x3000)=nil, 0x3000, 0x40000000000000) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f0000000140)) 22:11:31 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 247.377935] sctp: [Deprecated]: syz-executor4 (pid 15443) Use of int in max_burst socket option. [ 247.377935] Use struct sctp_assoc_value instead 22:11:31 executing program 5: r0 = socket(0x19, 0x805, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34d967c2dbb68c87439cf645e2150000001300090f000000000000000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001600100001000c0005ff00000000", @ANYRES32=0x0], 0x34}}, 0x0) sendto(r0, &(0x7f00000001c0)="3f4136f32a041bb7755ece68898b468e187cd71d3c5338c1d82db8c54fcb131af1a39adb4ddc6b0a3450c5cb5d9cd326032d94b1888c45579eafcb9a00cd7204cdfc5bc0f72f0095498f31ef56de9fe455dfdbf348aac382403d94ea8e75b5682f1196ba2eece4191d348e44691246543ffc0d0d3100508f", 0x78, 0x4004000, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000180)={0x77359400}, 0x10) r2 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000240)=0x6, 0x4) 22:11:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r2 = accept$alg(r0, 0x0, 0x0) sendto(r2, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r2, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 247.456444] binder: 15427:15452 got reply transaction with no transaction stack [ 247.464271] binder: 15427:15452 transaction failed 29201/-71, size 0-0 line 2759 [ 247.467923] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:31 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044302, &(0x7f0000000040)="c1dc83601562d1db18234359dfa62c6036edebade11397fb97dd7646d3bd53a097d54d3a4f2b459109fd97dac2bc3faece61466564ad684803cf43294ff29971e472b3736d6a7a51c3647e1c77c68b207151b81f4b87ddd1645a23fccf1dd869d1285b5742c46b2ea32baf6f336e2890461b7ad25ec79a0641e40f7496042e4d7bbd5acb9330eb9d56147380a3724eae24757afde53b37287ee217a0c06017492c5735f635368a1be418a33f609b31b7e692d2cc796ed81bd1bba754ebf00000000000000000000000000000000000") ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) 22:11:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r2 = accept$alg(r0, 0x0, 0x0) sendto(r2, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r2, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:31 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xfffffdef) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x50002, 0x0) [ 247.554876] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0xc83c010000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:31 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0xffffff7f00000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:31 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xffffffffffff393c, 0x800) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)={0x7, [0xfffffffffffffc00, 0x0, 0x7, 0x5, 0xfffffffffffffffc, 0x9, 0x81]}, 0x12) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="4300b5f88082aaaaaaaaaabb86dd6076605100300000fe8000000000000000000000000000ffff020000000000000000000000000001860090780014ff0060c5961e000000000301ff020000000000000000000000000001"], 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x20, 0x20, 0x201}, 0x20}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:11:31 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(r0, &(0x7f0000001100)=ANY=[], 0xfffffffffffffd9e) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 247.757488] binder: 15484:15485 got reply transaction with no transaction stack [ 247.765112] binder: 15484:15485 transaction failed 29201/-71, size 0-0 line 2759 [ 247.811938] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.866816] binder: 15484:15494 got reply transaction with no transaction stack [ 247.874498] binder: 15484:15494 transaction failed 29201/-71, size 0-0 line 2759 [ 247.907755] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:32 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x20) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5aa, 0x105100) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x7b, @local, 0x4e23, 0x1, 'lblcr\x00', 0x8, 0x0, 0x8}, {@multicast2, 0x4e21, 0x7, 0x401, 0x7, 0x80}}, 0x44) 22:11:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:32 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 248.127411] sctp: [Deprecated]: syz-executor4 (pid 15502) Use of int in max_burst socket option. [ 248.127411] Use struct sctp_assoc_value instead 22:11:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=""/83, &(0x7f00000000c0)=0x53) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) recvmsg(r1, &(0x7f0000000b00)={&(0x7f0000000740)=@alg, 0x80, &(0x7f00000009c0)=[{&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000380)=""/22, 0x16}, {&(0x7f00000008c0)=""/231, 0xe7}], 0x3, &(0x7f0000000a00)=""/218, 0xda, 0x3}, 0x2042) ioctl(r1, 0x4000008912, &(0x7f0000000480)="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") r3 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4}, 0x14) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000200)={@multicast2, @local, 0x0}, &(0x7f0000000300)=0xc) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="5000ecff90780000"], &(0x7f0000000240)={0xfffffffffffffffc, 0x4, [0x0, 0x0, 0xfffffffffffffffd]}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000bc0)={@mcast1, 0xf, r5}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000d80)=@sack_info={0x0, 0x8, 0x7f}, &(0x7f0000000dc0)=0xc) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000e00)=@assoc_value={r7, 0xfffffffeffffffff}, &(0x7f0000000e40)=0xffffffffffffff46) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r8, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0049d13d339c3a83b57716ee817c892fe57dda6e3ac07858a088ca4db18e363c2dea8bdb564a22c9bc8faf6c532aaab9b6ba0630f11c15b164a12d3e48f3fd"}, 0x60) r9 = socket$inet6(0xa, 0x80003, 0x3) ioctl(r9, 0x9, &(0x7f0000000d40)="025c3f0a00145f8f764070ea2d3b3b6785bf2f3fdb0000000018125653df00bb00a6173340d17fff6894cd20") getsockopt$nfc_llcp(r8, 0x118, 0x4, &(0x7f0000000200)=""/177, 0x70c000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000800)=ANY=[@ANYBLOB="1e0004000100ff01090006007ab277bdf69e91e6423ccf7f7bce7ed2ab1c357554d9b7107c246ca304f4f84611b74acd2d7ec18152c5f1d1b09e95beb1de179f10fe32b4e68406531da90800c8c66f29b5dd2a548e35c5dec15a6a72e16a6f077fe8f2857d2494805e310d7de931afc9649c865fb2cbfd5abb831465441c32e966c45435db9d0e81456df433cde61fa2ef1b62914b068a8111db9a"], 0x1) sendmsg$xdp(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000f80)="dd66137f2bef791b43672a97865028f3c2e696ea20c4fb0e6c4ef2c31fd600e1dc8f68b204932bd4a8e525799c384870112757c0ccd86ebb65e9a71ecb43977a40d7647ce84c368f8d76e16b41ac92168837ba739ec7fa84a069e33c718f27a66a553ce8832483705a749bd83a7ea5621d3b562d4b7a5c0c6f55f0f7b4a555b8d786d9ae787319712b0c5682057642657b21124a0f210c184c7fc44e45b5cee59f4ee73d95880a15b3dbad75121b44ed41ea42cc02dffa40dab3ceb65859d9555167754764", 0xc5}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000c00)=""/125, &(0x7f0000000c80)=0x7d) bind(r0, &(0x7f0000000b40)=@xdp={0x2c, 0x5, r6, 0x3c}, 0x80) setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f00000007c0)=0xb196, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000440)={0x7, 0x1, 0x9, 0xfffffffffffffffa, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc9, &(0x7f00000005c0)={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}, 0xfffffffffffffffe}, {0xa, 0x4e24, 0x43, @remote, 0x80000000000000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}, 0x5c) 22:11:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x200000000000) ioctl$SG_IO(r0, 0x2284, &(0x7f0000000080)={0x102, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000400)}, &(0x7f0000000100), &(0x7f0000001400)=""/71, 0x0, 0x0, 0x0, &(0x7f0000000040)}) fsync(r0) open_by_handle_at(r0, &(0x7f0000000100)={0x17, 0x7, "42882ad9dd104afe3eab383444aa1a"}, 0x101000) 22:11:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000140)}, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x4, 0x30001) ioctl$TIOCNXCL(r2, 0x540d) 22:11:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:32 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0xfe00000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r2, 0x5411, 0x70c000) 22:11:32 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="e898000f01c80f20d86635200000000f22d8360fe7a8060066366565670f4b612366b8690000000f23d00f21f86635200000050f23f8ba4200ec0f0f07a0360f22a5f4", 0x43}], 0x1, 0x50, &(0x7f0000000180), 0x0) 22:11:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 248.308494] binder: 15521:15524 got reply transaction with no transaction stack [ 248.316118] binder: 15521:15524 transaction failed 29201/-71, size 0-0 line 2759 [ 248.344262] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:32 executing program 4: r0 = eventfd(0x0) writev(r0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) fcntl$notify(r0, 0x402, 0x24) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000000)='net/ip_mr_vif\x00') timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="0eff4a45de15627c", 0x8}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/212, 0xd4}], 0x1) 22:11:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f0000000500)=""/4096}, &(0x7f0000000100)=0x78) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000180)={0x4, 0x4, 0x5, 0x0, 0x1f, 0x2}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x7000, 0xf000, 0xfffffffffffffffe, 0x7fffffff, 0x9}) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x6, &(0x7f00000002c0)=""/61, &(0x7f0000000300)=0x3d) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000280)) r5 = dup2(r1, r1) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000480)="b95d030000b800800000ba000000000f302e0f890038000066ba4000b840f90000efc4814d5863ab3e8197fd4300008fbc0000673667674d0fc79bc2c1f8640f323e400f0766baa000b000eeb9a5030000b89e4a0000ba000000000f30", 0x5d}], 0x1, 0x0, &(0x7f0000000500), 0x0) 22:11:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2279, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000180)}, &(0x7f0000000440), &(0x7f00000004c0)=""/76, 0x0, 0x0, 0x0, &(0x7f0000000240)}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000080)={0x9, 0x0, [{0xc0000001, 0x0, 0x2, 0x1ff, 0x5, 0x6, 0x1ff}, {0xc000000d, 0x7, 0x7, 0x8001, 0xffffffff, 0x101, 0x3}, {0xc000000c, 0x2, 0x1, 0x400, 0x3f, 0x2, 0x2}, {0x4000000d, 0x5, 0x3, 0x80, 0xd8d6, 0x9, 0x4}, {0x40000000, 0x100000000, 0x0, 0x6, 0x1, 0x6, 0x1}, {0xa, 0x1, 0x1, 0x8, 0x8, 0x400, 0x874d}, {0xc0000002, 0x1, 0x4, 0x0, 0x80, 0x9, 0x2}, {0x2, 0x0, 0x4, 0x18, 0x6, 0x0, 0xfffffffffffffffa}, {0x40000001, 0x4, 0x7, 0x3, 0x1, 0xaf, 0x1ff}]}) write$FUSE_BMAP(r1, &(0x7f0000000200)={0x18, 0xffffffffffffffda, 0x8, {0x6}}, 0x18) [ 248.393345] binder: 15521:15537 got reply transaction with no transaction stack [ 248.401214] binder: 15521:15537 transaction failed 29201/-71, size 0-0 line 2759 22:11:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:32 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x4e22, @local}}}, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = fcntl$dupfd(r1, 0x406, r0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:11:32 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='bdev\x00'}, 0x10) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f00000002c0)=ANY=[@ANYBLOB="001e9e1c28db467f6e5f8496d636383703ee49a5818fbfb7c7e21bd5e79c4bea105109cc3a5329718fd0817cd28b485028ad8c5b8443733beb5fe3b94c5f0909a7dfa57ad90b789e04bc24ee78b115f88189e75fec3713c4304410841740577f21a9906033aef904cde543081bc7327489e75351b7641ed88f3a913e9890bb810354bba0676a0d276047ead926f1fb8ce01d87c592c778267c030bc21feb5888d843524d24"]) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0xa20030, &(0x7f0000000280)={[{@mode={'mode'}}]}) 22:11:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 248.585795] binder: 15557:15558 got reply transaction with no transaction stack [ 248.593472] binder: 15557:15558 transaction failed 29201/-71, size 0-0 line 2759 [ 248.665491] binder: 15557:15565 got reply transaction with no transaction stack [ 248.673198] binder: 15557:15565 transaction failed 29201/-71, size 0-0 line 2759 [ 248.884858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2000, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback, @loopback}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 22:11:33 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='0x2', 0x3) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$set_timeout(0xf, r1, 0xffff) 22:11:33 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000), 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendto(r0, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r0, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:33 executing program 3: socketpair$inet(0x2, 0x80a, 0x100, &(0x7f0000000340)={0xffffffffffffffff}) fcntl$setsig(r0, 0xa, 0x2d) r1 = socket(0xd, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)=',&\x00', 0xfffffffffffffffc) keyctl$get_security(0x11, r2, &(0x7f00000001c0)=""/112, 0x70) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0x378, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x600000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r3, 0x28, &(0x7f00000002c0)}, 0x10) 22:11:33 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0xffffffff, 0x4, 0x100000000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006, 0x0, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:33 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x28a0010000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x80000, 0x0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x1000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$inet6(0xa, 0x800000000000002, 0x0) dup2(r2, r1) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000180)=0x6) sendmmsg(r2, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000001340), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @mcast1, 0xff01}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000100)}}], 0x2, 0x0) [ 248.989598] syz-executor3 uses obsolete (PF_INET,SOCK_PACKET) [ 249.023326] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.032158] binder: 15586:15593 got reply transaction with no transaction stack [ 249.039746] binder: 15586:15593 transaction failed 29201/-71, size 0-0 line 2759 [ 249.054312] device lo entered promiscuous mode 22:11:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdir(&(0x7f0000000080)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) chroot(&(0x7f0000000000)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f00000005c0)="0f22e4f0f6969c000f005ef666b8004000000f23c00f21f8663500000d000f23f8ba2100b005ee0f20e06635000010000f22e00f01bad300660f41528066b98b04000066b80e84000066ba000000000f30360fd927", 0x55}], 0x1, 0x11, &(0x7f0000000640), 0x9a) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000300)={r5, @in6={{0xa, 0x4e21, 0x400, @dev={0xfe, 0x80, [], 0x14}}}, [0x9, 0x9, 0x1, 0xa771, 0x8001, 0xffffffffffff0000, 0x8, 0x6, 0x0, 0x4, 0x8f39, 0x0, 0x7fff, 0x80000001, 0x6]}, &(0x7f00000001c0)=0x100) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:11:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x7, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x2800, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x2000, 0x100) bind$bt_sco(r1, &(0x7f0000000640)={0x1f, {0x9, 0x3ff8000000000, 0x0, 0x9}}, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x2401, &(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x8800) fsetxattr(r0, &(0x7f0000000180)=@random={'user.', "d5776c616e31656d316574683000"}, &(0x7f0000000280)='wlan1vmnet1\x00', 0xc, 0x3) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x15, &(0x7f00001afff8), 0x3d7) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000080)={0x1ff}, 0x4) 22:11:33 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000), 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendto(r0, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r0, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 249.105223] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.114212] binder: 15586:15605 got reply transaction with no transaction stack [ 249.121957] binder: 15586:15605 transaction failed 29201/-71, size 0-0 line 2759 22:11:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000800)="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", 0x1f9, 0x7}], 0x0, &(0x7f0000000500)={[{@commit={'commit', 0x3d, 0x4}}, {@noquota='noquota'}, {@loccookie='loccookie'}, {@meta='meta'}, {@data_writeback='data=writeback'}]}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 249.208855] device lo left promiscuous mode 22:11:33 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000), 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendto(r0, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r0, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:33 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f00}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, &(0x7f0000000480), &(0x7f00000000c0)=0x6e) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x42a01) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000280)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0xcc, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0c63000000634040030000000000000000000000000000000000000011000000000000000000000000000000000000003000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="060000000000c8cb01634840000000000000000004000000000000000000000011000000090000000000000000000000000000000800000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000963104003bc1a7c182c4df623b4d24012abd19dbf690a84d9e19f8aa3f492201a7bc9efa74845968b3b733cd29e4f0f950e1c0155eb85b91d3859775905bd21f5", @ANYRES64=r3, @ANYBLOB="03000000000000000e630c400100000002000000000000000c6300000563044001000000"], 0x5b, 0x0, &(0x7f00000003c0)="68edbcd08cb1682a3f955868885396eea4f68b252dc24f0efff1fb65624c84cf243eca74d63122cdc8009f1294c702ea700cf67a21873e8a32943921a4e8f2480de8b521236cd51107caf33755d9008403fdb8f07c032321cebd04"}) close(r1) io_setup(0x8, &(0x7f0000000140)=0x0) r5 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r5, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000640)}, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x7ad0}, [{0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffffffc, 0x0, 0x72}]}, 0x3b2) io_submit(r4, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x5ee}]) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f00000001c0)) 22:11:33 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 249.320883] attempt to access beyond end of device [ 249.326187] loop3: rw=4096, want=136, limit=1 [ 249.330871] gfs2: error 10 reading superblock [ 249.678655] attempt to access beyond end of device [ 249.683697] loop3: rw=4096, want=136, limit=1 [ 249.688260] gfs2: error 10 reading superblock [ 249.701553] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.733751] device lo entered promiscuous mode 22:11:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) readlink(&(0x7f0000001580)='./file0/file0\x00', &(0x7f0000000480)=""/4096, 0x1000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000015c0)={0x9, 0x108, 0xfa00, {r1, 0x61, 'uac', "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"}}, 0x110) write$FUSE_DIRENT(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b08956d069e000000002066ce654d316e6f646576656d3100f9ff00000000000000000000000000000000000001000000000000002c00000000000008000000000000000000000000000000001c00000000000051a717000418b9b3cc002b737973740400000065746367726f757024"], 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = dup3(r2, r0, 0x0) readlink(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000180)=""/29, 0x1d) bind$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0x2711, @host}, 0x10) 22:11:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:33 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x10240, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x7, @loopback, 0x1ae57fb0}, r4}}, 0x30) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:33 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x3f8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7b1af800"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x101000) write$eventfd(0xffffffffffffffff, &(0x7f00000000c0)=0x4, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)="6e76004ee6d8fc4396cfbcbf929fcd456fa6ac054ba9043a13484265f6da610b85a725457a29c09cdbadaf488bf8dd700ad0d5b599f94becd6bcaed57fadd2b8a94c4480979472b77f977f85284901aeb5e4c56b5562b198", 0x57) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[{0x2, 0x3ff}], 0x1) recvmsg(r0, &(0x7f0000001600)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 22:11:33 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000b00)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x0, 0xffff}) r1 = syz_open_dev$mouse(&(0x7f0000000600)='/dev/input/mouse#\x00', 0x20, 0x101100) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000640)={0x2, r1}) getsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000c80)=""/129, &(0x7f0000000680)=0x81) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000bc0)=ANY=[@ANYBLOB="040000000000000001000000000000003900000000000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000c309000060020000000000c10000003f0000002288dbf9e453000cf3a1", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000f600000000000000", @ANYPTR=&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000100000000000cc00000000000000", @ANYPTR=&(0x7f0000000a00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r2 = dup(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000ec0)={0x0, 0x1000000007}, &(0x7f0000000b80)=0x5) r3 = accept$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000d40)={0x20, {{0xa, 0x4e20, 0x5, @empty, 0x1000}}, {{0xa, 0x4e24, 0x2a, @loopback, 0x100}}}, 0x108) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000440)=""/115, &(0x7f0000000380)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) pwrite64(r0, &(0x7f0000000e80)="10f091b004af448eb4e240e46edeb8c951bb21bb314498", 0x17, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000740), &(0x7f00000008c0)=0x4) [ 249.763454] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.808318] binder: 15656:15658 got reply transaction with no transaction stack [ 249.816640] binder: 15656:15658 transaction failed 29201/-71, size 0-0 line 2759 22:11:33 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000a80)={0x13, 0x9, 0x7, {&(0x7f0000000240), r1, 0x1000000200000041}}, 0x18) 22:11:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:34 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x60}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:34 executing program 3: r0 = getpid() r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xb, 0x0) read(r1, &(0x7f0000000100)=""/158, 0x9e) ioctl$int_in(r1, 0x80000040045010, &(0x7f00000000c0)=0x5) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0xb2) r2 = fanotify_init(0x0, 0x0) readv(r2, &(0x7f0000004740)=[{&(0x7f0000000500)=""/149, 0x95}], 0x1) readv(r1, &(0x7f0000000880)=[{&(0x7f0000000840)=""/32, 0x20}], 0x1) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000), 0x4) [ 249.949254] binder: 15656:15675 got reply transaction with no transaction stack [ 249.956967] binder: 15656:15675 transaction failed 29201/-71, size 0-0 line 2759 22:11:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x8d04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000980)='/dev/snapshot\x00', 0x400, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0x50, &(0x7f00000009c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003bc0)={'veth0_to_team\x00', 0x0}) sigaltstack(&(0x7f0000ffa000/0x4000)=nil, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="75b3ab262296841200005aab1abcbc0b87000000", @ANYRES32=r2], 0x18}}, 0x0) r3 = dup(r0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) sendmsg$rds(r3, &(0x7f0000000940)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)=""/245, 0xf5}, {&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f00000002c0)=""/158, 0x9e}], 0x3, &(0x7f0000000780)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x2}, @mask_cswp={0x58, 0x114, 0x9, {{0x22d, 0x1f}, &(0x7f00000003c0), &(0x7f0000000400)=0x3, 0x44a5, 0xfff, 0xffffffff, 0x101, 0x4, 0x3}}, @cswp={0x58, 0x114, 0x7, {{0x3ff, 0x2}, &(0x7f0000000440)=0x9, &(0x7f0000000480), 0x6, 0xcc9, 0x4, 0x6, 0x8, 0x5}}, @cswp={0x58, 0x114, 0x7, {{0x401, 0x4}, &(0x7f00000004c0)=0x800, &(0x7f0000000500)=0x3ff, 0x5dc6a57b, 0x20, 0x4, 0xda2b, 0x16, 0x6}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0x2}, {&(0x7f0000000540)=""/172, 0xac}, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/179, 0xb3}], 0x1, 0x23, 0x9}}, @cswp={0x58, 0x114, 0x7, {{0x9, 0x16}, &(0x7f0000000700)=0x200, &(0x7f0000000740), 0x1, 0x57d, 0x637, 0xa8b9, 0x40, 0x80000001}}], 0x1c0, 0x20000000}, 0x4) 22:11:34 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x608002, 0x80) r4 = getpgid(0x0) write$FUSE_LK(r3, &(0x7f0000000100)={0x28, 0x0, 0x5, {{0x0, 0xe7d, 0x0, r4}}}, 0x28) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001140)=""/4096) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="70ef6750"], 0x4) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00', &(0x7f0000000200)='wlan1system+\x00', 0xd, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x400, @mcast1}, 0x0, [0x0, 0x10000000]}, 0x5c) 22:11:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 250.051198] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:34 executing program 5: r0 = eventfd(0x421) r1 = dup3(r0, 0xffffffffffffff9c, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000000)=0xc2ba) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0x80000001, 0x249, &(0x7f0000000300)=""/187, 0x0, 0x0, [], 0x0, 0xa}, 0x48) [ 250.171374] binder: 15697:15705 got reply transaction with no transaction stack [ 250.179242] binder: 15697:15705 transaction failed 29201/-71, size 0-0 line 2759 [ 250.198751] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 250.259859] binder: 15697:15720 got reply transaction with no transaction stack [ 250.267648] binder: 15697:15720 transaction failed 29201/-71, size 0-0 line 2759 22:11:34 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) sysinfo(&(0x7f00000001c0)=""/251) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) getsockopt(r0, 0x5f, 0x3, &(0x7f0000000000)=""/49, &(0x7f0000000040)=0x15) r1 = add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) keyctl$get_security(0x11, r1, &(0x7f00000002c0)=""/141, 0x8d) r2 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r2, 0x40086602, &(0x7f00000000c0)=ANY=[]) truncate(&(0x7f0000000180)='./file0\x00', 0x1e296c7) write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14, 0x13, 0x2, {0xcd, 0x1}}, 0x14) fallocate(r0, 0x3, 0x0, 0x100000001) 22:11:34 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x900000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:34 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f00000000c0)={0xffffffffffffffc7, 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="4a5555e4c4c142bd098bfcd2992b428c5c518c6e5f63b80045efb7eee91b93ff267bff2808d1ec16f49a6ca594d66014298eb7f77ae63847c7ce3d001402817fd23753d89d8888ff2acedf6903cf181a3b86efcecaef6ee767"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 250.473574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 250.569746] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) personality(0x500000f) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x3, 0x11, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="ea0300400036650f2143d83064d8e7baf80c66b88291578166efbafc0ced66b98105000066b80008000066ba000000000f300f01cad850f1b8e0008ed8ba4200b8e0bcef", 0x44}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:34 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x10001, 0x0) timerfd_gettime(r2, &(0x7f0000002340)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="380100001000130700000000000000000000000000000000000000000000000000000000000000000000ffffac14ffaa00000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000020480001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x138}}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 22:11:34 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0xfffffffffffffe14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005c40)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x7, 0x0, 0x0, {0x77359400}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c61f2323d752075b"}}, 0x48}}, 0x0) 22:11:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:35 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0xfdffffff}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:35 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) setsockopt$inet6_tcp_buf(r0, 0x6, 0x16, &(0x7f00000001c0)="50bddedf3789080fb6e9bb6bd795ae5e6da1a605dffe496d88542f511372ee8f068be25018fee48564eb9f9aa60b1641e62b71c20e9e3d509f03151bdaf756ff09f986bf9dc7b276326831b7649a1b029ce0ec8f88a48c25cb7223ac20094cdadd553e2eba79cc66e6296b9071b5940893d35ac4272e09920f9530b5fc15fcff7ba71bafc032529436566d0fb0c04712bb8ca7262d25b34e28a6c248e0f59a3db401eddd8a716ff67708e2", 0xab) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000080)=0xf000) 22:11:35 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x1}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x800, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8) sendmsg$xdp(r3, &(0x7f0000000840)={&(0x7f0000000440)={0x2c, 0x1, r4}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000480)="a303d683d8be", 0x6}, {&(0x7f00000004c0)="340e12af501d3850e322edc19118788b587f38661eafc767519b3199d42bb8e999ae147ce8ea557ac32263901cb17e0b7c5ad1e96a31cec54540bf970ac8842ba683ef04147cb1d71bddb8a56a4e5d", 0x4f}, {&(0x7f0000000540)="f0ba86dea63eddf26d697ace311fb36f2e1217cf83b144b8a6ef39e5460487823e913650001cbb088e1171e64c", 0x2d}, {&(0x7f0000000580)="42fd1ba2c5d2518c596509d7dbbea535aa5ef6feddf74caecc2562feb829ee002f987db1fc0aadef535e1a4dec76ccaee8ed28a5d9bac232d84f6cbe90dde7c3daf623cc5a932c40df93e77d64a1f95caadc22b547fe6d32e02b65ab5bdef1de1b1f3e202a938ed99f231689a548a3423e8481f265bca873ded226f0e32e620274056028d9e97c95732fd2ffb35749e072684c222bce4acaeca051bd220c570c65fd00caabedfb421eced215231e28aab04968409c58550b5cc7d08fe202a104340992f535d7361826eb75ae1cf6a6d4dd57dfa2fb63b2fe35b112aa2fca2d3d03c03efa", 0xe4}, {&(0x7f0000000680)="6b1ebe93a9c1c857faf34fd26faebbbee8fbd014f77b466fe00012d24f036262668490b2ed0815f4a4a83926c1dde582dbdc882bff341910fd055919be59bedd3c3b65ba0f7e92b850690058a14f9e12fe485bf9f2f1ae019f5a65df670fde2182916fd8636f400fb01e16b394ab545abdfb1f4997b6957edd7f4b78a612242e6526d4850a5bb0848e8adc3d59403741f177047628e40fc992b9f05848d62e9e39bc2f54b6dd674b19c589a612da3f0f9a08", 0xb2}, {&(0x7f0000000740)="817bfa11582d9f3a7c97d4c237994568625ece5fc8822c104f3d90a1d9acc780032e48453310fb1d376e085ef7aabd3ec35498a3820292c20cf2d532ddda1cfc6f4e6caa45dae3f00730c034b395202273a4c3a85586bd3b275da96f1abcb9f02c7dec804094a2644f57991038ab1e34a514", 0x72}], 0x6, 0x0, 0x0, 0x4010}, 0x20000800) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000200)="f6ba1dd1698376d900", r5}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom(r6, &(0x7f0000001140)=""/4096, 0x1000, 0x1, &(0x7f0000000240)=@in6={0xa, 0x4e24, 0x9, @local, 0x3}, 0x80) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 250.935665] binder: 15754:15757 got reply transaction with no transaction stack [ 250.943279] binder: 15754:15757 transaction failed 29201/-71, size 0-0 line 2759 22:11:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x11000000000b) listen(r0, 0x0) listen(r0, 0x5) r1 = socket$inet6(0xa, 0x3, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") unshare(0x2000400) listen(r0, 0xeb) 22:11:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1207, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x4000200) [ 251.001151] binder: 15754:15765 got reply transaction with no transaction stack [ 251.008798] binder: 15754:15765 transaction failed 29201/-71, size 0-0 line 2759 [ 251.038357] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 251.165986] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:35 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x10040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0x0) sync() ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x7f, 0x4) ioctl$void(0xffffffffffffffff, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) futex(&(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0), 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RLINK(r0, &(0x7f0000000180)={0x7, 0x47, 0x2}, 0x7) 22:11:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x2a3) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000340), 0x10) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x5c, @multicast2, 0x4e24, 0x2, 'wrr\x00', 0x1, 0x7, 0x3b}, {@local, 0x4e23, 0x0, 0x7ff, 0x5, 0x7ff}}, 0x44) 22:11:35 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 251.206571] binder: 15787:15788 got reply transaction with no transaction stack [ 251.214368] binder: 15787:15788 transaction failed 29201/-71, size 0-0 line 2759 22:11:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85714070") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/25}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000340)="3a16", &(0x7f0000000440)}, 0x20) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x80000001, 0x800) getpeername$netlink(r2, &(0x7f00000000c0), &(0x7f0000000180)=0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000)='@', &(0x7f0000000180)}, 0x20) tee(r2, r2, 0x4, 0x1) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x20400) fcntl$setpipe(r0, 0x407, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x7, 0x3ff, 0x80, 0x80, 0x1, 0xffffffffffffffff, 0x35664c3a}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r0, &(0x7f0000000500), &(0x7f0000000100)}, 0x20) 22:11:35 executing program 0: r0 = socket$inet6(0xa, 0x8002000800, 0x800002) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000080)) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x6}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2, r3}) 22:11:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:35 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x7000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 251.282573] binder: 15787:15793 got reply transaction with no transaction stack [ 251.290468] binder: 15787:15793 transaction failed 29201/-71, size 0-0 line 2759 [ 251.365527] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20004 22:11:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x105, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x78, &(0x7f0000000000), 0x10) 22:11:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$netlink(0xa, 0x6, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xc0042, 0x0) openat$cgroup_type(r2, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000b65000)='/dev/sequencer2\x00', 0x1, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10d, 0xd, &(0x7f0000001ffc)=0x2, 0x1) listen(r1, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'veth1\x00'}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) 22:11:35 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x28a00100}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 251.590264] binder: 15822:15834 got reply transaction with no transaction stack [ 251.597885] binder: 15822:15834 transaction failed 29201/-71, size 0-0 line 2759 22:11:35 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x2a, "e276795b15264a3ffde8a38f411001b6f159d08a0243bbeda2376a0b1dd9ee66972c069ceb331359a707"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r1, 0x9}, &(0x7f0000000180)=0x8) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000400)="eb3c906d6b660800666174000204010a0200027400f8000000565a3fd3b7d778eeb6597cb8f60dd00900028322", 0x2d}], 0x0, &(0x7f0000000140)={[{@dots='dots'}, {@nodots='nodots'}, {@fat=@showexec='showexec'}, {@fat=@uid={'uid'}}]}) 22:11:35 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x900) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000180)={r5, r1, 0x9}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:35 executing program 3: r0 = getpid() r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x101000) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f00000001c0)={@empty, @multicast2, 0x0}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@mcast1, @empty, @mcast2, 0x8, 0x6, 0xce, 0x100, 0x0, 0x2000001, r2}) ioprio_set$pid(0x1, r0, 0x0) [ 251.695482] binder: 15822:15844 got reply transaction with no transaction stack [ 251.703238] binder: 15822:15844 transaction failed 29201/-71, size 0-0 line 2759 [ 251.770346] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 251.818813] FAT-fs (loop0): FAT read failed (blocknr 2561) 22:11:36 executing program 5: unshare(0x2000400) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0//ile0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='gfs2\x00', 0xfffffffffffffffc, 0x0) 22:11:36 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xf801}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="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", 0x1000, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r2, 0x7b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter}]}) 22:11:36 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) read(r0, &(0x7f0000000700)=""/46, 0x2e) socket$pptp(0x18, 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 22:11:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x800) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) listen(r2, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x180, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x40, 0x0, 0x6, 0x1, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000000c0)={r4, 0x6}, 0x8) close(r2) close(r1) 22:11:36 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x4c0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x800, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x24) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f00000001c0)={0x2}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bind(r4, &(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0x3cbb, 0x2, "05509c152bf1de0aa5ebb0ee1b9472eec38717cec9b066edd9f1916c494e973afe66ee776efda20bcb263a0c958fa7cceb0133b0b4ddec350e484f6b1a79c2", 0x1f}, 0x80) 22:11:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 252.150278] binder: 15872:15874 got reply transaction with no transaction stack [ 252.158128] binder: 15872:15874 transaction failed 29201/-71, size 0-0 line 2759 22:11:36 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:36 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xc00}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46dd48c5914a8c53c9734a", 0x4c, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 252.198919] binder: 15872:15891 got reply transaction with no transaction stack [ 252.206536] binder: 15872:15891 transaction failed 29201/-71, size 0-0 line 2759 22:11:36 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), 0x4) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0xa, 0x4) getpeername$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) 22:11:36 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc01, 0x5be73fb0f2bf2825) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x101, 0x1ff, 0x0, 0x13, 0x8, 0x8, "671fd4235a11efff7be047b09ce02488d7da96ade41dcabe1ab4901f5ee333e6d27f0a837256c3ce32767b26f19d61e494f648abc7466f08bae764c1bf1dd6c0", "a28d36c237750eed556cfeeeb681ec5d16928330fb79d60cb031eb1b4cf02af6770a711395d9394333bb0bcc7887f49cae443604e0652cd66f7554996256e40d", "d114d7cce5284061cb243a49115234b10a60ca125dd1c54937a0e5caea5a9b53", [0xfffffffffffffffd, 0x4]}) fgetxattr(r1, &(0x7f0000000140)=@known='system.sockprotoname\x00', &(0x7f0000001940)=""/4096, 0x1000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x28, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r3, 0x7fffffff, 0x10}, 0xc) 22:11:36 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000b40)=@l2, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="54feffff060000000000000000000000e2ff"], 0x12}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, &(0x7f0000000000)) socket$bt_rfcomm(0x1f, 0x2, 0x3) rt_sigaction(0x400200000000007, &(0x7f00000002c0)={0x4004f2, {0xffffffbfffbff270}}, &(0x7f0000000240), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') 22:11:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[]}}, 0x4000044) 22:11:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280), 0x0, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:36 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x100, 0x0) connect$netlink(r3, &(0x7f0000000100)=@unspec, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x40, 0x0) 22:11:36 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x400000) ptrace$setregset(0x4205, r1, 0x0, &(0x7f0000000100)={&(0x7f0000000180)}) 22:11:36 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x1a028}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:36 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x10001, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x100000001, @remote, 0x100000001}, @in6={0xa, 0x4e20, 0x7, @mcast1, 0x6}], 0x38) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x8000, 0x4) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="571d7d91290d61beff7145763f7a95674c9b61c6e58ba229941a083257dfdd9d4037ad6480bbf0fd", 0x28}], 0x1}, 0x0) 22:11:36 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = dup(r0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f00000001c0)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x2, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000080), 0x1, r2, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x8, 0x7, 0x3000}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x263, &(0x7f00000001c0)}, 0x4) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000140)) [ 252.560235] binder: 15925:15938 got reply transaction with no transaction stack [ 252.567986] binder: 15925:15938 transaction failed 29201/-71, size 0-0 line 2759 22:11:36 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000004c0), &(0x7f0000000500)=0x30) write$P9_RWALK(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="168eb8439547a3e620e6a882f30a0040006f010001000000000000aadcc194047ac8d9"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x1, 0x4) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) r3 = getuid() stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r3, r4) 22:11:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000080)=0x2) ioctl$TIOCNOTTY(r0, 0x5422) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x800, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000140)=0x14) 22:11:36 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfd}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 252.670245] binder: 15925:15938 got reply transaction with no transaction stack [ 252.677917] binder: 15925:15938 transaction failed 29201/-71, size 0-0 line 2759 22:11:36 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) ptrace$cont(0xf, r1, 0x4, 0x8) read(r0, &(0x7f0000465f8e)=""/114, 0x72) 22:11:36 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000200)={0x5}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$P9_RWALK(r2, &(0x7f0000000000)={0x3d, 0x6f, 0x1, {0x4, [{0x22, 0x3, 0x3}, {0x90, 0x4, 0x5}, {0x28, 0x2, 0x2}, {0x20, 0x1, 0x5}]}}, 0x3d) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x0, 0x1c9c380}}], 0x252) dup2(r0, r2) 22:11:36 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x200800, 0x0) write$binfmt_aout(r1, &(0x7f0000000400)={{0x108, 0x96a5, 0xd71, 0x1da, 0x1f, 0x1f, 0x33e, 0x80}, "b469d236503db015c9dfb05d9e362241399b321c745512203965c8e695a19786367bdcbf001cd871a148259f1ad0d470c539d8209ea3c134bac8e7495c8a57fcaad76d", [[], [], [], [], [], [], [], [], [], []]}, 0xa63) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000300)=""/238) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="be7ae46fa3440998d1aef5799de2cbd3fa9673245079b88eba4d95d026260e1579ae49a898d9d336"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:36 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x800000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:36 executing program 5: r0 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@alg, &(0x7f0000000000)=0x80) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) r1 = syz_open_dev$sg(&(0x7f0000320ff8)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)=0x8000) 22:11:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 252.957946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 252.983490] binder: 15985:15988 got reply transaction with no transaction stack [ 252.991134] binder: 15985:15988 transaction failed 29201/-71, size 0-0 line 2759 [ 253.045177] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.049384] binder: 15985:15993 got reply transaction with no transaction stack [ 253.059440] binder: 15985:15993 transaction failed 29201/-71, size 0-0 line 2759 22:11:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280), 0x0, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:37 executing program 4: r0 = socket$inet6(0xa, 0x80009, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000001c0)) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0xf50c}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x7}, 0x4) 22:11:37 executing program 3: r0 = socket(0x10, 0x2, 0xc) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, &(0x7f0000000040)=0x14) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:37 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000d00)='9p\x00', 0x0, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000770100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) 22:11:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_ifreq(r0, 0x891c, &(0x7f0000000040)={'bridge_slave_1\x00', @ifru_hwaddr=@remote}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='security.capability\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x1212}) 22:11:37 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x13d1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:37 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x7}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 253.321236] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 253.345506] binder: 16004:16011 got reply transaction with no transaction stack [ 253.353137] binder: 16004:16011 transaction failed 29201/-71, size 0-0 line 2759 [ 253.358653] netlink: 'syz-executor3': attribute type 3 has an invalid length. 