127ce8f4bfb2c95e0c3ba27f6bb313f70de04f8de7a73854d75fbb4b1abb08fefb07e0fc157ee045821752cbd153505a72fa9122a8562b3ad53fb1cbcf5db37944c5bd9dddeb8d8bf028a65119568c97250e37534f5f89055b06500916a4b81e344c9e1e2a1f647c0b744bd26fbaaaea70c1a9e1fe9164d466d0649a6a716f5ae571ea9e5dddbd865", 0xf5, 0x5}, {&(0x7f0000000ac0)="424404b56c8e51549a89566496bc9ac13258bc77cfc05f3a0016d5867712595e8253438d4eb81a4a9047b0811d43f97248fd1e1746e60232efb79f60f914e28120a59dce8764a283f042d0faccdf2008bf2ad693419ac44cde029c5fb5437fc8d940", 0x62, 0x80000001}], 0x1001000, &(0x7f0000000cc0)={[{@jdev={'jdev', 0x3d, './file1'}}, {@usrjquota='usrjquota'}, {@usrjquota='usrjquota'}, {@notail='notail'}, {@errors_ro_remount='errors=ro-remount'}, {@barrier_none='barrier=none'}, {@balloc_border='block-allocator=border'}, {@balloc_border='block-allocator=border'}, {@hash_tea='hash=tea'}, {@grpquota='grpquota'}], [{@uid_lt={'uid<', r0}}, {@obj_role={'obj_role', 0x3d, '@'}}, {@obj_role={'obj_role', 0x3d, 'overlay\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, 'minix\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0xdeca}}, {@hash='hash'}, {@pcr={'pcr', 0x3d, 0x3b}}]}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000e00)='/dev/snd/pcmC#D#c\x00', 0x9, 0x600) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000e80)='trusted.overlay.redirect\x00', &(0x7f0000000ec0)='./file1\x00', 0x8, 0x1) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000e40)=0x85, 0x4) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) mount(&(0x7f0000000080)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='minix\x00', 0x20000, 0x0) creat(&(0x7f0000000280)='./file0/file0\x00', 0x10) [ 928.825609] binder_alloc: binder_alloc_mmap_handler: 12332 20001000-20004000 already mapped failed -16 [ 928.835930] binder: 12333:12342 got reply transaction with no transaction stack [ 928.874118] binder: BINDER_SET_CONTEXT_MGR already set [ 928.893940] binder: 12332:12335 ioctl 40046207 0 returned -16 03:40:40 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = getpgrp(0xffffffffffffffff) getpgrp(r2) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 928.925709] binder_alloc: 12332: binder_alloc_buf, no vma [ 928.939225] binder: undelivered TRANSACTION_COMPLETE [ 928.946662] binder: 12332:12335 got reply transaction with no transaction stack [ 928.957751] overlayfs: unrecognized mount option "measure" or missing value 03:40:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x7400]}}], 0x0, 0x0, 0x0}) [ 929.129029] binder: 12360:12362 got transaction with invalid offset (29696, min 0 max 24) or object. [ 929.141508] binder: send failed reply for transaction 4146 to 12360:12362 [ 929.180519] binder_alloc: binder_alloc_mmap_handler: 12360 20001000-20004000 already mapped failed -16 [ 929.210443] binder: BINDER_SET_CONTEXT_MGR already set [ 929.226644] binder: 12360:12362 ioctl 40046207 0 returned -16 [ 929.233626] binder_alloc: 12360: binder_alloc_buf, no vma 03:40:41 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:41 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000240)) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:40:41 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) stat(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$reiserfs(&(0x7f0000000200)='reiserfs\x00', &(0x7f0000000240)='./file0/file0\x00', 0xfffffffffffffffe, 0xa, &(0x7f0000000b40)=[{&(0x7f0000000380)="0aa4a5e703c8103e9c440ffc9982828c6238eda96b9a15931b1736c8602a0022315b2e6ec82865f2e6d153bc2e759cff765d3120a7928b121f344bd75b55212e79965d0bf3be5e46fe783dd7ebc7c3f597f5a41ebcc535f0dc4f0533e4aef71c91034f2608d41fcda2e20a34332d40960f120111af5ef16eed3a46cf702dbf8edd0dcb3466d326b1d48d8d231a506b76c4c9b7239958ad713f4adad21fc9f940382f6be71c4e79d53af993f4432fe3d0be7c8195481d94d7f316850efc88de972ed9b50b9e276bcd43d574cff651b0e92f", 0xd1, 0xb0}, {&(0x7f0000000280), 0x0, 0xffffffff7fffffff}, {&(0x7f0000000480)="f880018ff94ec942ba9235dca0fbdc13f0838c92c26f4e4c011a2d8556537feaa747b09eda3bcb652bf43ec15d31911b6ac5ef753b2b905a391bf35419387e8aebc2ee663e94c109892fef5160020e8af3", 0x51, 0x9}, {&(0x7f0000000500)="34860192cd92c9fc42ab3d61367fc73b98c4c5a79f2ae62de93003043a552f270af6594421ae8d7b4cc5d87562a1ea4d2788d0ce0fdc18a152499af79813f0625b7c889528ae74db036f0ab82ccec6e6723cf3b727ebbcfe117091667aa4ba60bfb0fccdbf480757fdbf97fb81b4872969bcb9a54028b86a052295db0eac9fee7e3a903e1b962b2869e7b3f0b4abd0b53ca6ab0191b25edd5ffc86ffcfe35c447efb29c55338da7e6606c4337bc6ce557aa2f216f4b2e78d8447b4897ba1b4fc75a6664cdbb2e034abdf656053ab72e63bcc96ec22076dd398ae90cf8c6decb7c7992669a6866789b6d9e0ef01ff3bdc4634af31192238", 0xf7, 0x8}, {&(0x7f0000000600)="1ee9052e2620c5d49e44294ac45f1b0d6e12194a49bec89f0d7e77b6a417f7e4f75795cf4c4512e9f6fa6fa0484a52c9aa8d82bc7c0f57f9156259f48d986a4b7828ab02293e4ae0c9b83b81c8ebd01fd7f77cfff359ce1c6e8f8229ec77a5223b936b6c4e84f7afbd70b78fdeb77ca62783a693c26366c31d32b0734b86e86bd8", 0x81, 0xffffffffffffff00}, {&(0x7f00000006c0)="38be19e0d31bbed09f501ca7da875a55a12bfa7b41e3fc35880f5de7c4b186ad5a8d5c067695e972ed8f0a5c73d61377037d5699ee1f74e32b465f9904dcfd1cee830e95f82c587624c95c4829513fb65877d8b96e6e1964c4c5d8130bfa037bd3a4003ce20877825584f1e217d19e4826ef148e132966156da89b7331210a79cbf6a012621453c5a6290234b6582ad6ebba12ac1c279c98709ec8a870e7be1c51f16f7c23d83618f300dd607cafe670abcbd8a48be49de29cf4fa9943bb04c897884fa2f47a67790c0537c83edd146712941ee204a6d9894a91bd5511c7acf0b8a8b4b33de6003b0b9734b2e1e0c074", 0xf0, 0xbb}, {&(0x7f00000007c0)="424fdeb389f6a8121535d40ff4a82ee827c030a10ad91d894caf7b3c4fa454f84ec5f8ab4a9113826ff2e0ed7dd6b45d74cb5bf93542ec28ff48bdc62792b73135966259326e0ff9b8057f02aad9192353fec99f2771d92b9a22fd1432bc9792baf485b21005306b04478ef614191bf57624b5720781024bb70045bbde313dd58e5e6f481d95d1c4ecbe6a08b61b7c091f9028f878d594f46cab9d87097aa0a0590937df96bd8b29972df9e7e9be88bb770b9b401f778da9bfde2644bcfe9fbf7a686617568fd571", 0xc8, 0x8}, {&(0x7f00000008c0)="fcbe2d9ba22d8daba06730d1c1dd7f959f2ccb0c6783075f2b71af2c5117bf23d2085a5d63903e6294cf9f98aa957cd08750aa1ea8db5060bc3c37d689141e3d44d79a48f415e2ea36ab80804d379fab572672a0fa59455ae5751ccf5333cba348511de1663accbafffa15141c81e94302e16b7b1869ecd2cbdf7beee449cd2579949c5a7f8ce3e25b80a07057638224c1b2a2bf08c518aa98447bf518d2025ce8ae61cf0c0c66a65b667f8872f24aa22a525ee966f8b5db90a8bd76dba5511fcce0ead1465c95994f1a86ac8a7c99", 0xcf}, {&(0x7f00000009c0)="95c4170302a3c9e07f9e69fda133881e4d160302519b67014d834d938a1696439a4a31aafcc02fbb3f5423b15c7f38b59fb6c586391ade50d5007797325ebdada658a1417a93e515a326bea2608164925af31a3e1dcc54edaf2fc19bb0cb4422ac9054044cc271e0ae6fd165b127ce8f4bfb2c95e0c3ba27f6bb313f70de04f8de7a73854d75fbb4b1abb08fefb07e0fc157ee045821752cbd153505a72fa9122a8562b3ad53fb1cbcf5db37944c5bd9dddeb8d8bf028a65119568c97250e37534f5f89055b06500916a4b81e344c9e1e2a1f647c0b744bd26fbaaaea70c1a9e1fe9164d466d0649a6a716f5ae571ea9e5dddbd865", 0xf5, 0x5}, {&(0x7f0000000ac0)="424404b56c8e51549a89566496bc9ac13258bc77cfc05f3a0016d5867712595e8253438d4eb81a4a9047b0811d43f97248fd1e1746e60232efb79f60f914e28120a59dce8764a283f042d0faccdf2008bf2ad693419ac44cde029c5fb5437fc8d940", 0x62, 0x80000001}], 0x1001000, &(0x7f0000000cc0)={[{@jdev={'jdev', 