22:11:37 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x9}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x4000d4c) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000140)=@buf={0xb9, &(0x7f0000000080)="898caabb5f409a56ab49eb912ed28ad050202a984cd2e317b02da2b5a3dacf6db7b60d9485b3f6dc9ad88181479f02385b2c7890258840b7efa340aeebfe33cb701fdb940d6e11dbd789107814e3003e13c5a97e81f11ab40fa2b34360e2069296bb7e60db5e914a9a6cc27ef3acac26b3d454885686d68f13a61ff6b24e2883c3d61de00bc4ffb17ef96504f336beb37d1a84b0b12532c7c4bce45fa78e57e4f30a07541142119cfc02eedd052f3a1635520e0d52328bdd75"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000aaee0000000000000000000000000000000000000000000000c9541f57d0462de7e3b43d2a1bddc1d06bdbef1cd3de99cff6000000000000000000000000"], 0x1c}}, 0x0) [ 253.405492] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 253.425782] binder: 16004:16023 got reply transaction with no transaction stack [ 253.433425] binder: 16004:16023 transaction failed 29201/-71, size 0-0 line 2759 22:11:37 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x201, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x2) write$FUSE_DIRENT(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="5000001000000000"], 0x10) 22:11:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:37 executing program 3: r0 = socket(0x10, 0x2, 0xc) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, &(0x7f0000000040)=0x14) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:37 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x8001, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000001c0)=0x1, 0x4) r1 = memfd_create(&(0x7f0000000140)='dev ', 0x0) write(r1, &(0x7f0000000040)="164690f91220", 0x6) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000000)=""/42, &(0x7f0000000100)=0x2a) 22:11:37 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x500}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:37 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x9, 0x4}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) [ 253.686497] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 253.716245] binder: 16044:16056 got reply transaction with no transaction stack [ 253.723922] binder: 16044:16056 transaction failed 29201/-71, size 0-0 line 2759 [ 253.733656] netlink: 'syz-executor3': attribute type 3 has an invalid length. [ 253.772721] binder: 16044:16062 got reply transaction with no transaction stack [ 253.780336] binder: 16044:16062 transaction failed 29201/-71, size 0-0 line 2759 22:11:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280), 0x0, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:38 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x3, 0x7ff, 0x3, 0x4}, 0x1, 0x7, 0x81}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:11:38 executing program 5: r0 = memfd_create(&(0x7f0000000080)="6d81351e39cfc228a4c67200", 0x0) fallocate(r0, 0x0, 0x0, 0x6) fallocate(r0, 0x1, 0x0, 0x20f2) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x7}, 'port1\x00', 0x10, 0x80000, 0x1, 0x36fa, 0x93, 0x2c0, 0x3, 0x0, 0x2}) lseek(r0, 0x0, 0x4) 22:11:38 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfe000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:38 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x3f, 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x1c1000) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x5, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "11cfaa", 0x10, 0x0, 0x0, @loopback, @mcast2, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c3d903", 0x0, "bcc5c7"}}}}}}}, &(0x7f0000000340)) 22:11:38 executing program 3: r0 = socket(0x10, 0x2, 0xc) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, &(0x7f0000000040)=0x14) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = dup2(r0, r0) connect$inet(r0, &(0x7f00000000c0), 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000001c0)={0x1, 0x2, 0xdab, 0x3, 0x3}) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x240, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r2 = dup2(r0, r0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x7) recvmmsg(r0, &(0x7f0000001000)=[{{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x7ffff000, &(0x7f0000000840), 0x86, &(0x7f00000008c0)=""/136, 0x88}}], 0x1, 0x22, &(0x7f0000001080)={0x0, 0x1c9c380}) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x5, 0x200000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0x400, 0x3, 0x2}, 0xffffffffffff8000, 0x2, 0x2}) 22:11:38 executing program 5: r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB='\b\x00 \x00]d\tc']) sched_setattr(0x0, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) io_setup(0xfffffffb, &(0x7f0000000080)=0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000d83f60)=[{}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) sendfile(r0, r0, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000000)=':+lo#\x00', 0x0) io_submit(r1, 0x200000000000003b, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)}]) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f00000000c0)={0x10000000010001, 0xffffffff, 0x101, 0x2, 0x717}) [ 254.228375] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 254.241478] binder: 16069:16070 got reply transaction with no transaction stack [ 254.249226] binder: 16069:16070 transaction failed 29201/-71, size 0-0 line 2759 [ 254.264541] netlink: 'syz-executor3': attribute type 3 has an invalid length. 22:11:38 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x9effffff}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ptrace$poke(0x4, r1, &(0x7f0000000080), 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$sock_timeval(r0, 0x1, 0x22, &(0x7f0000000040), 0x10) 22:11:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xd28b}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20}}, 0x9, 0x20, 0x5, 0x100000000}, 0x98) bind$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KDGKBLED(r1, 0x8004510a, &(0x7f0000a07fff)) 22:11:38 executing program 3: r0 = socket(0x10, 0x2, 0xc) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, &(0x7f0000000040)=0x14) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) [ 254.350148] binder: 16069:16093 got reply transaction with no transaction stack [ 254.358145] binder: 16069:16093 transaction failed 29201/-71, size 0-0 line 2759 22:11:38 executing program 5: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xffffffffffff2796, 0x400) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="060009110600050004000080ff0100003f0001005900"], &(0x7f0000000200)=0x1a) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x7b, &(0x7f0000000100), 0x0) 22:11:38 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="f9f4157e029eeae961d83b0eb8cfe9dfb0588ddcb14b94f8282476756867378631f11d862a0b002722ee9728952431121a11b5390e616d4aa1311e9eb9417c794635af2622152cc6de5bbaa642f8b24d60e9aa90cfe6532636cd36d74e66ffb3b42ad939d5815e5c7b9dc2f8755a91b4ed37"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup3(r0, r2, 0x80000) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000280)=0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x401}) ftruncate(r2, 0x5) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x50b300, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x80, 0x0) 22:11:38 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x8000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 254.458925] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 254.498139] netlink: 'syz-executor3': attribute type 3 has an invalid length. 22:11:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2", 0x26, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:39 executing program 0: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="120600000f0000800000000000000000"]}) close(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x2000, 0x15000}) getsockname$llc(r1, &(0x7f0000000080), &(0x7f0000000100)=0x10) close(r2) 22:11:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:39 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x105c}, 0x203) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000000)="aac91f0459010a74d3aadfed039a69dd75ac81ac1f0c15d4edc16f3ad9b0dbf2296bb2bc292d8a36efaf26aec270604592c88e742312bab933059e90866f3386fdd4baf62805f6305baea0b7f15a4a8dd78a0c2939e04338e4b3871f3eacdf8e46ebfe7a1382d07883203144786f895812b2c3a9253ad5c153fbfca506ebab22d1f4bd8b47f00f"}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}]}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0x438, &(0x7f00001a7f05)=""/251}, 0x48) socket$pptp(0x18, 0x1, 0x2) 22:11:39 executing program 3: r0 = socket(0x10, 0x2, 0xc) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, &(0x7f0000000040)=0x14) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:39 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000440)={'nat\x00'}, &(0x7f0000000040)=0xfffffffffffffee6) 22:11:39 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x1, 0x0) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 255.120494] netlink: 'syz-executor3': attribute type 3 has an invalid length. [ 255.129844] binder: 16133:16140 got reply transaction with no transaction stack [ 255.137389] binder: 16133:16140 transaction failed 29201/-71, size 0-0 line 2759 22:11:39 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xc5010000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:39 executing program 3: r0 = socket(0x10, 0x2, 0xc) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, &(0x7f0000000040)=0x14) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) [ 255.201386] binder: 16133:16153 got reply transaction with no transaction stack [ 255.209297] binder: 16133:16153 transaction failed 29201/-71, size 0-0 line 2759 22:11:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="3f4d98deb523abc4") r1 = accept4$llc(r0, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10, 0x80000) sendfile(r0, r1, &(0x7f0000000040)=0x8000, 0x200) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000500)) syz_mount_image$ceph(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)='./file0\x00', 0x2, 0x3, &(0x7f0000000400)=[{&(0x7f00000001c0)="f8e2c5c511b7c1c490b631403e1aaa9e2e6539549367215be7b678da10803fb2fc45e3998538fb30ed7c573b0a596accc8026f347a7ddecba2861127a8b74c04ecabb7503de71be791646f4951baa1ae7530322fb60f6376046708fbcd57576b6765559a3cef6dca8dc747da3bf0de8bc7c115a538f262d2cf3a63dd6ffc691e699694c0ec34b81da1e6ee684a10ea7c741ea8667103788930", 0x99, 0x80000000}, {&(0x7f0000000280)="d421f261b7a6898c99469d4f4fe125f541d7e2b12b6eb221be71347aebc71a4c1b5188b33df92da5a46d803be81e7cb5d16d7d3e86bd9564e4f49b8f18f0a2725055de8fd86866d4cc58f4aee9111f7359f77b2c4502e8ce72e8b76705a7085a16dd2fab1da6fcfbd050b6ca37f9aa69aa785c42ff0cc19432f710e5f52799593044522b035702b78a3514dd3a1b97083188c611adfb0615899208183a4248453ce1c818934b", 0xa6, 0x6}, {&(0x7f0000000340)="b157abbf00d89365e81d80f3676cb4f20d62671243f365cad442d348896ea307b5915f997ada7d5938929e483919e88df0fb13dc40aa75ad246ddc29721249d4ad5a4df09e2cea3f9440ee58227dc673d62100b3798605ed553b028c49503d8f5910481ba0c5f72090674ac3c75de817a1f01eb47cdd89412c097d45cdcc0d4bc9abc9f2a74687ac2e7dade48509cbac5b46f3dfa8ef4f9c27b1bc", 0x9b, 0x7}], 0x880, &(0x7f0000000480)="3f4d98deb523abc4") ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000004c0)={0xf469, 0x12, 0x3, 0x1, "a69569b3e4af02068f9752af577152d1d9e215514f62259228633f6db988100e"}) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000540)={0x3, 0x3}) 22:11:39 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0xffffffffffffffdf, 0x0, 0x0, 0x0, [0xfffffffe]}) r1 = gettid() ptrace$pokeuser(0x6, r1, 0x100, 0x80) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) 22:11:39 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x0) 22:11:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280), 0x0, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:39 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x4000) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffe, 0xd7, 0x8, @buffer={0x0, 0x87, &(0x7f0000000100)=""/135}, &(0x7f0000000300)="529effe842f32e22ff2778219be34eb6c10a08b2ebce9b90433dfc9229acd8e6babe5bff9221d29e4a63b7a58f57d38cccb81dd009bd812ece9bf2d2ce87aa37496428335ab29887253a4a1a02f5f70ee127679a7a79419951b8d6f84cc230fd9a4f20f47f6296550f95a372771843de7e33780d45fca9c74a98d171f9ee03b0586dd1a07d448846b410ca82475c6526c3918cf1b5f696b90c402335d292bf2c28d697dc8cfc7d47bce4c3f97dd0f293dd3e7b5521932452ed394d4929002bf3b6c4d7a611bcc0a18eb5c50aafdaf8a68e0ddcf76b49a1", &(0x7f0000000200)=""/58, 0xfb7, 0x0, 0x1, &(0x7f0000000240)}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000280)) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) lsetxattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000500)='security\x00', 0x9, 0x3) [ 255.293618] netlink: 'syz-executor3': attribute type 3 has an invalid length. 22:11:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x8c04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:39 executing program 3: r0 = socket(0x10, 0x2, 0xc) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, &(0x7f0000000040)=0x14) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:39 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x60000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 255.409316] ceph: device name is missing path (no : separator in /dev/loop5) 22:11:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = msgget$private(0x0, 0x1) msgrcv(r1, &(0x7f00000000c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2800) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001140)=0x4000000000000003, 0x23d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) 22:11:39 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) delete_module(&(0x7f0000000000)='threaded\x00', 0x200) recvmmsg(r0, &(0x7f0000000040), 0x948, 0x42, 0x0) 22:11:39 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000001100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6006f52600303a00fe8000000000000000000000ffff0200000000000000000000000000010200907800000000600a07ec00000000fe80000000000000f5ffffff000000ffff0000000000000068801a9f752442f7bc0000000000000000000000"], &(0x7f0000000000)={0x2000, 0x1}) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000100)=""/4096) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001180)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) r2 = add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000001280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000012c0)="77ae713b01e68d5af4110ba198d9f52db8e0c921157ba3fed9b7a9aa3c0ab4e8155f866832bb644c1e94d3ed53dc96d8bb12870e605214b1e10a33a954141f21993d7dd93984019e7a72bc5c663304fc7d92b320e9c8e9a6458b80ef4748a769d5ccf68f615a7671a1ff8c26d152d16064d3730dd5d96decd637c674722e42f2d575e807f217d51f5ddc66bf2dba83372d935ba3aa7523b90ad9d4aee8566d82344278a188cc4f9cc7c73ba41651b5a9b5f906e108e957e842e02e358ea0f53605c1129fc3", 0xc5, 0x0) keyctl$get_persistent(0x16, r1, r2) [ 255.489572] binder: 16184:16186 got reply transaction with no transaction stack [ 255.497244] binder: 16184:16186 transaction failed 29201/-71, size 0-0 line 2759 [ 255.504245] netlink: 'syz-executor3': attribute type 3 has an invalid length. 22:11:39 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) [ 255.609175] binder: 16184:16204 got reply transaction with no transaction stack [ 255.617211] binder: 16184:16204 transaction failed 29201/-71, size 0-0 line 2759 22:11:39 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xc00000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x7}, &(0x7f0000000240)=0x7) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={r2, 0x803c}, &(0x7f00000002c0)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x119, 0x0, 0x0, {0x2001}, [@nested={0x8, 0x0, [@typed={0x4, 0x8, @binary}]}]}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000000c0)={0x2000000000, 0x6, 0xfffffffffffffff8, 'queue1\x00', 0x8}) 22:11:39 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x1, {0xa, 0x4e22, 0x9ca, @ipv4={[], [], @multicast1}, 0x8}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f0000000100), r5}}, 0x18) r6 = syz_genetlink_get_family_id$team(&(0x7f00000008c0)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000b00)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000c00)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000c40)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000d40)=0xe8) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000d80)={@empty, 0x0}, &(0x7f0000000dc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000e00)={'vcan0\x00', 0x0}) getsockname$packet(r4, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000ec0)=0x14) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000f00)={0x0, @rand_addr, @local}, &(0x7f0000000f40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000f80)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000001080)=0xe8) getsockname$packet(r3, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001180)=0x14) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001280)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000001380)=0xe8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000006880)={0x0, @multicast2, @remote}, &(0x7f00000068c0)=0xc) getpeername$packet(r4, &(0x7f0000006900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006940)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000007b40)={'team0\x00', 0x0}) getpeername(r3, &(0x7f0000007d00)=@hci={0x1f, 0x0}, &(0x7f0000007d80)=0x80) getsockname$packet(r3, &(0x7f0000007dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000007e00)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f0000007e40)={@mcast1, 0x0}, &(0x7f0000007e80)=0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000007ec0)={'bond_slave_0\x00', 0x0}) accept$packet(r4, &(0x7f0000007f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000007f40)=0x14) getsockname(r4, &(0x7f0000007f80)=@can={0x1d, 0x0}, &(0x7f0000008000)=0x80) clock_gettime(0x0, &(0x7f000000d8c0)={0x0, 0x0}) recvmmsg(r4, &(0x7f000000d740)=[{{&(0x7f000000a4c0)=@l2, 0x80, &(0x7f000000a5c0)=[{&(0x7f000000a540)=""/107, 0x6b}], 0x1, &(0x7f000000a600)=""/29, 0x1d, 0xfffffffffffffffc}, 0x8}, {{&(0x7f000000a640)=@nfc, 0x80, &(0x7f000000b8c0)=[{&(0x7f000000a6c0)=""/239, 0xef}, {&(0x7f000000a7c0)=""/4096, 0x1000}, {&(0x7f000000b7c0)=""/178, 0xb2}, {&(0x7f000000b880)=""/1, 0x1}], 0x4, &(0x7f000000b900)=""/208, 0xd0, 0x7}, 0x7}, {{&(0x7f000000ba00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f000000bb00)=[{&(0x7f000000ba80)=""/87, 0x57}], 0x1, &(0x7f000000bb40)=""/160, 0xa0, 0x1}, 0x800}, {{&(0x7f000000bc00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f000000c1c0)=[{&(0x7f000000bc80)=""/85, 0x55}, {&(0x7f000000bd00)=""/204, 0xcc}, {&(0x7f000000be00)=""/190, 0xbe}, {&(0x7f000000bec0)=""/198, 0xc6}, {&(0x7f000000bfc0)=""/133, 0x85}, {&(0x7f000000c080)=""/92, 0x5c}, {&(0x7f000000c100)=""/160, 0xa0}], 0x7, &(0x7f000000c240)=""/79, 0x4f, 0xfffffffffffffffb}, 0x8}, {{&(0x7f000000c2c0)=@ax25, 0x80, &(0x7f000000c3c0)=[{&(0x7f000000c340)=""/126, 0x7e}], 0x1, &(0x7f000000c400)=""/108, 0x6c, 0x20}, 0x2}, {{0x0, 0x0, &(0x7f000000d680)=[{&(0x7f000000c480)=""/185, 0xb9}, {&(0x7f000000c540)=""/4096, 0x1000}, {&(0x7f000000d540)=""/100, 0x64}, {&(0x7f000000d5c0)=""/148, 0x94}], 0x4, &(0x7f000000d6c0)=""/74, 0x4a, 0x401}, 0x4}], 0x6, 0x141, &(0x7f000000d900)={r25, r26+30000000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f000000da00)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f000000db40)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f000000dc40)=0xe8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f000000dc80)={'ipddp0\x00', 0x0}) getsockname$packet(r4, &(0x7f000000dcc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000dd00)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f000000e640)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f000000e600)={&(0x7f000000dd40)={0x884, r6, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x124, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r9}, {0x12c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xc5}}}]}}, {{0x8, 0x1, r13}, {0xbc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x80, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x84, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8, 0x7, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r20}}, {0x8}}}]}}, {{0x8, 0x1, r21}, {0x114, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0xff, 0x10000, 0x80000001, 0x7ff}, {0x5, 0x0, 0xffffffffffffff21, 0x8}, {0x9, 0x200, 0x200, 0x8000}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r22}}}]}}, {{0x8, 0x1, r23}, {0x21c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r24}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r27}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x836}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r28}}}]}}, {{0x8, 0x1, r29}, {0xf0, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8, 0x6, r30}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r31}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x50}, 0x44) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="dc8eb77277290b59b8e90000000000000000000000000033a34b9783cc6d320bb8fd1169ca2177763ad6be00b9f36e285b7064b574bcc064e8cce30f858227315f8bc823d6dd786674adf9a64ccddbc2882dc6b3b4087bfcf3eda7d7fc3c6b945973d4d9ebab22ae755cda215ac565e791724e376b10ce37b51462183a9189e925bea308e0b84a8f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000240)={0x40000, 0x0, [0x200, 0x4, 0x0, 0x100000001, 0x7fffffff, 0x40000000400000, 0x5, 0xfffffffffffffffc]}) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)=[&(0x7f0000000340)='/dev/kvm\x00', &(0x7f0000000380)='vboxnet1*\x00', &(0x7f00000003c0)='mime_type%--\x00', &(0x7f0000000400)="6c6fe37b2b47504c2f00", &(0x7f0000000440)="2d73656c696e7578656d3173656c66706f7369785f61636c5f6163636573736d643573756d73656375726974796367726f75703a7365637572697479766d6e657431fa6367726f7570656d3000", &(0x7f00000004c0)="2d406b657972696e67ce6574683100", &(0x7f0000000500)='/dev/kvm\x00'], &(0x7f0000000800)=[&(0x7f0000000580)='/dev/kvm\x00', &(0x7f00000005c0)='/dev/kvm\x00', &(0x7f0000000600)='/dev/kvm\x00', &(0x7f0000000640)='\x00', &(0x7f0000000680)='/dev/kvm\x00', &(0x7f00000006c0)='(vboxnet0\x00', &(0x7f0000000700)='/dev/kvm\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='/dev/kvm\x00', &(0x7f00000007c0)=',\x00']) 22:11:39 executing program 4: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000b2d000)) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfd4, 0x10000) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f00000000c0)=0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 22:11:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x3e, &(0x7f0000000200)={@dev}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001600)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000001640)={@empty, r2}, 0x14) [ 255.751206] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 22:11:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="2322b0f96f3c6115", 0x8, 0x4000, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @mcast2, 0x1}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff000000000001e000000100000000000000000000000000810000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x8768, 0x7, 0x5, 0x1f, 0x9aaf}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={r3, 0x40, 0xc, "7c1334fdb334904659737941"}, 0x14) flistxattr(r2, &(0x7f0000000080)=""/138, 0x8a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, 0x1}, 0x90) 22:11:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 255.817862] netlink: 'syz-executor3': attribute type 3 has an invalid length. [ 255.860898] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.888945] binder: 16234:16238 got reply transaction with no transaction stack [ 255.896568] binder: 16234:16238 transaction failed 29201/-71, size 0-0 line 2759 [ 256.007130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 256.015190] binder: 16234:16243 got reply transaction with no transaction stack [ 256.022755] binder: 16234:16243 transaction failed 29201/-71, size 0-0 line 2759 22:11:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280), 0x0, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:40 executing program 3: write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x1d9, 0x20000803, &(0x7f0000000000)={0x2, 0x800000000003, @loopback}, 0xf) sendto$inet(r0, &(0x7f00005c8000)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65c856a45d61154adc2b2a976fbffffffffffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='vegas\x00', 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb5d5a13a3a13e67ba65376bc37c825dfa1fd8c972b3703f810395ac45308eb78e17b964b7841ec24024ceef3cc1cc5de3fae847784a87a7bdeec42e17398b3b1659a4a2831cd733fa6d66eea3f80399bd293f23c5", 0x55}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) 22:11:40 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x1, &(0x7f0000000280)="74dca5bf2d8434e686eb4d2736b9a85af60dba877a009b1293e26a49fb897449e572ab17604282add42c575c933cb4ebdb06e9a4eaa2f94642a34f362645981d566daf325b29f9e262e686f39f9dabfc81a2f6420243cea66cade11b76b094c772ddd5a14b81cc80d271790520739b16ad76055b8724e05d6ce4687d6836db037a1b85b80513ab1e95bd9598eff808d0e2e54439a0dcf5b92a155c346a0554d7c71a2215beae6c343f7140685d40bbe9cc95873a63a5802151795b7ce700bf66c68ab3c10844e07c49b4ec7a35a1b3eb1dcb52ef943d6aab47952d") r1 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={"6c6f000000000400000000000000db5c", 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKMODE={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) 22:11:40 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x4b1, 0x7fff, 0x6, 0x80000001}, 0x6) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) sendmmsg(r1, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="82b4198a55c57ffc6c4d20c960ce733c0760d2272261c903e510d34199ac692562bbde8148fe1654d15e301c74269a8f26c4144abb0f27438180e22bd6f1c305e8e7f4934313f40f56d4f399f51c7dc2c95ebe715c0bd7172a5643d7cde08577cc646cfa0e97b27f1912cd370b98c1a388d56b36c346b12cec8181c6a2d7731fb7bbfe2761cc5439f16fcdb1a5000aa49650282fc0317d4297e430d09455a19669867c142ac99600d13d376443682db4d5671d97bebeefb9a7e330a371879482db26cb17dcc051fb210e1272b2025c2f1e9dc6b2782a7e83e595a6a281dbe8dbc8377acc2c26866f22899923f3994b681d29cc93539048b639383a2ddbe6f8ae0e2acc334bb99d4c516bd2ec08b5d8f97ab2ef979bd1b95cf8e356687964ef6b684b2fe82f48605c7f94a4650e86ccd01d387c1309223b295a2881d7d5d313dec580431cb9f52f5f4d2d589871cc4438df719599c5727f3d421f798ba8f63241d186b687db9ef14315ecd1c9db5b676ab73c160e493ea02fb982c8ddbe35c41b36cdf7f51817db1d4549cf3fa5128e38206a6576adbad0d16845685e6889ff42772555aef7624d2f465637c4713ccabe643b6b444ec9cd6853b1f3336e93b6d275d3c985547df9a21e4f1ab42d852a0b0e542c35c4417c9a1688b1cbb33cce46dcd2d9216cca8dc81d9d183eb4260df9ff91420cc1e8e63870fca4edf1ea4bafef179edfe51fe6b3bd0476fe07f38bea4e76400d0a2b4cd389a35b9507222ff18f45c8b363cf77aac185dda404211c2cfd49ddf22915fb91ed97aea302a1cd7ef3ea57927d03fa5dd1584bb5a61d18283da8963148726cdc5d3854ba5e8b42c6edf9fcea5e446eeb8a62e9d95a1c3339a2a4aed8e8a4a1d754e82d6a754580ca2696be5e0d6093728dea9e3d0458c4ebdf4b17b3053f5b5c9e2874a6306918771f14fda98aa1ca27a55bdf5e7ae54bc9a13597b2bacf797786892e05a5f7b49623d0367adb0149e77a20e9fecc30363ea7e1098dcb05a9e524a016bd8ba1a5e2c60c7c8d01187a6e0ae43956cbbde0649705019a53e90c25ad4e6eac9456bc76807ca56cd558e9b876a860e7551e9f21160daf5c9ed5d98e97eda7e8869c756710198e1dcd5b266ee19c160d9763524e8f55f841dde1525c3f67285e7fedfde46477150a18b0841d1a86baa13d4e0aeba7c07daa22c5ba33950b86279b9ecb265309dbe1ebe5bfbe4730255c703785bc79dc9097bc18a067cee1cb633e49879b85d18ddd214900216bf94e3bf142169e02a2a9c780498aee9a0fc1741018368a6b2367d0a8349fa88af7c1e57275a2f7e9b5aec21c09df0c471fe78854ac271d5057bc7250ab128e63575309600c626bd339df80b97b30036942fea734914b6c0b9ed622a4a623ef2ff4dfbccf1ad9c54c2c832a48d2e9e3b47242a1dfcb00578aecb3f9fca119527be412e0e95e1521b1ebc0f435a3c03c6969dccf7b0cf115f4e09203da9777f7ddb2a1d56db1a783bc3c4e535e4af53df69267c94a65a92e206977640b6baa70fa58a5dc858ce6fd76a683d7f2fee9f51abf74ac8c89fdfa0245a063ca087977380c0a8d1a26891a9d9316e60c38b94862a3c52c7fa0281402428ff46733c361ecab85d0855a7685e563c3b6f21ddaeeb91a9c51ddbec00a89593427cb7aa65b46e6c46792284074320154b0431511fce1dfb22071b53c90f0e5a00d078bf4696f31f941a487e6c9c1fe2fa516f282677791c2c94ee1d688029197ede04dedbeed087f0300f97c2ab72352dc610003c218a39a0f25e891f9da4ad60dcb12f98f3e93d0bc872b94a18d219f6ec876189fdca9eab7d79df538f2e8669bf67f8a3a5d5267a8ffb14a99f7fd6e5e09847d9c97f36f2d7613936e9039ca506cd9b900212fe932862aca41332203ca4e189057be69043933420367791c12592fdcb65f9d7aa7", 0x56b}], 0x1, 0x0, 0x0, 0x4000000}, 0x10000}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)="a1635eec3c6f42dd87adafd3bbbbe127de6b8b97c7e054068d5f71c6419afd8ca4d565cc798e9ada3f2576fbf2a6d0854e7293710e4cbaed9ac6e1f71352da25db633e637822e7804c411d916c87cb500988f83512382bf5bc102b111bf433d30e62ce119b54be239bc6044f7560271456c70df37a435057fe6e79491b0440707e627a97113add5809432dd3dd09e0710783337e8d", 0x95}, {&(0x7f0000000180)="335bd5f85cbac44ea69d68d87d2bfc2f5aafe996caef1c69577b31a78efde4fd8298c15c29b0997e71a73e17a87c0411742e137f0ef75792658aa95b5c00fecf072e31af98683767f41776bccad8f79110651a1366a2a8db70f42dec9b8d4892c6cc809927057ea4a3734734c6be68a4c884", 0x72}, {&(0x7f0000001500)="b53398b8b8d47217e7c77ce84356506c355364da2b5a47ce4e355cf3585573430cf342ad8a0f712e2d80e27962b1f3cf1b756a09641266b1a9cf90aad334d3b9a7162d6862e68d71c6692eb948cdf723044e456855460660762ae23867cdba395241ac15a68b92c81c3fedaad185f5dfba1c6fcfacf1a0ab38fd329b568b275d8c060a8b8a136d2d100756f7d4ef1b18af99fde4b8eb2819304e44e57d5479237aff8258992b4e1d53f250f0de832055e114daf9a97186dd1a55ebef37c9ca74cd074039e959659a865b6dbc9a9089ebb8b53b9b8baea9417052a569c8fe92", 0xdf}, {&(0x7f0000001700)="760582bdc83323fe873318968b34c1f373b0a5e7526b13713d0a94cd956e6d4729556160802610b7e12fd9319dc2ffd382702011d27c9ce3f2bd0218cae1c79945431217013e7f508f6ac8cbad1d1cd2b3a6ff1cba54cf57dfb2b9c7ec73d65733dabb0954b000bf4b10fbf5159e3db2528ec9ce45dc7d3c4e2367555f5f059fe4a182aa389c8051b6be936cede011393ae6de211bf76ac9312d74a87e8949a9bb504eef0857001bfdc2a2fa12d575a8804eff0b1021a0832805aaaa5a7aa51c9fa72f14ed1ed0452f9e50474619449388", 0xd1}], 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1c8, 0xc0}, 0xfffffffffffff000}, {{&(0x7f0000002cc0)=@generic={0x11, "14a124b3f62916e7bbaac71ab4223bdf37023b0314feeeef88b3eb22fbf82b259cff58039d1c5d22bf645ce0e9b839b89c089256e3f1264034a1792d004195a44e28c35b620bec8927a7d9cdd27a6d7b09040d863fbbb05193b14a937f908b4cf4cc96b7b948e43e4fe8a335a7b68e30c41533511a3ddad1dc9b96ea2501"}, 0x80, &(0x7f0000004180)=[{&(0x7f0000003d40)="12f7ccbe60b54452a5e3d505b5bf4597eae8c2", 0x13}, {&(0x7f0000003e40)="b7588147cf15f6cda926ebec5f53552890b2ab158efb77faa41fc7604e43ef2f81b9ff423ae8148f21965af27c456d2f205d19ff68fc6a8f6bd95f18c69204b5acc5eb8a9b390ee3ff59f238f91cf4227d88962843a30818416073eead69ca034e7c4898efe9081fdccdb28eecdbc322ae93ae82e0d712a2df9e8fd6e7c7e15551fc7f6a9fc12d25e649b8ad68e198b23881f1", 0x93}, {&(0x7f0000003fc0)="4e366711d349ea5207c83cd59c094f1e9a82da8e4dcd426036fc476a4f5c928c8faec5f92df4b98ebfaeb8ba258b5ec0641551fa27fc935a36374a938c9d75e0db068afb808f6970903a715ca5f9009ffe31238e98366a3d054cfab73a746abe10d19dca", 0x64}, {&(0x7f00000040c0)}], 0x4, &(0x7f0000004240)=[{0xa8, 0x0, 0x5, "9f91ba8f8cc08f1d08aba3f7cdaa7c6ecba85004e0717e79fdc83603973da7961e65e88adf91240548438e2db2dd8eda715351956e91112cf0b02c3ff1fbe47bc6f8d7cffb47c7783fb3eeae6b73003b4dfccb28a45c1cd3021a387547e28e1c68fd64299a80cb27bcbbe4dab3466ef1ee50f475319bfc704f6a9a33d96ba91cc29c1d420aae41ae7c63cfd434503f7b2d7372ef7ded"}, {0x30, 0x11, 0xffff, "b59055aca3ada50cef0748af5ad9fd712c5a9833035d7e65bbf587"}], 0xd8, 0x85}, 0x7}], 0x3, 0x4004000) 22:11:40 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000300)={0x8, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint={0x8, 0xffffffffffff7fff}}, {0x1cefa0, 0x3, 0x0, 0x0, @sint={0xfffffffffffffff7, 0x7}}, {0x0, 0x918279a53da7f9a8, 0x0, 0x0, @adapter={0x20, 0x4, 0x3, 0x1, 0x7ff}}, {0x1, 0x0, 0x0, 0x0, @sint={0x81}}, {0x3, 0x1, 0x0, 0x0, @msi={0x8, 0xfff, 0x22}}, {0x10001, 0x2, 0x0, 0x0, @irqchip={0x8000, 0x6}}, {0x100000000, 0x4, 0x0, 0x0, @irqchip={0xffffffffffffff80, 0x5}}, {0x7, 0x3, 0x0, 0x0, @sint={0x5, 0x1}}]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:40 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x62c}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x48d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 256.214612] binder: 16255:16259 got reply transaction with no transaction stack [ 256.218927] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 256.222292] binder: 16255:16259 transaction failed 29201/-71, size 0-0 line 2759 22:11:40 executing program 0: r0 = socket$inet6(0xa, 0x806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000007c0)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0x6d, "3403b896f2f2ba64615c8f4074186be56e8bd675e5acf7e93d26e7ec9b2d1c326f3c24e2f7b40b41712860794c2ad80ee23d47480c85791b48698416d896736a4b3ad5f8d15f5d5dad39564ea337d2428fe14077d066cc045f31addad86df3819036460e670eac56c31694d11e"}, &(0x7f0000000480)=0x75) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000005c0)={r2, 0x1}, &(0x7f0000000600)=0x8) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r1, 0x5421, &(0x7f0000000580)=0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x2a00, 0x0) sendto$inet(r1, &(0x7f0000000000)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef443394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a6b03fbe9c0ec68357e1fbe52ed77b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344967ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b55548b845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20a", 0x46f, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) poll(&(0x7f00000004c0)=[{r1}], 0x1, 0x4) 22:11:40 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:40 executing program 3: write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:40 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x6) socketpair(0x2, 0x807, 0xff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x80000000) setsockopt$inet6_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000200)="e3fb8edd993dc765bd3416e4eaac5c63379f96e8a3eaa9251339b84e29d04f8b1fac0c4bab2df0e8cabfe78088967bfce37491b963bf46b2ff16aae2f19046b3720975d80c6e5daf76458adaa26f94bf91eaff00227f61fb7c23d9fbc09c1619b30040663aca019e5cf8474a0fad65c5f396e18712a2dbf9a9add0fe88d3e704d58e873ab607f06bb7592ffad8bdf5f5c31a897c5d527cdb7ebae7cd99351373e16b182c9b6ab6800e", 0xa9) getsockname$packet(r2, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000008c0)=0x14) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000002180)={[0x6000, 0x3000, 0xf000], 0xffffffff, 0x4, 0x400000000000}) r4 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000900)={{{@in6=@dev={0xfe, 0x80, [], 0x1f}, @in=@remote, 0x4e20, 0x1ff, 0x4e20, 0x10000, 0xa, 0xa0, 0xa0, 0x2b, r3, r4}, {0x7b19, 0x40, 0x9, 0x9, 0x3, 0x10001, 0x0, 0x3b}, {0xaa8, 0x7, 0x9, 0x3}, 0x7, 0x6e6bb9, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast1, 0x4d4, 0x6f}, 0xa, @in=@multicast1, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, 0xfff}}, 0xe8) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r1, 0x407, 0x3) syz_open_dev$binder(&(0x7f0000000800)='/dev/binder#\x00', 0x0, 0x800) r6 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000340)="1d11fc8b8c1c5bb321089d79dea48b998ff425d25fb9a6e966a69010bcd15738d80c466e29dcca284ec412b4ab1a235202936709fee33b0bf76ad1e04861c7343769b9a272794947afca7f8979dde32fdf8349603b5638770af5733fafe0dc2665f27f6f0c", 0x65, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)="d52a79aa3d82b8d5b0958633f0ce19c5aadf83ef7503dc818523d96fd8e81e28c9136486bf92fddca3e001a0ea48f78b43b6a26f9990ec26302f41e789902dc52e900b17cae72c3d87d77d7b91efc6e0dea58a01dfab83a5698626f934f9e4ab52778a83e822b0f0922da9417bec00a475d6eefda2002744f860f9abdf721a72388839bea22d8c5a6472515e0aefa3de2d87e69d1b99e675a708a3e576bac0a30146607d6bd518748c2e843919380b1707d0bab531b0", 0xb6, 0xfffffffffffffff9) r8 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000580)="3cd4871148456720a9c62d9c3e1d43e9bd39d3a3951930e7fd54ebb74489117478de05ae417ec58314", 0x29, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r6, r7, r8}, &(0x7f0000000600)=""/71, 0x47, &(0x7f00000007c0)={&(0x7f0000000680)={'sha256-avx\x00'}, &(0x7f00000006c0)="685329588ac5179c38d5bb7039490a3943c4b45dfd60af12113f0f669d769fa82748bf829c78e5381e65fee276554b56a206f6624978f9a1fd15083f4bb720f8cfb9d03085d7f0a721fb3c97f9aa516f65ef2344f1b2fc0ede462bf1ed413b2ad8dab795a1a8006b7c1e21013a553a04fd6ddb52584cd2769fd3bd5f2a768b962fa7829e3a9fb7a4f3f7cf322de3a17d7af9fd18d09a3036dc17a1948e6acacd4b51e8c1612fb9cb688e2655959e372368040ced935f551b72d45cadc80dd5196a31dd6baf75eb78b53ad74d5851d454ec8e1aecd8ac552e3c32376e", 0xdc}) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000840)) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000001f00)={0x3, r1, 0x1}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001dc0)={0x0, 0xe30}, &(0x7f0000001e00)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000001e40)=@assoc_id=r10, &(0x7f0000001e80)=0x4) writev(r5, &(0x7f00000043c0)=[{&(0x7f0000000080)}, {&(0x7f0000002200)="1dc37e3305a6061f672ff6338264deb9edc08139eac50e0ded7cf0bc5bd18b924f9c9368b1460f2dad2478956366c4d409a97bbb3128e2ac733e34f1f79cc6a60f84b04db742f443cf80f41b3d06bc823af71287df8c1a3a553f307af1dbc0725086035d84073f138241b81c412fb95695f48484b925a2916c130312a55933a5ec2f1511a653c7026991d2677b76565ead9d826cd899bf0c2ee3fe9359da3eb3dd1bc0da13ce23e61402332e29212e572141eda36ed1daea49f9cff86c5ef057d41283a51504069b6e6774dc5a423e4026cf0e9e55875dfda38f7ab9885914876afa90d5e6be67e6bc1a3ed91a9f240f4a1813d6d5dfb87c7bff470d7f88f7a936a0900057f3aa75201e937e9352fdae497adfc2cf51632bfd0db268ff5181f2ec2e5626d853e80d333e4faab2c191f391dc432a11da14564df383535018a28a793a43cdbdac0d5f5c76f35b987750bee188087763d5e5e8a04696276bab16a84570e6d94a9d2f367fa5b3993820637a920623940fcd87fef823418a4b2d5d9db52a48aac5802855b3ba7fe975472c111c3260da64ebb551ef35a3016500f6c3d017f495ec17a7c445e880ba65f378dea6e35cd496929343d1543aed065bddb04c340e3c51c7185ae2a7b65ea75a66c9368a390cbfc795d7e2bf0d77a6859396449b486c290dc532314cd3f5ec982c809a4e3a048fce7483398af8c0fe8a2bd160f87aa8dd90bfd9636330cac26802f9c54f0581ea1d025f2b9f84f4f42becb055a1d76fd42f2c81558c68eb50f7e398a1c1b140613d030f5c45134654169f660413bef15d3439937ad5445111773619ce21daa82720eae17f1d1b284e2eea6d8160bc0e1e6af44c18977a198c4a640369c7aad09f58aa1db370620e6bc3b3b317266fd4da1ffa352271b8a4f10f01664730e579d3a82c9b93e8ac76863ced3c96cd80181d592e84d1e351e108228230bbe29fd4210752fc04756372962565c864aa40e0dbd6a5158489717b1dbfb172a5d0b8c761f358846ee6ba5bb8db0053f94c9cdf5f87c9ff68b42788eefde44033c7082106e81af31630e02ccf2a4c099c5a284dd3b2b489856cb921e22ce14c124e9be979b87a09d3325c9c28b2bfd60b48f41b86f0b971c69f7bde37336b127f633f2df6322dcf10d045f044657f4d92329798ffc823bf2a9a1f2de57926ea7f17ea93d115b0b492c1e3c4da08216cba5e22329bd2950bff139bae7a4cdd34e861228b5f8295f25aca007a6b0d3d5132c0ed82248866dd5b031b14d0fcb7448f5a5081afef754829a6c509bd939a7ba18bfda325e1088812874344eed6facfc49e44e4ee0242cecb680bbd8d1ecbc8a1a1bce971513dd2a2b70f9b92f99ff8cf883e50ad63d49e38c613bca97b5d669ced7a7e488a480c3fedcf2fa3e4ed1d865a2700ca14d9b8350cb58d89e4c1b458285df538aead60db96ea45204709f3edf82ebfdf66f685ddc05abf7cbfdd2d81208aedb091125cb08a9104f78f7cf6614454b4e31cc89b31d4172264cac9b0aec8d0693abb645f1ce3c5318971e5199ccc362766744c5c4a225b1db7114a87e3fac0c72391ef1318c38ca62cdc01e7bbc0e00c4f9e31c1ab830790d966fc32d5c0d0f7bb8c03eb7ec2b550714ea5de13e4014ebf2798c2236f49702b6f63bc584e4cadb5e982f01e6df7d681f3ad689c7c3325c310c287a62daf9273d9447c2f80ac634ee24f5a6545819707f222358f4b725b421b6ef14205c67a5f46acb61e3f5c196fa899f710f16b04ccaae2a59782674d277526dcf4eb64566b912183ea06724459f999ab9c87edbeaf0c157d97f7fc7efc8baab2d63e08806a85106e9d2ed90a95857b7a0e4e3c787f2e3282fd39e8ece1091681426ae549e0f7e37542fd24b43bad1b3050585c0520480bfd77b6e9d75155af7b8ffc10955cd67a8273c51a0ada1bfdd2c803443e49995e5cd57fe3397f9e9ac2457560b558ebb30d30b0db66fd090ff86026623fc345797c9615edc729e95b14bbc4b3fab5f09c3810aa7c0017e3e7c25c429c2fe9525ae2d442e21dc3659e15b20132d2dfa35f68c7beaecff7591cc19a41db2adf510d2dde520c0ce5e3d4a92565bfeca5454354f57dce96e3a8f9caf55d1a9677168a3c116fc00c09e5f0c29dd5fa28986625833095258c2e2ffe38633830522d6660e5222feb60479bc76413a7447bdc7bd5b71f53e06ed03a5d4d69e6da9b7a0a7edff6dc7e876e6923b341220be5f3dc95cf6f78b831762a15556e1299892ecd1469d069fdeec81565513d06e5e5eae1fd6326d4ab2285ffb68a117a4130dd65c9677aa284fa70d0a1db9223c2c1fe26c7df7d606c93ca92fa4a4cd67a5744d5e214528464bf82c5a440cc7849c7098df52844677e28828e4878f881f53c6b9b09380547d2e275633f31e5b75f544033d93ddd940906afb279b6d83ea85eaee18a1a28a7cafd6d281ac745a2d2b591db83e2edae49c898e8cf536bdab6313b4b235738f6cc8ebd7c6a1c393ece4506dad2e28a5d1d75f58cd50e3095ab7b1b46cfc1ff64bae99df0b7a46512caa42c71e29066ce92394396f62da9953f4c6dfeb0640391af23893f2ba0522f6139e126c09c1e53f6ed2f076133a5ac27d78fd5822c51d6c6dfa69c060a41d368051b4f51ff7042ae57e762c002d82bc495f2ff5e945a2353a8ad30b18cc91afaacb6edd4679554ad197feb4bb02acf9b41ef30a9c519664c4d9ce1133cb532205a4f274b24117639a06c9ef6f499297d690f148a6cde2e3ed07d3109d87408165212e61d7dfd1f51acfe7235083429f6a9ee9f90aebcc0cd89a44975bf2c39f4014a61eebacb040ec8067d217beea8e195fa0a581af8da7672b1f4fc8a171ed56b21d7833401b4f7e471a53ec75fd66db79760bda7246d7be0db93a2871062678a1e7bae9680ad34b242b9b252e6413daaf5399ec1e272da771d183f1b936982e491b053a6e2d12793cb830a20fe6cc6d8506c62d20cdf5f00d320c9ff089fd5bf3db559b2c27763f50ea4d569427126956c7c34732f5ba3f5f3afc6d3aa1ca6a111c7b67de73b9124e20b7d1b72a4b674b635cdca4414db1b83a29f8cd235b48e1e84ff193dd197c377b236824f4fbc4e2863911b8e0f6502b5d2ef33fa7f0f684a0c78b1418a50c3cf33bc1b52b639f4b8dc4e981f811ac27c9f4ec82bf7eaf4d0b57e0d0e2954981c9e94c195a69038d62c76403f2fc3908dabbeedf3376feb23ef329d817602f901fa6cf40b0d5b41062b0f897cd4976c47b1d6237fbf2baeeb709e9a3b2e732a92554a7bc6b9c0166ca896d63e4baba1db5d81f7f4b9f6ce85791c8b702c3b7360ec6caaf6499abd2fb5078b9daf5fe50f36a0435fccb2ccb3234eed302954558da82ff994b41af0060d7759177d6101e6c5493a7c0d1552074f0c9a41c194e78beadd7069e968139fc12cba0e965f1b630dabd04bd3dd989b77d2ec1d3a020a22e5d64439f90d4464a0b151f004b03d607ebc7755b754d79d7963015e3c674d6476d4c75fbe150167a9a0d2d49432fef381c086354d62efe28c43e4eccc9b99aec84f7897c739d924797a98745b77f1792fdb49f4b501df60225187b678d02f2e84a0571671a07effad5c11cbc047802a0ad2e1fd22606e2824a80da9ce8096df7dba0b4d7569194d7b1f5b5a09b81873071476b4baba0a785a6361da4c13b21efcd86f9fd64ff0d9de931466e69fec675d7684c9ccb5bc94b3e909409593d18a4dfeff1acd83492d70ca735bab0930e82f2f405bfc3f396cb4a3f7074b2fa4bb9817307cbab70a8ca610ef0d1c39b1ffca0570d9ebcdfac4f3680e8b36292a9e6d2eaa3d11ab2d04fe49decb7c3bd52bebe4dfe40eb94af9bd5373c853f9bfe235e8fee97c4dc153d2ec925c02315afc2a497ee4055f26c81e27880e66b81409719c322aecc21924af5687f8c7e81e3c4e5422ae4b55575e2392b8690b1fefa3b0b12a98b0042a43f23ddf961b7a86011db89ad626d9eb8b775f9d9c1c8316b4e72525973617184a76bcc88fc390fd352e45e602386a39cfcc892e84afa1d4b708c9a91d45f39137ee9aa2909edda15edceacca60fc172e00c7b158b69dfa0e7d3528291240dbce7a43c65ddd802da8261717ebf467c6fbacc0a05a1cfd59c8533aaf6f91c13abe2028ae242b2ed0b013c900ce972883d83a831801b48909a9e6c75fbb974a8fdafcb7e06bdeb1b38613eb18e76efde5e5052ec790720d1c87d5ae57994feffbf5870166bf02a55df842c70650cffce5510606d2e53f1e9bc44d99bb2674c18ffe8f4d8361e6d811c22b541e70608845e90f69b74c2fad20a0412938e1cbb90b9f80f7583bc1a497f6d5f2807e2ed88a1a3a6f39b1bfe68defcd6e51759eb2741942c4a3332cf1a7798756e5b72fa26f9a58e5aa8952a5c3fc585a7dcad3b128eb34965fd8afba01b039351bd5f1f2553b38875511a61cd0b25fe34013e478dc1203c1e47d5d2ea0aabbab54fa5f29336e08fb1e5335e6ee2583d6cbff32860c9eada27650f59e749a499aa5fb0b4278b064563652f56650b07daac30e23863611b17bd9867ba35f7f714f03ec76f303db198d5bf9b50bda686603ecb5bfa390bcf1bc547251150baf7ad9b4175d3386b73fc681db720ce10789c5cec1fc4095bfb214f7a4b8da2e9864a4a759e3547ddf35003646c48981f89515f7ff9b135895cdad567f1fdcffdf6e8f1779cd50689774c833ed6b5da2bb4555e118330aedb7390394f9d4d5865094654c91cb912ef60bcb4599aeae424e834a7994835134ba9fc1653707d49988d1aa75528029370b24601ce08a9eb43ccb5beea6e64496845f0680c6d95e8cf29dd980b27173319397fd9ba6358e99ef2d0df4c86bd0bddac9c5841a9c45ba3109d236ff75d612f967308ac15b12e9f526d43c8a4a3455e79a1e7f4030cf7c3e8f2a7533fa3aa436d972c4901465a1dcb4a978263d52b17e1edfeb3979d2b4007f8defd12d769f4d7da206716fbaed6eea2a3945d887f1a6dfedeaad0a42bcf4d08a8465fa7018d032da16ac3db274055fc4604e94633f6a97256c1508881fa5e3adfd56fd71086db4854dd87c3c54d58db6185769b955efa8eb774682c945f5825bb6b105285bf3be0be8d4087099d3fa4f9bc1635b9fae438f2d2c71b0606d92a1cada1cd93a4414570d84e42874dab20a8c311b8bc8c8027c9bee9512858a3f4bda1d8f705ec0f398c840ad674e4a50ef4f2f74e59c74583b30b897dcf8214602c5247acb6b06c0745ed6c05032129b77ad0aa09ec1578fb7193a8b5cc3232a42ba3e7c9f7f8e7eff20255d1171dc11df4e59acd64ca7f8bde011ceb5005d780993d74f60b0ba793d33211057f837d73b7d22572a153ceff4030c1fe455270980154498513855fd0640d0036b033aaf9398b7fc2091da5c1c50824f9d21f55453a0e731984e48f7e31f2120d2e075a9c063bd0a8e3e0a1a19079eed87dbdfbf41cd759ae06095a62ac6e94363c0cfbb412da2f1aae80e08b5b091ae37090e8891997f25d12ac4be89d5e1b5f3b905838a9165fd756ef7e17ac62d61d407e369c974599174234d80365a073c37dddae020541d187d2797c48892ad1633b7d2bfad811ab093eb983f9dd4df66da2b8b7bbfa75875bf760ac825ab56bb69e903cd00da3d33e799e5b7aca793c93f999e7f08e9a0730323de84ffc60983da041fa5a281bfdcde69e4a5946415a068a43d6b6cd20fa7fd4b8a8ffd57df76da99021a0e2ae2f87a138c7d7ab55", 0x1000}, {&(0x7f0000003200)="9d97bfb460a5f88ee38d2647c46819f8f99826514c782f290677b4d10bc74f7f169e69edc79de39e3165d28d31c9903d4d35ff38991813399dbabac209a7749cae6b5f9f887a60d8c87408390d7d13c0068a15a4fb718130a7b1ae82f51fe54224c68c2e8d03de2553bb1ea1a9ede69c5a99ca380e18ed705e3238d2f434259c6b995997220de02e753dc29077cdcc0822d502696d169457460e593bd5cab1da017b2224b6ee46650323f276cca468fd747be2d3699b421bff39a51d5ba8f7f20449b1e4941e5b8fcaf9c62438b4cb64eb9c8da59167910d1d417674d306360c224650ef4c1f6a56952c22fd64cfbf", 0xef}, {&(0x7f0000003300)="9ea3030814ccb12f40bfeded4182fa8ed3489c708db71c9c1a33386a530aae21cf3beb58476fef86cb7c194a1a393115bbb61a37e74694f4860292d327b2a085ed1f032b3c94efa9d8f9a6c043cf10c1caa9b60abe8ab48d6bb9faf2caa5b9ef1f0460f3d1ff745d28446c460eb3c3f3b0834e307a338b4e4c73738a1a18b8627a0bc73c001c620a", 0x88}, {&(0x7f00000033c0)="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", 0x1000}], 0x5) accept4$inet6(r2, &(0x7f0000000080), &(0x7f0000004440)=0x1c, 0x80000) syz_mount_image$hfsplus(&(0x7f00000002c0)='hfsplus\x00', &(0x7f0000000300)='./file0\x00', 0x1, 0x7, &(0x7f0000001cc0)=[{&(0x7f0000000a00)="f35f2ad6db412e96a7130c1ef687fab96e", 0x11, 0x2861}, {&(0x7f0000000a40)="04cb15853941df93a4008ae33a07480973b2e3ac6beae5132ab5adac17dce987000f765d47b3d52d77d6f507431fe585399bffd4912166e2f698c8f12dd4c3a78f80017121f69bcab2", 0x49, 0x851a}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="e93bb24b068d07a5a8f68798d7a6181fde6263adf5d189601729ad5e3602dea029410f858f440523c4e169fd6bd00b43cc287bb3dcb648334d7aa6aaeeab38d6186b5ad834d84cadaa621174e4111c756913f8c42d08537352c25cb38ebde9526ae1fbb79b6b3dbdf982f3b4233beb1be543c00221e505b6b7c60268ab1f4e580c1a25e32d1ffdeeb421100444f196ab823209433302c25a712cec78c7af797d", 0xa0, 0xfffffffffffffff7}, {&(0x7f0000001b80)="b261f7b4eca91e67bb3b5a428b790db49b48cf8c736c8bc6dd4e1cbfd9f30dfd1175dac5fa847bd938114a79786cb86517ea465f218097bbc7ee9fdac286893cf52d58ce9d2aebdee6d1441e234a5616afeece5648c346b21e5ccfab4c9e3d28e2f44fffe0cadc35dce047d71063eb85e863c0e79b6e24b3d707720e897e58999ac4c325f61418e83c19f947c750a730bd55d335dc9ce2dbca92291402f4fd92383bdd8d0e9624525e09202b0143372cc77b6327a4362a8248083972fcda", 0xbe, 0x401}, {&(0x7f0000001c40)="8c3b51e4dd", 0x5, 0x4}, {&(0x7f0000001c80)="bbe097d0d92dbee928d8daadba0959bf61db8ef6c596dd9cf452a3e6af0de03d0c129488dfd2d0e3c88ff2e6843e934efa9065c5aa6ab7ece151", 0x3a, 0x1000}], 0x1, &(0x7f0000001d80)={[{@creator={'creator', 0x3d, "e5a79fb2"}}]}) openat$null(0xffffffffffffff9c, &(0x7f0000001ec0)='/dev/null\x00', 0x1, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000004480)=ANY=[@ANYBLOB="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"]) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000020c0)={0x28, 0x0, &(0x7f0000002180), 0x7d, 0x0, &(0x7f0000002100)="62a2d3dd774531c55244618aeccc122ffd85806c71695712803e0d0538b99dbcd19a9e9ff2064013bc7ec420ea3f38bad732bb82f413cc4fae584680f85dbd8faeed08d9dfb527881ab191d04650a503ca2a50580474785e8ab73dd534a9437b330fd26b12e33f74bae7b51c52cede82256f8bac50ad6294"}) [ 256.309206] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 256.319228] binder: 16255:16272 got reply transaction with no transaction stack [ 256.327141] binder: 16255:16272 transaction failed 29201/-71, size 0-0 line 2759 22:11:40 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="be7ac46f8d7e3fece1d3bb585c1c6001569fb1ce2bad1d8a5ea1979290bb83c9459732cceb22751e15427df7c106e5df7c76d72188c6a7f1af789dc9111ca77502"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85714070") r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0x7f, 0x17, 0x80000001, 0xffff, "1c237453dc8a6cf3531565710fc94cfb222b029fdddf6ea261d716a3df63437c"}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, r1, 0x0) read(r3, &(0x7f0000367fe4)=""/91, 0xa9) 22:11:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:40 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffffe}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 256.527884] binder: 16279:16294 unknown command 24576 [ 256.606166] hfsplus: unable to find HFS+ superblock [ 256.622316] binder: 16279:16294 ioctl c0306201 200020c0 returned -22 [ 256.631016] binder: 16301:16303 got reply transaction with no transaction stack [ 256.638885] binder: 16301:16303 transaction failed 29201/-71, size 0-0 line 2759 [ 256.661984] binder: 16301:16310 got reply transaction with no transaction stack [ 256.669830] binder: 16301:16310 transaction failed 29201/-71, size 0-0 line 2759 [ 256.704519] hfsplus: unable to find HFS+ superblock [ 256.722112] binder: 16279:16288 unknown command 24576 [ 256.775357] binder: 16279:16288 ioctl c0306201 200020c0 returned -22 22:11:41 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfdffffff}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280), 0x0, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:41 executing program 0: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x440, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000040)}], 0x3, &(0x7f0000000280)=""/177, 0xb1, 0x100000000}, 0x20}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/27, 0x1b}], 0x1, &(0x7f00000003c0)=""/59, 0x3b}, 0x1}], 0x2, 0x40000000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffffffffffc, @loopback, 0x2}, 0x1c) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000000180)}, 0x5}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000002900000005ca63f9874588000000f50fe304efc448d1e71dfc165559d7a0d3c9e8c0f2565ac90ef2cd2875e869318d1fb6f64955d61e219c9d0eb52b4154bbf6e57955ada262a6deaa6160b572f69c44ea6c55a3d631810a24f1ce4dd447976a788dda06675f5a8717f9085e7c168d02f9f530094fc72c31c16a0efc73da2ca807f6e95cf0d5c8d0c7fa536520a8e71da25f7fcfc7285a6058124005ae54bc96b8570dc5155fbb7d197002e3e5f18b2bd45097ed22faaf49ce88811afe59e559e1b07878a8e15ab652a18910336f86b95bcac7eec637a017e2a7e2840ad90b4d535316c0cdeff7f2bb9155756c"], 0x18}}], 0x2, 0x0) 22:11:41 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0xfffffffffffffef8}], 0x5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/92, 0x5c}, {&(0x7f0000000080)=""/7, 0x7}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000001400)=@rc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1, &(0x7f0000001480)=""/174, 0xae}}], 0x1, 0x0, &(0x7f0000001640)) bind$xdp(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x2, 0x0, 0x16}, 0x10) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 22:11:41 executing program 3: write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x8c040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:41 executing program 4: setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6}}, 0xe8) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) r1 = socket$nl_generic(0xa, 0x3, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2, 0x0, 0x29, 0x2}, 0x1c2) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x2) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000040)="c7ef295e17a53240ed3300e7d269f8349355a8d92816ee1ef2bf8188f81519509238723ce34ad5c7fb2ea5fb872da4bd2a4fed9524384ff4297546e573e0e08df4a90408c877f61bed1f930c4dbc690892f2f6820bbd68d023583d31cf") 22:11:41 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r3) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 257.093868] binder: 16325:16326 got reply transaction with no transaction stack [ 257.101615] binder: 16325:16326 transaction failed 29201/-71, size 0-0 line 2759 22:11:41 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = gettid() recvmmsg(r1, &(0x7f00000040c0)=[{{&(0x7f00000000c0)=@ax25, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000700)=""/147, 0x93}}], 0x1, 0x0, &(0x7f0000004180)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400080, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0xc820, 0x7, 0xb000}, 0x4) tkill(r2, 0x1000000000016) 22:11:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000180)={0x5, 0x3}) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000200)={0x10000, {{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x19}, 0x81}}}, 0x88) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r2 = socket$inet(0x10, 0x3, 0xc) r3 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x8, 0x402000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x40000000}) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000080)={0x1, 0x7, 0x776}, 0xc) 22:11:41 executing program 3: r0 = socket(0x0, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:41 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x3a12feff}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x9, 0x80) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x100000001, 0x2}, 0x8) r3 = dup(r0) readlinkat(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/229, 0xe5) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0) read(r0, &(0x7f0000000580)=""/228, 0xe4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x2}}, 0x0, 0x401, 0x9, 0xfffffffffffffffe, 0x1}, &(0x7f0000000300)=0x98) [ 257.165776] binder: 16325:16345 got reply transaction with no transaction stack [ 257.173350] binder: 16325:16345 transaction failed 29201/-71, size 0-0 line 2759 [ 257.253369] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. [ 257.291676] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 22:11:41 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x7fffffff, 0x100) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x90000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x50, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40000) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 257.300404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 22:11:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:41 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xf000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:41 executing program 3: r0 = socket(0x0, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) [ 257.344881] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. [ 257.446926] binder: 16378:16379 got reply transaction with no transaction stack [ 257.454603] binder: 16378:16379 transaction failed 29201/-71, size 0-0 line 2759 [ 257.522443] binder: 16378:16385 got reply transaction with no transaction stack [ 257.530145] binder: 16378:16385 transaction failed 29201/-71, size 0-0 line 2759 22:11:42 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x200004000) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getresgid(&(0x7f0000000240)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x400000) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mknod(&(0x7f0000000240)='./file0\x00', 0x1040, 0x0) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x26e, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x95) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, r1}}) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f3008056808fb900"], 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)=0x0) timer_settime(r7, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r6, 0x1000000000013) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 22:11:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e39", 0x13, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:42 executing program 3: r0 = socket(0x0, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x80400000001, 0x240) socket$inet6(0xa, 0x1000000000002, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000003c0)={0x10}, 0x10) ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070") r4 = socket$inet(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000080)="24000000170a07071dfffd946fa2830020200a0009000300001d85687f0000000400ff7e280000000b0a43ba5d8060000000060000000029ec2400020cd37ed01cc0730ec279b2fcbf4042d1", 0x4c}], 0x1}, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0xffffffffffffff1f, 0x0, 0x0, 0x56c3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000013000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x1, 0x2, 0xd, 0x2, 0x2, 0x5d97}, 0x20) close(r3) socket$inet6(0xa, 0x80007, 0xfff) dup3(r1, r2, 0x0) 22:11:42 executing program 6: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x40, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x4, 0x200000) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000340)={"ae3c1d18f74e52e6a1989fda73b60b1b5334c126a1025238d823a3e3badca04ec34c511697efe3b3dbd4f1771217145a384ceaacc315485d970e8e9811ba19f5837f5f4f58f5a8ca536b18dd622981991a3ca675103f815525505c2330f386b98aa5bcedc738d3d8026953ceed403c475c7fd1e3baf4fa43f1d65a1837de746a5ed766eee3aa6447bd3168ab667bb5971d91c1185275dd035669589a3b519967eb96592ec3a433c81873a60ee3b9f6ff048ba2811e0653184f16da1c3b1070e6c339577accdb7aa478d46a8db0e5647e121585b901ade41eb7b0adbebc46729c39ac6da61863441a78cc3e89c02c8ac82b534e41150ad50b55210f51af8c4a2d0b13508da977b2e3c0a9a420b1702ec1f8704303f774c42908295e47cb232fa8e56551699ba45d5cc0f05d8bc082e33dd4601ca20e9eb425a4422635d1c42009f6c845c40c69ee575766f414cffb6b0aa1990c7535656c983b83c867a602ab2a5670dc04d0b1223f83df18339667e93467df05aebf69245c5b216634f40470e4f93319317f6bc201335cb1f90dbd6cbc5c9351a3730367f7012e79b016568f2f8fbfb5c7c8024242aaf9cf487d93e85ef718274d3cd4665bde48965afaf5c0002b3ae632d93721326cbdcf55607a9a69dd17c78cb3f7f587278a06040a07950bed33fcb88c88c6d77334e181b98047ced8ce7a7945f6956bdf9e415ea39b726613f25943add1ddcf0e160283efcefafda6583915bb4966e2fb9ace87244b83c0d3a5f6b89868dc50640d81f4b7e02636a691c336fd3d5d9c1c09c4a842cd55da6fb573d0d86825ab87d86654de673da39dffa876dfbd5dacd902f84e0013fc1947bfb203c3874c0e30db5e3b1eb11eff5e18977d0722e9fb6326c3d20f37b5ac80b8f69d9da21cff314d99794b085ea830e3e0dd46c7c85a10c1f5c2b427b3ef3cbbe2a9991ccdba621a0cdcd998f0a96b3634c60649576892071c003c034d7304b406ee860fad68c53217849a373c1d80fc1ea026d37b1209c6d60734d4e4f8414305ab37173eb2b98f366c80bf9eb29daf4b4e2e698c1d40cccf1dd353e7336432fc3d1e79bfaddf85ad2417999b76f1b673784a01e92ce5e9333e945fb4be36fed306f135eddeb766287f6c88c996d6595ff8657d87930011cc3d3a2a7d60e31337db9a4257d6685b9384d5cd95802dbdf688dbad747bcc962916e1299449b6ee8d51ed92a11e557e22a9be2ed4f48a8ac3aa7788b054388f222a5f4e5a0364b0813222647fa9ebc0b18355f274890c9c5a053b51c8c14157836b3d6b12547176a8ed47341e20c004d6c4be1f3255894831170e06b4093e2a81b2de84c2461a473a05772989da47ab3ab2672537b4520962c657aa6b098a2c660b880a1b35509a2d9e0be9d4ae6fbac0e4c5a091418c93e778af9e0e40e032404cc310ee2e"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)=0x0) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r1, &(0x7f00000008c0)={0xa0, 0x0, 0x1, {{0x0, 0x0, 0x3d62, 0x3e3, 0xffff, 0xffff, {0x0, 0x9, 0xffffffffffffffff, 0x0, 0x1, 0x534, 0x3, 0x3f, 0x28, 0xa5, 0x3, r3, r4, 0xfe, 0x8}}, {0x0, 0x3}}}, 0xa0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r5, 0xae9a) r6 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x6, 0x420100) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e24, 0x1ff, @empty, 0xe3}, {0xa, 0x4e24, 0x8, @mcast1, 0x6}, 0x3, [0x90, 0xde, 0x7, 0x7, 0xff6e, 0x10001, 0x0, 0xffffffffffffff00]}, 0x5c) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x10000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000140)=0x100000001, &(0x7f0000000180)=0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="b6ace3e7"], 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:11:42 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x3}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0xc83c0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 257.997142] binder: 16400:16404 got reply transaction with no transaction stack [ 258.004898] binder: 16400:16404 transaction failed 29201/-71, size 0-0 line 2759 22:11:42 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfa010000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e39", 0x13, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:42 executing program 3: r0 = socket(0x10, 0x0, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:42 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000400)={0x2, 0x100, 0x6, 0x6, 0x3, [{0x2, 0x0, 0x38, 0x0, 0x0, 0x1}, {0x7, 0xffffffffffff96c8, 0x6, 0x0, 0x0, 0x1804}, {0x3ff, 0x9, 0xff, 0x0, 0x0, 0x100}]}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$FUSE_IOCTL(r1, &(0x7f0000000140)={0x20}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000140), 0x2, 0x0) sched_yield() [ 258.071944] binder: 16400:16412 got reply transaction with no transaction stack [ 258.079638] binder: 16400:16412 transaction failed 29201/-71, size 0-0 line 2759 22:11:42 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x300}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e39", 0x13, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000080), 0x6) pipe2(&(0x7f0000000240), 0x80000) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f00000000c0)=0xfffffffffffffffc) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000100)=""/214, &(0x7f0000000200)=0xd6) 22:11:42 executing program 3: r0 = socket(0x10, 0x0, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:42 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000006a0a00fe00000000850000000a000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet6(0xa, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") rt_sigpending(&(0x7f0000000080), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0xc5, &(0x7f0000000280)="5b575f8aeb8b590d3db513106eeb", &(0x7f0000000380)=""/197, 0x400}, 0x28) 22:11:42 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ftruncate(r1, 0xfffffffffffffff7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xbd, 0x800) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) 22:11:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:42 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x9effffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0", 0x1d, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:42 executing program 3: r0 = socket(0x10, 0x0, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) [ 258.363499] ucma_write: process 1225 (syz-executor0) changed security contexts after opening file descriptor, this is not allowed. [ 258.369300] binder: 16444:16448 got reply transaction with no transaction stack [ 258.383421] binder: 16444:16448 transaction failed 29201/-71, size 0-0 line 2759 [ 258.486893] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:42 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x7, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c3408000000000000000000000000000000", 0x2761, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="7ec61545efd256c9c15094f0250824b2516851c3bbefbe7d1592ce17dcc5afd2cb4dc49e50433d3cb199b00cc50283281f1d13b60d9ef2acb4052879a631e754020a31a6b9b91f9cc288cd06d058127a554dd1495462539cd0c0a6e3928608a670b6ca546586d49156e8a1fa7daecf8697dabc197cf9845a98b578f4b65a62f2332c0c0bbc3544ddb1cb8c154a153e05e5", @ANYRES16=r2, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x8800) r3 = geteuid() getgroups(0x3, &(0x7f0000000140)=[0x0, 0xee01, 0xee00]) r5 = getuid() write$P9_RSTATu(r0, &(0x7f00000002c0)={0x114, 0x7d, 0x2, {{0x0, 0xfb, 0x6, 0x401, {0x80, 0x1, 0x4}, 0x20000000, 0x4, 0x7fff, 0x7, 0x59, "2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c340800", 0x59, "2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c340800", 0x14, 'vboxnet1selinux[bdev', 0x2, '_\\'}, 0x4, 'proc', r3, r4, r5}}, 0x114) write$cgroup_pid(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0xffa7) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x6611, 0x0) 22:11:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0", 0x1d, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 258.531192] binder: 16444:16468 got reply transaction with no transaction stack [ 258.538805] binder: 16444:16468 transaction failed 29201/-71, size 0-0 line 2759 22:11:42 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) accept4$alg(r0, 0x0, 0x0, 0x0) r3 = getpgid(0x0) getpriority(0x2, r3) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:42 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x1, 0x0]}, &(0x7f0000000040)=0x8) 22:11:42 executing program 3: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) [ 258.661673] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:43 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x8000000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:43 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'veth1_to_bridge\x00', 0xfffffffffffff650}) sendto$inet6(r1, &(0x7f00000003c0)="84", 0x1, 0x0, 0x0, 0x0) dup2(r0, r1) recvmsg$kcm(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/49, 0x31}], 0x1, &(0x7f0000000540)=""/207, 0xcf}, 0x0) 22:11:43 executing program 3: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0", 0x1d, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:43 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x9, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000080)}}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, r1+10000000}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, &(0x7f00000001c0)) mmap(&(0x7f00001c1000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) socketpair(0x1f, 0x5, 0x5446f509, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000000c0)={@multicast2, @broadcast}, &(0x7f0000000100)=0xc) 22:11:43 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000100)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:43 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x10000, &(0x7f0000000180)) io_setup(0x47ce, &(0x7f0000000040)=0x0) io_getevents(r1, 0x5, 0x2eb, &(0x7f0000000100)=[{}, {}], &(0x7f0000000140)) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000000e674a55300"], 0x14}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) 22:11:43 executing program 3: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) [ 259.061757] binder: 16496:16502 got reply transaction with no transaction stack [ 259.069402] binder: 16496:16502 transaction failed 29201/-71, size 0-0 line 2759 [ 259.082979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea18242473", 0x22, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 259.148253] binder: 16496:16521 got reply transaction with no transaction stack [ 259.155920] binder: 16496:16521 transaction failed 29201/-71, size 0-0 line 2759 22:11:43 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000001a80)='/dev/midi#\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000001ac0)={"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"}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x80, 0x0) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xb0c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, r2, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.sockprotoname\x00') syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaa8aaaaaaaa0800460000280000000000000000ff141400086e23bbf102907800000000000000000000000000000000"], &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000280)={{0x3, 0x1, 0x3, 0x3, 0x440d}, 0x4, 0x1ff, 0x7f}) vmsplice(r1, &(0x7f00000019c0)=[{&(0x7f0000000340)="47e99b679dde6f7bdc1ca7ed535f52958f4f039aede4ade0ed37c6c8036645f6615a6f56be0908b6cb6128dc2a6bf29d1776060d73a7597455997c0d2ad55bbcf1dc3f8ec6b0696fddf57777e01642d4a8bfbc72bea711d4d35fe4c6628c70fcba112a5d996c0e3c2b954e5feb2a66a0fbc4efb18306602a3d654c036b978b5861c94ef3c2cf83cae74de6e6cf7437d8c86fa465cc5085bead570620b40599ed67c2306b9def75f61a1ee6eaaaf27215724eb982b150cd48b95825225080974b09d2995caab8044536c4526095d1da2a3bf139a060738702d1331b9628dd162b24d58c48300f59da7038d6", 0xeb}, {&(0x7f0000000440)="b215cc110252b48a142ec004c236556bccbf81943b02d3eef5e38652a17e83a2033ca65b9fab347c6bfb63c7492b9abb11569cc66c010b00d5ef6ddfe08035b3c1b82cf0d1f004afc9c756e23133b67cc6773272ca3e1595d3ba4ac6c6da509be4c11b5e771736784fede96ccfc734d334a24e0a9c41f33e821d9807d5f06d36b7a3499e8ffdc2ec4a17fdc9f112444c2cbab8c7abcab2a2", 0x98}, {&(0x7f0000000500)="c4ca471606d96f8354ebd1fb41c89abe80388e4b17e46a7c1a9e8103361a6cb9df4e9cf2786e9b01fdab901c2a3972bdca8a903c7bc9108a9184037f47875fa633d457fc31f9e6da1cb9814bb5f3f96ab0783276fa457e050c64f676f5f727f684a366c3cec9e3468c2aaef2eb87b460a7e8ca3293054542c71582502f208804f6451a757b06e24fe1c501c89863df4f1c6bbfe23af95b2f639300ddf3badf5f4f10bb10319a4357c9e5925c47f4d007f7b5541cae1549966a556dee5bc55f3018e0c383e14a06066c1441c549c76e6af581b2557192d9cf0804fadeb515e7caca0614bd1a9326ca329d0d372fd7eb630ad0ce", 0xf3}, {&(0x7f0000000600)="d47cae04a30de6bbccf500e25ef1ce3daf3fcad12fceb83d5afced485e465441dc352b75302b60c2f232099c76b0052b2d263f24da5bf3c2de2b418d3f32625505de98bc0fd5edb69748aee95fd8f027a62fb1865574b5034de889e398215b68c8853e3ce608740e8476c351fd5e19466f7d56ce7b095c43457de6a4dba98678d463d1ad4f5b1a90dbfdab7bc5cfb4dd86785ab515cf040280eed0be4e6a3dc5fc9e2d59b45e5e7250672586e0bd20780bd3856a55cda03e6741e231822b51390fb06f7c9e72da8c564eab782f8bffb5612b15a86da8227970f41f35da1618efad09889ba81714b33faaf4bc96ff36f874ce802b", 0xf4}, {&(0x7f0000000700)="2f5b20104b921332ae782ceac2909e9f193804c75843eb510351b58ca89fd694129584944be31492a74b0427713c9c6ee34e111546b40f3897ef259d508aec4862d811e01b766b3de4d960d07449c11b4f3145fbc4496230a0990da828364c0c98d900ae4577db721c3c5460e879312027587d40ac532aae2835d74cd92a0de14a3ca843f7fce04876fdb0eb97f54f7f4076b0ff5d3440ce21f514d6607d3e6c86530398c7360b024a7eee100adfb895168c612621a5164a9c37acd6bae7da0014516cba189db856b866f611dfea60cbc298665ec5859746fa1a1d553d9a2a915e6241b7f69442621f04faa3f32b2bbdd8420175ea64504f921fd1fdeb4d9d70af78928fc6607c793a2f53a432132c85a3e93b805f5b4d246349bc83b3a822fbe60d090cbf0e970700199b4bf7fe0cc4efd7f4b5ac2ba69873f1520a93857e61b7abbc7b0ac76665a92ac9f5a55584cbfe77bfdbab228b295878ff2a021257f84b271da806941700247415bcaccb4432c865cf0090a469aab0cc7b1e311847e95e81546a890a9a7fef046a03c10a556da33d6fb2df6eace574a323f010725143411ea1f28c9c66a32427d3ac926f532b221d9cb282270ffc2af1ada09760536e996374ea0abac671b364bceb12a1f04e0f98c82f0c15fbd29c28e34cdf5bf4bc0e08164c02a12f1ebece7eee038cf54422395fed32bc64f73fa57d555909fa2fbf5831d13338cf8d158fbdff569facfbe300dfb715a71d9df14503d90f88e1cdc40b2a1db1e2879e5d73fa2cff521bfd873d5cb484ee9a96bc6144b1f464a72f3d60cc14ea8742bf8721fadaa63b9d9214f755b038a0c79d5d1ef949214d05b4271f880b6dbe543aa28562c2baa1b170304fef76ebf1e61a51d901be5c835f57c74cf91be4a43610f6b4f3ec5bce862b376f969a1f9843326e15a1bb8dae53b745b41d8a294bac91bfd4749839d18ea075871a653befcc063c32cffce2df7cec0522cbe22a5d992c397f519619c8807ac616a3213e3569efa68ab1951620823a8bb7dbc02bed5e72cf4d147b422fda3433bf08738042705113d2a5de6c42f97c9825d227233ebfae752eb68734119e10bc217f53774a836bc4c26578e630a0c04c4fbbf855cefed603e757e2c47053a3662a69f0a3492882b97ac937c62ae37a60c8f45249c651b99bb70537dc1f2280713fd5b6793ad7d5de581ee62743ac4c0ba7861c10b51901ccb1c22c5d4dd2a99d629fe867bbe3b8835f08166bdd9c987e395bae8483f9e633ed25f8bc69474f2ebb02a6478b3caa0248be8772d92f3ed6f4eba16286feec5c380a47101279512f0590c8adb4750409bffe77aa91cad9c8932f21fa52eff17b51ee7cc727114451d4235c87930849f9b49e83af60b2dffc1b812c2cd9b459f3118e72a06c8e2677fa6abb2ed8d3d216f23e24ed93721c53d4b1940fe7e59578e77e374ebf6d1b9a35d7544e323ae9a023ce4ee887803873310c8a0d3dbb36d081ad7819d77faf59157fc80d50a09affe634363eb82d62ac7c776b92d268e6513769cdc4bc6f05b3c0b6260eadbe915f180c5e41d64fe2d9a31109ef48c8ec649c577586d43e904dea5f9cc32e520b46cf8bd2b43e1b96b4c88051caee5a402b7d8b086886db24d6daeee09d1f19b648789f195c649885b0facfec2e894bc3cbfd2265c30f6c44352ba5244129235c0b55812b9416c7a070b710fe8701ee17896c81b9185c01fa29b80a1b13e06c41cb7c0f4bff277ed9904bef0700bda4fefeeca1f951358bea4e92b5a0c56f0b236e94cd1c21f324d4db95859306da6992a78a8a77f67c34e8a36d3aec84dced22c747e46116caac723d651801b2e85e7368f1bae7176902474e17534abf762c62c18217c3999c110b6735d5abb56cc36fe81362776519ec6021b4eff7ae02247cb9f616d60fbd39082b86e7d965ce5c34bf16a04070e0e70b0358f6885372b48daeca143ea626948be008e2b46ac20555f39eb24f4207e281c11db8239af27113bbf4b551324c003cecca2d38a6eed8b56d4db07b397fe40ac486b14827055f291beae34aa9705c77ecbc48b6d95b2aef0dcd81de7967bf6403109f77b96ab972769282ec97b5f47f3485668f9e0cc7a02ef174ccb44777ad9492f236933d67a646bd7414d3817461de3a341727c45c685b78dbde2f9a4453d96b5d32477cdf7251a6013508c055fc7bd38e353e73ce6973b6c3ab89280efd4761c29f95ba32572807756948c948fe62cf447f2474cf207450f5b73027c38906d1f00383883fd9622637500ad8353f35d249ffdf94979c64382d64957cd8d33d02db350c9fb7fc578d6489c8f0185a3c0fe304c50fa9850e5c432e1526d6eea15fd0f0050b5d043c28d4f0076f6a8efd38894bf602d9c24b25c1790ea252b4fca3f13ce6657f38ce7aacf1528861bdadd58fa091eff1c4c6735f691ee700a9624c580ce52b6771bf98a0351d94fe742c8361696613abe5ef019beb7373d9ca5a236504aeb8c31018ce0bd1314ccc28a8647f20c0de0033a36922382440c6aa8d845e76414b2067bedda470f4f63bb50aea6ae534369368ded35f1a910abb7eb485eea216abb599e58301c3d308019f493668c25d39b93044ca00c69fd3b4979117700aef30973eb4416c16ab54fb9e1e8c64f7ddec1ae664ec9e2dcc3ec0d9ad6fbfcddccdb65fe44899442f41ee163856048e1e6a1220ee11747cf2cb3766728f5aa27af2726b072620dcca27313d23760b855cc87b45189f9f3a09f3cf8c42ed30384d1b7f92b862fbd03647aa7d3ae47c560a42993f4f6fbb1cd13a936416a35de313457da08fdab10590b373e1b24500c3ceea815a0f71e8e23dff15bf92e5a7fb5cd82766d9a553cd3873afc695875b0cf3876e315ec8494450155691ae59ada72520081c1d86b4cba880b7b366d53a37d16b3b2e353fbc1dd7b45a3ec5aa62234feea80afb61c0f7cf8589ef031b148dafde4ce48a5a4fb50a4bb596323b6dfb00c5df00edb9ded448133593d1c52f97ce4b98f3b690209bb0efa7d50a7cbfab73bd5e6c8c6521a7ee223b3cac3ca4fe41aa362915a8f4236c3e3f3677fbf5994950c23b27637bbd453ac99936b60f7e174a13e6bbfcdd50048eb0380e147a8e0d9ca2dd6c4fefa9123f33045f8cec10cce5b7e3cae6c7914c0f1ae880161988f6c13ff1ccb4f8830de994d074f9a823f3bdcb8cfcd208c72b67a11441823606ce2befbd82e462ef51a88e13f81c309efe359a738b9b1e61708a28ab6987c3427173bf3cac0aba9cccb1d303663efa3f9717e4ce907cf0d3b3a92a1affbfe21f6339dcfac7d575d9b2d52987c12613c937fbd3980c964d336aa850e3136920c34672ee65b2962c8001d6735efbb25c2ed901f882690ff102140fbec217303b70e3eeb356d05b001591eca5b2bf7461f3e207253d3fec80b3b1a9a1f0c19bdebbaaf6441cac166bc82b6edd896ce0bd53d202800705282a1a90f9d25bb1a6c0ffafae88c728281288a4ff2ccec4730b587a288206ca0b7dbce8d318e0741e59c9dd83449c2b642bf6d33b25533e85a438f309e22e034130ea4e45500760ce9c22166528d2b21dafd3ee5da4c58b4c0893cf4971075c211e6be32034d10129547eb97dc853d5866b55a91a07638fe5decd840ab20eab67278bd66016eaa7c4210e8414b874a842828186278adc5f0082b00ae493ec6bafb7b3d9c895bb6d692270a15f61ad3d5f6485a71a6ee66b6f75134ab4a44c2dfcda7c96576722b7a859814ee11d16091edb9a83cbc2259852680ddc1e1ce8968c79d7c9ec2a6a5c2198b1e18a11219fffe450393b99a50cd6288d99f6dace76fccc7613e00410c5dadcbe18b2036ec0e3fc732ec58ca420e13e8f4a47a23f5848c3c3784cd4364a831f7f15d9940f6cebb26cde240fc41d191c9b7313ad59441f87983413719d4e331eed88b6440a917efe752518df86bd704db36d294be4ce906db3619e95b3d906da162f7127de574ccb31ab1625935dee392163716093399c18b864c3028879a96ed48fc4fb7ec2a4eb34756b318ae34fe815cb50a0b446b109aee8283ccc5e960650dcfaa116d0ce9e095b67db8ed89e0720a63cd2ed485bc1d40fcfc6d76d2eb1e68609f15057e898a72e6a5bce60b2e7f09833b0ae92faf18f43ade6c2e47b71cb46b918e3bd0c662badf374ec9170ebcfacb5221db7ed334ff8891fac0e2c9a6f00875b8d65a27dcd4c873effc22109b6bf11346d7eb2e61082ec88a3d45c52217dfd9d729a585e55af1efe94abac7701873b16d4fbec9e64158014d15ffbd4c691b72f5a70b0e8b206119cde7d0c87f1f009bd4932bb988f6ff873902c7e6ffc62f5f1740ce11911b28e6d5a26e55e543eb177f1e9d508b404c3f799b1b7b716a4a80d8cf76592ebf48a17400d1ee162dd72f2fec0f28f3979c57291597f72ff7af42253d2f685f70b8deec8186729d59a4e02fe38ee3a81298f38ddb72c1dc09e6e8fa774b3b16aef173256bd4bfc36f138189db77e736f074554029382c16c0550a759f0157b78b6ce8a45c2672c7cafdaa5849275bf3ff342afe155b3e08c2e0d62607d1c73da6967708a1c833fe423a4d489893f1f1325b4a9f6a81ba25798dd273e8b594c69dc441121f63c692e409ae634ff14302741da895bb5435d598b985cb6d4e03cd8a0af2521a888886dbd6c86a6563c26fb930a2261b95aca9fa3f3777d2d2f2fc655fb9c94726b0dba44043549bdd0a5925e87c5b8dd4565742dd3c1e3dd9c41e7d8148714b3ce522a2a510152ac7ffdc7fe662865742c0b6a18217c847cbf68b552584b3001a733df28c5d8f1e33fa9e795a140c7cef37d5846c12c5a4a0320e5984f2295cbf14d8131ff02c9448c6c162ef1a0acff2c208cfaecb7db41a2b2e9da38d037527b978cbca605ee0bf9c363a1f29ae9dbc8b8087751f07552317e1ba6cfd087805cd486c800fbaabc3ff083aa2f3fddb9cd6ac6ed14f42c7121e64e7d80830aa9900c3b8b488bba387ce89017c207f69d6708b0e8587ea440663fde1bb5c61acba012090eaeb614a4082f3561bf5c334d42f789f518f9eb48d40a7383d20ae483c21089b0d860f5301340b1b3de9f71f0c48d8bb8e177cfa21b2554b05c1b70645446ecaf44a8bcd07c005768ede5e70f8795e4e259ab7202943203d99a45a672fb1efc73d56baf40154ed7adc5e977af71a495d51a3ae5d2fd515c7503fb67ad2c48bc0abeb3153053b824a88fe9d44d8208f2293f8bf92ed67761a14532aecae18efdfeedeb78ced0dc2cae4dca29b7c47a1181dff9d8e490f1cef08fbab350059e5256794f28648db2a8aadead88b39d1d73f558a8705e6da9df9add85fd29b5035bfe06b1acaae591ee94d183168c6afc118c33a17bcfb3f49f5ea108c95dc9e4b78b8ddd1119ffa53320ca971bceac2d4117710e333017e3989dd14a78b78d261a2dcaa1822b68e730272cc9b200261aa866d817eb4e7c7d1df6c4ff95ae5af3cd269e1577e3d343662e39b8d1b3c2add2850cfb7c9d0c54a1068d0f8e6f98f5525068ff02af2890c50efbfcff003c9bc2efea5398df6fdca3d349595be3bc2be89a0a64f7b5778fafe43abbd9ad12a07590cba190b1713b903930a39ca29fad32432b9138792b9e75c7c9aba7dbd64ca61f7a71683736852e84f97eccd1eba4a3d75ad0dd178e788770315788a6cd5de41483d39a2c84724af7cd747879011f4e72f721ecfccb83d8d13b8985294941fe47b6e1f34e5dce6c276409d5", 0x1000}, {&(0x7f0000001700)="f7b9b79222ac7592179591f98ae49215d25b097b023042971b4c03f1511877a333f64213", 0x24}, {&(0x7f0000001740)="72219a8dc8dcaf04462153142f22f613a412b765b0ab3773420c62a6f0f2924f68370c94e0fdbb9dfdb60adb25a44256dd23b15e1cf5548472c6cbbc813b209f85cc42b66163c15cd06621ea6a4a5448d6b99b139819df80c110c64c9b50df83ab20208f8173ba4a207048e3ca11da0712dbcc3f0cffaa1f2df4ff50ba3888710cb2c9a37e1e17b32437838f8cef9d93ccab2f77100d6f1da3f9d2bf7b8a2ab17d850e33f46e712d3d758079bd113fa3da69ebed8a6b9804b5ee8967a2c79803eee4a91adae1a2c1fb81f4", 0xcb}, {&(0x7f0000001840)="fef14fc3742c241e04e95367b74640ec332eafc42a8a7cbaf18ec19a0d367899b16a073d666108244cacdae9306829d559a467bdf540c62bb07905b69416294eea837a381c01356a4ddad8ba497c521ae1cea1f835004b3734c2c3de3f1eefd9926e62035cd66b36e8c61866e26e956903b55c568357d228b41022319f08e32d8f6f51b66865df87acdb79eaf781", 0x8e}, {&(0x7f0000001900)="0ccd7fb1beeac34062ccdfa6dcb92d24b23b2eff283d1754810969a4143d6e81e088beda5541fb79c5d15ee1dbc6845cb6b5257e6053d0318dad874c198ad4f78cf24dbc5d713d720d0c705a3ebcc1aacf2209215a29e27d4ec954ea685d1a842208f51a6a18cf28454445175664193244584a752a75e24b7d7d4561a8b438731f366a7b61eaf4eec9abc529b35e66bb5d9b66e64a590f7638bd5fac3eb10dd2698f8295b5edd1397cd553a846157caca9f3d0eb", 0xb4}], 0x9, 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x4b8d5aa0b0f82ae3) 22:11:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea", 0x1e, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:43 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000100)={0x30b}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:43 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) [ 259.256310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:43 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(0xffffffffffffffff, 0x10001) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 22:11:43 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x3f000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:43 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2005, &(0x7f0000000000)=0x0) io_submit(r1, 0x0, &(0x7f0000000400)) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x3, 0x202000) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x1, 0x41) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001300)='/dev/full\x00', 0x12000, 0x0) r5 = open(&(0x7f00000013c0)='./file0\x00', 0x80280, 0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/ppp\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000002600)={0x0, @in6={{0xa, 0x4e20, 0x6, @local, 0x5}}, 0x674c, 0x8}, &(0x7f00000026c0)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000002700)={r6, @in={{0x2, 0x4e22, @broadcast}}, [0x3ff, 0x4, 0x7fff, 0x0, 0xfe9, 0x3, 0x400, 0x0, 0x7, 0x893, 0x6f23, 0x8e4, 0x0, 0x1, 0x1f]}, &(0x7f0000002800)=0x100) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002440)='/dev/autofs\x00', 0x2000, 0x0) io_submit(r1, 0x6, &(0x7f0000002580)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x3f, r0, &(0x7f0000000040)="8ba61f367f5dcd8e4ad05d27744e93a2196b6ca48a70758ece1533a7500c41d4a8e25d7d69ef1b07d78f8da53925b5f0d053595740fe15a7db7e19b7f9869081f100844cd6caab47b93a2872766c1e59cceb7880043a5243ee72b0f03d41f584752401835f76371757eee70a3442f091035e5bf43b5015932edcf9b1b9984c16949d323701a27c7188dba31473183b15e24b3a920edaa0", 0x97, 0x1fa, 0x0, 0x1, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000000280)="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", 0x1000, 0x80000000, 0x0, 0x0, r3}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f0000001280)="566d2864818d14cb0149cfcef851f2fcd82eb0c6eab5b1df1c70ce9746ae79aeaa20bb0203c805875a0f6f494b6b8c3ecd5e8e2ba2e6d904066d41094ee3b422a674", 0x42, 0x9a04, 0x0, 0x0, r4}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f0000001380)="de73e59322ba6ec2097e69f90e83616e083a0d2c0dd32e0521135bdefc7d4a73ab546fa1a2154bc8888698b6ed273a3c", 0x30, 0x0, 0x0, 0x1, r5}, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000001440)="3a0dac860c76bfbe52e32a66c95052a4e46b71ed8d66f606e382c7b8aa3606a047df14dac7e0860d9488472d9e96f9176578ffba77b6b5eb9e2aab2f2d5026729e76080abadcfa77895481bcb7dfb4d2127724d3897a51616b978a51729c7c7508393fa459ad18b9cbbf65f9992d9c6b9959f6a663e31cc26c51ac1c9d8f5f764cb3cb4522bdd51145b22088f6af8963661e84dfd3e61dd23467848a7891cfef894f2184fce8908d10bffb9ffc3c02308513a532a1f418ec37156090b8c4dbe55dc46350697f4b0df0b648c4f5e3f6bb5816d91b9b6032b8cc71010f8aa2417c09fefe9211cf48582c91186d50af470ad198ceecd2d8fd7dc0afe13cda7b10acc8b60f5c205d647c5015c72c679ca126d51f051a5a321cea12f0de26d14d731bfce76e76c5154474526daab9bbda1b31ba5a16207e61d35d5dcc13fa94e73dbca8e915a070ec52489d69ea8cd9ab1af00c7918d1ee890836bde61d0e81b0b86581f6f834496f1340141746e008b1764299a2622fcdf6c881398ef7e12cb5b35b7a1090105c438236a3a942a6863ebf17d05e4fc055d71059ad1ffa2ba41bf1dfd08f82066ce7b21e1c03357ddb6b8ea71d3a160b39adc7acfedf57424d76eaad504016a9faa77b72fca65fabfb4503a943ecef06374384517b31c097a7a9059c2f16727f2d94c50974ec8748e4509e24f80303455063d8a69bf9eccb233f12446e13fafecb45bd909f7a1da34559e409bb4c187d645a6a918a2443cc4e7af77f23526979c5aea1be8d283ba6af57e52a082322aa21dc27d9d7664f16e1952cd67371d1ce4060a98c21d745614cbb1551807eef0fec3b9260e5632946303c9454fdb8ff2548ad485a1ae84de75ed4549cd0f2e3859a3f76f6c3dbd0f1160f51bd21ae7d290f53045c0980bb967726cc18d37acb08c7122f20604fd96ff7adb15d8dd868099c504e9aae2edcb20b59ed0457f5620b80bd491db6a754a71957e096e15cde70b95167936c63d8f070eae2840747e67a8c1669e8c4a8c3fc3b5bbb4f5c0e3112c30d55c9049bbab646300c6cbab4f545654b67f970f977ffdab33f27741987002de1f1e9669698e907266f975813459bf3e332f5a6000ad668213e42cd1e9c82fdaf685b48d3e838b044364f95fc6d04daf8676e2f8f38c648f1d3ef2906b5347a6a35546befd49fc6289ffe6e415da3a63ddd693c021320dc5c67de0890da106c51b8e375ac9090e2d162697403d3595865985a4bf80f1e34d2ef50843e69a99bdeb4c8646d958ccb31400b1838cefc8be3b161291d7b507eb5e27502e91b3bf51a5bcd8a4adcb21a119ebdd7a6aa5693a4860c80cc3d5d62c4be6efa4f2aac7b93fe5d35fd875d5990997a39438cac6682d3a021644504a523455c95985742bd0e4c0d91064f4a3bfb728badacce86e9d46602e9ffc75fd13810dcfc3dba612d176a84fda677526a685b5c618a25c1adf58defc8bdd9e65ff1d3c0d76fbc3f436f552f9c05ac061b6cca822ebd25d4c58101e38d086b90e1b6e16566087b9b99a001db5bb6d71c16e715ccf32d4b06975211d04d57baf7dfd96d0d11684028e964ce7de359a65979c165222a200d3e6ad7e24307b878de0ad95085bcdd7d9808fa232582879fbf751afdf773a7e98b85c2b88b2fb4837622f807b37ce9070f5c3470d2386f7ec70b940662f3f2f80777877a4030b3910ceeae669c75d6cbf304dbffa0f4cdb49b31b7618f60ded5c4ecf18ac23905ee9e6caa4ebb28b66d9c006adfdd21ddfbbc2b723c18d760a01e55ec2fad5d6b7546f7ec59006416b66bd6376e1531c5b1d3b8bf3d67d25f483a1f7634202b524e91aa4bfe3cb940fbdf131589fa52a1ae49d04176db07bee94856ad5719d85f02e862d7bc26905fcfe9e11a4a067e48beb2c0ed229c195b4ee0e7019a72d5d2b6b1d0560f89e57b2d79e7883b7866e540c21e4f70c6205604340b1c59747dee2f0f7ab8033341c7a20aeed2322b16eff029224029e5812ae258916f6852b4bb4de8b0490a27fe29db63f6ba16237b03544a9fc1f676f5da8dae4d399eacd44b8f5b2473720ef2ce0264592f6aefecc04373dd5118da9f493023589c364a9903ebe86e2108e6cec98770a3a0b9ef2fce92b9d0acb666f4f7b2f87fb1cc08fa9d2e7a710de73f01f29c9538b0babaf8391d8f5796a930a60f6d49105c44eee16e231397772d38b7fc0cc3cd1ed4691db3afa72143c6378045ec6161e7b6ab5e97a6546d159e0b735f00a757a3bae92027a93de3d5626ad35fe5b8bd481c330546a790ebd1ca1fd9d4bd7bf8518597194c2521192cb371140b3cda6e7577043640cca0b4f20f4835dd9647a3614bf67a2af44b7b443a31f1669b678cefb5c0338280d2df04a690eefcc67cf8934bc3098cd764cfc615fd544a2f72b6078a647a35fb33230ccf07de360276121bb681067aa5081c89959d2f000d6d3b3c7272a8659e4e4d2ed6d5b81de1391d7bc2b8d138c261036b187b8db7540c325c2ce9a3b345b4b2d8603350fb070e2df084047779643a0e786fdb31f9fa131db2f0ea6d89460c3ebe321f06720272250ffd39bc950954cbf8068e168cc1f8b458e10d6f0b511c526fffefedeee1eccc40c4d7895954d1c6a92e756b147e569487501854956da1293cd5c78089cabbf02c5d4df9b619604f28389c7e220eddf22d72b1ea67ddcf6d18686cb10fea50f0f86fcaa6e4899ce22acd17061e26ecf4fa7b23557c125622376bca90c04f7d82d6f53408f23440c001a0c0ec3cddad7e92062196c03da7bade4ffa7881c316fbf280f149bbf81a8394d2f05ee36a0e936c90346f36891fc01fbdd765d10bfb406e678962988ec18e771458ff9b7573a986ce76731f2073aa0e9217a5691b4bc7497fa8edf7fee476a84e550eddaa5448cb9d585007d488ad818762a9345e534387a2dcabb0fd235d5798d16837955a0e5b59963ca87e7775d3dfd5579dfc65996e4710dc01c521c808d6f3e7a0e7619e9849bf74b7d3c6deaee92f6808a9b6064e4149517225c537d36c7bd6eed3da18351b3ebc1ccab0d77c61f0998be6dcfcc6968f64990eff13334fe9b29d714b37a6a3cd624c39f6b18135417707c57d8fafe49b4bffbaf52b85a13e2a76790dc59e0afb7ab0821f128a217994aab8d5fe032a1f6ebbe257d36d4f6405b55c328b72f6b631165bac0c92dd07cdf42b0e70de620a5e64810563fb50ae3d003897ebf52f9b0ce26b6dc535070255c5186d06f54ad7024b83ef39bf0be661d5dcd15252adfadde82b21f145b02d8c1154bd70fe4da3d3f510f112431fb663b7a19a8fb6fa4a4149fe4b52342c51ef4a71b3d5d0142bceff0981e38e4f6c8dacaa2fc1c557eac322b677f9293c26efeeaf1452229dc038d9f1e23f4e8a1b29621cc669f638aed3977e648369f373eed860f8e9166ed7d3c57195a9de0b777c5a839a34ddd3069bb6b5616e12233dd8948a3e8cfb7e2c27b71dffa0dff7a155f55d5a05e0c83931b8a0e432014c22c8f5316a3922ec04b19410d2484b27a09ca387aa0271b514874b8a4f703cda0174f0054c2afb3d9c9bbbb23dd6d9aae426f4e11f08ec02b88771bba43dcfc5e16f8d7dbb6ee12a388d40232b6f65f6f33e337396000c16e09840f33dce89ba846725ecd7c3d243f7b5d602aeb6c4360e10f61fe8290033bdda5d14d110d01a84876eb2e109f7405ce3d00a8dc2668d2bec64be1a3aa347884aee73b49075a6f4d6a8f77279406d44e2c1072c20487e4a049942f7e0ef7bedc70d629f64c6b0344f88b5604e0bd3e35fd0bbdbbb1c3b5cab84326f5443acaa80513de76988b4621579bf1c097beeb00861d87e6945060addbff628d6d5bbf3e3fb7dfcae890f5faafeac64a8472a19ab577ed8b79e7d23119bcf4a9f5460a8207c45e84fa93bc02b827f847099001aae954b9d83c0268d9ee63b3cf3cdc99fe9d4b264be0c1b22ecec7171cfed874db84167e72ade0df057e89a435a78dca5e8106035b690df8b9df70972992a2c849b7a98c6ab1eeec03ac457784aba89750d11820f4194cc04033b048fc68c0b92215b6278cc617f5784c0059ed738924c3e4e3dd0c3ca68e2f104d2c40f847b4ad3cddeac739b5c07cab27a4ac4263a4b2d0ee3f872d0750b5b5956b3f62d934ee2d7fe75e2837d13ebf12245164856142d5e1c0d10e86d2ba61c37083f686f7baa8ad32076b8f5410fc0a980e26166b2d2bfd9d2a7a66bf5f88cd4484a7395f4cdd5debc4a38a439c1c6c5155ae1f5fdb129bc0242ab126bfb7194b9600d2c346e9112eec75a21b71bae1db46244a09cd064f6b9afa6fdfe222824c73872faf15706d45244b6ae70174a4677529726b906582699e87701d6e58953d365467c8e39f9e2a980dd317b2e25a10be34f3fb3d026ca0903861f62b03f10817387572430c04f59e9ec78f2f8e45b0d7cc9459303dc009f489142eee5027b747f02701f8d617aad36b9bea715659ad2d12665138bc60bac362e20c42cb6893e1d081ef02230bd9abda9de85017b4180b429ea6dacf7a80f45fc0705829ed32b3c56a539e438ebde749d145a8f653672ac87f0b9691e3e63961caccbea073222c150a64974d9ebf91a26f1708f3b84b438c5615d022f744283fb6cf4c1772614212dc455ce6c05771e7e07bdef2ee0e9fd0db8ac86ac797b777bbd3631dacb262f51f4a9fea9e360feb6b0dbbe1851fb9df465ddecd40282dc5315586fc4aeeebe7cb1d1118431de38659a1271b5d3f228c6ef9d0b7ee23253bb9e5cfeaeaa11a5e469ee491bc34ec92a14bd48ec7c044f3c2740f8e3240e66040e64df6a552bfb0317fdd56ac32a7e55829ad77f45d6ec5ca7592fee97303d15445c9e1ed834fdfdab008e248db7ca24ee5a88842fd4f9a67e2c01a43ffe2e89ade1c1060b080dbfbb0bc90e707470c4548cc6883cab64cea3e3872208aea9dd7f065e622946f627d1c48748cab2fff324777e6452f649fc9cd45858d25ec990324dc9e6ee7ae1cb14443500a556c5010e58e6e4bc3d5d7742f2b3ea7a155f8ca9aed9273620516c88623659cdef336dbccdf7da5bad889603c768d77b8b076aaca96892619b6f33e832b3cb914dbb818dd61e34d908cfb47a62fbcd8774894ad19684066f34ff54fb5e2f1d6da98c7473b90b1b620d5546803a5240d573f4c62936e66db3b576492e7e47cc3568c4147426ae25e1a8c321bd1d56fb04aca1802c67232a53ab1c69ebe0531297170e6e917381402abb833db07b26582d913de9879e9a9905a35b50cbafec51fe28eba77ca6c61c1487d25253bee8c9aeb806b3b3398e42fcbcadd5ed304502cf3e686785956bf934fb6c5b3b5d8b92f401e01fb8502e08a370ff67ecbe0415f28f07a81533c80b67a2a3cb39c03cde10ea53cd0691f6b910f89402b1272b9fc9efb374e639131099e2a74226f28174bd640be039a6d529fd1cfd2ee077a054d196b2f9da3be4ec469a61d090ea62280d144828754e4e4548fb36940949cf0045a5f29008c1c464ef6c41b700810aa899e5244aaba594d642925e4aef7ee335a0d429a5a2e74f386851a9db271a534a4f12bcd96de3ea5c14a02474f3cfa287d93c123c929e1cf71c7c710c07f65f3545ebd3adcb8f212c51d0a0ed2bfa97eaa6f6bb51a7cf8a179d54e08391c392105f642cfa0c5b101c470f8be94f2829acf42d0e894d8ab9d418e918542e1d1edc320d54adc324b4432d32f8175cc9811849bf25cf7a40d45ddc9c177d93ee6344142119b58ad6", 0x1000, 0x4, 0x0, 0x1, r7}, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x1ff, r0, &(0x7f00000024c0)="459b3d57900a7907ad3a4b26bd572f57b70b272046189a0238d073b29b26e446a422d36728667514c6eb077fd31657805b330a82a6737887bd334a16a5329b3fe2e8fb8441d9c91a37dbd797cc52e117a27fef83ca28621157565fc1a83ed54f0a7ab0d3d884920edae6e4970b9349b08c17c465e4549ed7ee9c", 0x7a, 0xfffffffffffffff8, 0x0, 0x1, r0}]) 22:11:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x803, 0xff) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000180), 0xfe54) close(r3) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x2f, @multicast1, 0x4e20, 0x2, 'wrr\x00', 0x10, 0x2, 0x5d}, {@broadcast, 0x4e23, 0x10003, 0x5, 0x3ff, 0x7fff}}, 0x44) dup3(r1, r2, 0x0) [ 259.417524] netlink: 'syz-executor3': attribute type 3 has an invalid length. 