0x3d, './file1'}}, {@usrjquota='usrjquota'}, {@usrjquota='usrjquota'}, {@notail='notail'}, {@errors_ro_remount='errors=ro-remount'}, {@barrier_none='barrier=none'}, {@balloc_border='block-allocator=border'}, {@balloc_border='block-allocator=border'}, {@hash_tea='hash=tea'}, {@grpquota='grpquota'}], [{@uid_lt={'uid<', r0}}, {@obj_role={'obj_role', 0x3d, '@'}}, {@obj_role={'obj_role', 0x3d, 'overlay\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, 'minix\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0xdeca}}, {@hash='hash'}, {@pcr={'pcr', 0x3d, 0x3b}}]}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000e00)='/dev/snd/pcmC#D#c\x00', 0x9, 0x600) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000e80)='trusted.overlay.redirect\x00', &(0x7f0000000ec0)='./file1\x00', 0x8, 0x1) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000e40)=0x85, 0x4) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) mount(&(0x7f0000000080)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='minix\x00', 0x20000, 0x0) creat(&(0x7f0000000280)='./file0/file0\x00', 0x10) 03:40:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1200000000000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:40:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x8000000000000000]}}], 0x0, 0x0, 0x0}) 03:40:41 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xb574, 0x100) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/udp\x00') setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x1200, 0x4) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r4}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 929.521690] binder_alloc: binder_alloc_mmap_handler: 12333 20001000-20004000 already mapped failed -16 [ 929.531543] binder: 12333:12342 got reply transaction with no transaction stack [ 929.606276] binder: 12372:12377 got transaction with invalid offset (-9223372036854775808, min 0 max 24) or object. [ 929.625269] binder: send failed reply for transaction 4152 to 12372:12377 [ 929.637206] overlayfs: missing 'lowerdir' [ 929.662241] binder_alloc: binder_alloc_mmap_handler: 12372 20001000-20004000 already mapped failed -16 [ 929.676803] binder: BINDER_SET_CONTEXT_MGR already set [ 929.683043] binder: 12372:12377 ioctl 40046207 0 returned -16 [ 929.689434] binder: BINDER_SET_CONTEXT_MGR already set [ 929.696306] binder: 12380:12384 ioctl 40046207 0 returned -16 [ 929.697078] overlayfs: missing 'lowerdir' [ 929.702430] binder_alloc: 12372: binder_alloc_buf, no vma [ 929.725581] binder_release_work: 1 callbacks suppressed [ 929.725586] binder: undelivered TRANSACTION_COMPLETE [ 929.749842] binder_release_work: 29 callbacks suppressed [ 929.749847] binder: undelivered TRANSACTION_ERROR: 29201 03:40:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0xa000000]}}], 0x0, 0x0, 0x0}) [ 929.784116] binder: 12380:12391 got reply transaction with no transaction stack [ 929.811432] binder: undelivered TRANSACTION_ERROR: 29189 [ 929.823707] binder_alloc: binder_alloc_mmap_handler: 12380 20001000-20004000 already mapped failed -16 03:40:41 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mkdir(&(0x7f0000000080)='./file1\x00', 0x20) mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 929.854735] binder: undelivered TRANSACTION_ERROR: 29190 [ 929.893952] binder: 12380:12389 got reply transaction with no transaction stack 03:40:41 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20000, 0x2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000280)=0x7, 0x4) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 