22:11:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea", 0x1e, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 259.510817] binder: 16551:16554 got reply transaction with no transaction stack [ 259.518668] binder: 16551:16554 transaction failed 29201/-71, size 0-0 line 2759 22:11:43 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:43 executing program 5: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0xc5) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0xffffffee) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) write$P9_RWSTAT(r3, &(0x7f0000000040)={0x7}, 0x7) dup2(r1, r2) [ 259.588877] binder: 16551:16569 got reply transaction with no transaction stack [ 259.596507] binder: 16551:16569 transaction failed 29201/-71, size 0-0 line 2759 22:11:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea", 0x1e, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:43 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x6000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 259.656233] netlink: 'syz-executor3': attribute type 3 has an invalid length. 22:11:43 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006], 0x0, 0x20000}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="be7ae46fc29e3c9877a59f2bebf224b5316615223f550d4995c7970066d9a5b55d882c9aabf691dd8dbb22cfd0cfbbbe255fe6ff4ba643e4626cc60eaf78999a5c3975f6f57e88332d02e1a272cfbfd8c601f879a8d99ae7d9262ef6bd0488e56714cc0381c1c7566af747343ec1e52afaa1360948e0e2ddc9e6c3be8d8a67c4c59ee26ada1a4cc3367745631206acaec303d80000000000000001c6c5eebfffe8d1e0e4e8a6a70b10acb38ed33c5ea7df55c84ee2523135ebf4da8fe31d263c24c2c11ebfa884f404e947293b933dcf1a16"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:43 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x4001, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="f6af01c98957e47996a1f826ccdcea1c7be88f088aca47a5a3591452a4855edef39524d1f03304418fa0b692efacd721bd8e4cb5828712f1220ec5cdb902c00c83989942511efb3d80971b8b6c66babd9a7bc35fdeef49374fec0319aaaade9df3762c4c5826552f71e9403118ebebc21bacadfdf116befcfaa553ea7b41331fdc1cd8ade7c36c35de73a8c6efb3d1f5b36b3ac8ee7d8d3f2a7fb4ab3c8609e9fda219546d6499059099e59f3ff8b35f0a463a5c57c60dc8ee38c4770faf15c6161d1b986cf73838f5352c58a4bc0bb7", 0xd0, 0x40, &(0x7f00000003c0)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0x1e}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x7, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in6=@dev={0xfe, 0x80, [], 0x1b}, 0x4e23, 0x0, 0x4e22, 0x0, 0x2, 0x80, 0x0, 0x3f, 0x0, r1}, {0x100, 0xfffffffffffffffb, 0xffff, 0x3, 0x5, 0x4, 0x5, 0x2}, {0x1, 0xfffffffffffffff7, 0x122, 0x9145}, 0x100, 0x0, 0x3, 0x0, 0x3, 0x8}, {{@in6=@remote, 0x4d5, 0x33}, 0x2, @in6=@loopback, 0x3504, 0x7, 0x1, 0x1, 0x8, 0xf86, 0x8001}}, 0xe8) sendto$inet6(r0, &(0x7f0000737000), 0x0, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000480)=@add_del={0x2, &(0x7f0000000440)='syz_tun\x00', 0x7fffffff}) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000080)=""/36, 0x24, 0x4000000000000000}, 0x2000) r2 = syz_open_dev$sndpcmp(&(0x7f00000004c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x404940) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000500)) 22:11:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea1824", 0x20, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:43 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfeffffff}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:43 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r1 = open(&(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x200500, 0x0) renameat2(r1, &(0x7f00000000c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r1, &(0x7f0000000280)='./file0\x00', 0x4) [ 259.844972] netlink: 'syz-executor3': attribute type 3 has an invalid length. [ 259.858762] binder: 16592:16594 got reply transaction with no transaction stack [ 259.866480] binder: 16592:16594 transaction failed 29201/-71, size 0-0 line 2759 [ 259.949353] *** Guest State *** [ 259.952952] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 259.961873] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 259.970783] CR3 = 0x0000000000000000 [ 259.974568] RSP = 0x0000080000000006 RIP = 0x0000000000000000 [ 259.980612] RFLAGS=0x00020002 DR7 = 0x0000000000000400 [ 259.986233] binder: 16592:16613 got reply transaction with no transaction stack 22:11:44 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000), 0x0) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea1824", 0x20, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:44 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfffe123a}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:44 executing program 4: r0 = socket(0x10, 0x20000000802, 0x8) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@deltaction={0x2c, 0x31, 0x301, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}]}]}, 0x2c}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x4, &(0x7f00000013c0)=[{&(0x7f0000000200)="cac125ff5e36d0c550ba034b34393f106decfbb7e44c6ca80aabc46eb846e2d7f666de69a197314c82d30bab23cacdcf71dfd0d24aa3234aefcf226ba4a2d96130a35a8c8e28a3b9919e3662792a5231d6306efab53ac98f45d2979cc7fd0f87e0838e50081c941e22e82958a7557eb2f45e8485ff0ff9d89b37cdd775a510d11b5faef3283161b3eb9a8249835f41db25e036d182cce38c599b0290a54382b675dc7f45193a4b3f819b3b589dfad81541eb2a4d1f63510bbde83c580bcde11af4ba5efe1e18b3addb71370def3c0d13b1acfe02c4f49239c6abf4744ded755c8992600b498e2c045be5", 0xea, 0xef}, {&(0x7f0000000300)="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", 0x1000, 0x6}, {&(0x7f0000001300)="686406ddfa1413ad4df83826d7baa7a8c945d487b5a166b05883dc6432a6e0e7aacafce90f74f5175948a1f8ed781db1b1be3a0220cd2976fe7cee7130a77cb09fc8d2b1a8d07e74a4ad5c4dbb0a393f9009712495521cffeffc0a66d8c231f48aa6da55e601f98dadeafc9987deadec92d71b63a38fa5038a3c4665c663e3976587e22c169f7ed7df72c6005eceac6befea2bb59116d6e3ada82b4c", 0x9c, 0x648}, {&(0x7f0000000140), 0x0, 0x4}], 0x800, &(0x7f0000001440)={[{@acl='acl'}, {@inline_dentry='inline_dentry'}, {@disable_ext_identify='disable_ext_identify'}, {@lfs_mode='mode=lfs'}, {@whint_mode_off='whint_mode=off'}, {@whint_mode_off='whint_mode=off'}, {@nolazytime='nolazytime'}, {@inline_xattr_size={'inline_xattr_size', 0x3d, 0x8}}, {@lfs_mode='mode=lfs'}]}) [ 259.986676] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 259.994169] binder: 16592:16613 transaction failed 29201/-71, size 0-0 line 2759 [ 260.008816] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 260.017092] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 260.025255] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 260.033415] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 260.041477] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 260.049515] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 260.057569] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 260.065626] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 260.073688] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 260.081728] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 260.089777] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 260.096244] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 260.103782] Interruptibility = 00000000 ActivityState = 00000000 [ 260.110160] *** Host State *** [ 260.113555] RIP = 0xffffffff811f3df4 RSP = 0xffff8801ab4d7350 [ 260.119730] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 260.126221] FSBase=00007fc250705700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 260.134113] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 260.140114] CR0=0000000080050033 CR3=00000001909c2000 CR4=00000000001426f0 [ 260.147211] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380 [ 260.153917] netlink: 'syz-executor3': attribute type 3 has an invalid length. [ 260.154099] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 260.167435] *** Control State *** [ 260.170965] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 260.177817] EntryControls=0000d1ff ExitControls=0023efff [ 260.182095] f2fs_msg: 6 callbacks suppressed [ 260.182109] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x2524b0c3) 22:11:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea1824", 0x20, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 260.183347] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 260.183358] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 260.183368] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 260.183377] reason=80000021 qualification=0000000000000000 [ 260.183385] IDTVectoring: info=00000000 errcode=00000000 [ 260.183391] TSC Offset = 0xffffff7242df056a [ 260.183408] EPT pointer = 0x00000001b3fc801e [ 260.187897] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 22:11:44 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 260.269704] F2FS-fs (loop4): Unable to read 2th superblock [ 260.291279] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x2524b0c3) [ 260.299126] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 260.353871] F2FS-fs (loop4): Unable to read 2th superblock [ 260.437935] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x2524b0c3) [ 260.445739] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 260.455205] F2FS-fs (loop4): Unable to read 2th superblock [ 260.461376] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x2524b0c3) 22:11:44 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = socket(0x1e, 0x4, 0x0) writev(r1, &(0x7f00000038c0)=[{&(0x7f00000037c0)="72a2322793e9f8794597a4c68406", 0xe}, {&(0x7f0000003800)="7228f3be6d17eb8a4a7e7cf4c485e270a014cc56a95de5c85247f6ea371b288c9a90988cdb5e99b970b4db78b030a068fc6aef20c84fd26a87632ebe00abe99c1d66196d2cad478509fff3aac2c5a8754d9ee6ffd2d4022d9562f6566bdef2ba3a721e0abbc5a3f979f3712cdc7c6e50fbdd5cc5355119bed54b827623a689570365160ded5586a36592e6ad2cfff61970ec9e3f4677f9e6d744ade13fa0ac4dd225155a81caf5bf1b2c4c8cababcb", 0xaf}], 0x2) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty, 0x0}, &(0x7f0000000040)=0xc) sendmsg(r2, &(0x7f0000003740)={&(0x7f0000000080)=@hci={0x1f, r3, 0x3}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000100)="6f679b7b676f62e5446ddf3aa93f4d5ffd6df7d87ed5f529f68da29de55292885cfe2ef99b9157acdfb5014dd58f5ebaa8f71bb2b9fadc160300db4e4e8d16e34ffa3bca1ec9fc194fa907a33343877eca08ade29d6f8e35e402b15a5f7dc98e7a54850d6741c7cabecc1258635e958e40fb0cb9529b", 0x76}, {&(0x7f0000000180)="7daef15177826652216cd7db1d22a41815e36faa4194ed05b36d202cec0f7ead8b0638e739f7955c1e6ada0ea244b74fd95bc59049a3295d289ba50cc8e94fdba3e2b5ce0b51bd33b3fb39afd859687df3ae0bbd76514a68752ffc2499b3e7447e618f8ec18de0cee2009674ceb71240d2898b4090db995b7f14602906f56ef08f8342fbac5776652a3712ab4a6bd03178a64b2ea97351", 0x97}, {&(0x7f00000002c0)="6326791d15faea46348381357ab128fb80b929e2ff3010fda6f3d2b1fbf90834b356816342ccab18293b04492f34e1311be4dcc561e859480a202debd6e2b08738cf0c99206dd13ef67ca842b02dc955a670133e942df37aee5d9fa9ea3ab5aeb62b90a5f2f11000726c712fc60527fb9ea80e8c19aa4a7c77aee437f31e84f4c821448b562893bb1c3e2c0d361515393d8f1dacff00da833292805b0a49e48c663759c16e49ef3fdbdf9970f86aade3d4bb2f5b01ce79701f48072d4cf207dc2bf8fdf601c3bf6175ad6d8c40d6d31a3b0d1a83e78b68", 0xd7}, {&(0x7f0000000240)="4f1f6232bde4f35e64bf2d8d6cfd32739e4c12f91eeca50bb0", 0x19}, {&(0x7f00000003c0)="edbd4a626a2368dff44b76c55e6e88adff8decfd9887c02aafd1acaa5500f846f0369b4ba1c0df6080ae564bd4942c6414548f7b9e14da195df247cac2064a63f1f631751a0b58820755029838208e191205b53c4aeec39ffa4d521723b4367cfb05b23e1d3126e78f102a374c7fefe834bd23811d8b43f13c7297b4dcafc622fd9fd1c501bf42018d81ad1f175062086930ad4b58c5fc714dd76d7f2f92400e8770783dc2bf", 0xa6}, {&(0x7f0000000480)="95b5df1de6202c8d3a35e5dc358df1fe2599c43812739e9a883807bc513443f70586aba8f08e0dcbee984c276270c08a939e1373b30615209a19d8a3d11fee0179458a403a67fa290295166e48008916f78fdc4fce6d0603e5dd4658f804e7f03c5747874b1779eff6c9612c18382eba9c28ff72fe0d47e1157c809b0955fe11741746dba6799aab2e35b4fdda30826d414e9057e24962e47655271807dfa4b6b3b8725c2aec0c40d1e185b4b815b8aff86c7f39aae46af9ea447d5b87799736f17824b63e9cd24c77e54ce6c19e66a099b80cabf07661ef1844bbc974ef3d3eea44a74a0a5d1308eea8b7fa00060972356eb2c903f315c3f1c278b76b85b1d354fd5ea64e3c2c607b59ae6fba6b01229d5e0b858efa5fc0ba2eafd43ad437dc38db477a64a319918c98387929c36309fd2d814950fe1a26753814c3d646a7b3a81892db95f8916c492ed5f4e1fd2d25168e7ec7cf5813fa2adc194901c95c9360db1c4286282e754cd51c21389174df5be93b1b427b737abe6f3a807520667aaca4042a6afc0349a5d5def54876e13ee8473281e9c1fd82369645ce4df992b42a2642efbba177f05074889ab753f29ed49f5e7d0c3193f9fd1c44efd721f4acfb6f32dea833916987d74215e348a346089d2279b637e3c2821331eea7a1ffe64ff003e03f1ddb7643a8c05ade4f099a31310e695054c104fe1f1ed106598810c73706ebe9910c28c8a7fec3a62e25ab20a615815b85b927662d97cba0e0539033c89558047de2937edeafcd5f7dc5734fd08f242a2ac516305d5d3a396bc4f18bab4c989ab207835622846c88d3b7f58b1697c26ed50619ddc26b97b4536dc2dbf5ac65e7fbe54e2f0fb94ed7f2c7822c24142eb524c3b6ad54916e557b897a6506912ba94f4661130a979cf135aaf919bf17b830801d9e627d78af1537775b8373886ce9e3ebff174d058dcfd6108a440775115cc2a45ccd96cd809e9e432ef61b26a994852189c25e495c2806db91d5fbe231ebef15a7e608724b6ae15a185e4e78c9f350e311f737100b1e290e4034df47e52aa20152cb6bc0c8398305bd53a38d39555d9493e683d4d7e6be09817d4770b1cf548bf66c4503863c3e651624455c541e2dd1310db214596a0681ec483f7385cf666cfbd839a724bd9dbcb0b8f61a99823d32b4bfe8585e4042ddf9603d74508cb076f945cfdaeff239a60bf3e9bce6ff9a3682728b312503b5760b20e67b3a5f46bca07cdfe4f3230ecfff5d749e78d2cfb5504ee6cdba32b98586a7e750e229c476bb9a27cd6ee299e95211ac9bacb0c2ed66cc38725aad425d8eea023a58c4fddd15dc309706562c6a70656149fb398a37f132eab70511137e9e17313769250700dff8fddebe7c8e818735d9264d2def38ba7cc4febbc14c1f435f91d0628bf1d219a83d055e05b1de396677ce0387a19251c65305781c2c22d95cb1219a6ae85791b02a73acf8db6b04f0af2519e560be13ceae5be6cfe0856eb447bf138b01ef53443ea0bcfb69ecd0dd4c20b3a2aadcb0a399948673c637eee2c6606bed434131d3deb95eb7c853a53067285ee198d83fa04492811e18e5c7b2096b186bb8c29cb00a57d1065646a9d3b63f7fb842da3a7e2cac4370e8821ed0ed98c8a397e6e6adac210726f6ab1031f480ea953047cdde1e9456419a8e7468a96f0a82b7dbca2937cf26ae1b05398496682254aa4c0c25957f6ef91dae9794798fff20fd40e545c3580d819b8de3a5a95de0b96b6913e99099d0f426889a474d9256cd4b8d9b38f57413f339a7a3b6e8fdba4576f1ea67adcad435163b2340db882ac52cfe5fe793d3a416605b18f5835bb5208b721af0f9879cb3d36d4000d3e01108fa07a41b40fac5c729f8e4bc2d10b3646e13e78a554abfe509a921b024324a55a3fca81b6461cd0979848b9270ffb6c982d727b5a8b5a01cc04ad0eda118f7b26d8f4485a3cbcfbf842f0a0d0e5d8a453ce9d04fc464c1d888438ee9463b0ee5253db274265169e12d993a14ea861b05d64ba5ce060a614a04f00b4ea6440c9a0b298d9cb90e8790e8a5815e258f6ea5b83a4e565a5dd3dc25262620ffd1c768104ac8eb0988a27cc81d0c0c33f262ced64d8fcc137e8bc7072234cbf58c86a52f27033bb7fe7c69dd799a47e3fa4319bbb15ad3ab4f215650c891a6f140c2b8238bcd1bfeb320009f86a0848ad7c1b4fd1d314a9f98e5b794fe724a2ced80bd206a6b17cfb8032a345ba21a26200e0041b5846919fcbb12e76d58758d8f9ba43788bb2490b35070c44310997e28b9ece8f5c3fc21dc7dfa2b52e03db30a6a9f201487522854ad7c88c53b8012bbfe5871805df3e0899ab045f2e351cd22e98b35902e0ef0805f2ac45821db09fadeb9c2d5e14b09acc530191b7b017556745f47071f838864c12a9daa2172770425a5734acad22f3a2c9f76af588bca3dfb276755ea58ad2c642a22cef9dc5f7f8a0a434bc8f5984df98bffe6edf9a5fb95f9b4bdfb3bed1ba581721854284be021b7edfd0621cf0e3f16f751e144b6ed7cfaf586db92a3d1fe3c5b894c280e13946c042fb1639a6dad3eaf371b1a1489f8bef5e363f5a2ad1a814478a41ca70da6ec263354fbb09fac2ab3cfa2f0ac7dee5a8edcee7add2ceff5b98b23407348d4119621f068ef64e866abe784ec21a9eee5eb48dc56d0c5f3dd5544486498692bf5113a0480d9c50881e9c9c60e6124c3f960159c9eeda651c4a829af11628086589f1d1b8359b06669d4e609460d544f81b66af145add7b63eb4a4adeb012b1ff6366fbcc838298182746e97c38b6eb79334b8cf6d9dfffab1cf81bd67e95483381137a4aebc6e04ec6eb1b840186e65af48f5c0ef47012e272439fbd880c0016b455a8b01454e65aa727e66fa6c587b2de17a9abf2f569f27bc79af07d32493353543dc35ef76ae236282a94bf9d67ca5b6cd1bbaec3cea755bbb434e0c7658ce0c84af77732d7521a379439aa82eb2d613296e0cfa2d0889a34d1786eaef96a90be8af99caff8340bd4b3114813500f89d633cef1c106488ed4c6b0ec3e35eeb031c927cefb57d87dcc88e745119264c607c52d439ddef3cdc8be3ec2e702405aee57fb59aa9b83831019f3da0fe25bde15a41ab37a9202aace57f876ec6403777796712222ad1e19195e161f66bca3f0bbdc1e51de6a50948afeeaa7e89c7281492abb0f737af40a4b3d28a89d2dfb8c83f46952f1b99c9458f8cc13af62727852941c99b0c3247439f3b702ef51f497365dd14660779035493f0ddff92fdee78ab4dcafa5cf615d714057944cf4cfb8a1f9c8a6153a0d0f25c5e09ca84e1bff07fc3b308e5c8e95c49b5e84aa26f0d8b07bf9c9219afe83af7a18f7acae59fd31a4b3e1a3a4300db8591cd7466ea8c30e67a536bc83cdfca0973402815a205274ec7d65cc94e14c008667f98bca253ce6611352a0a37c20081e43681f8064d80b4780373e507a30c7f7c90691ccab3e19c5f5ce28a9f71c3544112857510bbdfd1c231102010cc1131d1a1315cac2c7f53d037d815082626d9fa7aca2161dc7a103e9aaa25678ed30ebe4fce4282283eb030995648fb586a53c4350b102a7ed5e4c2a04595846daf4ed599168978de92766feea0514ae6ebf08a3c9b4dec55b8302d163de789ee71eb567b4cb62532a74819eac9f50ec696957beecdc8075d332fce58f8653f0f81aa9c77772f3329b5b16e0ab5360dec22572136a94b0eb567170905ebf8c32166a0f20ee8f5f7c61a6dd97b95b961007a8b8c65f2079b1fcf0c1c6aca19eb9e6174556d16a4ba59d34309b313463faacf045773f5f08aaed87ede85639f2cda3b431b8d6433ce1a77efc072307c6fabf02305668000c6d69b9136295c65ca5cbdf469c248866dae1f1bc0df4175a9fe187d3f95848f48af4812d0c0ec569de4eeb44e4b93f06dc158cde477779a62431ab6faecbff247310dbd66cb430e802c590990653430ce0bd91790fa4966c031522fd6436056c1ef58f98992187233dc7bcd5280a7668df71379154afde3f1d29e6095d50414df3ac553f810227935b279691f05c0ad80d09c79c5fd74922e859e0e6cd66e9f57b853f67b0a16e77e508c5ec8502bc894811a452c6f0c65fc17b5567ef1a0e5e46f716737d4d88ccf39157f04d1343e02263f6b977dbe6beaddfbc07d1ff1f863abd896f71199dc309cf385eda11665fd16b6981b719e128766d2ddd395574ad3a134c22ddbac747d4a3182f179cd6b8cf6bc16e4a1f298449466303591d8ea8c95fde6f21da98f8969077efcd75126e316165a47faca23189d66d3ebcf44993ded76d1d0585d7f3d6ec2964764098aa528ce6d1a4955e28044819b1c16da44ecaddd9c48a01a5a32d26224d007a00c834143293061a7219859b575471ca2084208075114c06f6472c4e05cb06417873c1debf6ec4e581ed29f053e9f2a15eb2c56b45f1a0a93f9ffded373a78260e67ee92ec2e41c5c61ce6a41169a649d171e4db1485c6a5696536e030cd2cba8c6188cb78a5200c9e65266ce916dd2993b9b36550dc48fe3fe7a6c889737f54f2421185d47a0ac48a6c853f315bc96ed241b652dbf9d066a6234ed06c4ebbb8b4e10ed0e0d3ec3950e74f7d6bee7e381698b5c03d980aebbdd37a608bb9e4c3593435fd806990664e939596e5ef2f2c8dbd4bc95f5dfaa9af6fe53e181614f0312b4b4dd374300d4cd2b2e92c8fdc765cf6041ba049677ae203e3d39ea5e649d47f20bc99d7b8a15c3584a4fa2b95597e8bccb5314e91db84406870e03c1db0c10ca9bd5ecc98c5bd1a88d7bdb4970565eb849db51c12f5dd94a2ba896a3d35be3f6056e44596370542a520ea9b708d922d6d6e3b854fd8e8f3d4a37939742ca2b0f32c7c792594d4868f1ce99e1d6df8701dddfaf9b747afe98ccd0ee962d801a0b38b01a0b38211283187af56ea594a6dd740fd851b794c7f654b1bc65e75f81a535aa5a2ea96b667aea4485b68ca170be825445e2164f64488976da8f1c21848fcac89a573f19a5bb326686db8f44993f1cf5cf1832e294852dde5b000858c5f28a54b0667ebd225dd030b416b99ad7b3e8770a12f07451185cb18442ca33f1c51d579fa6890ff3b4a46d6e7c374e29dceff2bcbb25199e2d5fc94c790a7b7bffd3269a0fb441d0e26c5bf9d305744afe406ca544270b99406b23c24052fafc8786b7f69a1711dd1eccc7c4ad7d184791d3a2b6e573bea2268d77dfb157145c6319ff141afc1f26e9f2bf7faf3a4a0d331683db8802bdbf0c494e7ffdf85e1ba5ecd3ccfef4924c9d9e0b6f19ac18ad70c097ca259e3221f0568c2177cf8c13900c37f4f4ad186231376b4b2003ff7ecf577e06c48540bfd47ef616505e53b9fc750da746abfda2ca161ae3ad2958bdbae5d88c2a3a3d941144ca9e7b2ab465b19d63967c61d9abe779429af2ed2d732a204af2b7d0e1f20f64951c6fa207abc4c1f6b6cda7fee949ee1a9967c433be4ec9f6d84e6167479abd600cbab1ca9188b5f68cc31f0e53f79bbebc3e41e6503894c80545a9ab3f23c3edbc49d71828ffdb77b0a619f437c7d333208aa5215a3e418b4d6d4937501a57b726294ac50b535a711d41fa3616ed762f3034493fd128b72de931d24125aef7f6815abc4a15a809024d67e3d3664c872597ef54561665803d95fc5bcedd784635ae4374900fb3de04f02d96f25c74fe00432a51f162e974c48cf1823d55ac69ca038dea2e0eb0961e106011cda8b0a317d7ed", 0x1000}], 0x6, &(0x7f0000001500)=[{0xa8, 0x110, 0x6, "6e9a05b1112e4363f56a00e3c54b4dc0ac8b39394310d192dac175b54d1028cf009835a882526fd2a9d57a789b23375bdc53e94ca81012c62d1907d8cc1d0c4773bfc9aab58848c28916634d176807227a00443b9bfe4a0aad7e840fbfa6b39381d6f6bec49607d8db8c452f8402cb081054770376e3aecb1177e58aa01b6a0d93785776ebbd97e77796e031d77d3decf588c5335d"}, {0x78, 0x112, 0xa6, "75b6c2a93bafc43ea44e523c9e73a2239109f1c987cf07485515af4674737d14d1704a65e9ea51de9d1c77d8ac0e38eca93f0be32c5bbc21e35595ea64ec3819eaebdeb19a3eae557ce988de8810a926486ce87a3dd8f861253471a7121ed1d9f2fe22"}, {0x40, 0x11f, 0x101, "dbb4248c352581f76d3d1638adb109d023629e11b56a6365725a076be355ab82d03e2a27db3efedce2"}, {0x1010, 0x114, 0xfffffffffffffffc, "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"}, {0x38, 0x0, 0x9, "55952065d8ebba678ed68f6169d4f3780664c9720aaceeb140f10d96cebc8bdb10"}, {0x1010, 0x109, 0x5, "a10c3b608d2a816959c919e6a33a64bf71553e8952b9e204f57c02c2df10f39f15cf1cee73601443839060eed9e2b5c7542be84adb23e233dd9585ebbcf534477277babb5416a8be468bd86d7b479632e6a602a04617c9c9b925f35a207b33576e7635872776eb918ab75525ecb2a9354551b2da7137d838d31b6a54b69a8bd3d922387779814f05726719aa07edfc946b106a050080e4bd027866bbf3b1ebefae25e46b5eaa51e188351f1548b8a561e498fee9ad501ba1d1b3015993aa38e37ee81efd49cbebaa0750c42e0cf49b88a078500bc8f7e90e1e3fd41d77679e5c509ffc5003645e16c117123ded16fb279c2d84f7c3868d1056f5c26cb6f9853583beb6f0bf30315258895fde68e275db08d82d50189030f3dc22c6c374366f184931b4d8a2bc5a28a58f8be84c890273d74dd11237e99e5b159587f69b96407d836eb1151a23301a109a5bfa88fcb09f41f70c6365d8241396068e10de8c178c84a776b11c6212dafc507263dd173acf470e8a08af9f4a550ad04a4820198286ca477bcb4c1587fe9cdf9647b11123d6b550c636391d1f394dfbc58251325eb6b840a38ea7294ac641cc555f426fcb7989643bbff2cdf4710f53f61a2905e57a4cf9112769085eed12fcfaab8bda6f1f7923b83bc4f90d2d6a97c0b3370ca7f0e5cdc09b086406ebd05f61eb733a7e3982ef13ef30ec7d2f647bd0328471c4c7efbd603972340680a8798b3dbafaf7608302ddcae559c035ea5a19b19dcf8cf394adfa089d22132f5689ee773e10714d6ea137bcfaf8527a8e7d7b4550da5f92d54122c48b3e4d68ce1f4175a7db874e14522a3cf12bc0231a882aea346c0652ab7d589a8de7427ddcafed314a434c89e2c231c86bfe670756ff135273d0b74f9e63fcfd69c4e3cee56abe232ad5e1d7b1b39256ee2e49659421cb533ce658954e6f0c1a4de1db66c5256840c9e864445dbae1e9a670f204eb352776da76c73af0beeb6335dd5f7f296579e2cdd33a2acbfed4835e414031097c51b04617ad4941b19a31bc14ff80958342c8a033a113004fd2c01bec220964361a559c5f292d5e675a719981ce0664839118eb2ad3a95feda60e8a8dd6d833aad21ee7f2dd7549a1ff2696d103c786af8825a638582d6be5b9c3008730326f2aa766dfdd6cc1ec6af13b21580f1392a0bb695c4b02fbbf5a38e54a184fa45d918bf76e2d110b0cca42e96d227d19ad796792cca9480e2bd9ce702abeda1e9fa3736167ba5c96ba969bd485c6260d97e2e760db76448f9d6f7634e70720f8636d6159ba6a53654563c8ac7a1f485900ef1c544fed859a8d5ad372f371f5726d533647cce174e9ecd36bfd4bb84bef545e99048e14450e487ac79b028032694f73ad99fc505a047247ca2099e640dd11a0c402c169ee639a07e8d34fdc4e4c7b5a0693fbfeea5953a3dd7aea65b264d5ba955dc468d8b39199264c3f8ef3de595b9ebb1dd0a41fa271141016e87be9d42d565ef95611579801dcc420a4ff6e5e4762c0314e283dfa2b80c12807730091d1161aa15d16efb1ff5a22289e88738f63d33fda2012f1b82094aa1a5198f71de9ce45f1668e940dea9528432d576874c72b0462599cdcbc25e16b923ded31a88e1ab272d807ca38f25396ccd840b48a1327383a3a0819d0bf340172356fee18a4e2093542b867b76f9fb9d83b4362e22ada51c0553f3117e5f4615935eed2215a85818a196a56ac1e9cd7fbb3c0a1ee68b10dd44664e3724578315fe64f18d40d97d76ede270cb7049eb84ee24cd4ffddf300e919fe3cd2a62235b52b421472e49acf7b60434814348d84eadc699e9afd3170d38ba2c9727dfd5c2a9e0d1c43d23e6c8f58fb701e76f47352571a856526dd9c76a7a05209333399d9202494f2a00f03f4d361298cccec9bad4a10d737ac26b379ca8a74560b71f4a3f7a5edf7217bbe69adca72df5f2f1e38f12acba2ef07b638cfdbd8350d112cf947f4de17fcecd13cba8608c175e8e1f2c36f5d5b4ff4f98fdf9af3352a2e75efdcebd355467c84843d36c87409a57e1ac1d9cd80a49c5137464dc532fa590ddb5555f1dc49bda7fa08646a0ae5561e1f34538e7595bcec3be6af25ed47f2229d22c05884d6c88d8418d50153e8795f387fdfb28535665142c2436c6f80b118d7963c4cc41b3142ee6eb38c97a51915a7aa9daf67a82b67b0f049301c7f31d83c36ccbefd3301bf85199aeb433918ffdd5c075d90f16c3bbce95c6db7e8978e5993342c2529299f05640a3a5af2078275276ca0eef8340a02de2db5cd6a46d60160aee692cd09eb1b527e1c0e7c58b08396d5fe4996dc998e0ecd6ce3f4704507b4dafef9f84e010c492774d912d232d0f8b553257abc1e1f64f88033423610e865c3002e72699557a5ce4bf3904c571478507b36288556a4972feee908b4bfd0b3b9f6b64ee98eb8c5da5bb0c7229c3a33bec9b8074d1f0097e42090eb51e95c0d65fb1d8f472ec542b0e71841debffaddd64b6bac0e03c88c32a6c187eaeb95a86ef757683e9b93fb29fadc0e3989531bf91e779f6df1982da0cb728b06734b967cbf0aec29b6811b47f54eb9562d8cfdd7ba26ae41d606e9fd0c30bc6a78e62c75db6a27c9db19e4f5147255a1e570a568330a182a12b804a1dde17d27bdadb83bdf8589c8b06a462741ea5aee31b36aff49e3c33ddd77be1bf09a0bd9824e91b319d087036bf18a7eece3d867c29c22393f25d694c4a8ad9c31a80dabab52f58da7f4347eb1f1818e844d1fdee45bf83dfaac5525e360e11a25576484ef4eb965479cb2e7ef046e090e4e1826ecb0fa7f5be6be04225d939d1069c1f31ce32f11d5c6a4d98ada879fa69679cc43accb6ac14b1289d70e6036e61146b7cd9be6b12c91e7309340fe55a6af660604ad6e75ee9bf3ba75e1e1c15cf5351b15dfa80cd668344667f9fc98aab1c8aa26a89f25f254c6d9649c3040353d40dbf44f4c565b91ef3bc5efdceb50f4a91ca3f7c6dffb11d1790c9d5c506494246d797cacf22c4f3b5a18816c903883fa92cf684b68a387b0f079a0b47643c11c332b678028fc7ce483c2f611a95f2ab30bb6df56ee430b3cc2c0554ef735d57b66c155d14e5f694e769928b3e7f723af8f21d2bf967ba0293f808f1e365bef93f6df450adecfc7b6414035dffe29a2af15088624b7aede784c75fdd2dbed02be5d2ea18bf9785434bf116c850877223bf3c4149982374f83c2f9efd207d3e8cc89b5a970cc9834b5a8e07ddcab2a765d9dcb45eb61e855173ed52a6fec3eaf6326d7b867642c3d8581723bbc3d712417d156499d72c4deb65447ffde1d299602b206330e9b42819cf49fa74d1858761c00d6d22698c108a0f203522182add8df95b14b66bd3663506c0d07c7572c73ceadc19476cb69cbbc2df346213802c3896ddd65e50a728fb1677194e8a9c5fc1849bf293f3b4faabdba89acf31dda1c942bf2e25432586bd418dca44a626a8b7660d767bd04587793602f9dc990c8744b6d3dda0e9e1b0568d9aac7b76020b5dec5aa494453c1920593b9ff51cf98347b326499393e8836e1e43dff7bbebfc66a80fa50daca1e4fe8f868bf08b6b085cee645b9a240776ccd34b47a7d5755f3c7b1e5ade76a79ee599809c29702038efb4dec85ab33fe9b3c064343337e3b56d550d7d237c34bea42a7df06d9cca6321733b5855b733869b7402fce9f85b4a263465ed29dd0e6540b7402ffde342a9f2de99bbc835229a838333301a7c83214dfe4431fc154592a1ec54eeec9234c628fe48d6aa04c339e122426f0dfcce9cb6eb0167d8ad75f38691503a2d41de706d80c990b7f9bcc3fe683aa6597441284383823b8c1504429e4e0b539f4aef78ef9efdc8459ea5394d2ace19b2e0213c3071ad58942b125ccf5e17a5e3efa213de80a2d2a7240d0a615c88acaa9b1f94b403111bb877d49c5f9a1398cf7b1933a2c2bd6cc9f39346cc582211ba600d95f15f0b904501de0a0ab4ec4d3b1d847e8eaa6f6ef8cb732302f9acee8c1c0a4b2a403d3113d5a1177e7b104151f2181f9b404f162ccaf177faa5413640e51efe126dc484f0792c2bc2bb12f01d6726d812c18f0ce9f36049bfdecf1dfab08aa883df92f871e6ca741e70d5da3eee677963ab79cab84ed91dfac91010b2b3a476434e52d2bdd652ae9f35923050e0862ec7d74e32418cd59fc2d08bd51ba2d930306aedebfa440a36c31e9d5cbe8451df119ea848975f8b39496f1e87c912122c53cba83534fc3b60fc1c5f202d431c69d31e580ba93b541d6336775620803f73986a8346c65c2eb8e619f747ee883cd8e77321466ede0e81eddd54584ee613c0a9b049293d0f8b1c8cdf420ebab6f7424cd52cac7a36b22497955157b33d28e26ae94f03b424e4938c4e8991fb759f51fe4089c0d4fc690f35c25b17fd4dfe7eb7aaf54cc2debff007812131c1bbed6bec86c96ea907ffe90f0e02bac592b66353211c5d73918245d3406af88e1ae97a5d5297fdbba1d07e4472a5191212a3d4de71289d36ecfd8d3878b97dad8d16d5f98e96a889e16cee22a2227c28ac2abc532dc4781f4fe22647030089b85e5ccc1eda16b6212cde9dba065eb7d941b59fcd55d0a45decf22d25ae5e0b2a0dd83b1a9c925249f8361c834e8b5d2cebdfd344d47620b91f3edabec37094a7fef09cf461fb4b3083101d2110b040cc2fb0705c79bead6b6310accff930e3a33e5f035f97888ec7e248c8374ae904eedbe327b3fa2dc0d79c837182af3b45376550f7730dbbf627b12f45f004eb342d0b1a53551f6c3248a998b8a9595b2a931681a1417507bf4066158c4829a2db91cf41eebae8171e608701faadeb4b3dd85a11450db2800528e6c4953f702ee704986613ba9a93bbc35cc94ef964c4071b3a323f251d9755683854f82279bf0a52cc7b3933be039721a61d2fa935924fd35f843d7dd22aae6b7f89a1f51610fb3a4306d09bb1c298aceba0fd1e9fd09da640bb294b471088e336fafce635bf10bece842b796d6f50289ca6d542157eec4da31a97aa9306b7ad8ebef1bb3aa89c47813f3107e24df58f4ab9e33bbe6d7ed51e0ed21f04b2460ce6ac5a1bee8109f5c55ab2cf07dcbd7af34344e4967b16580b45b6360bf5d70c2bb9f6a7fa055bc576d8f961f6447242467a055fe75cc9cc69d401d67665cb10573b7695fdb1aa00b6d72b518a9e44cecb72a25b9a286d9289119eb3e794914512bba99fff430e7b013c7c2e5cb6343a0d8a50d3c9122a6ca3ea6464446b78a82c6c0f01547cb14509a8e9da2a6a5a2418285c8953bb70b6302857bffd2cbc9f119f1c2dabf057d299c2d75e8a3fae4ffdb55ce2500eaf1623bd643333af8e4a7d69e56fb3a8f2b04a15999a63d45765e0b43365afa36c9dd5a47daa1015f931858ac9776491a788685f6dc56f0b15f78fa4f604bbc450ea944d4e0b2ea86f226de873e98a7646b08abdcc27ffa900230f13c20879e9ab07de00654f616a16a5b10fc6836ff3a80227de8a9aac2caee63b0668ba289ebd5ac613dd5b6d31850562539b26103818f97cea307b8523c13e30f40b6fd6e164d86fba36b2da1966270783b9fd34af174985b0d588d1a87c3dc8944e48cb448a63dc08af89da42ddf569438a55befd3f2586f74f73c086a41240e505586c7f1fc7d6aafa5ee1d9bac0499470862c3f4d40082ee34fd71b8d43911c3d0778e9d8a1f3dec089ee9f58951482f4dd014703378c3767fec6ef62db03bc634a33bab42ce2893"}, {0x78, 0x17, 0x7ff, "9091ed83bbda7379f4eb5240f09b465071c95dd4ff01d769571219a0c15b6fea3f174e90fddb7455ad35af703ca282c876ba3f91348889c472dfc0a07b78aa8798c0989d2beb192b35c8651ebf24c314b1ccf791d9153da2d953cc1a362b4e63e89f"}], 0x2230, 0x4000000}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r2, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) sendmmsg$alg(r2, &(0x7f0000004ac0)=[{0x0, 0x0, &(0x7f0000001440)}], 0x1, 0x0) close(r2) close(r0) clock_settime(0x3, &(0x7f0000003780)) 22:11:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:44 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000), 0x0) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:44 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x600000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:44 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7, 0x40000) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000100)={0xff, 0x1}, 0x2) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000000000000190000800100000009000000f9ffffff08000000000000000000004000000000ff0100000300000001000000000000000000000001000000080000007f000000f379000000000000010000c00100000001000080a19c000006000000000000000000000008000000ff03000007000000ff7f0000000000000600000006000000ff030000e300000020000000000000000000004007000000ff030000d60200000800000000000000000000000100000006000000f4000000f7ffffff000000000400010000000700000008000000ee000000000000000b00000001000000010000000300000007000000000000000000"]) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 22:11:44 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x4, &(0x7f0000000040)='./file0/file0\x00', r2, &(0x7f0000000240)="0c81f909dab2ab27f673a1191133f7c14b35a8157c7102f3f9e0330998fed160c09c795ee7a7eee1cfeef490a5967b94f86dd3d1ee74deadb2031c0becfbacee1598f2069f0bb3db4087415fccd7c6a59077f0c5295424e0da35fde7840a189592e87f2318a92dfe6a6bd240d90d69d189f2415afa95b776a2c7ee4776") inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:11:44 executing program 4: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101401, 0x0) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000100)) [ 260.631158] netlink: 'syz-executor3': attribute type 3 has an invalid length. [ 260.669878] QAT: Invalid ioctl 22:11:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea1824", 0x20, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 260.676674] binder: 16658:16660 got reply transaction with no transaction stack [ 260.679804] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.684294] binder: 16658:16660 transaction failed 29201/-71, size 0-0 line 2759 [ 260.692937] QAT: Invalid ioctl [ 260.718422] QAT: Invalid ioctl 22:11:44 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000), 0x0) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) [ 260.742869] QAT: Invalid ioctl 22:11:44 executing program 0: io_setup(0x4, &(0x7f0000000000)=0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x88000, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x5, 0x10800) r5 = socket$vsock_dgram(0x28, 0x2, 0x0) r6 = dup(0xffffffffffffffff) io_submit(r0, 0x3, &(0x7f0000000400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000000140)="3a5de7ce15de476dc1ab74e382ed9bbd27fe086678d387066d26c7639d757d296c0231dc480f57ab89ee72d6575055e39b4aae9c42f4bb4c62e41b6fce1352e3c3fdd86acba204fdf77ca27afae901aa7ab8ca4d8d5de9e6aa7005fc935e70904a12e8a58bacf6e7d35593d205", 0x6d, 0xfffffffffffffffb, 0x0, 0x0, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x7, r3, &(0x7f00000002c0)="cc0954063314001b1bf20586028a33728e9200d5d237ee09c94c767904e533ae6cea30b93efb045ef66b74837f5d906a47889a7d1409ff9f0f39bcec6e7fad739cce7e7ae6875612b4d32961f24fa5577d9995ed5a5eab900e629548020e541e21c5ab5dc6", 0x65, 0x7ff, 0x0, 0x0, r4}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x9, r5, &(0x7f0000000380)="75c658", 0x3, 0x10000, 0x0, 0x0, r6}]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r10, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r9, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000001040)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000000c0)="260f01d12e0f01d10f00d666b8010000000f01d966b8000000000f23c00f21f8663503000c000f23f8653667673e260fc76d0bffe4f08324000f0f198e0f20c06635040000000f22c0", 0x49}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 22:11:44 executing program 4: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101401, 0x0) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000100)) 22:11:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea1824", 0x20, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 260.795307] binder: 16658:16673 got reply transaction with no transaction stack [ 260.802933] binder: 16658:16673 transaction failed 29201/-71, size 0-0 line 2759 [ 260.820293] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.830427] netlink: 'syz-executor3': attribute type 3 has an invalid length. 22:11:45 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0)={0x200}, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) r3 = socket$inet6(0xa, 0x805, 0x1) sendto$inet6(r3, &(0x7f0000000100)="196692522ec6ca22f17472a88b641629c1f45d214f25aca391bbbc3e24a07555e8", 0x4cb, 0x4000000, 0x0, 0xfffffde3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:45 executing program 5: rt_sigtimedwait(&(0x7f0000000140)={0x2}, &(0x7f0000000180), &(0x7f00000001c0), 0x8) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x400200, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000002c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="e1e09a399e8b7f3283e260dc67da9d499aa8a94e828b75b59d29b417d67b3af8a8bd8023a6818851eb8433f19dfda3f97e4c476f8ee3dfe2fdbac9389d39bd8c52a8861eaa8a63d456940cfd834005d2ef109c6930e2d9eefae408964d70b71d0152a20d7d75351f7881a84b3b9db72468349f442d9bac9d80f492751e46edeff70d5b4d69e535", 0x87, 0xec6f, &(0x7f0000000100)) perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0x4) 22:11:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x1c3d0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 260.918851] QAT: Invalid ioctl 22:11:45 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000", 0x10) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:45 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xf0}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 260.959761] QAT: Invalid ioctl [ 261.006834] *** Guest State *** [ 261.010311] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 261.019408] CR4: actual=0x000000000000207f, shadow=0x000000000000003f, gh_mask=ffffffffffffe871 [ 261.028352] CR3 = 0x0000000000000000 [ 261.032205] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 261.038899] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 261.045521] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 261.051580] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 261.057671] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 261.064419] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 261.072665] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 261.080941] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 261.089014] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 261.097166] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:11:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea1824", 0x20, 0xfffffffffffffffd, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 261.105336] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 261.113392] GDTR: limit=0x00000000, base=0x0000000000000000 [ 261.121464] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 261.129513] IDTR: limit=0x00000000, base=0x0000000000000000 [ 261.137586] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 261.145643] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 261.152184] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 261.159701] Interruptibility = 00000000 ActivityState = 00000000 [ 261.166100] *** Host State *** [ 261.169367] RIP = 0xffffffff811f3df4 RSP = 0xffff880199af7350 [ 261.175439] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 261.181924] FSBase=00007fbe87f25700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 261.189813] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 261.195787] CR0=0000000080050033 CR3=00000001943da000 CR4=00000000001426f0 22:11:45 executing program 4: r0 = open(&(0x7f00000000c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x5fd, 0x100) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x20, 0x6, 0x521e, 0x0, 0x1}, 0x14) r1 = open(&(0x7f0000000000)='.\x00', 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) stat(&(0x7f0000000340)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r2, r3, 0x400) mknodat(r1, &(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0, 0xffffffff) [ 261.202918] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380 [ 261.209675] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 261.215823] *** Control State *** [ 261.219460] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 261.226215] EntryControls=0000d1ff ExitControls=0023efff [ 261.231732] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 261.238741] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 261.245467] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 22:11:45 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x2b06000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 261.252155] reason=80000021 qualification=0000000000000000 [ 261.258626] IDTVectoring: info=00000000 errcode=00000000 [ 261.264159] TSC Offset = 0xffffff71b9197aba [ 261.268541] EPT pointer = 0x00000001bb1ff01e [ 261.278576] binder: 16703:16711 got reply transaction with no transaction stack [ 261.286237] binder: 16703:16711 transaction failed 29201/-71, size 0-0 line 2759 [ 261.302132] netlink: 'syz-executor3': attribute type 3 has an invalid length. 22:11:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0x20) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000040)) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RXATTRWALK(r0, &(0x7f0000000280)={0xf, 0x1f, 0x2, 0x71ec}, 0xf) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x9, 0x100) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) getdents(r1, &(0x7f0000000040)=""/124, 0x7c) 22:11:45 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000", 0x10) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:45 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 261.340650] binder: 16703:16716 got reply transaction with no transaction stack [ 261.348247] binder: 16703:16716 transaction failed 29201/-71, size 0-0 line 2759 22:11:45 executing program 4: r0 = socket$inet(0x2, 0xa, 0x8) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") recvfrom$inet(r0, &(0x7f0000000000)=""/103, 0x67, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f0000000080)=ANY=[@ANYBLOB="fde0ffffffffffffffffffff0894000100000000020004000000e5010000000000000040010000000000089078"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8907, &(0x7f0000000600)={'team_slave_1\x00'}) [ 261.402186] netlink: 'syz-executor3': attribute type 3 has an invalid length. [ 261.431483] *** Guest State *** [ 261.434997] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 261.443997] CR4: actual=0x000000000000207f, shadow=0x000000000000003f, gh_mask=ffffffffffffe871 [ 261.453092] CR3 = 0x0000000000000000 [ 261.456903] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 261.458343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.463471] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 261.463482] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 261.463502] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 261.488936] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 261.495729] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 261.503806] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 261.512394] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 261.520447] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 261.528523] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 261.536621] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 261.544705] GDTR: limit=0x00000000, base=0x0000000000000000 [ 261.552761] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 261.560819] IDTR: limit=0x00000000, base=0x0000000000000000 [ 261.568884] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 261.577090] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 261.583571] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 261.591150] Interruptibility = 00000000 ActivityState = 00000000 [ 261.597445] *** Host State *** [ 261.600726] RIP = 0xffffffff811f3df4 RSP = 0xffff88018d9f7350 [ 261.606782] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 261.613683] FSBase=00007fbe87ee2700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 261.621568] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 261.627677] CR0=0000000080050033 CR3=00000001943da000 CR4=00000000001426f0 [ 261.634772] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380 [ 261.641522] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 261.647737] *** Control State *** [ 261.651286] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 261.658100] EntryControls=0000d1ff ExitControls=0023efff [ 261.663638] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 261.670627] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 261.677372] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 261.684013] reason=80000021 qualification=0000000000000000 [ 261.690468] IDTVectoring: info=00000000 errcode=00000000 [ 261.695990] TSC Offset = 0xffffff71b9197aba [ 261.700405] EPT pointer = 0x00000001bb1ff01e [ 261.712901] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:45 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000", 0x10) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:45 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="b8faffffff0f23d00f21f835200000080f23f80f07f4260f6baf7a0b538b0f41b7ed3a0000f22993f1ffffffea430000008c00b9c20a00000f32c4e32d486a920066b870000f00d8", 0x48}], 0x1, 0x2, &(0x7f0000000180)=[@vmwrite={0x8, 0x0, 0xe670, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1000}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x8) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000240)=0x2, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socket$nl_xfrm(0x11, 0x3, 0x6) io_getevents(r1, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x0, 0x1c9c380}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") io_submit(r1, 0x200000000000039f, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140)}]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 22:11:45 executing program 5: r0 = getpid() pipe2(&(0x7f0000000140), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x0, 0x2010, r2, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r2, 0x20, 0x0, 0x8000) r3 = creat(&(0x7f0000000380)='./file0\x00', 0x0) dup2(r3, r2) 22:11:45 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x28a0010000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 261.820414] netlink: 'syz-executor3': attribute type 3 has an invalid length. [ 261.824535] binder: 16748:16752 got reply transaction with no transaction stack [ 261.835666] binder: 16748:16752 transaction failed 29201/-71, size 0-0 line 2759 22:11:45 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:46 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) pread64(r0, &(0x7f00000002c0), 0x0, 0x0) dup2(r0, r0) [ 261.892384] binder: 16748:16762 got reply transaction with no transaction stack [ 261.900203] binder: 16748:16762 transaction failed 29201/-71, size 0-0 line 2759 [ 261.928525] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 261.979470] netlink: 'syz-executor3': attribute type 3 has an invalid length. [ 262.017834] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8ec, 0x200) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000100)={0x3, 0x2}) r1 = socket$nl_generic(0xa, 0x3, 0x10) r2 = dup(r1) getsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x22, &(0x7f0000000000)={0x0, 0x20000}, 0x10) 22:11:46 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:46 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x4000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 262.129978] binder: 16778:16779 got reply transaction with no transaction stack [ 262.137794] binder: 16778:16779 transaction failed 29201/-71, size 0-0 line 2759 [ 262.224930] binder: 16778:16790 got reply transaction with no transaction stack [ 262.232548] binder: 16778:16790 transaction failed 29201/-71, size 0-0 line 2759 22:11:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000040), 0x0) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 22:11:46 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f0000001140)="ebd502f0373bf6d967ef9952ca13de827e1a539abfb930bfbc9b95df98b80970238858e6d68d98324ad9e73690ae3329389bbab15f5197d564fe01b07ba6b2a6af17402fd0cc6060c584bb310891c142f71046385021cf4025d793be49c5edfc859c6906eb7b1ab45735992025eed4ec715b649b82538a22fd7285e3e654d98721e0c3fb8634a06486521528f9a708235922b817684c8c7cd11220655f1f945af749a67f547a9c709741ff6c630dc939d8f38e8c080ad775f645ac9d54d398e169bc6d2673d3e6976f3abfb078748f566d8713b95dc2e1ff86f4a766810aea3c9e8700c1ea50788ed37a0b6ed0581e7840c708727973f1f9d7c65a19c2339b85486554ad463c1cb2e90419604793d1d8562b94f1fdcc392464a6ec4e372445b956e02d8dbcdb7843fbc28fea475c600e5340f163c375aeb199dc2b16fd5ad1259dab444515767b59c9c21f50d5284a43616b5565d046224901377d839cca7bccdd317b96c0cb1fabc05d90cfbd7702169270b5b24f9df760fa5263e927789632f6d8f251a9daa0cae68fed36c7d51f9a652d8ae9c0b88ff01e3b57bcc673459201b09de81ad5ec37a8cd8b500a1c83665c07b4dc3fb6b1349dcf3a820807d8ad710ea289db51bef885887a03d1121854cb265acc0cba82d3f39862c4046016e271296943bb990f6069be1f15a99ae9e17f0f2e0d3ef5e7da8f2833d89985ebd290767c3916d6b3a6d15557c9a9589b0eede83df61f2a681b5a427640c50823a12fbd4f4db439f5e60fa99a9d431a5c8b59cb8a16784ef5046ae845d8c4a4aea595d938bd6ffd7a3f64014a21ae75c75acdb449f2000a7421743aad9bf5f0283619635c8da1c61f89389b8948977a4dfae630cc3b4ff18bdb47553c2988c7e8259eea568b40e8d04239e289f3975ba2cfceb18951a340b004c9e83f68dd7a7bcfb1a65c5bb620185574d96d5f4d87b53ca247e9ee0ae915120e3c8cd515f7180802c50ea0585a6a096a36ef6070ddf34909d5a924dc6673bc6b0b6b6158ab9939348f21e000ad1f092609c15c6c0d836f042a41d18f4816e0728a247f343ef4e12b268e8288da667f1b8e9596e562bfc3c61f028543ed4caaeb7df3ab9d423a04ca5b0eb1c906c1d8561af2eeb5555e91294277ac0f96397bdbb60f1ca72e56fb13598c7566f0dcc87e75571530e31def6c9e4cb13060f75206be1a0d544afa10c021618f2f1dbc5e258e9bf42fc6c97f61ad545a59daeb843025e9c16ddc34a3da14bd8916c834879ed6408485e8d53c658f4d1901ef99691f64f9874d6980407b12f69ec81e9979c7e938149027bddd3b060c2da2d86a1a8df25d092ac853926e1ddea9ba2995d56f9f0b4a4d170dab78b8785e3d4fba655ccd2017d9070fea21fb2652fe7c315a4b584233367745ff66bf79e1988f9e3d447dc588d0b19f8420a2125ba67c7fbeaefeda2e9bb7a451e9e002ce39390e044e55119d9ebe1030d168a9ded601e6d2326581c5beb596052b24271b6b4bdab571b9def74ecb37cfbb928533461ff6a33afacbb9b69110d50a4167ca6b4dca6bf1b14ef09b1bb5ad65e8d76288e406c8a85d87c465f058e7f8fe1781ba983817a19bce61fc5268f83cb0fa09934fc1fa2dcbc22cdbc9688d6e642a35d70ccc9e6fe4af0429348d6b159d4cbd177b2efe6a6a86a7fc15c44df4c405f6a93d3f0eb474842d05b95ed6409794adf4c162a3b5163bf48477c33ac23b582e9b4505dc2bacc89311353dac95cf43b8460d92f347e6c0b8727bd6de9bab4dca93ae81fa428ac11fadb247f7a6c31b2f02b0e51217b1dd130f85ee41cc09901c45bb8f8efa3ad3f026b4c0a616f7805a28a443783b3eb6817a91081a067b8c85444abe52dd9dc7d97057eecb944d0427c88a5400bf33164b04d23b3cf9fc64157b5c00692d5e7a00f7ab723bfc98c4efa4d2cce6fa864734535bde7bcd686e1a50d48ef2459b082406a0f4224307afe1877c718e31948984b65be4913bb45d0aa0cdcb9cb13de76a5a31c47be6fada9126b3d44a14c7fae0e74623fa09614f7d1d0ece34bc8578daf1f625846e55543513669b649d5068b3f4ce39bf8395f1ed87df4692c89ed8a8d1b81b9d4f80c46ff6cfcda4b36b304e7ce771a23be3e944a7e077b258406d0e21f2bb51f0924a15e82d2849e37b9e52476b8f82fdb2f1bd076dca720574bb08dc63185d5fabb34a46da91fe2e06842007345f395e8e56beaae2099f465b558f898a7c2a152dce8b0275a509aa20d1fd51b657558a0d2f9db766c8997e84bbe6fca3565bde0c580a92fb1bae67088d16b89bfc5c1bfe66fd29b3d61b3c0b23e5f3638bb0e47646451c37a7c158c760c6d99da520476a231a2c6232e348108bd84fee2b9f24c1e7a429977005977df79efb6a07cebd4ec545dff11fc6fb62b796fb9df489e2e0c4d86224d67691444addca4ade1e8286d60fcd4c7e3d006cb165065cc775707e9f853c49da745d8bcab471394689027ab69c7cc36e3d88626f5a820952874088a000c0d6dfe21cdee86923e540af16f689f352283cddbd67a9a40ca541d01a925fe57f69118089406940809f9edb98b8d94e904cb6bcabf699955645e0f509a2479dcc3dd651850613c80b5f6818d563f7613a8470e7936c3f7fb098adfe19a53d324d9d79df4b5c98cb6bebe523646f299ec6218a16e83bf8b3ca784213539c598fa16c2c1159f28d9e77fb7e912b70fc8a90da89845e1fa0d11ec8683a6d4c92eca58162f1165e5b8faa8b2a259b89d6630029009e64117dee496ea60367813d6917acd8194c43970bf1da19c1f151fb14adf0171b119a68517dbf6c212631675e8c3fdbb0d18af067c0eaee022acd883f5308e58bb245f525e636b52d84dc0bdd50500d8204824257a0a6035be99006be0e8e0a9b6894b9da60496aaf056b2c9c59ee8dd92d261b9d724564c5650c7fe7c4c5fcda1e62e83af99b3ced5b5d28d01e5df06927dc45157cc8e81cd9f2e6ef7e43ef2e92f21535bbc6b159aa1f79df8f62cd536332bf87ea401babb00a62449f18107f530664742f844845ce18b96f795820b81c6d5b00e72ab2a1a2aa5b0471ab0b726daf811629f42693bef9fbfe0035e433a4301cf288761ef2489de94a536d1ae176d244583301e60831f494695e1cd868a6f127358a46cac202ce7f661deec7142470298a6f7d8bfd383796184b54b16fe3726042ef23e0b48c494c94c0be2223c05c624055ec8a13c31171b1d6c40e7c08a9e3f090ed04737b4922eace6f1609e5bc193ef59430e63cad6968e3e4059cdfb27284243e67ec35dc7af9e9d72b8d46de8b21fa39bbd5440592bc309f3a5a65e9165a743f253e6812f9a4938c9b78cc9736c71fcf4f28a57af2a7c55d250b0c7b5c391afb76c8503313cb07cc408bbb0cd6cb2c2c11363d10f0e2aeb19899c0bc47e413cd5fe0fea8664abb3014cbaeb502b145c720bb44e947274148fd907980778c76910cfbf7b65b3583711d77a0e4afcd8a3674389885cf37e7cc4c653d0e9db04319254b775b925a8ae832c0a39ea5f2aecd591e5f5c5d21d249ff2007b10ea186ed0eb76d34c226f2d4d9108e83437f0b575e4d001f35f21523af39811cec0dcb8011269c9a7472dbd762728d85982d5f36f16cf5b8b33996a788634d7cc70a180e56213837c21659fa0016364804f04391608d1e9d3b0638c488fd1736464c0be93ce5a2cc44e5c4162aec9f5a0ffc902a6ca91b74ef49f5a10e9ffb0eefd66e232a39b9ab390036cff88ea0c655bd8284ab7c337cd06dba94a56db1d6aa491191f27742bdf8b5a7aa8bb7fba8f7408050bbbb3e267884a8ab9a3ba7f4cb7f792de4f9ad2bd8c56b30768f838eb6335328ebb61b7095eb9851c480aa5f6c990ea6e22543fbca6e4ff74ca06ca182cc348b5ef46331ca0bb2aaa04e2dff9f8c1d606ffcc8ba60cfcddebb6dd089c83795ac81cdb06933c25cd6087e41ab75cbf52a4aa6eaea69895f3004260bc5741f0fb289431a3003d38eb3400964b5bb22732af9f43a751fd0285ebbadd376063687a40c8f59ce4f0e6b0b69e388978bf3142346ecd76b31fcc45be748597a769c3995fd00f7147e1ba9d2923295834b9fea959ee8f33d5ebeb90cabf35b144ce46b9e0a66e722141ce53b6cd841124a7afbe971e058ae76b945e622ec4c3df8a483cc66367cd47a2954e104f0a111036c80a58e24cd37cb0c11432466d3debcea4ec9568974a0d29e22913c830ae0c8d02fcaf03bea2e3c9db7d8dc808c802b98c61fdc203533dd7820e8910c5db486969a946c5c9cca7b863bc7764f0430b0e4543d1cb3e60fe1a117ca6f35ee47153ec9a1a878830c9fb733794ea963f07800016a62e32cb9215155ac964134a876b83834fd019ead8b8dbbc174e3a809a86af0cd4858509896f219277ec25fe1178c23965b7ac31bf542e3451cf767cc17974b7271460b0d5d471f749469654688421c4abb999a6b875af30c4520b82db0aad6db0193a1a677f565416ff870221f65f3c2c0429ea9396d17e652a32145038d0b5b77907e94b4af7ecde33a22928a038ebfb20903c0b93e3f7ecda44bb00e9397ed4faa98bd81c0ad1fe31f74c2b42a0d79020f34ada1086e1b1fdc49609d4a55da4624b8bb9bf6325d458e5737ca3c2ab8961fdd2ee88523aba08db555f506e6564fab82144f2432d5031e43cfaf2a113937cadebfd54cd28e59f2c3a47b6966b458c3e819f83708f8f9f809cf8a86a7e38fa5def6287149a24d02e3b775aa449728613269b83e385c0fa2e24796c5cb5fca1112b06864d0d5954e4b2719ad39a4640ce3f7de5119ecc35da2dd980dc195185c317596bd77249a9f2fda6697f4a58ed6ca9e3f150d3315aad6735024d5cfd03c08c0779f5321ef426f7758a709ff511a11eeb8a57881cada3bac3917b152484efbaf90790a66153db4992fc3998bbfa91e82dc6311d1b16328964ff82935d542e8f67c3acd58133e34c0a620c917e0e93248ca8644daf360ef93da9934c7ba9fd22e74e0dd544992cc4fdc4d0991ee12f357573d67289c419fb8c175ab757a1de24e206067573cd6fcffb9fef367c2ac6ab15df7dd0f1264d38c74aa3457f043f225b6af0fe4798679356850a68404c5d9bc6f4859daaeaab76a4d103fb1f3c52baef0f405aeab13d2932beb03e712b021f452802e3f0a83966165e24fe11ce81883ae12ca6895264d1bdd99772478451652c6ec690d66cf48a5929fccf1a62d83552cfad78216bdb47edd40f21d2820d59fb390c7d2e34e2487047c3e647a153606309cea947931a7524484892398545b59f7b0ee9ecf7b833ddb4c0e55255a15a5dccf6f57f26991d94125d42ac976e95fece17c3c51846153269ae28a5a7e936cb6e26d967d15a5f221e6f5ab58393386def3adc08e6c2556536a0cbc9bf2d2ad9696bc34cde7f1ad4c5863fb1f12db640ece7f4a77b099b12ac777f677f6590bb9cb12fceb5bc471d6ca847a7ba9fe8e1ce90c5573d1bd437292093ca3e1f4c24193f4fa6863ffac7033668f5c76d97ad223ca09cdefe382bd3c243bb1f170f640250e8832ce2712cbcc97a7a4050110bab70bc4619ff6d8a2857d07ca573c3fc3108eb6104a86be50d736f552d9963c946456e624f9044a43a9a0bc2f3ad13d0483655c212f753e343d20a2705e0c15584a88adf21c0e3f5f051aa27fc9c9f1166ed4893efe55e9d5d0f29d2ceff854bbea028501c8dde1fe16f5a467d13760ff40026c7fc0fbbafb2f9a33a46b") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:11:46 executing program 0: mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000962) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') r2 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000000}) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") preadv(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/246, 0xf6}], 0x1, 0x0) 22:11:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:46 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:46 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x2b06}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:46 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) 22:11:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:46 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x2000000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:46 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:46 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x100000000, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') lseek(r1, 0x0, 0x3) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x1000200000) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) 22:11:46 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00), 0x0, 0x0, &(0x7f0000004fc0)) 22:11:46 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = dup2(r0, r1) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb957) r3 = socket$inet_dccp(0x2, 0x6, 0x0) fremovexattr(r3, &(0x7f0000000040)=@known='system.advise\x00') ioctl$TIOCNOTTY(r2, 0x5422) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) 22:11:46 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) [ 262.722784] binder: 16834:16838 got reply transaction with no transaction stack [ 262.730547] binder: 16834:16838 transaction failed 29201/-71, size 0-0 line 2759 [ 262.747697] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:46 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000340)="025cc80700145f8f764070") unshare(0x8000401) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000000)) [ 262.797765] binder: 16834:16845 got reply transaction with no transaction stack [ 262.805654] binder: 16834:16845 transaction failed 29201/-71, size 0-0 line 2759 22:11:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x8010) 22:11:47 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) [ 262.898686] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00), 0x0, 0x0, &(0x7f0000004fc0)) 22:11:47 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x300000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:47 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x2, 0x4, 0x1, 0xa, 0x1}, 0x27d) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 22:11:47 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = socket(0x1e, 0x1, 0x0) getsockopt(r4, 0x800000010f, 0x20080000000083, &(0x7f00004ad000), &(0x7f0000a3c000)=0xfffffdf0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x81, 0x401, 0x2, 0xffffffff]}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x3, 0x3) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r6, 0x8, 0x9, 0x9, 0x2, 0x1, 0x5, 0x0, {r7, @in={{0x2, 0x4e23, @loopback}}, 0xfcb, 0xffffffffffffff9b, 0x40, 0x8000, 0x3}}, &(0x7f0000000340)=0xb0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x3, @ipv4={[], [], @multicast2}, 0x40d}, 0x1c) sendmmsg(r5, &(0x7f00000002c0), 0x4000000000000cd, 0x0) 22:11:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={0x7}, &(0x7f0000000080), &(0x7f0000000140)={0x0, 0x1c9c380}, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)}]) 22:11:47 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(&(0x7f0000000100)='\x00', 0x2) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000200)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_int(r2, 0x0, 0x3f, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000003c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:11:47 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf", 0x1e) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00), 0x0, 0x0, &(0x7f0000004fc0)) 22:11:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x8, &(0x7f0000000100)=0x0) socket$inet_sctp(0x2, 0x5, 0x84) io_getevents(r2, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x703000}]) [ 263.150470] binder: 16883:16884 got reply transaction with no transaction stack [ 263.158181] binder: 16883:16884 transaction failed 29201/-71, size 0-0 line 2759 [ 263.192347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.240847] binder: 16883:16899 got reply transaction with no transaction stack [ 263.248523] binder: 16883:16899 transaction failed 29201/-71, size 0-0 line 2759 22:11:47 executing program 5: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) flistxattr(r0, &(0x7f0000000100)=""/244, 0xf4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000e80)={&(0x7f0000000040), 0xc, &(0x7f0000000e40)={&(0x7f0000000080)={0x28, r2, 0x30f, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x28}}, 0x0) r3 = accept(r1, &(0x7f0000000200)=@nfc_llcp, &(0x7f0000000280)=0x80) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x9, @empty, 0x10001}, {0xa, 0x4e23, 0x7, @remote, 0x8}, 0xfffffffffffffffc, [0x1, 0x5, 0x10000, 0x6, 0x86d, 0x6, 0x0, 0x8c]}, 0x5c) [ 263.281772] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:47 executing program 4: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000340), 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000440), &(0x7f0000000480)="01", 0x1, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000580)="0238f514e29022ff5fa66351c5d268b4a5e225c45a65836643564f0e3c355d2af99d7c9a712cf4b73f07000000651a84375b6452a23ea586360641700358c85e1c5254f95cc73fe8fed98d56222b5607471d789ed58c15fe9382d8945779eff1f76e000000000000000000000000000400247616e8dafcaa2b9067241bb5f10c21a48800a40fa007d53313b849f8d6060c0c8ca06fc87cd32de8b530f5b4045f481b4f21a373e8cc41bca939863d5cab4eb9cb3fa07b3079d15e3ba011934fb7", 0xc0, r1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001e80)={&(0x7f0000001e40)='./file0\x00'}, 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x0, 0xc00) syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001d40)}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002000)={{{@in6=@mcast2, @in6=@dev}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6}}, &(0x7f0000002100)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002280)={@loopback}, &(0x7f00000022c0)=0x14) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000000300), 0x2, &(0x7f0000002c40)={&(0x7f00000032c0)=ANY=[@ANYRES32], 0x1}}, 0x0) r5 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100), &(0x7f0000000140)="cc", 0x1, r1) keyctl$join(0x1, &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x3}) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r2, r3, r5}, &(0x7f0000001a00)=""/157, 0x9d, &(0x7f0000000280)={&(0x7f0000001ac0)={'tgr128\x00'}, &(0x7f00000003c0)}) 22:11:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0), 0x0, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:47 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf", 0x1e) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:47 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:47 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x3a12feff00000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:47 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x4b, 0x200000004000, 0xfffffffffffffe01, 0xfffffffffffffff9, 0x2}) perf_event_open(&(0x7f0000000200)={0x2, 0x33, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x100000, 0x0, 0xc6e4, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, r0, 0x0) setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x6d3, 0x20001000, 0x1000, 0x89, 0x32, 0x200, 0xffff, 0x5, 0x5, 0x1}, 0x10) 22:11:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200000000) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x47f]}) 22:11:47 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf", 0x1e) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:47 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001880)={0x0, 0x357}, &(0x7f0000001900)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x20000000040002}, 0xffffffffffffff73) r2 = socket(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001840)={r1, 0x80}, 0x8) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000001800)=&(0x7f00000017c0)) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$inet6(0xa, 0x200000000008, 0x3fd) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) process_vm_writev(r6, &(0x7f0000000240)=[{&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000400)=""/216, 0xd8}], 0x3, &(0x7f0000000280)=[{&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/104, 0x68}], 0x3, 0x0) r7 = getpgid(r6) getpriority(0x3, r7) ioctl(r5, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001680)) getsockopt$inet6_int(r3, 0x29, 0xd0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r9) connect$nfc_llcp(r2, &(0x7f0000001740)={0x27, 0x1, 0x0, 0x5, 0x88, 0x31, "2e6d279d062006508e73cfe8b490aae2c05b6d1d39abcb7833db9566ef78755ed8c34f5907709c3f205c343bc3ba21adce04b65e64e77d3e772cac471adc3b", 0x10000000039}, 0x6) r10 = socket(0x10, 0x2, 0x0) socket$inet(0x2, 0x80000, 0x61) signalfd4(r0, &(0x7f0000001640)={0x1f}, 0x8, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000016c0)={0xfffffffffffffff7, 0x100, 0x7, 0x2, 0xfffffffffffffffe, 0x8, 0x3, 0x3, r1}, &(0x7f0000001700)=0x20) ptrace$pokeuser(0x6, r6, 0x34d1, 0x3) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, &(0x7f0000000000)) setresuid(r8, r11, r11) shmget$private(0x0, 0x4000, 0x1808, &(0x7f0000ffb000/0x4000)=nil) setgid(r9) 22:11:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0), 0x0, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 263.529688] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.573315] binder: 16931:16932 got reply transaction with no transaction stack [ 263.580902] binder: 16931:16932 transaction failed 29201/-71, size 0-0 line 2759 22:11:47 executing program 0: r0 = dup(0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x40, 0x4, 0x2, 0x1f, 0x0, 0x5, 0x9a5, 0x7, 0x0}, &(0x7f00000002c0)=0x20) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r1, 0xb6, 0xffffffff, 0xff}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r1, 0x1}, &(0x7f0000000340)=0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r2, 0x29, 0x200000038, 0x0, 0xf000) 22:11:47 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0), 0x0, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 263.669373] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.685258] binder: 16931:16949 got reply transaction with no transaction stack [ 263.692861] binder: 16931:16949 transaction failed 29201/-71, size 0-0 line 2759 22:11:47 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x2, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x4, 0x1ff, 0x0, 0x80000000006, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x572]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="e789a1c298caafae7ae46f"], 0x4) ioctl$KVM_RUN(r1, 0xae80, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000240)='/dev/kvm\x00', r0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000497bd7000ffdbdf25090000000800050001000080"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20040005) 22:11:47 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x900000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="f3000000002800fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x277, 0x0, 0x40000106]}) socket$inet6_tcp(0xa, 0x1, 0x0) [ 263.823151] nla_parse: 4 callbacks suppressed [ 263.823162] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 22:11:47 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000140)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x431, &(0x7f0000000180)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x71, &(0x7f0000000300), &(0x7f0000000000)=""/113}, 0x48) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) 22:11:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x13cc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:47 executing program 1 (fault-call:5 fault-nth:0): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:48 executing program 5: prctl$getname(0x10, &(0x7f00000000c0)=""/13) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, &(0x7f0000000300)=0x14) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)=0x1f000) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000080)={0x7, 0x7f}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x200000, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000140)={0x40000, &(0x7f00000000c0)}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 22:11:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:48 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080), 0x0) [ 264.006187] binder: 16983:16984 got reply transaction with no transaction stack [ 264.013962] binder: 16983:16984 transaction failed 29201/-71, size 0-0 line 2759 [ 264.036351] binder: 16983:16990 got reply transaction with no transaction stack [ 264.038007] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 264.044090] binder: 16983:16990 transaction failed 29201/-71, size 0-0 line 2759 [ 264.077513] QAT: Invalid ioctl 22:11:48 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xeef000)=nil, 0xeef000, 0x0, 0x100000000032, 0xffffffffffffffff, 0x0) futex(&(0x7f0000006c80), 0x400000085, 0x0, &(0x7f0000006c40)={0x77359400}, &(0x7f0000006d40), 0x90020000) r1 = socket$inet(0x2, 0x0, 0x1) r2 = getpgrp(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000100)=r2) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000240)) r4 = dup(r0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) 22:11:48 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) pread64(r1, &(0x7f00000000c0)=""/158, 0x9e, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x80, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000300)) [ 264.102759] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 264.111975] QAT: Invalid ioctl 22:11:48 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080), 0x0) 22:11:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)={[{@noacl='noacl'}]}) 22:11:48 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x6be, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={r2, r3, 0x6, 0x2}, 0x10) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) mount(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000680)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f00000002c0)) unshare(0x8020000) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r4, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) mount(&(0x7f0000000700)='./control\x00', &(0x7f0000000100)='./file1\x00', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0xfffffffffffffffd}) r5 = creat(&(0x7f0000000040)='./control/file1\x00', 0x0) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fgetxattr(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="62747266732e6367726f757065743075731f42090047625c5e328471367657152613d4d28c2fe8795ca799cd21f01402aca782eca8ab7b873996c00b12936ef93b8747fb988c0f97dfa6847573c3411fedb76b544f1463e98661b97f4cff97ba7b6cd8ef1bfdb90295789d307e"], &(0x7f0000000340)=""/197, 0xc5) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x42, @tick=0x7269, 0x5, {0x6, 0x7}, 0x10001, 0x3, 0x3}) mkdir(&(0x7f0000000780)='./control/file1\x00', 0xfffdfffffffffffe) fchmod(r4, 0x20) ioctl$RTC_PIE_OFF(r3, 0x7006) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./control\x00') mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000500)=""/184, &(0x7f00000005c0)=0xb8) setsockopt$inet_buf(r5, 0x0, 0x26, &(0x7f00000004c0)="485004dbff7d377f61e695cb9d5c9aa882d4649ecb3d6540e2df3c2685adfb2d4ac077aadb87", 0x26) close(r1) [ 264.238771] futex_wake_op: syz-executor0 tries to shift op by 32; fix this program [ 264.264376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 264.293614] binder: 17011:17013 got reply transaction with no transaction stack [ 264.301267] binder: 17011:17013 transaction failed 29201/-71, size 0-0 line 2759 [ 264.317399] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 264.386911] attempt to access beyond end of device [ 264.391995] loop5: rw=12288, want=8200, limit=20 [ 264.404523] futex_wake_op: syz-executor0 tries to shift op by 32; fix this program [ 264.427611] attempt to access beyond end of device 22:11:48 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x500000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:48 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080), 0x0) 22:11:48 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x1, 0x10000) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000280)=0x2, &(0x7f00000002c0)=0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x12712, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r3, 0xae9a) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000300), &(0x7f0000000340)=0x8) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x400, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000100)={0xa6, 0x29, 0x2, {0x4, [{{0x1, 0x1, 0x1}, 0x3ff, 0x8, 0x7, './file0'}, {{0x40, 0x4, 0x3}, 0x3ff, 0x1, 0x7, './file0'}, {{0x44, 0x4, 0x1}, 0x3, 0x4, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x3, 0x0, 0x7, './file0'}, {{0x8, 0x0, 0x1}, 0x2, 0x3, 0x7, './file0'}]}}, 0xa6) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 264.432697] loop5: rw=12288, want=12296, limit=20 22:11:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:48 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000010c0)="617474722f63757272656e7400c4f418dbb2a1185bdb8db1917578b2da290cd7a5c54565a4dc721a268b028c87454f8c9b6803e42a109faf985ca815fb802756a46d8643d9c4cde40009be62558a6a7f7cff1c9ef16985c812186406629cac1f09188e20cfdb9e713c0c73eb89dd1292b66ad5d282a066f0b75d6edcb143948ddf54ace5") getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000000)=""/206, &(0x7f0000000100)=0xce) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 264.467384] binder: 17011:17037 got reply transaction with no transaction stack [ 264.474976] binder: 17011:17037 transaction failed 29201/-71, size 0-0 line 2759 [ 264.501266] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 264.545666] IPVS: ftp: loaded support on port[0] = 21 [ 264.556736] attempt to access beyond end of device [ 264.561841] loop5: rw=12288, want=8200, limit=20 [ 264.567601] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:48 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000", 0x10) [ 264.592624] attempt to access beyond end of device [ 264.597729] loop5: rw=12288, want=12296, limit=20 22:11:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = getpgrp(0x0) setpriority(0x1, r1, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x10001, 0x280400) [ 264.713496] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 264.732792] binder: 17061:17065 got reply transaction with no transaction stack [ 264.740467] binder: 17061:17065 transaction failed 29201/-71, size 0-0 line 2759 22:11:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x210000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x9, "04b978fb2887b9a583"}, &(0x7f00000000c0)=0x11) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x3, 0x7ff, 0x800, 0x714f, 0x9}, &(0x7f0000000200)=0x14) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") unshare(0x2000400) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') setns(r3, 0x0) [ 264.764604] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:48 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f00000000c0)={0x20, 0xc6db}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:48 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000", 0x10) [ 264.809800] binder: 17061:17075 got reply transaction with no transaction stack [ 264.817353] binder: 17061:17075 transaction failed 29201/-71, size 0-0 line 2759 22:11:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = open(&(0x7f0000000940)='./file1\x00', 0x3fd, 0x20000108) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'nr0\x00', 0x3}, 0x18) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x20}, @loopback, @broadcast}, 0xc) mount(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f0000000840)='overlay\x00', 0x0, &(0x7f00000001c0)="2c1005fbf46be1a1e72a4454ee5108635bdec935bd") syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="54770cc5180df623b9db6aaccfa7e126efca41d45567453da1e957f616095a06cf1d8570b53c04acbeca5d8d876d9d564a509abf1d84d84a3ea0cd7e7324f2b42010ea840ad20c1b14b3c127d15b7b52b6f00f2135ac94e5c553f64e6b86db7196633290c23616007c23f7cb272f5eaf84988a80b260415259512b2f939547ffc30623e52f50107546aaacb456cb1148be55d34f1f52d9ac6ac523cde1234d1475b3e72673d13b19d46572030b3f4a0abc4270dff61c9efd", 0xb8, 0x7fffffff}, {&(0x7f0000000380)="958416d54ebd98bdefd18240fb2f4ea0f03ad0260cb799d427b417aa733013ec897ceded9cfd4d7d2bec95e89e561c6a6f47c4c74d58188ae80befd6faf4bfa9f824bdce795e44706b", 0x49, 0x101}, {&(0x7f0000000400)="49fbdb99007131d3eef2d89305c05fbfab317cd01e818592cc40943853600c3efb7c46b193197f29f1f1a8c68b3c5dc3e5ad8de6a05b7b65029d2191d6f675841216", 0x42, 0x3}, {&(0x7f0000000480)="51c8546f933d4b44bf369b2123801d6aedb02754cb94e2bd60b9a724f263c94c8c920328be52ee2599ad1f3e38ec98a0efc370ef1c1ccf08ea9bc3c2acb8be04bc01276e0c97df918afb731b4809ae077e35feed68d014096cd2bf79e597278a4cb9be0d5f", 0x65, 0x4}, {&(0x7f0000000500)="fad09b8358ad2ba66fc8c27774db924f44d088ef2be52124327f04d7319d50e005cdda20242b1f2750d61bd32c415131cd0e1d94c0de0682ed203df319740c25107727eee4db91412c73272e9df87eb28f7e11605412564227a16d5ecd51a58f1b9b42a85f0dd96ace9361694b77e182ae7f9ae49a9d02b53363b5512d3a88e3dbc2981f8015c61b259caf8336dcc507102816788c7fc83118bb8f4aec91d72f726e901876cffe98fc50ba2d1585948b0267612106c1e4c731afd2640043d06fe4299f2194a91a1a71c6149d3ebf58caa31782", 0xd3, 0x80000000}, {&(0x7f0000000600)="3ddff26fa596cfc8cc72c6e3d283e95f4ecfa0ab3120af2ece01fdcca085c9da66773cfd94f690e6134b8117e1ee6b0fc4d8e83067333b23f5d484dcbe3cb7c8857e98c0c29f5546ce99d89a78ef44c7c32c05ec7033de7944e648f9004a9eea90871468c5030828f2f933e112c2372bf9368a530341af749fb723db8f7390bdbdb2b4cecc6f273b0131d753527175425e999d78b246b46f695c77b84d9be180ebe639647d80fbfdc6d13085a10b50cd2598f201d63bf34d812b6fecc00fe546a7a7f4aa3f65549982f52a8995e2b687", 0xd0, 0xb07}, {&(0x7f0000000700)="0768a8919dbdaf79d8470264aa84ecf3ee47561c1a92bb105f7c898203fda8c8138551e1a5ad24d782ec4d3f6aff92e82ed68fff0c8a57554ff658e712f56a2d1e3a1b5365c035a30d053bcd54a0cc98bcb225206c1aac98c731e42187595a33a0dd853f", 0x64, 0x2}], 0x802, &(0x7f0000000240)=ANY=[@ANYBLOB="6772f49b662f4e3f8417756f74612c71756f74612c00"]) [ 264.924207] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 265.010722] overlayfs: unrecognized mount option "ûôká¡ç*DTîQc[ÞÉ5½" or missing value [ 265.016828] IPVS: ftp: loaded support on port[0] = 21 [ 265.041475] binder: 17093:17098 got reply transaction with no transaction stack [ 265.049085] binder: 17093:17098 transaction failed 29201/-71, size 0-0 line 2759 22:11:49 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x5000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:49 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000002f40)={&(0x7f0000000100), 0xc, &(0x7f0000002f00)={&(0x7f0000002e40)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_AD_LACP_RATE={0x8}]}}}]}, 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, @in6={0xa, 0x4e23, 0x1, @empty, 0x8}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x6, @loopback, 0x180000000000}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0xfffffffffffffff9, @dev={0xfe, 0x80, [], 0x11}, 0x3}, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, [], 0xe}, 0x9}, @in={0x2, 0x4e20, @remote}], 0xb0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000140)={0x100000001, 0x3, 0x40, 0x5, 0x80000001, 0x3, 0x4}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@broadcast, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) accept$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000480)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv6_delroute={0x40, 0x19, 0xa04, 0x70bd26, 0x25dfdbfd, {0xa, 0x80, 0x90, 0x401, 0xff, 0x2, 0xff, 0xf, 0x200}, [@RTA_UID={0x8, 0x19, r2}, @RTA_IIF={0x8, 0x1, r3}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x6, 0x700000, r4}}, @RTA_PREF={0x8, 0x14, 0x7fffffff}]}, 0x40}}, 0x80) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={0x80000000, {0x2, 0x4e20}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e21, @multicast2}, 0x20, 0x4a6, 0x8, 0x0, 0x5, &(0x7f0000000580), 0x1, 0x7, 0x9}) 22:11:49 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x6be, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={r2, r3, 0x6, 0x2}, 0x10) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) mount(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000680)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f00000002c0)) unshare(0x8020000) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r4, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) mount(&(0x7f0000000700)='./control\x00', &(0x7f0000000100)='./file1\x00', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0xfffffffffffffffd}) r5 = creat(&(0x7f0000000040)='./control/file1\x00', 0x0) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fgetxattr(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="62747266732e6367726f757065743075731f42090047625c5e328471367657152613d4d28c2fe8795ca799cd21f01402aca782eca8ab7b873996c00b12936ef93b8747fb988c0f97dfa6847573c3411fedb76b544f1463e98661b97f4cff97ba7b6cd8ef1bfdb90295789d307e"], &(0x7f0000000340)=""/197, 0xc5) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x42, @tick=0x7269, 0x5, {0x6, 0x7}, 0x10001, 0x3, 0x3}) mkdir(&(0x7f0000000780)='./control/file1\x00', 0xfffdfffffffffffe) fchmod(r4, 0x20) ioctl$RTC_PIE_OFF(r3, 0x7006) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./control\x00') mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000500)=""/184, &(0x7f00000005c0)=0xb8) setsockopt$inet_buf(r5, 0x0, 0x26, &(0x7f00000004c0)="485004dbff7d377f61e695cb9d5c9aa882d4649ecb3d6540e2df3c2685adfb2d4ac077aadb87", 0x26) close(r1) [ 265.082569] jfs: Unrecognized mount option "grô›f/N?„uota" or missing value 22:11:49 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000", 0x10) 22:11:49 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 265.164754] overlayfs: unrecognized mount option "ûôká¡ç*DTîQc[ÞÉ5½" or missing value [ 265.181802] binder: 17093:17111 got reply transaction with no transaction stack [ 265.189523] binder: 17093:17111 transaction failed 29201/-71, size 0-0 line 2759 22:11:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 265.234931] validate_nla: 10 callbacks suppressed [ 265.234941] netlink: 'syz-executor5': attribute type 21 has an invalid length. 22:11:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x10000, &(0x7f0000000080)=0x2) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000200)={0xa, &(0x7f00000000c0)=[{}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}]}) io_setup(0xa16, &(0x7f0000000240)=0x0) io_cancel(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x5, r0, &(0x7f0000000280)="77880b728cff71e0d37625ff27fbf0b9c9b0e445688791f1fc8a80d0e3e94ae85f64459b1d29ddd9a0777d54305ab447f35d6881781f67f608", 0x39, 0x3, 0x0, 0x0, r0}, &(0x7f0000000300)) r2 = shmget$private(0x0, 0x2000, 0x82, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000340)=""/193) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000440)) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000480)) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000500)=0x80000000, &(0x7f0000000540)=0x4) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000640)=@buf={0xab, &(0x7f0000000580)="9666c3dec0f253372486116e6d82f2e3d4f3f9fa5a99b7e60a8e7e8ebdccb043812a30faeeca7192ae7a345694e05a80c85072d952918af7d3075228a0070220ba87ca5907a368e3c6b03f80cbeac99939797ae75ab05cf965bbdc8e7de8a70e473cc094fd6e3ab59089f186ea75aaed427a71eda859c2c2019956384c24a9f1f5c6986ef31661f877e6c5e79edd267aaeaef19bebbd3c7bdce9762a2e6e58a6ea0d34553749ace20b3ab7"}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000680)='$}eth0@)lo\\)#lovmnet1)\x00') r3 = semget(0x2, 0x1, 0x282) semctl$IPC_RMID(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000006c0)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x1e}, 0x47}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x200}, @in6={0xa, 0x4e21, 0x40, @ipv4={[], [], @loopback}, 0x77}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0xd}, 0x3}, @in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x11}, 0x7}], 0xac) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000780)=0x5) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000007c0), 0x4) socket$inet6(0xa, 0x3, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000800)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'veth1_to_team\x00', r4}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000980)=0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000009c0)={0x9, 0x7fff, 0xffff, 0x0, 0x6, 0x10000, 0x99f, 0x9, 0x69a1, 0x42e6}) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000a00)=0x8, 0x4) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/mixer\x00', 0x103102, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000001e40)={r0, 0x3f, 0x3, "3cb6e49c25d1c3cfdc4073e9c6b85fc5730afbe2771c2885c51439eee7143feb74d5299fde05ab37088dec6991f41f756443cdebffe3fedb606c4913ac430ec17977c59237fce035429498a67bc94d21d0ffd41bb2516d8cc0dd37410cf10cfa3c464eb5805892c83de923882b8d611a1ea3256ca2248a757a5b0984deb7a588cc8c656153331f158b5a4751e7872422f25b2cb69602c302deeeadd49e2fd0526141928065fcd7c750e350763da2d895127c0ae7090d0519b88af705dc8ac5351f0fac708a2450e30ab846321bfba0a45b8a2f2dd0a6ed55c77260d0ecd6e3d1e6227751ac5f47e1"}) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000001f40)={'filter\x00'}, &(0x7f0000001fc0)=0x44) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000002000)=""/191) write$P9_RFSYNC(r0, &(0x7f00000020c0)={0x7, 0x33, 0x1}, 0x7) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000002100)=[0x2000000000]) 22:11:49 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffffd}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 265.279158] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 22:11:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 265.341480] IPVS: ftp: loaded support on port[0] = 21 [ 265.346374] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) 22:11:49 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300", 0x18) 22:11:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 265.413994] netlink: 'syz-executor5': attribute type 21 has an invalid length. [ 265.438899] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 265.469499] binder: 17141:17142 got reply transaction with no transaction stack [ 265.477199] binder: 17141:17142 transaction failed 29201/-71, size 0-0 line 2759 22:11:49 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1f) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/238}, 0xf6, 0x0, 0x0) 22:11:49 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x60}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:49 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', r4}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:49 executing program 0: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="1a00000000000000faffffff03000000010400000000000009000000000000000000000008000000"]}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) [ 265.530131] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 22:11:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 265.619350] binder: 17141:17157 got reply transaction with no transaction stack [ 265.626937] binder: 17141:17157 transaction failed 29201/-71, size 0-0 line 2759 22:11:49 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300", 0x18) 22:11:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:49 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/snmp6\x00') sendfile(r0, r2, &(0x7f0000000040)=0x62, 0x2000000001) 22:11:49 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xe000000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:50 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000000c0)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SMI(r0, 0xaeb7) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="047ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 265.881433] binder: 17174:17176 got reply transaction with no transaction stack [ 265.883059] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 265.889020] binder: 17174:17176 transaction failed 29201/-71, size 0-0 line 2759 22:11:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 265.959320] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x79, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="26000000040000001800000012e33e5a91da105caa98b7c3b30acb6480ea8033ac57076478fb14ce3f8c4bb424980525a9585de08c70ceb5f6a2eba9badadd6cc48cae44068c9165c6f45947c894559f8a5dcb9add46a2eda916f51d085c45ccc8361b76c5c46e20e00cf225c0e47a1008ed91de32929f9e1c8b1ea54e0727720f4880217428462d99667b5818f692807527d9eec500865d39c9d7bd102a7f00000000000000b29fa605bd9fb4e2e1350d6cd53bf11b26b5a3673b913aab9db700b3e5db75ee9babc56be09b04438d10bdb1f20ad62cb99186893455dae06d6dc1d9ffaeed6329ca98f741a24020d899a16e06bf2b6cf5925d7d56d89c81e14db00ebbc3d4079c625fa7b7c8b5c2d18e50"]) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xffffffffcc0ec9f3, 0x414000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0xfe]}) [ 266.004856] binder: 17174:17188 got reply transaction with no transaction stack [ 266.012806] binder: 17174:17188 transaction failed 29201/-71, size 0-0 line 2759 22:11:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x8e04000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:50 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300", 0x18) 22:11:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 266.156671] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:50 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$nfs4(&(0x7f00000000c0)='nfs4\x00', &(0x7f0000000100)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="83f94c6bb1af242251a24973959e6a29d1517df7ece6629d63538177f9e7454e173b1fc7f07531a250", 0x29, 0x40}], 0x3102020, &(0x7f0000000200)=']+!