03:40:41 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) stat(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$reiserfs(&(0x7f0000000200)='reiserfs\x00', &(0x7f0000000240)='./file0/file0\x00', 0xfffffffffffffffe, 0xa, &(0x7f0000000b40)=[{&(0x7f0000000380)="0aa4a5e703c8103e9c440ffc9982828c6238eda96b9a15931b1736c8602a0022315b2e6ec82865f2e6d153bc2e759cff765d3120a7928b121f344bd75b55212e79965d0bf3be5e46fe783dd7ebc7c3f597f5a41ebcc535f0dc4f0533e4aef71c91034f2608d41fcda2e20a34332d40960f120111af5ef16eed3a46cf702dbf8edd0dcb3466d326b1d48d8d231a506b76c4c9b7239958ad713f4adad21fc9f940382f6be71c4e79d53af993f4432fe3d0be7c8195481d94d7f316850efc88de972ed9b50b9e276bcd43d574cff651b0e92f", 0xd1, 0xb0}, {&(0x7f0000000280), 0x0, 0xffffffff7fffffff}, {&(0x7f0000000480)="f880018ff94ec942ba9235dca0fbdc13f0838c92c26f4e4c011a2d8556537feaa747b09eda3bcb652bf43ec15d31911b6ac5ef753b2b905a391bf35419387e8aebc2ee663e94c109892fef5160020e8af3", 0x51, 0x9}, {&(0x7f0000000500)="34860192cd92c9fc42ab3d61367fc73b98c4c5a79f2ae62de93003043a552f270af6594421ae8d7b4cc5d87562a1ea4d2788d0ce0fdc18a152499af79813f0625b7c889528ae74db036f0ab82ccec6e6723cf3b727ebbcfe117091667aa4ba60bfb0fccdbf480757fdbf97fb81b4872969bcb9a54028b86a052295db0eac9fee7e3a903e1b962b2869e7b3f0b4abd0b53ca6ab0191b25edd5ffc86ffcfe35c447efb29c55338da7e6606c4337bc6ce557aa2f216f4b2e78d8447b4897ba1b4fc75a6664cdbb2e034abdf656053ab72e63bcc96ec22076dd398ae90cf8c6decb7c7992669a6866789b6d9e0ef01ff3bdc4634af31192238", 0xf7, 0x8}, {&(0x7f0000000600)="1ee9052e2620c5d49e44294ac45f1b0d6e12194a49bec89f0d7e77b6a417f7e4f75795cf4c4512e9f6fa6fa0484a52c9aa8d82bc7c0f57f9156259f48d986a4b7828ab02293e4ae0c9b83b81c8ebd01fd7f77cfff359ce1c6e8f8229ec77a5223b936b6c4e84f7afbd70b78fdeb77ca62783a693c26366c31d32b0734b86e86bd8", 0x81, 0xffffffffffffff00}, {&(0x7f00000006c0)="38be19e0d31bbed09f501ca7da875a55a12bfa7b41e3fc35880f5de7c4b186ad5a8d5c067695e972ed8f0a5c73d61377037d5699ee1f74e32b465f9904dcfd1cee830e95f82c587624c95c4829513fb65877d8b96e6e1964c4c5d8130bfa037bd3a4003ce20877825584f1e217d19e4826ef148e132966156da89b7331210a79cbf6a012621453c5a6290234b6582ad6ebba12ac1c279c98709ec8a870e7be1c51f16f7c23d83618f300dd607cafe670abcbd8a48be49de29cf4fa9943bb04c897884fa2f47a67790c0537c83edd146712941ee204a6d9894a91bd5511c7acf0b8a8b4b33de6003b0b9734b2e1e0c074", 0xf0, 0xbb}, {&(0x7f00000007c0)="424fdeb389f6a8121535d40ff4a82ee827c030a10ad91d894caf7b3c4fa454f84ec5f8ab4a9113826ff2e0ed7dd6b45d74cb5bf93542ec28ff48bdc62792b73135966259326e0ff9b8057f02aad9192353fec99f2771d92b9a22fd1432bc9792baf485b21005306b04478ef614191bf57624b5720781024bb70045bbde313dd58e5e6f481d95d1c4ecbe6a08b61b7c091f9028f878d594f46cab9d87097aa0a0590937df96bd8b29972df9e7e9be88bb770b9b401f778da9bfde2644bcfe9fbf7a686617568fd571", 0xc8, 0x8}, {&(0x7f00000008c0)="fcbe2d9ba22d8daba06730d1c1dd7f959f2ccb0c6783075f2b71af2c5117bf23d2085a5d63903e6294cf9f98aa957cd08750aa1ea8db5060bc3c37d689141e3d44d79a48f415e2ea36ab80804d379fab572672a0fa59455ae5751ccf5333cba348511de1663accbafffa15141c81e94302e16b7b1869ecd2cbdf7beee449cd2579949c5a7f8ce3e25b80a07057638224c1b2a2bf08c518aa98447bf518d2025ce8ae61cf0c0c66a65b667f8872f24aa22a525ee966f8b5db90a8bd76dba5511fcce0ead1465c95994f1a86ac8a7c99", 0xcf}, {&(0x7f00000009c0)="95c4170302a3c9e07f9e69fda133881e4d160302519b67014d834d938a1696439a4a31aafcc02fbb3f5423b15c7f38b59fb6c586391ade50d5007797325ebdada658a1417a93e515a326bea2608164925af31a3e1dcc54edaf2fc19bb0cb4422ac9054044cc271e0ae6fd165b127ce8f4bfb2c95e0c3ba27f6bb313f70de04f8de7a73854d75fbb4b1abb08fefb07e0fc157ee045821752cbd153505a72fa9122a8562b3ad53fb1cbcf5db37944c5bd9dddeb8d8bf028a65119568c97250e37534f5f89055b06500916a4b81e344c9e1e2a1f647c0b744bd26fbaaaea70c1a9e1fe9164d466d0649a6a716f5ae571ea9e5dddbd865", 