\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="be7ae4521f60679968b80b35ea7042fdfd23a9ddae1646aab88dc5d3789e3bbfd01f19abf7810e75a01bede8af26c31343e60aecc438ed811c01000000000000000000"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 266.232940] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 266.315941] binder: 17203:17206 got reply transaction with no transaction stack [ 266.323617] binder: 17203:17206 transaction failed 29201/-71, size 0-0 line 2759 22:11:50 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) r1 = getpgid(r0) wait4(r1, &(0x7f0000000040), 0x8100000c, &(0x7f0000000080)) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = getpgrp(0x0) ioprio_set$pid(0x2, r2, 0x4) 22:11:50 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xf801000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:50 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d1", 0x1c) 22:11:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x85, 0x8000000200202) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000040)={0x1, 0x7f}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6b, &(0x7f0000000040), 0x5942a11d005b8d89) 22:11:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:50 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x10) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x1, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) execve(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000180), &(0x7f0000000480)) [ 266.563158] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:50 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d1", 0x1c) [ 266.687379] binder: 17236:17238 got reply transaction with no transaction stack [ 266.695108] binder: 17236:17238 transaction failed 29201/-71, size 0-0 line 2759 22:11:50 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x501080, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x20, 0x8]) move_pages(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240), 0x86) 22:11:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 266.775235] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 266.814907] binder: 17236:17251 got reply transaction with no transaction stack 22:11:50 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d7fadde418fa09a1a12515c44bfd4e6d68953e716359e0aa145aee080f6c15aa9867bd86baf894eb8fbbe3050966f7b659237b60c1109d7f5991c0be491daa5039b69c0f532e018e5c328be2c552436d22da3d37b8dedd8b1273b54a32d6ef5250f12ae2e82b44dbe81cc35b919327d57036ba84fb937128f6fbc56a140ec9f12efecf46b1a9e256754bd644ee478b724a128021430842ad43e854c560115360ad92458510d87b8c11fe356db96e42152d4b7f52abf3b116843b5df694ce2aa949aac58b1b0d708f7a5a4908413d4127a0fbd3f8462a21c6fe3edeb4c77f7fe6638283c638f64bedaedc734c925d8"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 266.822512] binder: 17236:17251 transaction failed 29201/-71, size 0-0 line 2759 22:11:51 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d1", 0x1c) 22:11:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="01080000007225e0761507147761b8754661c94b4d87c562b5af80530ebbe55bdf887856984075bfdf2a4cb108488c3621f51d95e8"], &(0x7f00000001c0)=0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0xffff, @dev}], 0x1c) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f00000000c0), 0x0) 22:11:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000040)='C\x00k\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) socketpair(0x10, 0x5, 0x8, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x51, "2c907bb94a47d1a174ab4c71b96ba84a37617c12953b8df116bed8c5d5eb55d000fa881f09e2b308ae21fbfbe88116c60ec875e129acca0c5f68bc312ef079b74009f941e3622070303eb7e28397994ce4"}, &(0x7f0000000380)=0x59) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={r3, 0x2}, 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x400) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x8, 0x4000000000000000}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x5, 0x2, r4}, 0x10) 22:11:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:51 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfa01000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) clone(0x0, &(0x7f0000b53000), &(0x7f0000000040), &(0x7f0000000100), &(0x7f00000000c0)) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000000)=""/5) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x80247008, &(0x7f00000002c0)) 22:11:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:51 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200", 0x1e) 22:11:51 executing program 5: r0 = memfd_create(&(0x7f00000001c0)="736563757269747d917617cb0e3dbe4574656f00", 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000001bc0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x2d, &(0x7f0000000180)) uname(&(0x7f0000008c00)=""/4096) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x8000000000000, 0x2, 0xff, {0x0, 0x989680}, 0x7, 0x5}) 22:11:51 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000300)={[], 0x7, 0x2, 0x1800000, 0x0, 0x6f, 0x10d000, 0xd004, [], 0x8}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:51 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16001f0000000000616200000000e4283e8cbbb0000085100000010000009500000000000000bf100000000000006d200000000000009500"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x10, 0x1f, &(0x7f0000000140)="026b5f231df4d3c3a6003b57b3b6881d", &(0x7f0000000080)=""/31}, 0x28) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)) [ 267.218507] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.250761] binder: 17290:17293 got reply transaction with no transaction stack [ 267.258343] binder: 17290:17293 transaction failed 29201/-71, size 0-0 line 2759 22:11:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:51 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200", 0x1e) [ 267.406016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.416616] binder: 17290:17312 got reply transaction with no transaction stack [ 267.424276] binder: 17290:17312 transaction failed 29201/-71, size 0-0 line 2759 22:11:51 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x1, 0x1, [0x3]}, &(0x7f0000000100)=0xa) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r1, 0x80000001}, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000000), &(0x7f000044cfc0), &(0x7f0000000ff8)={0x0, 0x989680}, &(0x7f0000000ff8)={&(0x7f0000000ff8), 0xffffffffffffff6d}) 22:11:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:51 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xffffff9e}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f00000001c0)=[@ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f0000000840)}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x220000, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000140)={0x98, @local}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0xffffffff00000000) r4 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000580)=0xe8) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003940)={&(0x7f00000005c0)='{/.\x00', r2}, 0x10) r7 = getpgrp(0x0) lstat(&(0x7f0000003980)='./file0\x00', &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0xa, &(0x7f0000003a40)=[0x0, 0x0, 0xee00, 0x0, 0xee00, 0x0, 0x0, 0xee01, 0xee00, 0xee00]) sendmsg$netlink(r2, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x100}, {&(0x7f0000000740)={0x1824, 0x16, 0x210, 0x70bd2b, 0x25dfdbfc, "", [@generic="ad40797fc4219cfeaafa603d1fa38675316e", @generic="067d7659205921beaca908ce6e2956f3e3ed5588d76ab9740b889e4f298145d35ca6efb3435fa311b5ce23314a", @typed={0x8, 0x9, @uid=r3}, @nested={0x340, 0x66, [@generic="0bd490980c7e800b65bcf165dd6b3b9792ae13c9d0b430eccb3193f5e9ce282bf3d53827813907a5c5beb4281cacc02461f65b860df2bfa331d2c226b108393946bfdcde7c25e71bde610a9433fe9a36d737671160f220b6708c8d5ae27927354bf0178d39bf21fc95c21c", @typed={0x8, 0x59, @ipv4=@loopback}, @generic="9d6100396dc988db68bb5206e817eb847651a8d8d5e155418813799494f466f323e9e71a1b44d51e11af1978a4b53e1859685c72540bd8682414058e34175296c3da6ee58a271a199a55c4d27b5978387e4cf2416011709c18a50a469623cfe696552110a0dd6f1359700e3eaaa95206af1e30ceb0f7b03daf44d9eed6f73123fff8b5283e8231c7a8026db14207668cc739a1b6078291581c4ec2ceeeb7b5ce9b5e02adb9cbc76e2be1f1c43be8", @generic="b182a1e6623af2d06776925920385162e37a0cf42a94d768c4576229e1eaf352795828bfef2a09379e2639d4d55335ca2cd6d0b5f6cae15ae6773d834a0c1b11298ddcba1407aed1017edff31688ac422fdc921841991532b5dc9f", @generic="ebcc9db624f0fbc20683b380800188edb1a43b04e2758a36b284b82a89ee9d4916d81c416713a27a53a13776999d327f03effa8058f79b21432aed69bb7705ec6d6a9e31b3e91ab2937bb3abb013694ae45251961036b0d2eaf4f2b75b29cf175f0dc4768f66be56a361d01fffdd95bb0046299df4ef4df65a", @typed={0xc, 0x30, @u64=0x401}, @typed={0xc, 0x76, @u64=0x3}, @typed={0x8, 0x95, @pid=r4}, @generic="7ab28b8502790a0c75aa3a581b47463b5f526abe1f041f802afaf8cecd1234dff0de8654e87bbda6a68fe9930c8f7a6a96150b2fbf4652565f9b861d3cae2131617408fa410e377bf9e643bc82c6883c32a1a739a5612c1d2e7101e304afc502bd76291063ade4181c1c9f5fdcd6f935fc4d42905efc2670088f0646991573256d8abb203beae0bd008764a99b498dcaaf9f914e03d25d537c99b11610896eac83361f4caa47f9b38acf6bd79f7c71f51a4ecdb993c8feeec035", @generic="f28bf25bfd6e864c508fc33b49f5df91d43cdd68537b48c4b51bae1568a29cf200c7b51a6e3d9eb611e4f2303c00cc0a0a49d594dfacd4a084d6248d82ec31f0a60a91f0bf3bcd9e5aa95dec5b192e43b2797314ebc1c92faccc10bc93db080912f784eba42c589416354280"]}, @nested={0x1484, 0x89, [@generic="96efe14a6ee030a09a8f20d286e5d7da1d77fc21f1be9d34d70776905d4365cd362a5396d6aa69e5a3e5017b0c99173993c5997d8012ec", @typed={0x8, 0x93, @fd=r2}, @generic="6a9675c81fcb01026d9a747c6534505b3a3565d7fb90df55805402f9a386f6fbcf29144163b0513b9bb11d71411a5b0a95ab75442f522384df3812bf3f03c1e58028858fc89a3e7879cecf4dbb1cb5b093fc3add9ff7293e761427f875e999a69c588a5cf2344e8f7f9fc915e6f6351f9d0fe9fb938d210be007d8f815bbfe525dce6eb3b525bddc50478a5de809cfba76df18fd67a079f586e27796f66e72096bb1d2a99402091dd5e40bc1a7c567cc57e631d0f8560852bcfb2626eaf18398d467a3934fc849cee48917779581ff17455e71c53a8f67", @typed={0x8, 0x18, @u32=0x3f}, @generic="42e8c868464036c8411102842cea2160cd7657373eb246c47878e0b9200c0e337cf0d6b607f7eb3e67542981579936971778c934c2b88aaff6c153a2851dc141c9894f4308da01efe213e69708ebec83dd43ebc3d26d38897c968e79f3f454e0fb0848766c241bde021f876165c1d03bc6bc5f2d4ae18dbe3f9942d3f2131c97c8323463e256a69a2d010126a67ffefe2f11edcde84349b1b84f26f985023aa541ff5483400f6f8922c8a60d30271ad72b1e001e25e7f890ef710985f0f293d5f2f469c3e68631ae526090637dd0e07170502dcf76c3737d34fa8223d0c00b22c1f999dd37cfe4b3d5d434ad9e989ddeae", @generic="fc6ca68d9a328f616b452057fa3eda8c695df2b95d323da625b8a9d6dc03b2f8141351f35c1c1a0b96246e0c04facfeb4d74f5c6e82899ec0965089626c8286da6e942591f97f4c411786bbc7cee53e7abbfd97c6d94f62aa9fbad1f842f56856e5b71d8994bf88a7c0966f91cf57c7e896ceab89b68a466a83691bf63c89483bb04fc867477e8a62d66c33dd53b38c4629a3dc8f3a5703e63d2689decca2cd7ead95276c4414264d6f7ba9aaf4d822ee8434ddf5d2e93", @typed={0xf4, 0x27, @binary="b1a8576fa86fa094a6fa6bbc3bdb978b8c294ea97c1a3009e91aecdeac802ccd06ddbd8298cc605f103a6613c6abe2108c1df615b1f2ccec2a99f1af99352241824388ead25b75ee2539ed46c1cb271d6cb22ff702e43aa63971d4d1fadb665e6a2fdbd1a82ed57ebbe7c45abd7cdfa8d98dec12619e762a072b20baddd10cca2e8bbce9b55334ed203d3fbeeea50087b8905c2f5378b36fca6afd077b79c1f28bcf0634606becf0084d989dc6a424b2e99ccf25749d6a346f732cbb31cf3063317b22c572b6690eb0397f9c7ba74263da9df93f3f63fedbb59f6ffb7ced4a348a4647f65b251331263b0e34b2ebc834"}, @typed={0xa0, 0x6f, @binary="10549b20ccca76eca78649a089812226cb2ab8a2dff7103809bd3078aa67500528b69ec899d625cefd40bc99b1f93c1d7ecf34531a59ce0703640297ca8f70fe074e570f5d9b5fb2177b17ec970eeb7e1d32be09be44092850b911ed33a00c2657132db95c168e753820ea95b92d9ba235bb572c8ab9bffb9359a189a046cfe9b73b1d31f914a35bb1bdd36dc13823a109588ac184e29e62395a"}, @generic="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", @generic="7a55683beea2c6300f820ae509cd54acd162c91cd77fb60ae43aa7c68003df18bdb6db11"]}, @typed={0x8, 0x4d, @ipv4=@multicast2}]}, 0x1824}, {&(0x7f0000000200)={0x10, 0x25, 0x400, 0x70bd27, 0x25dfdbfc}, 0x10}, {&(0x7f0000001f80)={0x1200, 0x2b, 0x2, 0x70bd27, 0x25dfdbfc, "", [@generic="ceee11c12f75a30de7516279c1cfdd94c01c057f24d5cfc5b3c47717f27d5c312fc67febc10fb7e6b4b24e99367e92a64af7431d3381736568ac028326a6809122883fe81c27029d63d1f8d46825fadc553e646ea07b4f65d33fe25bb246d82bf2eb1f001c6a798778fe8b2998f12f8b99f740e343d87894fd010fda443324cabb9472ccaec6bb9340", @nested={0x44, 0x1e, [@generic="3ccb18e11dec15c027a64003806119d30949ec8d4879fb89ae6b89ffef0d3f24bd213c7aae5fbb3eb5f8bca5318372404c95b0cead492287145042548f"]}, @typed={0x8, 0x7b, @uid=r5}, @nested={0x4, 0x32}, @typed={0x1004, 0x24, @binary="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"}, @nested={0x14, 0x41, [@typed={0x8, 0x17, @ipv4=@multicast1}, @typed={0x8, 0x86, @fd=r1}]}, @generic="b926c438ee255f9613197398774f086683615c3638bdf42a1a9e6a49cd9354e943fc343ba1b8d62bb5bc6060dacff964d5531d0d6e2149ef407d468f6116cd018654acd1ee1183e0612d9e54774f308d9e6806f8c203d270", @generic="11689cac78907cbb9ef9efa0737093e91814f6135f4184b7db9900fe67ef0550119eac17ffa6c87f602cf0829855bb8a6e863a3ee710ceca844f18a1d17aeac024093754e356737b8937886bd19ae39a0de7f85bcc42b30c1ff74ff36d00e66ea18d9f8ba3b72509c7dc3ac03be65c0bc812146409a06474711b9215642ec814db8c71e3841cbd7374b2cfae4666ecd49f333ae77e2fa0115272db718f2e85c01ef7c4932762"]}, 0x1200}, {&(0x7f0000003180)={0x22c, 0x25, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x20, 0xf, [@generic="097e11c38b4581573adee6567e3e6c542421d2c63bad53027b985882"]}, @nested={0x130, 0x1a, [@generic="bbab7404eb7cf65c0ff41b7f7824c5e6d02a873d4bae08404fc17c1361e53b8d1ccc4413cea438df0a1ca76810d67c152dfb6bd426b912d931493297e8d2184c82fa4886521009ddd17c5e225c6f82a57602abbc418adddf6492e001ab368f77a93382", @typed={0x8, 0x2c, @ipv4}, @typed={0xc, 0x8a, @u64=0x1}, @generic="5f6724ab50c4dc30668de784bd8b64b12af5cab98d9e1e9ceed6fddef13275146ae549e76ab6498e76b90ae138c34394b2b051d4539b6b4f66d40c181028e4c9182c0871ddbf70bfbb116b89b1fed927828cc5a77368317918d1a60fa25c723aafc2cba6475a6c036c3b5574e775dc9607e799e4ee42ca163917dad8f848f6ca675fc1f864c5a7697b86ad3dcc17833d51e10a", @generic="f08ed35e", @typed={0x8, 0x57, @fd=r0}, @typed={0x14, 0x9, @ipv6=@mcast2}]}, @generic="8a0599bad9160c3d64f48a834e445b15a3ffa23b4717341e3c7fea3a937d28e780af5d5421adecc1c4767b687ad41cf22930ee47003e599127f22d7198d4f5644b4c1b1b835b6ef90811855efb4d84b74b9dcc2345fef55e7472a7c04feabc000c4e4bb7a1cbce948b55e90142979c34775f42a5252ae03465adfe4bf3501b824e5157766f15d724eccf638b01a4bed539090cdc065fb0cf3531aba552ed43573acb38d2d075742a16724b4214a22ad53c7d0c0589b52b2c60cfe7ed7e70120c332f0b37a622d3a487"]}, 0x22c}, {&(0x7f00000033c0)={0x574, 0x27, 0x508, 0x70bd2a, 0x25dfdbff, "", [@generic="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", @typed={0x8, 0x30, @fd=r1}, @nested={0x1c, 0x38, [@typed={0x10, 0x6e, @str='/dev/dsp\x00'}, @typed={0x8, 0x2, @fd=r2}]}, @nested={0x188, 0x5a, [@generic="e83e45590e0d560b46eca4ffe1855c88a31ff75f26207561f21c9fb9af6d956cb01d50f2a2019183cad5c5a20f09e34d7764c5", @generic="5843e5e39b25752da035e4304fcf2acf3900a28cc425e6163e6c60152d8afb234761fb871f31bdbd7c673e41740184ecb4939a46c0c9f10257009ec313dfb9fe0af14eef06c34b53caa17161faf320a2425311c7ff2d8136a95ce2e8f2c71e8015be89e0fd86fe49567f22d39188e9be5577c9dfd7a803a827357e920ee39c0c0ba0c02d1d52e9291aad3815da18ac48654ba73b84188de5ce8ba06f1ccbe6f15bcb5374e8477319c2344bdb2938fd164a2e1bdf3e5ab32a8238cafc5d0ceb747283b897395761a39c98ae05f58ceadd57f24d83381f7eb6259041e6e94694f2152506f0eedc8b9bd5fee1ec6dd169d96985cb28963bb4fcc86ca6608e951b", @typed={0x8, 0x21, @fd=r2}, @generic="d21f12189850a06b367c0293dbc7a1654513306aaec5e3a90a85da043ed7b6816f367d1fc382f6a91f88d69b9a3bbaaee19a120b98fb398afee194eb6bd8af63d6b31e87b319eb03"]}, @nested={0x174, 0x26, [@typed={0x78, 0x5a, @binary="6b4b5b787239c5d98f9540096091b63a53083376463797b9c601f0216376deb0cf15feeb0a04b9e5fb60e961d28e1425d06f7ef94dbe3c74497bfa31fd4f056f241ca5717f722e286efcbaecde1c72264fa785f4fa052f5b378bdee76f28ae6f22a703ee1bcd65046a8de9ad4feffd1420b766"}, @generic="8e5123d2f991d2a73be4e4fd7a8e4e5cfca470b3a036200b0ccdd38815e1b1a5bf6da94db23421fb068440dfc13b148720a138b6fe815f41cc6e4450fa5c4d6b8e28efd65d383096d6779faac7c306e6be53208676f4b187a8eb0b368de2f7aee09656f281b59e9563cff56b074b580aa0849ba48e62d1fe2d0dea7739e33c748d41b276cb99fd872911d7fe1d6251290477367297620d98017d8aa9b7bc8ea0c4c1fdd6f63b9180c374f7d07072b8bb391ba67b948a672440cfb227159dae1de473e306523751d9525f789b10f05b48b25d168bce0cf8fd7d86a5cd79885a723a4da884bb43cddca27170a626a7c88c", @typed={0x8, 0x30, @fd=r0}]}, @nested={0x148, 0x86, [@generic="aada6c42e73d3b659e5737093b99881da0cc57c0c8cab3891afd6b28e295cc7ef3aa09527fe795bd60bcdbdebc", @typed={0x14, 0x4, @str='/dev/binder#\x00'}, @typed={0x8, 0x3e, @u32=0x3}, @generic="a96143f8790647c8aabc68b6542dc43a09a9f02d524635ab7ce5a0633487e1346ece64804a70c0784dde34d117cbbdd8aeabe6a0bcb7043b8bdacfd6f090e7f2eb2c0f94a05a4bc76b0433032ca5b2c6bec8973c34e2e4377a0c171edb82c9816e3efed641e1c058ede5b0099a0f920b2a2099554b273e77cd156605d4bb1e00c50085d102fb971f3d3bec83b047f7bceb25a9aeebf4d70ca2e88f70e8d10146ecc11f4cc9e2e98d1bd58316f67aa41c6ddf5f45531a0aae671ea5f8a1c71635e8853a0fac62fad70039ef921256bb34b35d94ab53b694b91bf0d1c6e4e56f25098d2c9397df50b9", @typed={0x10, 0x43, @str='security!\x00'}]}]}, 0x574}], 0x6, &(0x7f0000003a80)=[@rights={0x20, 0x1, 0x1, [r2, r1, r1, r6]}, @rights={0x28, 0x1, 0x1, [r2, r2, r1, r2, r0]}, @rights={0x20, 0x1, 0x1, [r0, r1, r2]}, @rights={0x20, 0x1, 0x1, [r1, r0, r2]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x38, 0x1, 0x1, [r2, r2, r2, r1, r1, r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r1, r0, r1, r1, r1]}, @rights={0x18, 0x1, 0x1, [r0, r1]}], 0x120, 0x810}, 0xc0) r10 = dup3(r1, r1, 0x80000) accept$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) 22:11:51 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) r3 = fcntl$getown(r0, 0x9) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='io\x00') perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x9, 0x4, 0x400000000000, 0x0, 0x0, 0x522, 0x2000, 0x8, 0x3, 0x3, 0x8, 0x2, 0x99, 0x3, 0xfb9, 0xfffffffffffffad2, 0x4, 0xed5, 0x7ff, 0x800, 0x0, 0x8, 0x3, 0xff00000000000000, 0x0, 0x1800, 0x1, 0x3, 0x8, 0x3, 0x8, 0x8, 0xfffffffffffff17e, 0x6, 0x8f4, 0x3, 0x0, 0xdd, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x10000, 0x9, 0x20, 0x7, 0x400, 0x401, 0x101}, r3, 0x6, r4, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:51 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200", 0x1e) 22:11:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:51 executing program 0: prlimit64(0x0, 0x0, &(0x7f00000003c0)={0x5, 0x2}, &(0x7f0000000400)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x800, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x80, 0x1f, 0x3, 0x20, @broadcast}, 0x10) sendmsg$rds(r0, &(0x7f0000001700)={&(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000140)=""/115, 0x73}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/176, 0xb0}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/130, 0x82}, {&(0x7f0000000340)=""/25, 0x19}], 0x6, &(0x7f0000001640)=ANY=[@ANYBLOB="1800000000000000140100000c000000440000000000000030000000000000001401000003000000", @ANYPTR=&(0x7f0000001740)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000ff7d13a95e0084e3bb42eec00000000000000000000000000000000000000"], @ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000001580)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="00000000000000001800000000000000140100000c0000000101000000000000580000000000000014010000070000000900000007000000", @ANYPTR=&(0x7f00000015c0)=ANY=[@ANYBLOB="0000008000000000"], @ANYPTR=&(0x7f0000001600)=ANY=[@ANYBLOB="0101000000000000"], @ANYBLOB="080000000000000009000000000000000300000000000000010000000000000006000000000000000004000000000000"], 0xb8, 0x4000010}, 0x800) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000214) [ 267.723632] binder: 17331:17334 got transaction with too large buffer 22:11:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 267.771516] binder: 17331:17334 transaction failed 29201/-22, size 40-8 line 3126 [ 267.777377] binder: 17336:17340 got reply transaction with no transaction stack [ 267.786834] binder: 17336:17340 transaction failed 29201/-71, size 0-0 line 2759 22:11:51 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x200000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:51 executing program 0: prctl$void(0x80000002c) socket(0xa, 0x0, 0x1) [ 267.841366] binder_alloc: binder_alloc_mmap_handler: 17331 20001000-20004000 already mapped failed -16 [ 267.908193] binder: 17336:17355 got reply transaction with no transaction stack [ 267.914460] binder: BINDER_SET_CONTEXT_MGR already set [ 267.915749] binder: 17336:17355 transaction failed 29201/-71, size 0-0 line 2759 [ 267.928779] binder_alloc: 17331: binder_alloc_buf, no vma [ 267.934707] binder: 17331:17346 transaction failed 29189/-3, size 40-8 line 2967 [ 267.974302] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 268.048527] binder: 17331:17334 ioctl 40046207 0 returned -16 [ 268.067214] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.073490] binder: undelivered TRANSACTION_ERROR: 29189 [ 268.109922] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80000000, 0x80) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000240)="b543ca2a437a3ea02e1a2560c39aba37a670919aed9e0fc449fae5ef6ccefb8ebc264a512d74a03b5d97c0c4c76d01f27558e4023054a65ea2b2708ea5b2e7b7df8b71acfbc0c3625e556419ac1e76477bd3db7f9f6dbb4845c8b52af6e11a3984dfb6f11e69dd355f8d671428bc0df5848dac563b7a3ee79b4cc98508fa97647246db761ab27a764cab814c71fb0c11e193239def15ebb7dbe772c601f629f9900171f8c1e5d3203e51dd5e5988fc11097798873fbf711d2455c211eaa1ed868df64d778a71ec63e44e8ea384598f73") syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000880)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f00000006c0)}, &(0x7f0000000740)="7f0000800000000000001793c6b63f1c3f1854023d858a2e8c56907eb1c1344399", &(0x7f0000000500)=""/239, 0x0, 0x0, 0x0, &(0x7f00000000c0)}) 22:11:52 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0xd000, 0x10d000, 0x9, 0x7, 0x6}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0], 0x6a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:11:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:52 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x701001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)="f30551a24c09a233c874e6c33f32315d0b9f8773c7aa32f6e9fde9f54a177b7da32b2ea469a0a5f212c1164edbc250f48e892a6a84d917d5da7055cc79fd7ec1f24a551d13f109f99f9f67d40e18315ec9d89f83ac6e9e3466d450fc2934a5844e333ecc3f62405fb82fd866107520bcd2d9319267d5be8a66e98a0a457e79dc9c6805eeacb0542b54614abcddc5884ad57dd6f62b417b18a13304d83fe02e4cce2e20cf3f313450c790a40d752322a5505f03c99507463159c490c313f7fcd363c8c20af8c60acfa53207a0d215376e7e63a22a457bab7c913331c9c9a1b369d76ba989d3f26d155d3d96026a52d139aafae799eb2888418856296df84bb99ec7915c26a9b6680a50a9084465bbf3b289471f5c50b328482b6a3bfcf927b86b6cb801814ac8e42288fb54a52afd741029f6e2c25d849077b9f6a78573e44f7c8825697b23e2e934057c97c25731636bf80892b7f9fee9ccc9170118854172ced5c6729fdb3615b5e020b9c81f6ece9619697f3ea5dbb439ab548080b89adbc75170df17ff335db0f89da526cc2c9207afc6ff28e346f939e36658d7b6cafb55d3aef08d7cc60e2256bc74901b7f36e88452a5d85336330ffa6a66108342c8a890ad1a5ca37f0afa3482d59f6f8b131a6891fc2580ee49544fa4381f7d364bf88d705358cb8e46eef0817f26cb05db42305be46fbaf0b6d114b7ecfb5c7766fb5a8e5773d30563724f83e8b22bcdd83f801131354bc85300025f70f25a39e30c2e7516cdf2663f86bdd63318b0de2d211a5e6bb6b372a2707194a9bb52baf88402ebd667630f9cfdcf25a8067cf35f17f6c541040ea91c9cc2a6c5e5d7aa75577049abdec19c32b240b0db404bb69e7d6e5c3a394a0d2cfeb3ca1604df9bec71c2470de8de4bcdc7fac1a25b42088e6a507cdb64f1160938214e6a1f234bed845104e41319ed4098d94a3a67efe729c42d73319dfb1bfa74f7a7b89dc4c104851cc31ee53a9496ec3ed2d07786a3ff9b82c1408132620970e4be8d1b1de968b0836d80a9d5d5199eb5996116e50681207663667e9947a6e822f559bf06f951a971512b24a1ee407e62b8c5621f7e1cb75a5e58ed7b1936bd36df47fba928a03c07421b29fb5698f9330900430892a8626fd1a05c489de3d0baeea0fcba6448048dc3e83ea82088ffad0896130e23f3a37eea84c190ec512553f893a152369227a852ebeabb76b36c46caea2aa0ca5dfe9e8fa6fb91e9e45e1c7cacd56803220b3570de84022e30b5fa0770400154ac1568a40a6b6d6fc287bea247163f91851690baf7fe46da4b0eb5b910c25087b6e68ce3bcdd1103b909b0da63bfa962b6fe8b9f120dd310d1db95b070d80c92571def9c01c3c0efcd4140bf528912626a510c61d93fb59012010e8ae55948b0f01776839563f0ce0ffd040d7018e0e05b55cf67f0e345a86afda59685753f3de2d6fc172a7e5bd5fe3ae8c9c848a5e727ac6575bafb6c85146a400c7fb687bd4208ce04679b1745aae79e6b287d79538b36d2c3296bea8f8bd3523a156b0296a678607233a22e5ff29cb79a04f28b751f4e31d65e57c6f35ea0a93cabbf6e2b751238d98836b30e77b5ccb6bd456484d68c74b45d9862d070a2344f955db396253d69a12791f7a49fa249a3c3c2fbfad8af003e0c6e7b0a6c92ac67a9c40a9fa87cdcd1be06a762770db47a9ee76dc6de273037c27d7944b5faba8b1baf7648e0255bc5d95d1b000e84a5abb55073f8041964fd85e00e8eb6c803e31b9592a0ccbbcee7c6ca56bec8334f79a909a43534421c5b96af503166e8483e7460ff0aa589c80105ecff3f1c61a55d334a3743c2ff991afc6413f1c23c0db9414feca483a96ea6f6ed5d75f6f829cd289ca0ef6dc6764eae3d7131e35f80ff810e84fb7401993841c3b39178aec9abf91b65544017ca8b96d5916edd54547cfc2371a82d79ac8ac3d971fdb19580f13754e70f677d545302848d4b07aabfccfac6d70de6465d1411a63646a12a91d54c4fc1fb9bb30052dfcfb17fa44caae0b7d2e6ef9d579985009c5acd2fc08b3f08fbfa9cc651cfc7bc797c5bcfbdd89fa43eb2cbc57db6d63353675ea2d176666184b399531695394adb8b4bb6088c16ecb7a41f0d6dbe6f69f24fd115756b4bfa5b2618b75c76c6e50ca5a1cd7dec603cfa905b1cc126d938a8b20a3a16c2abfe1dc3b6093028db0ed9fcd01ab212153540dc8e60b29b9bdebd54e03302fc604253b157f58f0b47e6ab7d707605820e27704d9006e44a0cb29f0b802fe76df11762eee05143698a1c866c1d8f1d444f213858472a3c2ef40af2aa8fa9c51e1dc5a10b985592ee67852f5f8567f1a1ffa8be112a183681bcef1ac93732a515e84a73196243b80a8780fb36c21af364a6404fe56774fb2634f40d2ea31c5ce7afd34347053ecf2df7ddc690b96ed9fd36ff77276faefe2a57fe6f88f4119c7496e509c289573932146f9624d700d7210cc3141ad8d6bcb7bccb427f2aedffac4fd9e8b17dce0dabcbdde4fcbc63c2dc140f04facf94932e34cc8d6f1caf82f88b48a9c16f824cf9e856b2ec6704f4a2dd5a7566a3db64f6023829d90a55c05dc766a938e1a8c5af217bed4b0ba937e617f5d5f47e13c477d2113c6a46a4c67f2c17cca681d3233fe0bc03d072697726e152176c936a19456e761bc6897e347b7899587b1a46c4572b591de46cccb67e606cb1468e42c338e555e3a4557e90bfca9c48ae7ff08e8530fa604cac96b3a597f6cf6f8e64ddf14b4b338daf70e39e5dc1a5a4267f3f87bd0a867c0cf870d9e3d244ec747fea5af1d14ec3424feeca348ae6868fed03522ddb8bbb8f9ed1686e5cbd16a9d0b44e43baa5dcc50192ac6e5b8510b68cd70e968c7cc1247798e06421bfd74fd46893ab6838b22c7dee01e40f09a0c120635aeaae49e93fda88219dcafa7486ec39222c3cbe108f397b5b03610d0fb9b9719e40ddc4758f13e1d74a7e0ac9454e67341813cabe61801482e0721cedabdb898a5ddfb7de37c49126bb27a727c243f9fc78896e0d0b882b2225ff15ce75c492f5534773ece13b904ab1b876e6dbcce25f35e8adfe176fc917c1b31e093c1e4e0b1e91d2541b5b019ee73ae9d9b5643a9a38cf05e17b9403a5bdf9e5afc0d1ce670dd2b7501cccb432c09519edce62ae3391afb41525d1168e9e85dddd41076e52df2030d42b34f1ed72f39c119ec56ebf4148a4c2ee35b4b9b2e275205961da3bcf3ef167f6b86538edbd41ec85b2b20c03a4bb20de805f47b3a769c4151f015f7072f8f120057a24015c36794ec04bbb595a363dfadb4f1e07a68c84ccc01f4d91c3619511675b871f187ce6e576702d6a825def638fbf31b03230879853fa3211fd108721235c2891e56deb813f09bd57ea4ed38eb9bc1c6e64e817a90e3ce2532a76d612ff2b097d9a65b9aadaba952d7d217d41a29958b05bf0578fa17c03db2233b9a74e56e00c96a89c1c0096201d5bfc18f8e1da2eb5b3e06bacd8a31b563b9f774af2bae5f8d5667819da173cde299840ce51482dcc1810343493bad98dae9321e2dc5077fa50cb6c20054053a7c3c58652bcf3bb8abaa11c012d4a9fb9a2955159a1db4bb0825203843653268702cca0d7da57c3fa9361676cc43970168921c7194f5a431af793dd440079f231be363a410fd0afafe8e2c66652127996e415c6dbcc44be7ac4bc3654800e6208369f2696a313c9e2a4283273bd8507b9e7448166fc6f2353700a805b01e6a69a49af3c04102541389b862f0ce59af36ca0d48eae16db5ae669d96e04e330681e113b05108d5b2e6b8ba91f731b79fb72f1f3b1902279e3d6bb2536a6f6d59417a6e19539bcd0365328835477a58bf300d43a33dc890795555ddaa3aea6d51ca4c549aa007615dfe50da3db3daccf6b8451157a7b5f9bf9e542ffec0117f3efc13aacab91abf3122b195a088a6f115ee57a18e1e1535adaf5739456803cc8826ebf8410e55c479845953112d5529e61f93e53e86d8c0c1759148030ca1af7cb1fcb9f469930ddf8c8f7d5d5e5b25259136192626f32fd42a24cf9818bd51153c23ba603fc9085f7a0efe416982fbcdea1fa9e96dffcdc01872491ade426c988ac75072302c64322cbbc351f9f5d615619933bd0427e35269d6f14d5ef58a0f34da3ddcf69fe34e20073eda62f2331c22b7fa64c6d6b147b46e8728f95e448e37ecfe0564150542a150743bd89a028e792282d03b896e4621cc11405938063e2de4ea8c8ec99a676fa3d7584b1ea8828471a9c5baa2b80937a4bc74db6f842fce9a6cf561c14b84c54d6998e8e7e1bce12f5f454f9e78c00a8d3b57608218f2ebae19210c2bc81108ed6de402f24581ebe0e37cf03a0423f6dab0e4becec8f7d8a927e2239b5b9d8306a49b5c484f3857ab3ec8223e9a7d8499463f5db2506fa1dd9e7e51e62ed87fd4468fbaed674cbf6578dffa5d7db3579f2f3694ceb5643e06d9a757037c0d694e98bfd711e96df12cd3c21725c095e1a5e9a79201950921550ce7cdf132de50e80357b2701d237d76369b99badbcaea7bda942263e853af9cba63df08034f7206f1ae64c1aeb02cac3514752b174a79a1f889fbf7047c33042643113ddd71dfda2f021ea2e74d082b2dd57dec8f38ddfd4ac7968e253a63a8220ade8065aec1e246a3a682ff4b4eedc57607996f78f07790c3f8563123274f48a2d10ca1ee0282c272c1c93148f02f4156f9aca52d76e68798ce60440fce407b838451880274d11874bf8bb5814cea00cfa81d5ae9e1b2f564bccb774b5c0265e7e2e16fbd2f1a39cee64ec84eb7435bac938793de3fb919be8377659e38b7a68735ced7021cbab05c8bceb4c4f82335607017d4f19eb1519551769e9b6aab113d5514f55d155ef347f2b737364f3a7b23dafdc55d0310801c151385595737e66664921a45c9e8cd34171e31c27349761863acc82bc1cb21dff0c15a29777d2e6530d96d43f64cf3f28fc20c760566c12a7b04904758d1177df7a8a21c2736081475512aaf401cc7adc9c99a57e26e0ce8d18fd82a1d491b3ff1eb1137384ce3299b0cec00d964a3796e0ae4ba55aa1f743c3f52c3aa13d31bbad7f75f2deabbd020841404d15e3ed2b776e2c871781636363c6abfa73155e3d433ab841ba9ef7280e39210375b4bee5c9e78586aab47b5866ba16a4a5a61aa50ff41a3ecd07467d85ba89cbbad9d2ca0d909518f1c2496b139f2cdeccd9f6f1b54c68d7e100568fbdba56808334cbded90bee6369973436bff8279f66b9e50fa5316d903ddb8cd09f9c6453159903b098c6044bec007e0c3d25561e4f91f5202dc727fd95ce0cd1befaa216a5a7af8e1ea2f5b564b4f359b016f4ee9dfe485f414db2dcb024e9f1bade2e12f5c38d9ee14cc2f925dc1a1df511c152b1aa0ea11a22d39e4acc1ebe0e4df5a210ef77001a0ab4de36d616844a24765b2d1ee9f60627717ce7bfd20a209b1329dd925e1be9224ff8a4bb029bcafbce1f21c25c550dca156609382e4b69beb2ca1fde4fc76d37efa61d12fe71bf06c8287c81f44349dc1af97b35e18c22849b3fd0cdd3363824841d33e376e047d892f8343366b8ce4d8d7a1faafa8f8493c77aef5324efad0d603677edfbd7656b5971afda7f97954dc0ae8ac716624dbbca194303a849fb291de2c5f8a5c54add805fe5b0823b26f1a990c65573dbf9ae4722c9545ab20b7a17aa30ebd60e4e0d138e2cbffdc7f80858a066788a44a805e84aded17e73d2b4b1", 0x1000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$KDDISABIO(r0, 0x4b37) ioctl$ASHMEM_GET_SIZE(r2, 0x80487436, 0x907000) 22:11:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000003c0)=0xfffffe3d, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad56b6c50400aeb9fc142f07aa867828", 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x20) sendto$inet(r1, &(0x7f0000000240), 0xf0ffffff00000000, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f00000000c0)) accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c) 22:11:52 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x100000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 268.399797] binder: 17374:17383 got reply transaction with no transaction stack [ 268.407556] binder: 17374:17383 transaction failed 29201/-71, size 0-0 line 2759 [ 268.438838] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:52 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000001800)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x1, &(0x7f00000001c0)) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) unlink(&(0x7f0000000200)='./file0/file0\x00') 22:11:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9c70b0000b802000000ba000000000f300f21bcc42175d08cf6d66a0000c4624d93443a00b9980100000f3265f2410f0866470fe07d001d0000000043d9fe66baf80cb85cc87b8fef66bafc0ced", 0x4e}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f00000001c0)={0x0, 0x7fffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"6ef240fbaeb9e8b61a00"}) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e24, 0x400, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xc}}, 0x800}, 0x1c) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e24, 0x8, @mcast2, 0x7f}}, 0x5, 0x4}, &(0x7f0000000240)=0x90) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r4, @in={{0x2, 0x4e23}}}, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x0, 0x0, &(0x7f00000000c0), 0x33e) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 268.527419] binder: 17374:17396 got reply transaction with no transaction stack [ 268.534977] binder: 17374:17396 transaction failed 29201/-71, size 0-0 line 2759 22:11:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x8) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10000, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000080)={0xf, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21}}}, 0x108) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00009baffc), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000564000)={0x0, 0xfffffffffffffda9}, &(0x7f0000000040)=0xfeae) [ 268.575624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:52 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x101000, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x480a82, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000140)={r4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000200)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:52 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xc3ffffff}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:52 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r3 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) sendfile(r3, r1, &(0x7f0000000100), 0x1) r4 = fcntl$getown(r3, 0x9) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)=r4) [ 268.740346] binder: 17410:17411 got reply transaction with no transaction stack [ 268.747925] binder: 17410:17411 transaction failed 29201/-71, size 0-0 line 2759 22:11:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:52 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x2000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:53 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x48, 0x28002) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2432499ece3a427673bba1cdd5630d46b62061f7c1d646070bf5da8b83e1668ebe90b752b80d4a83a39b77a8fdbbc099b5210c0877a268c13fbc0", 0xfffffec6) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000080)=""/52, &(0x7f0000000100)=0x34) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000001c0)={0x1, 0x0, 0x7, 0x1ff, 0x5}) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008200)=[{{&(0x7f0000005e00)=@alg, 0x80, &(0x7f0000005f80)=[{&(0x7f0000005e80)=""/40, 0x28}], 0x1}}], 0x1, 0x0, &(0x7f0000008480)) [ 268.866819] kvm: pic: level sensitive irq not supported [ 268.890184] kvm: pic: level sensitive irq not supported [ 268.912333] kvm: pic: level sensitive irq not supported [ 268.953178] kvm: pic: level sensitive irq not supported [ 268.980484] kvm: pic: level sensitive irq not supported [ 269.000892] kvm: pic: level sensitive irq not supported 22:11:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x8c04000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:53 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x1fa}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 269.009562] kvm: pic: level sensitive irq not supported [ 269.051625] kvm: pic: level sensitive irq not supported [ 269.098477] kvm: pic: level sensitive irq not supported [ 269.110258] binder: 17442:17443 got reply transaction with no transaction stack [ 269.123593] binder: 17442:17443 transaction failed 29201/-71, size 0-0 line 2759 22:11:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000340)=@ipv6_newroute={0x24, 0x18, 0x30d, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x8}]}, 0x24}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x8) 22:11:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:53 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x10001, 0x0, 0xfffffffffffffffc, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="ba7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:53 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x6000000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 269.160771] kvm: pic: level sensitive irq not supported [ 269.199265] binder: 17442:17452 got reply transaction with no transaction stack [ 269.212329] binder: 17442:17452 transaction failed 29201/-71, size 0-0 line 2759 [ 269.286803] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:53 executing program 4: unshare(0x48000000) r0 = socket(0xa, 0x2, 0x0) pwritev(r0, &(0x7f0000000100), 0x288, 0x0) 22:11:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') statx(r0, &(0x7f0000000140)='./file0\x00', 0x1d00, 0xfff, &(0x7f0000000380)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 22:11:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:53 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x201) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 269.387988] netlink: 'syz-executor0': attribute type 21 has an invalid length. [ 269.411810] IPVS: ftp: loaded support on port[0] = 21 [ 269.435650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:53 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0xbb, &(0x7f00000003c0)=""/187}, 0x48) 22:11:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="02a0e5760000234070") ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000580)=0x0) ptrace$getregs(0xe, r1, 0x8000, &(0x7f00000005c0)=""/165) r2 = syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0x14da, 0x400000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x7, @mcast2, 0x6aa44387}}, 0x3, 0x99, 0x8, 0x8, 0xffffffff}, &(0x7f00000004c0)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000500)={r3, 0x9, 0x10, 0x7, 0x10100000000000}, &(0x7f0000000540)=0x18) syz_read_part_table(0xffffffff, 0x1, &(0x7f0000000340)=[{&(0x7f0000000240)="85c7a0478d4c4317bf7d0ffc7d75df9f74f6e5d520b6f7a480bc76d39d7c4fd41e9d9e21ef305390316ca380724bc60dcf02a458759482619a2dce1f8f715dc62a42cf3e9a986e83b207617932fe87d358cd15fb792ba0a197e387993f60101e74c8f832308d7edc48915798bd66b2a8bef8856175b3354f9263d0f5770beaa68b3f0ddc8505c4d528671a94f07353a7389ef4327460a67be85022c2a398421318844a7094a48998007c33c56dbcd3d3774d940cb88e1bf28771cb04f2265e033b9c523f31dc701c8ac0e570b7b3decf61f6174556140bf6274884bcf462c0f8c4c33150dfa9535cc50d", 0xea, 0xffff}]) setrlimit(0x7, &(0x7f00000003c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xf7, "b11a2b870dfe0a64f8d152cf02db57b3db2f8159f81c4f2c085a0b33c539da3e8935aafa039c3c5fc192c674c97141de18617369fb40ef1baf7569c6bfc6ca5682500ecc0dfd230da6248f073a03fa366222e2a54f28cf9dbe9e986c73d299dd8dd7c9dea909e54f71803bd62af5cb71a401d181bc914c92546cbee43ec10361845aa6ac4e55b3c90d4df56a209fd5265b6e8e1ba9856a5397556613d572fccb2e08dd770e5e6748d2f4434332c3d1c164af0e48d6f6233bdd5f007df7451fe29be73dbe2a0b8666b57ee3beb1dfa340dfa505b84bd368f5c0cd9f094e48616e1453d27222d647885b100eedda8ce9163261e78cc538e3"}, &(0x7f0000000140)=0xff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r4, @in={{0x2, 0x4e21, @loopback}}, 0x7, 0x4}, 0x90) inotify_init() [ 269.512855] binder: 17469:17486 got reply transaction with no transaction stack [ 269.520439] binder: 17469:17486 transaction failed 29201/-71, size 0-0 line 2759 22:11:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:53 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x4000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:53 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ashmem\x00', 0x20000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xa1c, 0x0, 0x80}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000200)={r3, 0x3, 0x0, 0xfc22, 0x7}, &(0x7f0000000240)=0x18) perf_event_open(&(0x7f000001d000)={0x5, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f00000000c0)=""/177, &(0x7f0000000000)=0xb1) [ 269.613384] binder: 17469:17486 got reply transaction with no transaction stack [ 269.620985] binder: 17469:17486 transaction failed 29201/-71, size 0-0 line 2759 22:11:53 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:53 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 269.738837] IPVS: ftp: loaded support on port[0] = 21 22:11:53 executing program 5: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000280), &(0x7f0000000180)="a4", 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000100), &(0x7f0000000640)="848432503e1ac2bae9d92c5d144121fbb1962144eae8978bd4f065eadead9ca85fd3c49e925de4007488bf80a2152f25efb149bbddc4493ad0c625b2e5cfabf2f745b9a6586673f693fc49f3b2e10e38afb34f9befefa874c9e7033ccc0e967bec6de22d59ece236cb34ca95781888a02e9796e3342b40b123e5f81ff5e36b907efecba4cfbf634fd3fe7f546dba4cdcc4fe13ac83893eef8276820db8efd0e90729fb71a71d96dd945238acddb80400000000000000902d266efb9ab909b8b6", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000480)={r0, r1, r1}, &(0x7f0000000300)=""/155, 0x9b, &(0x7f0000000000)={&(0x7f0000000580)={'crct10dif\x00'}, &(0x7f0000000080)}) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000140), &(0x7f00000001c0)=0x30) 22:11:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc={0x1f, {}, 0x0}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:53 executing program 0: r0 = memfd_create(&(0x7f0000a32ff6)='/dev/ptmx\x00', 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x3, &(0x7f0000000000), &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x7}, 0x48) ioctl(r1, 0x4, &(0x7f0000000200)="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") ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x2) ftruncate(r0, 0x0) [ 269.870679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 269.874913] binder: 17518:17519 got reply transaction with no transaction stack [ 269.884852] binder: 17518:17519 transaction failed 29201/-71, size 0-0 line 2759 [ 269.968327] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 270.018509] binder: 17518:17533 got reply transaction with no transaction stack [ 270.026150] binder: 17518:17533 transaction failed 29201/-71, size 0-0 line 2759 22:11:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB='filter'], &(0x7f00000001c0)=0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0xffff, @dev}], 0x1c) finit_module(r0, &(0x7f0000000000)='#\x00', 0x1) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f00000000c0), 0x0) 22:11:55 executing program 5: r0 = socket$inet(0x10, 0x800000000003, 0x4) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="4c0000001200ff09fffefd956fa2830007a6005e0000000000000068a20a150024001d0002c41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6a1b2f273ba16f6c7b1271e4", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 22:11:55 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)='/dev/midi#\x00', 0xffffffffffffffff) keyctl$clear(0x7, r1) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x401, 0x4880) r3 = semget$private(0x0, 0x3, 0x20) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000140)=[{0x3, 0x5, 0x800}, {0x1, 0xc0}], 0x2, &(0x7f00000001c0)={r4, r5+30000000}) r6 = epoll_create1(0x20000000080000) r7 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f00000000c0)={0x20000001}) timerfd_settime(r7, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000002c0)={0x0, @dev, @multicast2}, &(0x7f0000000300)=0xc) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000340), &(0x7f0000000380)=0x4) epoll_pwait(r6, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000021ff4)={0x2001}) 22:11:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x10, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:55 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="be7adf74e81eeccb64f1939ae4ef"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000100)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 22:11:55 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xa000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x48e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 271.164514] binder: 17538:17548 got reply transaction with no transaction stack [ 271.172306] binder: 17538:17548 transaction failed 29201/-71, size 0-0 line 2759 22:11:55 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x9000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:55 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="6086827c4e758fcc044d229215c1b8bfadc3c8bc8b372de4fe51c77dfa0fdf6e3e121641b8a68fb434f3977f3f3179479eb21d80731979dd40a5488c4ed20bd41b5d4836cc4a979b87470d00bf55dcc86f3fac1838ef7c2b650b39640937ab1b59f3df21ca32ce173886da6599a2930f07cd5df13ffbb7265e39b96346c79e82272876cc6cc86797fd2c0f8573530045d068895eb96532a8f45495d23f133859ba3a948b75b2613c1a0b3717b62e73e6773a7fecb13ea58979e07b09d28809def2394f65d530f5b72d97c4239264db6c577275ce8f1ce71a72b4bd7ba3208d301a0ec2d7c102a37770a37b63bf2cac44c19fa8d704cb555c9613", @ANYRESHEX=r1, @ANYBLOB="3a6efd74bd0c905480d59a1f98e3aec37cf81068390bde401cd933c3e2b6258acf3c93e299faa56c79979eef0faf6cf6ae35d033550d516a2f6932d06f49e16ec2b96261063a2407789f1e1730b5dfe62c6f06b8b4d8f3c6fb10cf0c0e8aac41df29cf57e22b83daa24140266a6a2db0611a2ff89f61e430737b84525e20db5066a486c4fd9f90bd8146faaf5a10aaf6075e8f4d9db0ccba7af11671e9b752d55e0c7271402e4d88309ff29df9471ccfc8585770c8d3293ec1832ede11c342cabef82c6e6fe8c628a026a7c8628549fabf42652164e2db17c8015b2101dfb19c126166", @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r0, @ANYRES16=r2], @ANYRES64=r0, @ANYRESDEC=r2, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR], @ANYRES16=0x0]], 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:55 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "ed7d45c6fa2ca8f209c34feeaf403c05488b6a8138c412ff103f915c8c560f1a12769934c020b8bc34abf8a6bcf1155837deaba66a6bda0a4a343575cb8a42224313d39f57e3233d34b43c07f5f521a00e"}, 0x55) rt_sigtimedwait(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000001480), 0x8) 22:11:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}, 0xb) sendto$inet(r0, &(0x7f0000000380)="f2", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000002c0)=0x4, 0x4) recvfrom$inet(r0, &(0x7f0000000100), 0xffffffffffffffe8, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x709000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000003c0)={r0, 0x4ab5, 