0xf5, 0x5}, {&(0x7f0000000ac0)="424404b56c8e51549a89566496bc9ac13258bc77cfc05f3a0016d5867712595e8253438d4eb81a4a9047b0811d43f97248fd1e1746e60232efb79f60f914e28120a59dce8764a283f042d0faccdf2008bf2ad693419ac44cde029c5fb5437fc8d940", 0x62, 0x80000001}], 0x1001000, &(0x7f0000000cc0)={[{@jdev={'jdev', 0x3d, './file1'}}, {@usrjquota='usrjquota'}, {@usrjquota='usrjquota'}, {@notail='notail'}, {@errors_ro_remount='errors=ro-remount'}, {@barrier_none='barrier=none'}, {@balloc_border='block-allocator=border'}, {@balloc_border='block-allocator=border'}, {@hash_tea='hash=tea'}, {@grpquota='grpquota'}], [{@uid_lt={'uid<', r0}}, {@obj_role={'obj_role', 0x3d, '@'}}, {@obj_role={'obj_role', 0x3d, 'overlay\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, 'minix\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0xdeca}}, {@hash='hash'}, {@pcr={'pcr', 0x3d, 0x3b}}]}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000e00)='/dev/snd/pcmC#D#c\x00', 0x9, 0x600) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000e80)='trusted.overlay.redirect\x00', &(0x7f0000000ec0)='./file1\x00', 0x8, 0x1) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000e40)=0x85, 0x4) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) mount(&(0x7f0000000080)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='minix\x00', 0x20000, 0x0) creat(&(0x7f0000000280)='./file0/file0\x00', 0x10) [ 929.916690] binder: 12393:12394 got transaction with invalid offset (167772160, min 0 max 24) or object. [ 929.933741] binder: undelivered TRANSACTION_ERROR: 29201 [ 929.961587] binder: BINDER_SET_CONTEXT_MGR already set [ 929.967407] binder: send failed reply for transaction 4158 to 12393:12394 [ 929.994396] binder: 12380:12384 ioctl 40046207 0 returned -16 [ 930.005368] binder_alloc: binder_alloc_mmap_handler: 12393 20001000-20004000 already mapped failed -16 [ 930.007541] binder: undelivered TRANSACTION_ERROR: 29201 03:40:41 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 930.058656] overlayfs: filesystem on './file0' not supported as upperdir [ 930.062618] binder: BINDER_SET_CONTEXT_MGR already set [ 930.072310] binder: 12393:12394 ioctl 40046207 0 returned -16 [ 930.078978] binder_transaction: 22 callbacks suppressed [ 930.078995] binder: 12393:12401 transaction failed 29189/-3, size 0-0 line 2973 [ 930.105309] binder: undelivered TRANSACTION_COMPLETE [ 930.110826] binder: undelivered TRANSACTION_ERROR: 29201 03:40:41 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000001800)=[{{&(0x7f0000000080)=@ipx, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/39, 0x27}, {&(0x7f0000000180)=""/28, 0x1c}, {&(0x7f00000001c0)=""/51, 0x33}], 0x3}, 0x400}, {{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000380)=""/205, 0xcd}, {&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f00000004c0)=""/116, 0x74}], 0x5}, 0x7}, {{&(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x2, &(0x7f00000006c0)=""/191, 0xbf}, 0x6}, {{&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000800)=""/224, 0xe0}], 0x1, &(0x7f0000004000)=""/4096, 0x1000}, 0x80000000}, {{&(0x7f0000000940)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000009c0)=""/76, 0x4c}, {&(0x7f0000000a40)=""/251, 0xfb}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/108, 0x6c}, {&(0x7f0000000bc0)=""/24, 0x18}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/13, 0xd}], 0x7, &(0x7f0000006000)=""/4096, 