0x2, "7e5caa1efc631068356e7d994194789ccfdb1d72a306a7bb1fcb8caf7bf0a8466939786ca83c62dfdd2bce781d08faae18df16fe9f1a0b6c2dd3dfd510daafeb4f1ab208249a154fa144924200b8a3303d9393e1dcc2349bce60ecbd0312ccdd6e9f7049dd583629464da0451b41a07c6720aff31d5fabc9e6a65ee0ff22153d71418f33259396f78a4efdfc0508e9e751ac0ddc4cc2220ae727d67edeb59249747b5ace0e4e6c4923a9d1922fd0b781124b86b1945f5764c9ad51cb1f67bcd46eb6ccb5157fabd97f6ae920e02359ebd357e79e3ce56f2e9b4d6aba320fe152fee8a7ca8a079d7c97e2d68192d6cfa526677bc4ef65ca873e5cbe22669f4fe39e6457e9b51b5810ff74afef13388f05adc442c1eb842bf8629cf1d1be5235b3f141b5c47d88c800e222233b246bbf94e30732671ff178a9b8a47218647d8f5680f64e8f7f4a8e80bcd9821f55243a229f67efa49ca610b0c21ae91490c0f52032c6154a90f325fd8cb3e00e4528baa8ffcd7d9744b2fd32ac54acf775a97c30cbf888da586d7b8038fcb070666ef03bab318a0f4ef9fff8fda9ca1a616578a945fa654cf2b5ae0c165c52575287efcb01ef0a258b17eabf5ae4304bb8bce4b241585a8526e65702eb44411a6fadfe7ecb0c8d9f9c8242e3742fb427f085715dafb47b8cdf81d4f23fcf4f9fed97d3da71a6044ca70cd6d373306460164a94c079cc81c4712343a1cabb6d11500d4f08e85b727ef4272239b5764feaff203a6878794d768a95bd18ca4ebe5253f559997ce494db2d81936873251a8babeb0c3a9022c04d2a7084810f4f790856f2ed052a53eec7bcde2cd90c91ce57d42f65b87f4985eb08ac0f451e3fb42ba9095cc4fc5038b85037ae44c818635bfeed6f24e2773926d4a791db5e7bcdcaff7057940fe1f727f464d9a85317d2c14b165940555d39afa96349a13d90ebcbd30496b63dd9db420e26507c6d0219566a1f655d6a7238e77ec241300dfa294b8d59394cd2f14b78e5d1af3ea84a25413d85ea70c05a3fb2333279cc31722bba2fda6cc30abc91c84f028cbc19164d2d547fe14855cb75129a1356fa7c44c29331cecba60b007e1623c9870d4e1b868c780ce1bdbfb41088fda000a2a49f972f0d590c0dc05f188a5bfac359663508f1623448578124af1ee2cbfe2a4b4aa7ac627a9033a10ce6afb2f4f7c2ddce72dfa8a6d68c6a813da4e315ef2b4ebc81e28f6434137dc20a717033a571e20f11727ddebc4e05b215b54119389167eb5387c6be82532b14df59174d51497fd19331478fc7d88b5d71767283e59682d63727e58539f8a84402d655b9130cbb27a47c8bc825c97c52236b353424dc304d115f7f24c7642ae80a7d9a7cf5ed85b9f19ff5098904455acba4e66051e73a59ba8caf2dc096a14a698dac332b7775fc8d8d20a884b2bd6f08847dfd0fa2186c6ea0b5434ae23760f1002a84d3b0dfac907b4f16800cfe6685a5fc7bcb73529036f539778badca4d54ac0a408375d159c687b47fb7bbc23becf70c30ec0328b5d4f688360fb9fe8670572bb99e715aafaabef6f63b090023d057d2f695c27d4adfc3edf7afbee7dcff31cb064ea4a29da68003c9cdad8cca3895062d4c70c0a1616467d67739339a8d4237d481abb78177fe72d3f91275ec6209c99bce6199f8d9e9243494f12c7a252d559e5df127512d0c574b3db8422d300a8364ff324c6f524d85e78c221ab40b73a3e479ecf594a90f4cee48aadc640ede242b5753685283f10f4c9e98e63c82c009bf09a5ff0d1a05a2096e16f4daf913f1f6d4680761c76091b75ec28b99b217aacd7a7ca532c3d8bf1aa0b55570486fc26cb5e0ab09f71dd4886253fe4adf6a76acb974bd77d1737b24e74b0809ff87df840cb5e7fd13f6622143c17753033cfa98ec061976e328756a7e648473980b6a81b41ab61d43dc8cc29d46097f39f4215a04e4de03d758d0cfb56e72f765fdd2cca8f24439ccb4da0fd78d0da5549490ca86b2a6c992c398b02df95ee3b8700d36fecdf55e2dd97902079a1e5b9c15fdc15eab2f0bd88290fac1ff73691e084244caabada833bd708c5fba7a4d9ea03e29d6e1425de1cf2b423692d42f6a4c8cdb75e0d8481b70cecf4174bebbbd262c7675d624fc83cb81d7252af657b3f544ee568b7c3634008bdb02165af6b04ecd05039090abde5228b780db15ae04e74cceaaabcab69142fd877fcb9d5feee2ecb7593b9a9ca8ec275d8da8aec9efc5cbc893f4ce780481a13bbb88967197acbb0bfb82b1748a349ee7d3003180d7803a093b05728717996cbf4cb6c57673c3903d3293c7469893f20dcf9bac8f243670edce567514f911d05b7c7fbbc7a4703d56427a4b0bc1803391ca99c9f99c61c57cceaf687abf1bf9a8692b7fce3ae429aca8597da01d24d0b40c07beefb36f0b9383dcf60fcfc67940b8a8dc729bea0e91e96d48542937863e39ec85b3e3a5ce8a999682a3c149a5a37c692c6172a1200e862c624f478e44c7e2b76120c587c2fad70fcffde6a80015c852a41b850993a1e07ddcaa438c4cc89444448a0134b3cc374fffe2f8643ab5da9a8f2022a7ccc6bb9f3f73c6de3046315c2fac3e120e430bc28d1e8eb839c6f574e4318af885d46e9302e87ea68b1051b0638f8588a38f7402e478d51cebfca95f99e398824eb586e1383560d6b30d74a2260ee6362f451edd9cbf646c1c5561cde68cf99be22a618bce46887536b7a78589bb4e84f4490b29785f0124a2765242edcc3697f9b183e8264ba33485780cee9f18daa566ddc65e76c07caae66dfb1587f7e3d4c90f7862e0ce689f952faf2ba041706db6b7832da7150803475dcb4691da48736f543d406015675af9d39cda4ce4d180d81fdb7c8b9029c0914b620012fd35c24820a6061aa88076a2c1153cbcc223c74d5e4c8e261067b318ab830f92e22b3f5d89ae79ace1b124a67047afcafa6dae8342a794e85be495ae72baef17ecd26a89841a2fbe11e90f8f5ff0eccc9826cee6db5feaca36e909828d26aca714de528da61f04aec2cafed46cd7be0d9ecbe551f8605097ca785d5d33d8120114f0d2ee8981b87945ab8bcaa9fd0f96d551c563751f3004d2c829b1f1403df620680a8ff0cbbd9e0393a00b757784c3c54d70a035b7f66f3de410f4d22ed26413db6ae298718ea40f536fb8b509a8a4ab2d54c19766ed76dadf38fa12ae6bf245b1adc3f832cf3869953c9511f794402e3b0df03e04a5ba1f31610263ff1ba986c9fb2c8078581da9b4fa759d5321efc66c4156ccfc9d15ea6ef9b65b6af1ae57ad325937cb95e25047edf1519709c37588f9caf620311d6d2b57c722d973103d9c8dbc0a6f09e330ea285d90291c10dc7395656093ea2da5b9e92558b1940751a1ba70c6583b940dc335d217d26b37a848921fc5f51fe6a62704b3ae0767df2f4698ab0d98a0c45ea8a8a38f8f08bf3f27ff16f94c0ed608fde552c01ee24021cdd699d10921198379533903a1a3cd7ca90b9903f3af3674207f9cb5d411685b479b252616ef2cd013981d687454e04b490bb000750e4d097c6fc41983f0349e46107e23233434fe4f16efa297382641c9a6f7cf22aa2e3a8d38b2e754e56176c535be73262af05e54b6d90f529e34832c2fd9f3deef1899549b6870b3da19d39a3651ce2edd6b7d89042866860a321fc563e9dc6572aaeb548f4bbd9829e30be9f84d0737804684c8252b64fd2658e2bd74ad9886fb990df17b73c0903c19469fbcb50b66ae92ad1b5caa3a946d572a19ef18bc557f4bfbc1dbe15626654d62e7a51bcd3ea10198cbcd75fb5ed2624cdec9da52a181fca8f4561b5e7ea7f592aab08330290b20bf178d4542acea7a67f0b4b1f8bcd358028dfbe160af49b8acce37b1b907a1720172f4ec7474e2af334199948577aeb9a42e71cbf67b7669d11d389531b9ef53f9954619c22919c68663aa859d532807fd28000830df8e598f4b5996c38cc1aec2da99ae296c17aaaee6656a766a9667d56e488908e1b6b10fee0ec84a8183fe6c090c517218578546275cceb7bca5b74bb68417d7d1794fe4cc895c1cab9edb4027e9a14352d9571f18d93652acf19f77e6ca892b80a6ad22dee9f426f0a3a54e076619c7e180038688f689b2a97c9801a7d2b7152b43c5045c7226e35237d093e9b22d795feadad55bb29c3cfe5c0f2cf092f04e6e6f0ffeda9ad44a5c85b1e7d151e7457a8f8369270f10171a56b0daa93de6f6d7b33b1c21607b0a3450e11b385f13b3cbe6f1003eeefca7d8ee48990626a3f3dc5312f6cceca62d263b0d624cd2005afe3ab590d13332e1408ff851dfe70637a46a3b945cfc7c8fbe6cab80506203aad4ac0b029ae55c8973c235ce42774e823ad473f24a0c8c816596667b6e8cb1fe5cc202fb1b9f0f3e58cf8c7adbce25d4624df6cc56a67ff2ecf0a40661a526af0ff7bb198ac4587fc7dad86978d9d1f528b4501d54d74d5c7c9d50f32ec0dadbc9b42ad951b7dcd215093df9ea70d7cca1fa549dbdd9c5b88f14fa2206d0383e1f5e628a68464f8c56fc2324223570c6a242f5c4cea9b9d3bc45e1d8521bf7ee74c751cc7287325a45f692a2624512788294d62326dc1b77c5ad04cc3654777b642fde540b391dd08a804ca2f619b53a181948d9a65abb3b49d98713677b2101c53e9ff0bfa63f48af23e401b868307f01f4cc5f4154645bec614f0fdf2429b2211ed12b480ef53863166f387c32c2b3f38c59d93a4c9e642ae5c4a8c22eecc265ea07b48bde92032f1e3a94ec39822c74c6941f33b0d1c92dacc822c0f4904eee28d35976dc43d31af4edcc076ad6063e698707722187e540759db30226033d0dd2623782bf4db7f2e473bf3cb8c8bc927bc419e71a025e56147647053be2f02427417cfa8b91815d4760b0a61ea70ab86f422f13c562fa2a323c4a0ec378c39ffa610d9e04fb66c55cbdc7a2db46779421e930b666ad23feea459a097c0cf3f8851a5e1aaf8fc4f35eafab9eee69a2be2a343bc7321d6f085a13365523921424f3efa48b4396ba98590677a558c99070d53d7a8b93f19ccd600ab553a0adab0f855df36f516c7fb29d3bf94dc51b01665c3bf28bc41929894432a7988fe68e9ae48d97c837f47653727fcace6622c91678e0d3a1320cb83e3c808766ed9481662a5765536592125826fea709c72b35b829bc3056f36c0240c5743e2e0b14aab2496c21eccfabfaa87643df2a51a93e1180c5ad430f40b24e585fe14bedb6247e9477dfb8f7585b2de38e51152b10443d1af398227a7d7e72024ec256cdcdb7017388cdf46c4529d5029cb423dfb9a177f017b6e5eb6077041550eb877cb6102bbefa3be79339c32d3ce42f0ae048adee4d23d737df681fd8ed80b67cd72d890121b49c8116be746b2b7e366bc5e9355719b8bd4d451652ff793158939d463e57c2a1af01beee379260036dfb65182f3fe5a983d08ac8312db669714dc4407f3044b1462ca995a3a9d6e628c04dcaffa7e3bd34f184733d50da85e745f068e808b668a07ae07abbdb233e39ef976c9676338998bab7c17e73a836ddcc33794d548a55053e4b2bcf19affef170f1be07370c23a66e8a34d5e06c1e060e17140f281935508bd51270d188ed4c1bce192aeb12b3ab908ac08607f6054f46a67afe6d10746a75664d987260ce552c2cd30b21887bfbee7b51859f72b59edb271dc673d9279a7532a3525b77d48ca44f38488cf0d8e255e9f190d7a383e96becd06cd42f"}) [ 271.254605] binder: 17538:17559 got reply transaction with no transaction stack [ 271.262223] binder: 17538:17559 transaction failed 29201/-71, size 0-0 line 2759 22:11:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3, 0x200000) write$P9_RVERSION(r1, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x80000001, 0x8, '9P2000.u'}, 0x15) perf_event_open(&(0x7f000001d000)={0x5, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f00000000c0)=""/177, &(0x7f0000000000)=0xb1) 22:11:55 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:55 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xfff, 0x206242) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) 22:11:55 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)) mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000000000/0x4000)=nil, 0x4000}) clock_gettime(0x0, &(0x7f00000029c0)) setsockopt$inet_mreq(r1, 0x0, 0xca88bdfaa989e5aa, &(0x7f0000000080)={@remote, @broadcast}, 0x8) fallocate(r1, 0x0, 0x0, 0x5c0d) ioctl(r0, 0x1, &(0x7f0000000100)) sendfile(r0, r1, 0x0, 0x8000) memfd_create(&(0x7f0000000040)='\x00', 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 22:11:55 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x2, &(0x7f0000000200)={0x0, 0x13, 0x5, @thr={&(0x7f00000000c0)="b74fb78398f95b976c06306adaeeea1f17e36f08ec2d0125c44d28efcb", &(0x7f0000000100)="d7b485a2adc0b9516912818bbfed17566d0f35ea993a639fff7242e83b2b166568a9be7b4780dd40e88e2691c4cd38700a9cb50685c62ad5a2203b5005d8a83fc7a2d2d6885396d7c7f2bbb5cca5bf8e6de618a03edadf36060e94ccbb2e2c083f3d2adae5383714c77ab06b4db1269282764562ed6b9458c194a8294815a00faee922893edf0cb019271cd07120cb0f28af372826954600e1046d6e66e4ad72708c"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:11:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 271.512136] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f00000000c0), &(0x7f0000000100)) mknod(&(0x7f0000000140)='./file0\x00', 0x1040, 0x0) fchdir(r0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000004c0)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000380), &(0x7f00000005c0), &(0x7f0000001880), &(0x7f0000001900)) open$dir(&(0x7f00000001c0)='./file0\x00', 0x282, 0x0) 22:11:55 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x7, 0x20001800, 0x400, 0x3, 0x9, 0x8, 0x1, 0x3, 0xfffffffffffffe00, 0x9}, 0x10) r0 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="d1", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, r1) 22:11:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = gettid() r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) rt_sigprocmask(0x0, &(0x7f0000016ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) [ 271.662892] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 271.673790] binder: 17610:17611 got reply transaction with no transaction stack [ 271.681443] binder: 17610:17611 transaction failed 29201/-71, size 0-0 line 2759 22:11:55 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='sched\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000100)='$\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:55 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, 0xffffffffffffffff) r1 = epoll_create1(0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x82, 0x8b, &(0x7f0000000200)="876cc4cce1cf2941b18ea3a3007cc90cda7dad65a25360c9101f79e9365409d3d432b426f4d3af74980681b5f3ab07a644b7e7d568f312d8a537cac9376daeba6f6d4fee7474a51d2356870b264381b3988d7e4a0fc74b1d8d13f82f917642ad86e2ff7c565ed09c5b00672a7e6fb5e136a1f076f0d7567b5475dcb71512ecec3027", &(0x7f00000002c0)=""/139, 0x2}, 0x28) r3 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f00000000c0)=[{r1, 0xfffffffffffffffd}], 0x1, 0x7be2) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) getresuid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x27b, 0xffffffff, &(0x7f0000e1d000), 0x8) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000140)={0x80000005}) [ 271.816907] binder: 17610:17624 got reply transaction with no transaction stack [ 271.824513] binder: 17610:17624 transaction failed 29201/-71, size 0-0 line 2759 22:11:55 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfd00000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:56 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fdatasync(r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f00000000c0)=[{{}, 0x5, 0xffffffffffff76a2}, {{r2, r3/1000+30000}, 0xaa9, 0x9db, 0x2}], 0x30) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x8c1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc1105511, &(0x7f0000000280)=ANY=[@ANYBLOB="3b4c5362eef397874977883e1b9756512b3f0e80d8bd4530f4346c7d481beed991d99d427c1cd326f8ea2637731baea183a3e734e0a98f7ce1c95875b5134b569681577f58ecc4a3ebde620187486036ec6d30e02a8708edd683978e50ad52105439af50805442770710229c19ac059e0e1672db33282941ca5de1688e5de79efd6040d686558daa67ca9976f9fce251e0f084652f4738876ba9b6e5f1abbb5920795a74b7dc03d090daad441f7365f599157b310e87c8c8ec97e147d3c8b4fbf4"]) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000100)={0x7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}]}) 22:11:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 272.007946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:56 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = semget$private(0x0, 0x3, 0x80) semctl$SETVAL(r3, 0x0, 0x10, &(0x7f00000000c0)=0x100) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x604000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x7, 0x5, [0xff, 0x10001, 0x3ff, 0xff, 0x401]}, &(0x7f0000000180)=0x12) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000200)={r5, 0x9}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000240)=""/87, &(0x7f0000000300)=0x57) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 272.067814] binder: 17654:17655 got reply transaction with no transaction stack [ 272.075414] binder: 17654:17655 transaction failed 29201/-71, size 0-0 line 2759 22:11:56 executing program 4: socketpair(0xffc, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x40000000004, 0x201}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000040)={0x0, 0x1, 0x4, &(0x7f0000000000)=0x80000000}) recvmsg$kcm(r1, &(0x7f0000001e80)={&(0x7f0000000b00)=@ll, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d40)=""/225, 0xe1}], 0x1}, 0x10060) 22:11:56 executing program 0: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000001280)='./file0\x00', 0x6, 0x0, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB="000000e20000"]) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40000, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @ioapic={0x0, 0x5, 0x7fffffff, 0x2, 0x0, [{0x2, 0x0, 0x0, [], 0x1}, {0xff, 0x80000001, 0x8, [], 0xff}, {0x400, 0x55ad, 0x1, [], 0x100}, {0xfff, 0x400, 0x8, [], 0x7fff}, {0x10001, 0x8001, 0xfffffffffffffff7}, {0x73f, 0x0, 0x835, [], 0xd6}, {0xffffffff, 0x9, 0x2851}, {0x0, 0x7fff, 0x6, [], 0x7fff}, {0x8, 0x4, 0x5, [], 0x269}, {0x2fb0, 0x8a, 0xffffffffffff3b3f, [], 0x5}, {0x0, 0x1, 0x401, [], 0x401}, {0x7, 0x100, 0xae56, [], 0x800}, {0x2, 0x0, 0x80, [], 0xfffffffffffffc01}, {0x9, 0x2, 0x1, [], 0x8}, {0x80000001, 0x1, 0xfffffffffffffff9, [], 0x9}, {0x9, 0x8000, 0x1000, [], 0x10001}, {0x5, 0x8, 0x2}, {0x4, 0x4, 0x5, [], 0x7}, {0x9, 0x6, 0x2, [], 0x8}, {0x0, 0xfff, 0x9, [], 0x7f}, {0x81, 0x8001, 0x6, [], 0x7}, {0x7, 0x4, 0x10000, [], 0x9}, {0x100, 0x8001, 0x5, [], 0x2}, {0x2, 0xfffffffffffff4e9, 0x6, [], 0x6}]}}) [ 272.151781] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 272.208425] binder: 17654:17670 got reply transaction with no transaction stack [ 272.216597] binder: 17654:17670 transaction failed 29201/-71, size 0-0 line 2759 22:11:56 executing program 5: socketpair$unix(0x1, 0x80000000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000180)=""/223) 22:11:56 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x8100000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:56 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_settime(0x7, &(0x7f0000000000)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x0, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000000003100092f01a0c4689dc4000000007110"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) [ 272.268226] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 22:11:56 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="be0600000000000000117f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x200400, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)={0x4, [0x2, 0x5, 0x2, 0x7a]}, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 272.382687] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. [ 272.402283] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 272.509401] binder: 17698:17699 got reply transaction with no transaction stack [ 272.517107] binder: 17698:17699 transaction failed 29201/-71, size 0-0 line 2759 22:11:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @rand_addr}}, {{0x2, 0x0, @multicast2}}}, 0xfdb7) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000140)={{0x2, 0x4e20, @rand_addr=0x18000000}, {0x306, @broadcast}, 0x2, {0x2, 0x4e24, @local}, 'bcsf0\x00'}) 22:11:56 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) gettid() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r2, 0x1, 0x0, 0x70) close(r1) 22:11:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 272.561541] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 272.593507] binder: 17698:17707 got reply transaction with no transaction stack [ 272.601262] binder: 17698:17707 transaction failed 29201/-71, size 0-0 line 2759 22:11:56 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfd00}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:56 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x90) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000701040000007a9c070000000600e6c49652f8f7c9055ec774ab9d414f000000838eb86841a5e752000000007b92a6359d8d9cd2e75b00"], 0x8) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x33, &(0x7f0000000440)={0x1, {}, {{0xa, 0x0, 0x0, @local}}}, 0xfffffffffffffe7b) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x8, 0x200, 0x5, 0x7}, 0x14) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x100ffd, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000100)={0x1c, 0x3, 0xffff, 0xffff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x400, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000340)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x2, @local, 0x4}}}, 0xa0) ioctl$sock_proto_private(r3, 0x89eb, &(0x7f0000000380)="578463f01c9084ca8a4c20bfa2759a46c1a24a96c332bc5db6599332da131479e4ec0b46163d8970f97406763ddceb22fce2b2ea735092bd1f7990b3a1bb55d4086f36f31cecdf4f823f04b75c1d77fc26857d0851287f85f9e6c64d72cfa2718cff3acd240ca8fe0e317c50") write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x4e1d, 0x5, @loopback}, 0x1c) 22:11:56 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x800) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x1000, {0x2, 0x4e24, @rand_addr}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x2, 0x4e24, @loopback}, 0x10, 0x2, 0x0, 0x80, 0xf146, 0x0, 0x3, 0x8, 0x1}) r1 = socket$inet(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@ll={0x11, 0x1f, r2, 0x1, 0x5, 0x6, @remote}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)="02c17238ac722663e6a020652c3e09ee5b89c0b8732f01161e3a6a89fbc69ce1bedd60ad198eb80be2940fc5e7a22c3cdb500381dba4898a57d16fe7408d8c81a5afe311c9a3d44ff3a3fcf9dc9734c06a463949bec3f3701dae5d37a8b3fa868a5daed62d11", 0x66}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000480)="12a1a903d4afa3410d696f9138dd51c0dbcb84d31c04eed5c00428252b99e3488f976061f0a211472b10", 0x2a}, {&(0x7f00000004c0)="efea0a9a8cd9dc84e03eb9ed27f2a20808913fffb81df42361ef00e64b4ff91966ff65684ea1570a69de2a4f2466c36344199b491fe0dabb46efec432febaed9e2b30e14b3fb2e5a344c2bd7a3f719114b4527ccac7d71fd04fc9533a84e9615f818a85ec15836c58edd6b071f1027b1", 0x70}, {&(0x7f0000000540)="d238d6701c01be8d619b3f49caf9997ab7ec5798170263298fa1909f895fb4917aa4b63f60e24234e05acb511a505be2ac294d9e5f34c700ee4bc4957fbd54bf1c155c0c6638064228edb867149dbfa36ad7561743274c86c76281e5797571e8249349020c6c17e8f4d6b9b1841cc9a69f83ddcf4ecbf546acc3852d0b226906b8aab982e1426d605ea2227b38c9ab101f339cf93e5776c27f7a54fe5125b2124f048e3744f335fee67c37359cc41a70c6c095a6ae6678dc6d21e5aabde177317a02f60be93eb1865ba29abfaa68bb3f3447ab0b6841faff2d65f5ce3e27b9c9d0e7cf45fbca0bf58e1191ae5aa52181eefbc3339f7a", 0xf6}], 0x5, &(0x7f00000006c0)=[{0xf8, 0x105, 0x9, "8600f0de8f817777292f29495ebd65d069588cde9eac5adba47537dffe75727152abb67e81bbbee7cbac2fa5cd79afa656f2c520be0cd69b41204d7e464f3ab72907b0008ad88efc4fbf90a0635edaa786524e2b0d163f8ddc4884b3fa713fab2cb680d84e947290930fca0e11a3698a668950d72fe3f5eb1f2281c62e433fdaca73fd375821fd19b610e5427fb8f47d9a9fba5f0dc9fb46c03625b488f86c1f04484ed064bf14214f50aaceea02ff0879b8cf98d5a835061001981d6f9ad9623fa983161c1d7b8b543cf5bfc9f255cd7ade06429f5c1ca6c3e4d6029f87c3de0b6c58e30b46"}], 0xf8, 0x4004800}, 0x1}], 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000ac0)={0x2, 0x0, @loopback}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg(r0, &(0x7f0000000800)={0x0, 0x964239ea6044fbd5, &(0x7f00000008c0)=[{&(0x7f0000000840)="cf09dea6de3b8d7442e4a8dd46aa240500cae2db46897e58ebed13296ea0acdf03aa595eb501ddf875cc9a252c1854f6c1b5f1b4253157196626a41093eeee958e6c91f8b72401e086739b354bc38810db8ca9568857d6e1fe6be7c8d8c22e1aaa67f0241219f3c45b88", 0x230}], 0x2f4, 0x0, 0xd7}, 0x40) [ 272.768768] binder: 17723:17724 got reply transaction with no transaction stack [ 272.776438] binder: 17723:17724 transaction failed 29201/-71, size 0-0 line 2759 22:11:56 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") fsetxattr(r0, &(0x7f0000000080)=@random={'security.', 'wlan0nodev\x00'}, &(0x7f0000000140)='\x00', 0x1, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x8dab}]}, 0x10) sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r3 = dup3(r0, r0, 0x80000) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x15c, 0x0, &(0x7f0000000400)=[@free_buffer={0x40086303, r4}, @request_death={0x400c630e, 0x4, 0x1}, @release={0x40046306, 0x2}, @register_looper, @reply_sg={0x40486312, {{0x4, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=[0x20]}, 0xcb1}}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000002c0)=[0xf93ea6f70ebaeb87, 0x40]}, 0x7}}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000300), &(0x7f0000000340)=[0x20, 0x38, 0x38]}}, @enter_looper, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=[0x78]}, 0x6}}, @release={0x40046306, 0x1}], 0xf1, 0x0, &(0x7f0000000580)="c137ad1b64f9e7779aa66ac9f77293aac5182b0904c715fd360d7fd2d5e49e7b118bb81c7549a063aca766e0fc9487b848d6b2886773f84dea097dfe4b436ec9fd7180449703672c6b7f625041c419b385240eb6e608d283f7c34f78b1d8ac2d222f861967da5f8cf8a0bf9c264ab9f2eff9a9f4a9a564d698af67631ee44426ee97104848cd411754a37642a7413e1647ef34d8ae5bf4661db196ee729b3144a958a2cf40ecba53f163e9ce40cbc8034a3644bbddb3975264165bfd5fc1e62efd089ee91121f128e3f17391d866e2f15e220aed8429a03be8c7b48fe236a28fb662e650aa05868ef80aef28a2638f9728"}) sendmmsg(r2, &(0x7f00000092c0), 0x33b, 0x5c8) 22:11:56 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xe000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 272.867836] binder: 17723:17739 got reply transaction with no transaction stack [ 272.875498] binder: 17723:17739 transaction failed 29201/-71, size 0-0 line 2759 22:11:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:57 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060"}], 0xaaaaaaaaaaaa84c, 0x0, &(0x7f0000000140), 0x10000000000000c5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000380)="0f01f466b8c2000f00d0b9321001c00f32b903090000b800800000ba000000000f300f01cf0f00924fd8617c0f20c035080000000f22c0660f3880a26f000000b80f0000000f23d80f21f835400000e00f23f80f01cb", 0x56}], 0x0, 0x41, &(0x7f0000000080)=[@dstype3={0x7, 0x1}], 0x1) rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000200)={0x77359400}, 0xfffffffffffffe9c) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x5, 0x2) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x7, 0x8000, 0x4, 0x1, 0x2, 0x5, 0x2ae, 0x6, 0xff}) 22:11:57 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x30000, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000040)={{0x3e, @dev={0xac, 0x14, 0x14, 0x1b}, 0x4e20, 0x4, 'nq\x00', 0x2, 0x7fffffff, 0x15}, {@local, 0x4e20, 0x10000, 0x5, 0xb1, 0x1}}, 0x44) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x7, 0x7f}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={r1, 0x7}, 0x8) sendmsg$rds(r0, &(0x7f0000001400)={&(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000200)=""/174, 0xae}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/169, 0xa9}], 0x3, &(0x7f00000013c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x400, 0x2000000000}}], 0x18, 0x40}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001440)=@req={0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0xfff}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$mice(&(0x7f00000014c0)='/dev/input/mice\x00', 0x0, 0x8000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001500)={{{@in6=@loopback, @in6=@ipv4={[], [], @rand_addr}}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000001600)=0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001640), 0x13f, 0x100d}}, 0x20) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000016c0)={{0xa, 0x4e24, 0x80, @dev={0xfe, 0x80, [], 0x20}}, {0xa, 0x4e21, 0x9, @ipv4={[], [], @multicast2}, 0x100000000}, 0x0, [0x3, 0xaae3, 0x80000000, 0xfffffffffffffffc, 0x38ba, 0x5, 0x8, 0xffff]}, 0x5c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000001740)={r1, 0x5}, &(0x7f0000001780)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000017c0)={r4, 0xbe, "08a082f68fd964bde14c47523c4960a7e83a3a0a5f5506cf2ae302a63ee8b2c3fd8517968e3845747cb847bf1ec471dd5ffb0be115afccfd2075e30a322ab8973dedf66ec828feadd604b5c245ae43902fe7211f17c241ca3092632e0d795679a3f39d4cf9c7627c57f5c3dbd9cdb7be642cfa65740592711f7c45b456487fba1469c441fca97b796b57ce53c43633b088653984ff23630e8c5d694fdf358cdd7cd70337cea9558d6bd48d1c71c7cdc05d899004f2fb57ea758a4bc89df2"}, &(0x7f00000018c0)=0xc6) sendmsg$rds(r3, &(0x7f0000002f40)={&(0x7f0000001900)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000002bc0)=[{&(0x7f0000001940)=""/164, 0xa4}, {&(0x7f0000001a00)=""/177, 0xb1}, {&(0x7f0000001ac0)=""/226, 0xe2}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x4, &(0x7f0000002dc0)=[@rdma_dest={0x18, 0x114, 0x2, {0x6, 0x7f88}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002c00)=""/76, 0x4c}, &(0x7f0000002c80)}}, @mask_cswp={0x58, 0x114, 0x9, {{0xa1, 0x6dfc8085}, &(0x7f0000002cc0), &(0x7f0000002d00)=0x101, 0x7, 0x6, 0x52d5, 0xe43, 0x10, 0x7f}}, @rdma_dest={0x18, 0x114, 0x2, {0x4, 0x8000}}, @fadd={0x58, 0x114, 0x6, {{0x1, 0x2}, &(0x7f0000002d40)=0x45, &(0x7f0000002d80)=0xff, 0x9, 0x0, 0x6, 0x1ff, 0x10, 0x4ea1e5a000000000}}, @rdma_dest={0x18, 0x114, 0x2, {0xb690, 0x1f}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xffffffff}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x9}}], 0x158, 0x8000}, 0x40001) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x3) socketpair(0x11, 0x801, 0x81, &(0x7f0000002f80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000002fc0)) r6 = add_key$keyring(&(0x7f0000003000)='keyring\x00', &(0x7f0000003040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r6, &(0x7f0000003080)="bae3e82553f764c00819d17a6bdb10aac1aeb507c084a84d38587faad766ee7ba8833d3aa86041ed4c0e1c2848176615df4db1fbcf00269ce3a48d02b6c2f7b5251e68b4a16e93d30f697efbfbab09ae360bf22557ad86fc94f780fbaa596801e023b5348698e3f870670da28805ff1f982cd7b1b206684ff56769a428bbf9e21df07307465c92ca30014b3b1fd4ba64ac90e03141659b5fd5d20cc37507a8f56583aefc4d0e", 0xa6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000003140)=0xfb58, 0x4) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000003180), &(0x7f00000031c0)=0x10) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$inet6(0xa, 0x8000f, 0x10001, &(0x7f0000003200)) write$P9_RLOPEN(r3, &(0x7f0000003240)={0x18, 0xd, 0x2, {{0x2, 0x2, 0x5}, 0x6}}, 0x18) timerfd_create(0x0, 0x80000) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000003280)={0x6, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e23, 0x4, 'sed\x00', 0x20, 0x7, 0x61}, 0x2c) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f00000032c0)={'syzkaller1\x00', {0x2, 0x4e23, @remote}}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000003300)={r4, 0xfd, "2d8d8794d858d711ff0a95323bcae50c5d334124655d261d26f054a101def0fb5f6e05fe06843df35a9b8f388e5f98f705bd41cf7672cf57a87474f8aa937d1b3cb9c28732152aa138ae3e86b8d380a8da87d7c6faf63d1095043faa49ffeec260cf235a5f8f975ca90c96204fec7b488d1b100655ae901b1d0737fb5d8f6554d1c2c787580517c49bf117e22d620586b15aee6aaa41e6fe6d03aa452d36efddf6fbd5419312be4b5fcc1f3500461137ac191049082831a5f085be28b39aa994ba5501b5d09115a9fe78ab0b4df4a125b38958b03fa539ea74ca60de6bfba811122863d9b00ea8bd6c8b1ae2ce4cc8c2f079adbda55054270a2df0fab6"}, &(0x7f0000003440)=0x105) ioctl$sock_bt_hci(r0, 0x400448ff, &(0x7f0000003480)="880cce0bbccf1f6e730e13f638da8b7c8ed1c85fe77411486ef65b1a0fac3c8f2f18b1481535225719f2af16aad05795848b2f0d57f11bfb8bbdc5bfc1a7cb420152ebb4a6d6ae3ae94c0243d1a918e7b018dc60d2757a0039fd80a4debe0c20778dea72328025bf870b0323b9fbba323f186a169c40596861432795c61cb56244f1c9ffb8e52c67e450323cb33d5313843b268066c901be3d82360d7be0f8b470a6754d08cf") 22:11:57 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xa}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:57 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006, 0x8]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x6, 0x40002) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80040200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x700, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200000, 0x0) fremovexattr(r1, &(0x7f0000000300)=@random={'trusted.', '/dev/full\x00'}) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) [ 273.187206] binder: 17756:17769 got reply transaction with no transaction stack [ 273.194793] binder: 17756:17769 transaction failed 29201/-71, size 0-0 line 2759 22:11:57 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)="d05e587b71c28600630ada368e74", 0xe, 0xfffffffffffffff9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)=0x0) keyctl$chown(0x4, r2, r3, r4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) r7 = open(&(0x7f00000002c0)='./file0\x00', 0x4000, 0x80) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x6, @mcast1, 0xffff}}, 0xfffffffffffffff9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$llc_int(r7, 0x10c, 0x0, &(0x7f0000000080), &(0x7f0000000780)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000007c0)={r8, 0x3}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000400)={r8, 0x7ff}, &(0x7f0000000440)=0x8) ioctl$sock_inet_SIOCRTMSG(r6, 0x890d, &(0x7f0000000540)={0x80000000, {0x2, 0x4e20, @rand_addr=0xeded}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e23, @local}, 0x280, 0xffff, 0x3, 0xfff, 0x370, &(0x7f0000000500)='teql0\x00', 0x3ff, 0x1000, 0x8b94}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000480)={0x6, 0x3, 0x2, 0xffffffffffffa4a8, 0x7, 0x80000001, 0x24000, 0x3}, &(0x7f00000004c0)={0xdf, 0x8, 0x80000000, 0x4, 0x2, 0xa06e, 0x6, 0xfffffffffffffdff}, &(0x7f00000005c0)={0x1, 0x7, 0x2, 0x400, 0x1ff, 0x3, 0xf7c, 0x3f}, &(0x7f0000000740)={r9, r10+10000000}, &(0x7f00000006c0)={&(0x7f0000000700)={0x2}, 0x8}) setsockopt$llc_int(r7, 0x10c, 0xd, &(0x7f0000000680)=0x8, 0x4) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000000d0000400500000005000000000100000000004002000000010000000000000025000001ffffffff00040000000000000a00000048"]) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000840)={0xd4e2, 0x8, 0x80000000, 0x6}, 0x8) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000008e030000000000000000000000000000dac856931d49a986a6d62666"]) 22:11:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 273.276582] binder: 17756:17782 got reply transaction with no transaction stack [ 273.284133] binder: 17756:17782 transaction failed 29201/-71, size 0-0 line 2759 22:11:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x7530}}, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000240)=""/4096) setitimer(0x1, &(0x7f00000001c0), &(0x7f0000000200)) 22:11:57 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x2001, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="bee1c9c8bec07ae46f00000000000039bc9b35c2587869dfb435a870494c67432a1fe11600ac3953c3aeba9903a94fccd7"], 0x4) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000380)={0x9, 0x0, 0x3, 0x2, 0xfedc}) r3 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x400, 0x400) ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80605414, &(0x7f0000000300)=""/87) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000240)=""/119) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x10000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="6afda3725854edb846e856d552c1ea3db68da4fcb46b1581fad771e6534621b0dbde17cc4fb310a7ec59d6dba96ef5", 0x2f) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000480)=0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f00000004c0)=r6, 0x4) 22:11:57 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x3f00}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:57 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 273.527776] binder: 17805:17807 got reply transaction with no transaction stack [ 273.535406] binder: 17805:17807 transaction failed 29201/-71, size 0-0 line 2759 [ 273.585295] binder: 17805:17812 got reply transaction with no transaction stack [ 273.592888] binder: 17805:17812 transaction failed 29201/-71, size 0-0 line 2759 22:11:58 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0x74, &(0x7f0000000000)) sched_yield() sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f84ff0)={&(0x7f0000f88fa0)=ANY=[@ANYBLOB="020500002c000000000000000000000005000600000000000a0000000000000000000000000000000000000000000001000000000000000002000100000000000000000000000000030005000000000002000000000000000000000000ab0000"], 0x60}}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x4, 0x404000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r2, 0x1b}}, 0x10) 22:11:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:58 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x81000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000080)=0x2000000000007, 0xfffffffffffffd9b) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000300), 0x0) 22:11:58 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)="7b259844d3473ad1341152f4353222ae60ea2a16f200c27efca12b090a059260e7da8d9983", 0x25}, {&(0x7f0000000100)="155e689e080493c4f1539387420dc5f78c353fac973a90ca58bc48cb721cc826136c1604157f0595783df488a223bf63610362c90470cf91a44c4117115191bc9537c8452953b798e12fc33e30e8c69cee8499415479a9fd59ba7c092133aa7cb18ec4e108edd0402214af4fd1c97954cd6146859964437e21c391ccee32b23b3de2183a5e59ef790b696f4600380f", 0x8f}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000000200)="20c20e3ba3896b16ba06319eacea8603277e53c2a9e326bf75561fd87c5521ad543fb20bcc2d6a9ccc649c48e6d11f52169a9e14c2ca", 0x36}, {&(0x7f0000000240)="c3f240493c8424357a774f6bee86675934e7cb9f3001df8f47", 0x19}], 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7b, 0xbff, [0xc1, 0x0, 0x40000003]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') name_to_handle_at(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="96000000000060000247f189db2c5b618133ca508114f440703a4d938b2df4f63c20598da47446216091842599030b7d34a576cb1a97be985503ac81021ff7dc28858f60142c799380b34820272ff38a0bb6d10411c6efb6cfb23157e8cb16b8cc361ae9cbe34566b879017d8b21552c31899a5206f642dceafa058b32259f2dc8dfefa95547b2bfa20babb5d76c5c38c175d45c762d"], &(0x7f0000000880), 0x400) [ 274.018725] binder: 17823:17825 got reply transaction with no transaction stack [ 274.026288] binder: 17823:17825 transaction failed 29201/-71, size 0-0 line 2759 22:11:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:58 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x8100}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 274.093948] binder: 17823:17841 got reply transaction with no transaction stack [ 274.101593] binder: 17823:17841 transaction failed 29201/-71, size 0-0 line 2759 [ 274.105184] kvm [17839]: vcpu2, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 22:11:58 executing program 0: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='\x00', 0xffffffffffffff9c}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet(0x10, 0x3, 0xc) fchmod(r0, 0xc) fcntl$notify(r2, 0x402, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3f}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e22, 0x0, @mcast2, 0x7a74}}, 0x0, 0x2, 0x7, 0x8, 0xffff}, &(0x7f0000000240)=0x98) sendmsg(r3, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000170a07041dfffd946fa2830020200a0009000200801d85687f0000000400ff7e280000000b0a43ba5d8060000000060000000029ec2400020cd37ed01cc0730ec279b2fcbf4042d128bb23f5a5c06c9e6beab2bd0a85ef2ed37eb9b3a5846a643a9298616b80b8565994e98250d9ee20655b7cd8e2075b64dcc1ed34", 0x80}], 0x1}, 0x4000000) 22:11:58 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = getpgid(0xffffffffffffffff) ptrace(0x11, r1) dup3(r0, r0, 0x0) socket$packet(0x11, 0xa, 0x300) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000000)=""/186, 0xba}, {&(0x7f00000000c0)=""/153, 0x99}, {&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f0000000300)=""/232, 0xe8}, {&(0x7f0000000200)=""/121, 0x79}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/107, 0x6b}], 0x7, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaa0000000008004600002c0000000001849085ac1414aa8000000044040600000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907aec0f"], &(0x7f00000002c0)) 22:11:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:58 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006, 0x0, 0x0, 0x180, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) get_thread_area(&(0x7f00000000c0)={0x8, 0x100000, 0x4000, 0x9, 0x9, 0x5, 0x7, 0x9, 0xda, 0xd635}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:58 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xffffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 274.243557] kvm [17839]: vcpu2, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 274.267836] nla_parse: 6 callbacks suppressed [ 274.267846] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. 22:11:58 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x400) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x80000, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x1, 0x4) r4 = accept$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0xef3e8bc41cdad8d9) ppoll(&(0x7f0000000180)=[{r0, 0x10}, {r0, 0x30}, {r3, 0x100}, {r2, 0x100}, {r0, 0x8000}, {r0, 0x40}, {r1, 0x200}, {r0, 0x8544}, {r1, 0x296333933eaa9061}, {r1, 0x2000}], 0xa, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280), 0x8) r5 = accept$alg(r2, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000300)=0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000005c0)=0xfffffffffffff3f6, 0x4) getsockopt$inet_int(r3, 0x0, 0x3e, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendfile(r5, r1, &(0x7f0000000240), 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000003c0)={0x3, 0x7f, 0x2, 0x8c3, 0x101, 0x4, 0x8, 0x80, 0x0}, &(0x7f0000000400)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000540)={r6, 0xdc, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x6, @mcast2, 0x7}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, @in6={0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, [], 0x1f}, 0xffffffff}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0xa}, 0x47}, @in6={0xa, 0x4e23, 0x1ff, @ipv4={[], [], @loopback}, 0x4}, @in={0x2, 0x4e23}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x101, @mcast2, 0x10001}]}, &(0x7f0000000580)=0x10) fchdir(r4) [ 274.343566] binder: 17869:17870 got reply transaction with no transaction stack [ 274.351193] binder: 17869:17870 transaction failed 29201/-71, size 0-0 line 2759 [ 274.377862] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100000000000008, &(0x7f0000000100)="035cc8070014798f7640186ba640c952ff592e6c8b70") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setname(0x22, &(0x7f0000000000)='\x00') fdatasync(r1) [ 274.391370] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 274.428344] binder: 17869:17880 got reply transaction with no transaction stack [ 274.436093] binder: 17869:17880 transaction failed 29201/-71, size 0-0 line 2759 [ 274.474938] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000640)=""/202) accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@loopback, 0x46, r2}) 22:11:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x48c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:58 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002480)='/dev/vsock\x00', 0x101000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000024c0)) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f0000000040)="2e2f66696c6530000000000000000005b400", 0x0, 0x0, &(0x7f0000000480), 0xc800, &(0x7f00000000c0)={[{@resize={'resize', 0x3d, 0x6}}, {@jdev={'jdev', 0x3d, "2e2f66696c6530000000000000000005b4"}}]}) 22:11:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:58 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r3, 0x43) r4 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x20}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 22:11:58 executing program 5: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x3fffffa) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) pwritev(r0, &(0x7f0000003440)=[{&(0x7f0000001100)='I', 0x1}], 0x1, 0x40000) fcntl$addseals(r0, 0x409, 0xd) fallocate(r0, 0x20, 0xc000, 0x8000) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x8, 0x6, 0x1, 0x9}) [ 274.612924] Unknown ioctl 21531 22:11:58 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x400000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 274.686722] binder: 17898:17913 got reply transaction with no transaction stack [ 274.694345] binder: 17898:17913 transaction failed 29201/-71, size 0-0 line 2759 [ 274.694363] Unknown ioctl 21531 22:11:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 274.761704] binder: 17898:17913 got reply transaction with no transaction stack [ 274.769376] binder: 17898:17913 transaction failed 29201/-71, size 0-0 line 2759 22:11:58 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000001c0)={{0x3, 0x0, 0x8, 0x4, 'syz0\x00', 0x1}, 0x4, 0x30, 0x10000, r3, 0x4, 0x7, 'syz1\x00', &(0x7f0000000180)=['@/eth0\x00', 'mime_typesystem-ppp0\x00', '\x00', '/dev/rfkill\x00'], 0x29, [], [0x200000000, 0x2, 0x2c, 0x7]}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="490fc7ad0100000066b848000f00d841ddcec7f8dca60000460f358fe838cc2e088fc97001d10f20d835080000000f22d8f26664460f2086450fc72c60", 0x3d}], 0x1, 0x0, &(0x7f0000000140), 0x0) 22:11:58 executing program 3 (fault-call:2 fault-nth:0): r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:58 executing program 0: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) open(&(0x7f0000000480)='./bus\x00', 0x400000, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x10000}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={r2, 0xffffffffffffff00, 0x0, 0x1ff}, &(0x7f0000000200)=0x18) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000380)=""/240, &(0x7f0000000240)=0xf0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000005c0)={r4, 0xfffffffffffffd87, "010b6d08efc84fba08e029dd6661a26f691ad0952de1822b204855be3ecda5eddbb7483d548c9b39f6b47a0826544213560357cc997247f0e41e9bbb"}, &(0x7f0000000100)=0x44) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) mlock(&(0x7f0000008000/0x2000)=nil, 0x2000) open_by_handle_at(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5e000000070000008486dafe9587175712678dd169bba586fa6abc4fd01719ca64d83ee568a65a460c01af9b8b5f7c9a6efe6261edfe64cc805dc5f033972799cc8fc482e1e3d29ba7d6a0484aef95a84dfdc9ab610000000000000000008f1294494ae85910083669528c32a6cbd9a65ab302771365190b3ae05c220f9e3af968731b8d8cc80e1598628f702b90365eb9e71711d9bbd56d03152f48b0ba1b465cc78c25c7dab51bce30a9a3e68cdf711cc4ba57003afdc771336f1369956e09b7d4f1dab68a818b563111ed605057"], 0x4000) [ 274.810592] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 274.838817] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 274.904548] FAULT_INJECTION: forcing a failure. [ 274.904548] name failslab, interval 1, probability 0, space 0, times 0 [ 274.915900] CPU: 1 PID: 17931 Comm: syz-executor3 Not tainted 4.18.0-rc8+ #184 [ 274.923268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.932712] Call Trace: [ 274.935324] dump_stack+0x1c9/0x2b4 [ 274.938976] ? dump_stack_print_info.cold.2+0x52/0x52 [ 274.944200] should_fail.cold.4+0xa/0x1a [ 274.948292] ? trace_hardirqs_on+0x10/0x10 [ 274.952540] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 274.957664] ? print_usage_bug+0xc0/0xc0 [ 274.961768] ? find_held_lock+0x36/0x1c0 [ 274.965864] ? check_same_owner+0x340/0x340 [ 274.970203] ? rcu_note_context_switch+0x730/0x730 [ 274.975152] __should_failslab+0x124/0x180 [ 274.979401] should_failslab+0x9/0x14 [ 274.983230] kmem_cache_alloc_node+0x272/0x780 [ 274.987832] ? graph_lock+0x170/0x170 [ 274.991650] ? lock_acquire+0x1e4/0x540 [ 274.995645] __alloc_skb+0x119/0x770 [ 274.999372] ? graph_lock+0x170/0x170 [ 275.003186] ? skb_scrub_packet+0x520/0x520 [ 275.007521] ? find_held_lock+0x36/0x1c0 [ 275.011604] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 275.017179] ? _parse_integer+0x13b/0x190 [ 275.021342] ? find_held_lock+0x36/0x1c0 [ 