0x1000}, 0x7531}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000d00)=""/251, 0xfb}, {&(0x7f0000000e00)=""/102, 0x66}, {&(0x7f0000000e80)=""/125, 0x7d}, {&(0x7f0000000f00)=""/133, 0x85}, {&(0x7f0000007000)=""/4096, 0x1000}], 0x5, &(0x7f0000001080)=""/165, 0xa5}, 0x9}, {{&(0x7f0000001140)=@xdp, 0x80, &(0x7f0000001740)=[{&(0x7f00000011c0)=""/143, 0x8f}, {&(0x7f0000001280)=""/14, 0xe}, {&(0x7f00000012c0)}, {&(0x7f0000001300)=""/181, 0xb5}, {&(0x7f00000013c0)=""/118, 0x76}, {&(0x7f0000001440)=""/245, 0xf5}, {&(0x7f0000001540)=""/206, 0xce}, {&(0x7f0000001640)=""/250, 0xfa}], 0x8, &(0x7f00000017c0)=""/16, 0x10}, 0x2}], 0x7, 0x100, &(0x7f00000019c0)={0x0, 0x1c9c380}) openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x800, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000c00)) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) init_module(&(0x7f0000000000)='@]$em1\x00', 0x7, &(0x7f0000000040)='vcan0\x00') sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 03:40:41 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upRerdir=./file0,lowerdir=./file0,workdir=./file1\\\x00']) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 930.149598] binder: undelivered TRANSACTION_ERROR: 29190 03:40:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x4c000000]}}], 0x0, 0x0, 0x0}) [ 930.204219] binder: 12408:12413 got reply transaction with no transaction stack [ 930.209939] binder: undelivered TRANSACTION_ERROR: 29189 [ 930.211719] binder: 12408:12413 transaction failed 29201/-71, size 24-4 line 2741 03:40:42 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000001c0)) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000000c0)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r3, 0x0, 0x4, &(0x7f0000018000), 0x0) sendto$inet(r3, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) listen(r3, 0xffffffffffffffba) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/158, &(0x7f0000000340)=0xfffffffffffffeec) accept4(r3, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x0) [ 930.324663] binder: BINDER_SET_CONTEXT_MGR already set [ 930.338775] overlayfs: unrecognized mount option "upRerdir=./file0" or missing value [ 930.353963] binder: 12419:12421 ioctl 40046207 0 returned -16 03:40:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x8000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 930.370814] binder_alloc: binder_alloc_mmap_handler: 12408 20001000-20004000 already mapped failed -16 [ 930.382908] overlayfs: unrecognized mount option "upRerdir=./file0" or missing value [ 930.404537] binder: BINDER_SET_CONTEXT_MGR already set [ 930.409940] binder: 12408:12409 ioctl 40046207 0 returned -16 [ 930.416788] binder: 12419:12424 got reply transaction with no transaction stack 03:40:42 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d3d2f66696c65302c6c6f7765726469723d2e2f66696c65302c776fe0a23a3d45af7a58dbb1ce726b6469"]) chdir(&(0x7f0000000340)='./file0\x00') [ 930.437594] binder: 12419:12424 transaction failed 29201/-71, size 24-8 line 2741 [ 930.463493] binder: release 12408:12409 transaction 4163 in, still active [ 930.485444] binder: send failed reply for transaction 4163 to 12419:12421 03:40:42 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 930.512782] overlayfs: unrecognized mount option "woà¢:=E¯zXÛ±Îrkdi" or missing value [ 930.519106] binder: undelivered TRANSACTION_ERROR: 29201 03:40:42 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x800, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) [ 930.564751] overlayfs: unrecognized mount