275.025434] ? security_socket_getpeersec_dgram+0x95/0xc0 [ 275.030989] netlink_sendmsg+0xb29/0xfd0 [ 275.035098] ? netlink_unicast+0x760/0x760 [ 275.039354] ? security_socket_sendmsg+0x94/0xc0 [ 275.044120] ? netlink_unicast+0x760/0x760 [ 275.048365] sock_sendmsg+0xd5/0x120 [ 275.052091] sock_write_iter+0x362/0x5c0 [ 275.056166] ? sock_sendmsg+0x120/0x120 [ 275.060168] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 275.065713] ? iov_iter_init+0xc9/0x1f0 [ 275.069714] __vfs_write+0x6c6/0x9f0 [ 275.073446] ? kernel_read+0x120/0x120 [ 275.077346] ? wait_for_completion+0x8d0/0x8d0 [ 275.081959] ? rw_verify_area+0x118/0x360 [ 275.086121] vfs_write+0x1f8/0x560 [ 275.089674] ksys_write+0x101/0x260 [ 275.093313] ? __ia32_sys_read+0xb0/0xb0 [ 275.097390] ? syscall_slow_exit_work+0x500/0x500 [ 275.102241] ? ksys_ioctl+0x81/0xd0 [ 275.105881] __x64_sys_write+0x73/0xb0 [ 275.109784] do_syscall_64+0x1b9/0x820 [ 275.113687] ? finish_task_switch+0x1d3/0x870 [ 275.118195] ? syscall_return_slowpath+0x5e0/0x5e0 [ 275.123140] ? syscall_return_slowpath+0x31d/0x5e0 [ 275.128084] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 275.133461] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 275.138319] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 275.143517] RIP: 0033:0x457089 [ 275.146754] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 275.166169] RSP: 002b:00007fef0af0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 275.173889] RAX: ffffffffffffffda RBX: 00007fef0af0f6d4 RCX: 0000000000457089 [ 275.181167] RDX: 000000000000001f RSI: 0000000020000080 RDI: 0000000000000003 [ 275.188477] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 275.195756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 22:11:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:59 executing program 5: [ 275.203081] R13: 00000000004d6930 R14: 00000000004c7a18 R15: 0000000000000000 22:11:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:11:59 executing program 5: [ 275.295084] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:11:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 275.389742] binder: 17951:17954 got reply transaction with no transaction stack [ 275.397310] binder: 17951:17954 transaction failed 29201/-71, size 0-0 line 2759 22:11:59 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:59 executing program 4: r0 = memfd_create(&(0x7f00000000c0)="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", 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="73797a318a268707f496b3d029"], 0xd) sendfile(r0, r0, &(0x7f0000001000), 0x10000000000ffff) fcntl$addseals(r0, 0x409, 0x6) fallocate(r0, 0x0, 0x0, 0x101) 22:11:59 executing program 0: 22:11:59 executing program 5: 22:11:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:59 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x2b060000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:59 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="b29ee46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:11:59 executing program 0: 22:11:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 275.803149] binder: 17987:17989 got reply transaction with no transaction stack [ 275.810795] binder: 17987:17989 transaction failed 29201/-71, size 0-0 line 2759 22:11:59 executing program 3 (fault-call:2 fault-nth:1): r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:11:59 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0x7e) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) dup2(r0, r2) 22:11:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x80000000000046, 0x0) clock_gettime(0x0, &(0x7f0000003380)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000033c0)={{0x0, 0x1c9c380}, {r1, r2+30000000}}, &(0x7f0000003400)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") sendfile(r0, r3, &(0x7f0000000000), 0x2b428a52) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x101001, 0x0) 22:11:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, &(0x7f0000000300)}) 22:11:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:11:59 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xc501}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:11:59 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x400000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 275.889178] binder: 17987:17995 got reply transaction with no transaction stack [ 275.896751] binder: 17987:17995 transaction failed 29201/-71, size 0-0 line 2759 22:12:00 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x2c06}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:12:00 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(r2, 0x0) readahead(r0, 0x0, 0x40004000) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000100)) 22:12:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:12:00 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:12:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:12:00 executing program 4: r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) poll(&(0x7f0000002800)=[{r0}], 0x8f, 0xf038) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000000)={0x7}) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) 22:12:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$bt_rfcomm(r1, &(0x7f0000000440)={0x1f, {0xffffffffffffffff, 0x100000000, 0x4}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0xffff0000, 0x1a, 0x1700, {0x0, &(0x7f0000000280), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x20) 22:12:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x20001ddc}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:12:00 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00') getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) write$FUSE_POLL(r3, &(0x7f0000000180)={0x18, 0x0, 0x3, {0x7fffffff}}, 0x18) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="be509b73645e1e1179c978ee4bd68ba24a737ae46f"], 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 276.259952] binder: 18038:18042 got reply transaction with no transaction stack [ 276.267624] binder: 18038:18042 transaction failed 29201/-71, size 0-0 line 2759 [ 276.337411] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 276.384618] binder: 18038:18058 got reply transaction with no transaction stack [ 276.392225] binder: 18038:18058 transaction failed 29201/-71, size 0-0 line 2759 [ 276.394692] FAULT_INJECTION: forcing a failure. [ 276.394692] name failslab, interval 1, probability 0, space 0, times 0 [ 276.411163] CPU: 1 PID: 18060 Comm: syz-executor3 Not tainted 4.18.0-rc8+ #184 [ 276.418543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.427922] Call Trace: [ 276.430540] dump_stack+0x1c9/0x2b4 [ 276.434198] ? dump_stack_print_info.cold.2+0x52/0x52 [ 276.439409] ? kernel_text_address+0x79/0xf0 [ 276.443844] should_fail.cold.4+0xa/0x1a [ 276.447933] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 276.453509] ? save_stack+0x43/0xd0 [ 276.457148] ? kasan_kmalloc+0xc4/0xe0 [ 276.461059] ? find_held_lock+0x36/0x1c0 [ 276.465157] ? check_same_owner+0x340/0x340 [ 276.469487] ? rcu_note_context_switch+0x730/0x730 [ 276.474430] __should_failslab+0x124/0x180 [ 276.478677] should_failslab+0x9/0x14 [ 276.482488] kmem_cache_alloc_node_trace+0x26f/0x770 [ 276.487618] __kmalloc_node_track_caller+0x33/0x70 [ 276.492567] __kmalloc_reserve.isra.40+0x3a/0xe0 [ 276.497337] __alloc_skb+0x155/0x770 [ 276.501063] ? graph_lock+0x170/0x170 [ 276.504868] ? skb_scrub_packet+0x520/0x520 [ 276.509189] ? find_held_lock+0x36/0x1c0 [ 276.513260] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 276.518806] ? _parse_integer+0x13b/0x190 [ 276.522968] ? find_held_lock+0x36/0x1c0 [ 276.527062] ? security_socket_getpeersec_dgram+0x95/0xc0 [ 276.532621] netlink_sendmsg+0xb29/0xfd0 [ 276.536701] ? netlink_unicast+0x760/0x760 [ 276.540960] ? security_socket_sendmsg+0x94/0xc0 [ 276.545722] ? netlink_unicast+0x760/0x760 [ 276.549965] sock_sendmsg+0xd5/0x120 [ 276.553699] sock_write_iter+0x362/0x5c0 [ 276.557787] ? sock_sendmsg+0x120/0x120 [ 276.561784] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 276.567326] ? iov_iter_init+0xc9/0x1f0 [ 276.571314] __vfs_write+0x6c6/0x9f0 [ 276.575050] ? kernel_read+0x120/0x120 [ 276.578956] ? wait_for_completion+0x8d0/0x8d0 [ 276.583573] ? rw_verify_area+0x118/0x360 [ 276.587735] vfs_write+0x1f8/0x560 [ 276.591288] ksys_write+0x101/0x260 [ 276.594926] ? __ia32_sys_read+0xb0/0xb0 [ 276.598992] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 276.604549] ? ksys_ioctl+0x81/0xd0 [ 276.608192] __x64_sys_write+0x73/0xb0 [ 276.612601] do_syscall_64+0x1b9/0x820 [ 276.616516] ? finish_task_switch+0x1d3/0x870 [ 276.621029] ? syscall_return_slowpath+0x5e0/0x5e0 [ 276.625976] ? syscall_return_slowpath+0x31d/0x5e0 [ 276.630916] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 276.636295] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 276.641155] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 276.646345] RIP: 0033:0x457089 [ 276.649534] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 276.669089] RSP: 002b:00007fef0af0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 276.676805] RAX: ffffffffffffffda RBX: 00007fef0af0f6d4 RCX: 0000000000457089 [ 276.684081] RDX: 000000000000001f RSI: 0000000020000080 RDI: 0000000000000003 [ 276.691354] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 276.698625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 276.705895] R13: 00000000004d6930 R14: 00000000004c7a18 R15: 0000000000000001 22:12:00 executing program 3 (fault-call:2 fault-nth:2): r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:12:00 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x5}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:12:00 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') fchdir(r0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040)) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)='-') 22:12:00 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000080), 0x48}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000003c0)=""/4096, &(0x7f0000000040)=0x1000) 22:12:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x7ffff000}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:12:00 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x7ffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="be7ae45da0ff08cb2eee2c7d03241f6f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:12:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x11}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:12:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000), 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=ANY=[@ANYBLOB="3c0100001000030200000000000002000000000000000000000000000000e5022bb2000100000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000033000000ac14ffbb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x13c}}, 0x0) 22:12:00 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:12:00 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:12:00 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') fchdir(r0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040)) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)='-') [ 276.872379] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 276.950968] netlink: 'syz-executor3': attribute type 3 has an invalid length. [ 276.973428] FAULT_INJECTION: forcing a failure. [ 276.973428] name failslab, interval 1, probability 0, space 0, times 0 [ 276.984884] CPU: 1 PID: 18089 Comm: syz-executor3 Not tainted 4.18.0-rc8+ #184 [ 276.992254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.001615] Call Trace: [ 277.004226] dump_stack+0x1c9/0x2b4 [ 277.007876] ? dump_stack_print_info.cold.2+0x52/0x52 [ 277.013125] should_fail.cold.4+0xa/0x1a [ 277.017222] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 277.022351] ? lock_downgrade+0x8f0/0x8f0 [ 277.026532] ? nfnl_log_net_init+0x4a0/0x4a0 [ 277.030979] ? find_held_lock+0x36/0x1c0 [ 277.035099] ? check_same_owner+0x340/0x340 [ 277.039445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 277.045013] ? rcu_note_context_switch+0x730/0x730 [ 277.049989] __should_failslab+0x124/0x180 [ 277.054255] should_failslab+0x9/0x14 [ 277.058074] kmem_cache_alloc_node+0x272/0x780 [ 277.062677] ? __asan_poison_stack_memory+0x37/0x40 [ 277.067719] ? nfnetlink_rcv_msg+0x67c/0x1070 [ 277.072243] __alloc_skb+0x119/0x770 [ 277.075978] ? skb_scrub_packet+0x520/0x520 [ 277.080308] ? nfnetlink_bind+0x3b0/0x3b0 [ 277.084482] ? find_held_lock+0x36/0x1c0 [ 277.088579] ? lock_downgrade+0x8f0/0x8f0 [ 277.092764] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 277.097799] netlink_ack+0x2df/0xbe0 [ 277.101526] ? kasan_check_read+0x11/0x20 [ 277.105718] ? netlink_sendmsg+0xfd0/0xfd0 [ 277.109969] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 277.115525] netlink_rcv_skb+0x35d/0x440 [ 277.119606] ? nfnetlink_bind+0x3b0/0x3b0 [ 277.123781] ? netlink_ack+0xbe0/0xbe0 [ 277.127685] ? __netlink_ns_capable+0x100/0x130 [ 277.132367] nfnetlink_rcv+0x1c0/0x4d0 [ 277.136262] ? nfnetlink_rcv_batch+0x1910/0x1910 [ 277.141059] ? kasan_check_write+0x14/0x20 [ 277.145315] netlink_unicast+0x5a0/0x760 [ 277.149392] ? netlink_attachskb+0x9a0/0x9a0 [ 277.153821] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 277.158853] netlink_sendmsg+0xa18/0xfd0 [ 277.162933] ? netlink_unicast+0x760/0x760 [ 277.167187] ? security_socket_sendmsg+0x94/0xc0 [ 277.171947] ? netlink_unicast+0x760/0x760 [ 277.176196] sock_sendmsg+0xd5/0x120 [ 277.179922] sock_write_iter+0x362/0x5c0 [ 277.183994] ? sock_sendmsg+0x120/0x120 [ 277.187998] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 277.193571] ? iov_iter_init+0xc9/0x1f0 [ 277.197565] __vfs_write+0x6c6/0x9f0 [ 277.201292] ? kernel_read+0x120/0x120 [ 277.205189] ? wait_for_completion+0x8d0/0x8d0 [ 277.209801] ? rw_verify_area+0x118/0x360 [ 277.214058] vfs_write+0x1f8/0x560 [ 277.217615] ksys_write+0x101/0x260 [ 277.221253] ? __ia32_sys_read+0xb0/0xb0 [ 277.225325] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 277.230870] ? ksys_ioctl+0x81/0xd0 [ 277.234507] __x64_sys_write+0x73/0xb0 [ 277.238422] do_syscall_64+0x1b9/0x820 [ 277.242314] ? finish_task_switch+0x1d3/0x870 [ 277.246821] ? syscall_return_slowpath+0x5e0/0x5e0 [ 277.251761] ? syscall_return_slowpath+0x31d/0x5e0 [ 277.256705] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 277.262085] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 277.267040] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 277.272236] RIP: 0033:0x457089 [ 277.275422] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 277.294907] RSP: 002b:00007fef0af0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 22:12:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 277.302625] RAX: ffffffffffffffda RBX: 00007fef0af0f6d4 RCX: 0000000000457089 [ 277.309900] RDX: 000000000000001f RSI: 0000000020000080 RDI: 0000000000000003 [ 277.317169] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 277.324441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 277.331714] R13: 00000000004d6930 R14: 00000000004c7a18 R15: 0000000000000002 22:12:01 executing program 4: syz_mount_image$msdos(&(0x7f0000000300)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = socket(0xa, 0x7, 0x9) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000380)={0x3, "cb0e73"}, 0x4) r1 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x31, "864bffda148f85a81751918b9b169e2e9e9c8227c06227776daf2cf4e6b397be71a861c4de526ccfae28a92b945d5f8efb"}, &(0x7f00000003c0)=0x39) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000400)={r2, 0x7fffffff, 0x9, 0x6}, &(0x7f0000000440)=0xffffff12) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0xffffff43) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000140)=""/246) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000500)={r3}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000480)={r2, 0x8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00'}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x9}, &(0x7f0000000580)=0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x80000000000003e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000005c0)={'filter\x00', 0x4}, 0x68) llistxattr(&(0x7f0000000200)='./file0/file1\x00', &(0x7f0000000240)=""/90, 0x5a) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000340)=0x9, 0x4) truncate(&(0x7f0000000b00)='./file0/file1\x00', 0x201f) 22:12:01 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xc3ffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:12:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x7, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:12:01 executing program 5: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='/dev/uinput\x00', 0xffffffffffffff9c}, 0xffffffffffffffda) write$P9_RSYMLINK(r0, &(0x7f0000000240)={0x14, 0x11, 0x1, {0x8, 0x4, 0x3}}, 0x14) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000000c0)={0xffffffffffffffff, 0x3, 0x5, 0x2, 0x101}) r4 = socket(0xa, 0x3, 0x7f) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) munmap(&(0x7f000090c000/0x3000)=nil, 0x3000) dup3(r4, r5, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000100)) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendmsg$key(r1, &(0x7f0000000000)={0x1000000efffffff, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000adaea0720000e1ce62330e2000000200006ae0000001000000000100000008001200020002000000000000000000300000000000020000000000000092ab000000000001020014bb002000b30f11efbb6ae1b4036fef2b000000000000020000f3df00002100000000020000000000000000c117fc0000000000a1"], 0x80}}, 0x0) [ 277.470482] binder: 18109:18111 got reply transaction with no transaction stack [ 277.478251] binder: 18109:18111 transaction failed 29201/-71, size 0-0 line 2759 [ 277.528522] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:12:01 executing program 3 (fault-call:2 fault-nth:3): r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:12:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0xf, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:12:01 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:12:01 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = memfd_create(&(0x7f0000000000)='-eth1eth1\x00', 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0xfffffffffffffff7, 0xd, 0x3, 0x1100000000000, "23fa574db78c0c065b56faa4b1938d7330a4e9dbd83a841c860daae7762fdd5a"}) [ 277.686987] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 277.695183] FAT-fs (loop4): Filesystem has been set read-only [ 277.715478] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 277.732589] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 22:12:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x8, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 277.779686] netlink: 'syz-executor3': attribute type 3 has an invalid length. [ 277.845285] FAULT_INJECTION: forcing a failure. [ 277.845285] name failslab, interval 1, probability 0, space 0, times 0 [ 277.856766] CPU: 1 PID: 18147 Comm: syz-executor3 Not tainted 4.18.0-rc8+ #184 [ 277.864132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.873488] Call Trace: [ 277.876095] dump_stack+0x1c9/0x2b4 [ 277.879743] ? dump_stack_print_info.cold.2+0x52/0x52 [ 277.884950] ? kernel_text_address+0x79/0xf0 [ 277.889382] should_fail.cold.4+0xa/0x1a [ 277.893469] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 277.898609] ? save_stack+0xa9/0xd0 [ 277.902251] ? save_stack+0x43/0xd0 [ 277.905895] ? kasan_kmalloc+0xc4/0xe0 [ 277.909806] ? find_held_lock+0x36/0x1c0 [ 277.913904] ? check_same_owner+0x340/0x340 [ 277.918242] ? rcu_note_context_switch+0x730/0x730 [ 277.923198] __should_failslab+0x124/0x180 [ 277.927451] should_failslab+0x9/0x14 [ 277.931264] kmem_cache_alloc_node_trace+0x26f/0x770 [ 277.936398] __kmalloc_node_track_caller+0x33/0x70 [ 277.941358] __kmalloc_reserve.isra.40+0x3a/0xe0 [ 277.946134] __alloc_skb+0x155/0x770 [ 277.949860] ? skb_scrub_packet+0x520/0x520 [ 277.954189] ? nfnetlink_bind+0x3b0/0x3b0 [ 277.958353] ? find_held_lock+0x36/0x1c0 [ 277.962433] ? lock_downgrade+0x8f0/0x8f0 [ 277.966597] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 277.971625] netlink_ack+0x2df/0xbe0 [ 277.975352] ? netlink_sendmsg+0xfd0/0xfd0 [ 277.979601] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 277.985153] netlink_rcv_skb+0x35d/0x440 [ 277.989222] ? nfnetlink_bind+0x3b0/0x3b0 [ 277.993378] ? netlink_ack+0xbe0/0xbe0 [ 277.997274] ? __netlink_ns_capable+0x100/0x130 [ 278.001952] nfnetlink_rcv+0x1c0/0x4d0 [ 278.005844] ? nfnetlink_rcv_batch+0x1910/0x1910 [ 278.010613] ? kasan_check_write+0x14/0x20 [ 278.014861] netlink_unicast+0x5a0/0x760 [ 278.018935] ? netlink_attachskb+0x9a0/0x9a0 [ 278.023354] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 278.028377] netlink_sendmsg+0xa18/0xfd0 [ 278.032449] ? netlink_unicast+0x760/0x760 [ 278.036699] ? security_socket_sendmsg+0x94/0xc0 [ 278.041456] ? netlink_unicast+0x760/0x760 [ 278.045696] sock_sendmsg+0xd5/0x120 [ 278.049418] sock_write_iter+0x362/0x5c0 [ 278.053481] ? sock_sendmsg+0x120/0x120 [ 278.057468] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 278.063005] ? iov_iter_init+0xc9/0x1f0 [ 278.067000] __vfs_write+0x6c6/0x9f0 [ 278.070732] ? kernel_read+0x120/0x120 [ 278.074627] ? wait_for_completion+0x8d0/0x8d0 [ 278.079228] ? rw_verify_area+0x118/0x360 [ 278.083379] vfs_write+0x1f8/0x560 [ 278.086928] ksys_write+0x101/0x260 [ 278.090566] ? __ia32_sys_read+0xb0/0xb0 [ 278.094631] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 278.100170] ? ksys_ioctl+0x81/0xd0 [ 278.103804] __x64_sys_write+0x73/0xb0 [ 278.107698] do_syscall_64+0x1b9/0x820 [ 278.111592] ? finish_task_switch+0x1d3/0x870 [ 278.116091] ? syscall_return_slowpath+0x5e0/0x5e0 [ 278.121037] ? syscall_return_slowpath+0x31d/0x5e0 [ 278.125979] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 278.131352] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 278.136200] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.141390] RIP: 0033:0x457089 [ 278.144580] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.163941] RSP: 002b:00007fef0af0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.171651] RAX: ffffffffffffffda RBX: 00007fef0af0f6d4 RCX: 0000000000457089 [ 278.178918] RDX: 000000000000001f RSI: 0000000020000080 RDI: 0000000000000003 [ 278.186187] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 22:12:01 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xfff, 0x181000) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:12:02 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0x0, 0x10000, 0x8, 0x7ff, 0xfff}, 0x14) 22:12:02 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x6}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 278.193453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 278.200718] R13: 00000000004d6930 R14: 00000000004c7a18 R15: 0000000000000003 22:12:02 executing program 3 (fault-call:2 fault-nth:4): r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:12:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000180)) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="90"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = shmget(0x3, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) getgroups(0x2, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000500)=0xe8) r7 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000005c0)=0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000600)={{0x5, r4, r5, r6, r7, 0x100, 0xc3c}, 0x401, 0x0, 0xfffffffffffeffff, 0x4, r8, r9, 0x28}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:12:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x10, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:12:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x8d04000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 278.285866] sctp: [Deprecated]: syz-executor5 (pid 18164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.285866] Use struct sctp_sack_info instead 22:12:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x41) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000018ff4), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@generic="0141"]}]}, 0x1c}}, 0x0) 22:12:02 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffff0}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 278.405435] binder: 18176:18178 got reply transaction with no transaction stack [ 278.413080] binder: 18176:18178 transaction failed 29201/-71, size 0-0 line 2759 [ 278.426146] sctp: [Deprecated]: syz-executor5 (pid 18164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.426146] Use struct sctp_sack_info instead 22:12:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x11, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 278.460467] binder: 18176:18187 got reply transaction with no transaction stack [ 278.468094] binder: 18176:18187 transaction failed 29201/-71, size 0-0 line 2759 22:12:02 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfa01}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:12:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x1c3d010000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:12:02 executing program 5: clone(0x0, &(0x7f0000290000), &(0x7f0000186ffc), &(0x7f0000b8e000), &(0x7f0000a5e000)) setpriority(0x1, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x4, 0x9, 0x0, 'queue1\x00', 0x3}) 22:12:02 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001200ff09fffefd956fa264b724a6007e00000000000000683540150024001d001fc41180b598be593ab6821148a730bb1aa49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x191300, 0x0) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, {0xf8, 0x8, 0x1, 0x4, 0x4, 0x3f}}, 0x8) 22:12:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x3, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 278.627887] binder: 18203:18205 got reply transaction with no transaction stack [ 278.635525] binder: 18203:18205 transaction failed 29201/-71, size 0-0 line 2759 22:12:02 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:12:02 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) sysfs$3(0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:12:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x2, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:12:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x240) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f00000001c0)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) 22:12:03 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:12:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:12:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4000004e20, @loopback}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003000000000000000000000095000000000000000c1552a373b9ec5a0915c5992c2f681b3c1a09000220f3f225c133fecfc3338f083318dc9d7c628bc3051f9caacc5d61bf3be1613cd57120e8cd4b92ff129d3d63d27c5236bbcea4b6c7e69c8b0dac5a8649ac85bbd0375622d0cb2514749360ec856cf687ef81857ecdb9ae48b79978dcfc548ab69c1cb43ac7221f03397f1d5fd1e1b296e0d59a1a7e7d34c602978c9010b98990d82a49cea9a93892cf6f30df2db9db60d8136e4abf77649e4fe2eae805c9646bfd080d3561e5e301c5085a306b3589e994fe5c17fc3655c3afd4eab9b643bc858d88c94486148f14dd"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) write$binfmt_aout(r2, &(0x7f0000004e00)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x3) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) recvmmsg(r2, &(0x7f0000006e40)=[{{&(0x7f00000049c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000004b40), 0x0, &(0x7f0000004b80)=""/181, 0xb5}}], 0x1500, 0x0, &(0x7f0000004c40)={0x0, 0x1c9c380}) 22:12:03 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xc}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:12:03 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044145, &(0x7f0000001f64)) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 22:12:03 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYRES16], 0x2) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x12}) 22:12:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0, 0x200000000000000}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 279.059565] binder: 18245:18248 got reply transaction with no transaction stack [ 279.067209] binder: 18245:18248 transaction failed 29201/-71, size 0-0 line 2759 22:12:03 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="be7ae46f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f00000000c0)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:12:03 executing program 5: syz_mount_image$msdos(&(0x7f0000001a00)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16, 0x1}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000280)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000200)) fsync(0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x3d5) sendfile(r1, r1, &(0x7f00000000c0)=0x17, 0x8080fffffffe) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000002740)=ANY=[]) 22:12:03 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e21, @rand_addr=0x7fff}, @in6={0xa, 0x4e21, 0x49}, @in6={0xa, 0x4e24, 0x6, @remote, 0x8}, @in6={0xa, 0x4e23, 0x8, @empty, 0xdd}, @in={0x2, 0x4e22}], 0x74) poll(&(0x7f0000000080)=[{r0, 0xc0}, {r0, 0x400}, {r0, 0x4000}, {r0, 0x1460}, {r0, 0x404}], 0x5, 0x80000001) mount$fuseblk(&(0x7f0000000280)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='fuseblk\x00', 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}]}}) 22:12:03 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xffffffc3}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:12:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0, 0xf000000}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 279.117863] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 279.183600] netlink: 'syz-executor3': attribute type 3 has an invalid length. [ 279.195098] binder: 18245:18268 got reply transaction with no transaction stack [ 279.202763] binder: 18245:18268 transaction failed 29201/-71, size 0-0 line 2759 22:12:03 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@rc, &(0x7f0000000180)=0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000ff0)=[{0x20, 0x0, 0x0, 0x4f45}, {0x6}]}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x12800, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r2, 0x3f}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000002c0)={0x8, 0x7fff, 0x3, 0x0, 0x1, 0x2}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x10001) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r5, 0x0) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 279.297500] FAT-fs (loop5): bogus number of FAT structure [ 279.303199] FAT-fs (loop5): Can't find a valid FAT filesystem 22:12:03 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xf8010000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:12:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:12:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0, 0x7}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 279.337984] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 279.456286] FAT-fs (loop5): bogus number of FAT structure [ 279.462377] FAT-fs (loop5): Can't find a valid FAT filesystem [ 279.495570] binder: 18300:18305 got reply transaction with no transaction stack [ 279.503157] binder: 18300:18305 transaction failed 29201/-71, size 0-0 line 2759 [ 279.547331] binder: 18300:18307 got reply transaction with no transaction stack [ 279.554902] binder: 18300:18307 transaction failed 29201/-71, size 0-0 line 2759 22:12:03 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="9f0000200104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:12:03 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000140)={0x8, 0x3ff, 0x8, 0x1000, 0x7c8, 0xffff, 0x2, 0x80000000, 0x0, 0x80}) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x600, 0x101040) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, [0x5, 0x7, 0x7, 0x6, 0x0, 0x8, 0x6, 0xa90, 0x0, 0x7, 0x4, 0x0, 0xda, 0x4, 0x4]}, &(0x7f00000002c0)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={r3, 0x1, 0x20}, &(0x7f0000000340)=0xc) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 22:12:03 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x3f00000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 279.751264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 279.779449] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 279.808658] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 279.818166] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 22:12:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = socket$netlink(0x10, 0x3, 0x200000000000000c) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='{selfem0:&Twlan0security\x00'}, 0x10) write$P9_RLERRORu(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1100000000000800000000000000000000"], 0x11) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000040), 0x113, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 22:12:03 executing program 0: rt_sigaction(0x0, &(0x7f0000000000)={0x1}, &(0x7f0000000040), 0x7, &(0x7f00000000c0)) syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xbb}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e24, 0x4, @empty, 0x8}}, 0x80000001, 0x9}, &(0x7f0000000240)=0x90) 22:12:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) 22:12:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x100000000002, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendto$inet6(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) 22:12:03 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440)={0x0, 0x7530}, 0x10) accept4(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffd31, 0x80804) 22:12:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0, 0xf}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:12:03 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="c00000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:12:03 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x2c06000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 279.932156] binder: 18326:18327 got reply transaction with no transaction stack [ 279.939834] binder: 18326:18327 transaction failed 29201/-71, size 0-0 line 2759 [ 279.942404] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 22:12:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x8000, 0x40) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000003c0)=0xd70b) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x7, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "1c56400ef08dc0d7f6ffea3199772f0577915623cdca191dcc06ee3e04cd4eb98b6e444bdb49a176ca0be49468681ed3a055edd05610db8ffb464f1417af72c5677bdc0183e8da9f6e9d0d8071771351"}, 0xd8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1, 0x100) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4c}, 0xfffffffffffffce2, &(0x7f00000004c0)={&(0x7f00000005c0)={0x384, r4, 0x12, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x0, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x0, 0x4, 0x1}]}, 0x3ac}}, 0x2000003d) r5 = socket$netlink(0x10, 0x3, 0xc) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 280.000456] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 280.037941] binder: 18326:18350 got reply transaction with no transaction stack 22:12:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0, 0x100000000000000}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:12:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x8401) recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0x0, 0x0, 0x800}, 0x40010100) io_setup(0x4, &(0x7f0000000200)=0x0) io_getevents(r3, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000140)={0x1, 0x0, [{}]}) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r3, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) [ 280.045540] binder: 18326:18350 transaction failed 29201/-71, size 0-0 line 2759 [ 280.065721] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 22:12:04 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x81, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0xfffffffffffffffe, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) close(r1) close(r0) 22:12:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x100000000002, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendto$inet6(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) [ 280.119824] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:12:04 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="0f0000000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:12:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0, 0xffc99a3b00000000}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:12:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000440)='7'}) [ 280.229968] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 22:12:04 executing program 0: r0 = socket$inet6(0xa, 0x80808, 0x3e5) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000200)={@dev, @multicast2, 0x0}, &(0x7f0000000240)=0xc) getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@remote, 0xb, r5}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffff9c, 0x50, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r6, 0x4) sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 22:12:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x74, 0x101000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0xffffffff00000001) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x200000000114, 0x2710, &(0x7f00000000c0)=""/1, &(0x7f0000000000)=0x1400) 22:12:04 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfe00000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:12:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0, 0xffc99a3b}}], 0x1, 0x0, &(0x7f0000004fc0)) [ 280.354145] binder: 18380:18382 got reply transaction with no transaction stack [ 280.361741] binder: 18380:18382 transaction failed 29201/-71, size 0-0 line 2759 [ 280.370217] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 22:12:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x100000000002, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendto$inet6(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) 22:12:04 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="effd00000104fffffd3b54c007110000f30501000b000300600010d10200cf", 0x1f) 22:12:04 executing program 5: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x8, 0x8000, 0x7fffffff, 0x6]}) shutdown(r0, 0x2) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000100)={0x1, {0x0, 0x1c9c380}, 0x10001, 0x3ff}) poll(&(0x7f0000000040)=[{r0}], 0x20000000000000e6, 0x0) 22:12:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2000, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)=0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000440)={0xa0, 0x19, 0x1, {0x488, {0x8, 0x4, 0x5}, 0x4, r2, r3, 0x3e, 0x1, 0x4, 0x800, 0x3, 0x3, 0x0, 0x9, 0x874, 0x1, 0xaee, 0x0, 0x80000000, 0xa2, 0x4e9}}, 0xa0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@bridge_setlink={0x20, 0x13, 0x129}, 0x20}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 280.497787] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 280.544567] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 22:12:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424", 0x21, 0x0, &(0x7f0000000380)=@nfc, 0x80) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0, 0x3000000}}], 0x1, 0x0, &(0x7f0000004fc0)) 22:12:04 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7, 0x4d, 0xffffffffffffffff}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0x49, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") write$P9_ROPEN(r1, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x40, 0x1, 0x3}, 0x101}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'rfdno'}}]}}) [ 280.597905] binder: 18380:18408 got reply transaction with no transaction stack [ 280.600509] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 280.605524] binder: 18380:18408 transaction failed 29201/-71, size 0-0 line 2759 [ 280.674265] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 280.708739] BUG: unable to handle kernel paging request at ffffebe000000008 [ 280.715884] PGD 0 P4D 0 [ 280.718580] Oops: 0000 [#1] SMP KASAN [ 280.722391] CPU: 1 PID: 18415 Comm: syz-executor0 Not tainted 4.18.0-rc8+ #184 [ 280.729751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.739127] RIP: 0010:kfree+0xa0/0x260 [ 280.743011] Code: 82 cb 01 00 00 48 ba 00 00 00 80 ff 77 00 00 48 01 c2 48 89 df 48 b8 00 00 00 00 00 ea ff ff 48 c1 ea 0c 48 c1 e2 06 48 01 c2 <48> 8b 42 08 a8 01 48 8d 48 ff 48 0f 45 d1 4c 8b 6a 18 49 63 75 74 [ 280.762346] RSP: 0018:ffff88019605f520 EFLAGS: 00010086 [ 280.767715] RAX: ffffea0000000000 RBX: 0000000000000282 RCX: 0000000000000000 [ 280.774981] RDX: ffffebe000000000 RSI: 0000000000000000 RDI: 0000000000000282 [ 280.782254] RBP: ffff88019605f540 R08: ffffed003b6246d7 R09: ffffed003b6246d6 [ 280.789520] R10: ffffed003b6246d6 R11: ffff8801db1236b3 R12: 0000000000000282 [ 280.796785] R13: ffffffff867ded2a R14: ffff88019605f690 R15: ffff8801b09c0840 [ 280.804055] FS: 00007fbe87f25700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 280.812281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.818160] CR2: ffffebe000000008 CR3: 000000019398c000 CR4: 00000000001406e0 [ 280.825425] Call Trace: [ 280.828034] p9_client_create+0xfea/0x1770 [ 280.832286] ? p9_client_read+0xc60/0xc60 [ 280.836438] ? find_held_lock+0x36/0x1c0 [ 280.840511] ? __lockdep_init_map+0x105/0x590 [ 280.845029] ? kasan_check_write+0x14/0x20 [ 280.849270] ? __init_rwsem+0x1cc/0x2a0 [ 280.853246] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 280.858266] ? rcu_read_lock_sched_held+0x108/0x120 [ 280.863281] ? __kmalloc_track_caller+0x5f5/0x760 [ 280.868128] ? save_stack+0xa9/0xd0 [ 280.871760] ? save_stack+0x43/0xd0 [ 280.875392] ? kasan_kmalloc+0xc4/0xe0 [ 280.879279] ? kmem_cache_alloc_trace+0x152/0x780 [ 280.884125] ? memcpy+0x45/0x50 [ 280.887408] v9fs_session_init+0x21a/0x1a80 [ 280.891735] ? find_held_lock+0x36/0x1c0 [ 280.895808] ? v9fs_show_options+0x7e0/0x7e0 [ 280.900218] ? kasan_check_read+0x11/0x20 [ 280.904363] ? rcu_is_watching+0x8c/0x150 [ 280.908511] ? rcu_pm_notify+0xc0/0xc0 [ 280.912400] ? v9fs_mount+0x61/0x900 [ 280.916115] ? rcu_read_lock_sched_held+0x108/0x120 [ 280.921144] ? kmem_cache_alloc_trace+0x616/0x780 [ 280.925991] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 280.931568] v9fs_mount+0x7c/0x900 [ 280.935109] mount_fs+0xae/0x328 [ 280.938478] vfs_kern_mount.part.34+0xdc/0x4e0 [ 280.943063] ? may_umount+0xb0/0xb0 [ 280.946687] ? _raw_read_unlock+0x22/0x30 [ 280.950829] ? __get_fs_type+0x97/0xc0 [ 280.954718] do_mount+0x581/0x30e0 [ 280.958260] ? do_raw_spin_unlock+0xa7/0x2f0 [ 280.962668] ? copy_mount_string+0x40/0x40 [ 280.966917] ? copy_mount_options+0x5f/0x380 [ 280.971325] ? rcu_read_lock_sched_held+0x108/0x120 [ 280.976340] ? kmem_cache_alloc_trace+0x616/0x780 [ 280.981189] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 280.986726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 280.992260] ? copy_mount_options+0x285/0x380 [ 280.996763] ksys_mount+0x12d/0x140 [ 281.000390] __x64_sys_mount+0xbe/0x150 [ 281.004364] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 281.009385] do_syscall_64+0x1b9/0x820 [ 281.013267] ? finish_task_switch+0x1d3/0x870 [ 281.017762] ? syscall_return_slowpath+0x5e0/0x5e0 [ 281.022695] ? syscall_return_slowpath+0x31d/0x5e0 [ 281.027624] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 281.032989] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.037842] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 281.043037] RIP: 0033:0x457089 [ 281.046222] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 281.065518] RSP: 002b:00007fbe87f24c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 281.073229] RAX: ffffffffffffffda RBX: 00007fbe87f256d4 RCX: 0000000000457089 [ 281.080588] RDX: 0000000020000340 RSI: 00000000200000c0 RDI: 0000000000000000 [ 281.087854] RBP: 00000000009300a0 R08: 0000000020000540 R09: 0000000000000000 [ 281.095121] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 281.102389] R13: 00000000004d2310 R14: 00000000004c7a36 R15: 0000000000000000 [ 281.109656] Modules linked in: [ 281.112849] Dumping ftrace buffer: [ 281.116378] (ftrace buffer empty) [ 281.120084] CR2: ffffebe000000008 [ 281.123534] ---[ end trace 064b6aa7f9c9b1a0 ]--- [ 281.128297] RIP: 0010:kfree+0xa0/0x260 [ 281.132170] Code: 82 cb 01 00 00 48 ba 00 00 00 80 ff 77 00 00 48 01 c2 48 89 df 48 b8 00 00 00 00 00 ea ff ff 48 c1 ea 0c 48 c1 e2 06 48 01 c2 <48> 8b 42 08 a8 01 48 8d 48 ff 48 0f 45 d1 4c 8b 6a 18 49 63 75 74 [ 281.151463] RSP: 0018:ffff88019605f520 EFLAGS: 00010086 [ 281.156822] RAX: ffffea0000000000 RBX: 0000000000000282 RCX: 0000000000000000 [ 281.164109] RDX: ffffebe000000000 RSI: 0000000000000000 RDI: 0000000000000282 [ 281.171405] RBP: ffff88019605f540 R08: ffffed003b6246d7 R09: ffffed003b6246d6 [ 281.178672] R10: ffffed003b6246d6 R11: ffff8801db1236b3 R12: 0000000000000282 [ 281.185951] R13: ffffffff867ded2a R14: ffff88019605f690 R15: ffff8801b09c0840 [ 281.193219] FS: 00007fbe87f25700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 281.201440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.207316] CR2: ffffebe000000008 CR3: 000000019398c000 CR4: 00000000001406e0 [ 281.214598] Kernel panic - not syncing: Fatal exception [ 281.220229] Dumping ftrace buffer: [ 281.223782] (ftrace buffer empty) [ 281.227472] Kernel Offset: disabled [ 281.231080] Rebooting in 86400 seconds..