option "woà¢:=E¯zXÛ±Îrkdi" or missing value [ 930.630774] binder: 12433:12439 got reply transaction with no transaction stack [ 930.638887] binder: 12433:12439 transaction failed 29201/-71, size 24-4 line 2741 03:40:42 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f0000000140)='./file1\x00', 0x2910, 0x1) [ 930.695017] overlayfs: filesystem on './file0' not supported as upperdir [ 930.825321] overlayfs: failed to resolve './file1': -2 [ 930.856020] overlayfs: './file1' not a directory 03:40:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x700) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:40:42 executing program 1: mkdir(&(0x7f0000000300)='./file1\x00', 0xa) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x400080, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000240), &(0x7f0000000280)=0x4) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@ng={0x4, 0x4, "d1f777be2a83312f4c9a79c637b86501de336f"}, 0x15, 0x3) 03:40:42 executing program 1: fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f0000000140)='./file1\x00', 0x4, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="375af677dc38052438c470fa52336dfeb2f1a96798707e0969068a2f9d67d492fb31215859c88c2ac5d97e84377e20549e760e2f87a077775ac8f5cad8892cbcae0d7085d48c6e25753e11b2cb908ac6e4f9e340b435d0acf10a9f5f69ac951ad0b6502e5d573192c3b7c59e10bbf012ab53d6ea24583ceb3f1a5d8e456ddde791f526d6d952fac8bcbb61833b0ac87379a7ee883cdd00e0ddafe08864778249130ff600845ceb74824641f299f97b42cd2dd87a582798dfb302f4232cd2513fc331f4ca68bec314f04a7e03f15d2418b07c3c47985b722be7a2e19108d38b8af108b19f9147837eb182223829", 0xed, 0x9}], 0x808001, &(0x7f0000000400)={[], [{@seclabel='seclabel'}, {@fowner_gt={'fowner>', r0}}, {@smackfsdef={'smackfsdef', 0x3d, 'lowerdir'}}, {@seclabel='seclabel'}]}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) rmdir(&(0x7f0000000480)='./file1\x00') chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:40:42 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x42000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x181a00, 0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x4000000) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 931.101167] binder: BINDER_SET_CONTEXT_MGR already set [ 931.120843] overlayfs: filesystem on './file0' not supported as upperdir [ 931.134424] binder: 12419:12424 ioctl 40046207 0 returned -16 [ 931.154274] binder: BINDER_SET_CONTEXT_MGR already set [ 931.158590] binder: 12419:12466 got reply transaction with no transaction stack [ 931.159572] binder: 12433:12436 ioctl 40046207 0 returned -16 [ 931.162062] binder: release 12433:12436 transaction 4167 in, still active [ 931.191416] binder: send failed reply for transaction 4167 to 12419:12466 03:40:42 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 931.191869] binder: 12419:12466 transaction failed 29201/-71, size 24-8 line 2741 [ 931.206648] binder: undelivered TRANSACTION_ERROR: 29201 [ 931.212587] binder: undelivered TRANSACTION_COMPLETE 03:40:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x7a000000]}}], 0x0, 0x0, 0x0}) 03:40:43 executing program 2: syz_emit_ethernet(0xe0, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="11194f42cea4", [{[], {0x8100, 0x6bdf3fd, 0x2, 0x2}}], {@llc_tr={0x11, {@snap={0xab, 0xab, '\b1', '\a%v', 0x1f, "867daef454b0f07cfb9e6105a015a0a1a38ff446c44b6a723b203c1311cfd7122c04d9bfeb6b4e244985f2b03bd9d55a71b129a0c16c31facbf62f1de1d35c7219e7ee5679f3a043b82be1320178a5884660faa5bc35742a7b20f0276f1bf7770616f970e34bd6eaadd1c74305d3dd15de043cdea60409d1fc16fb8ba0690123081d819f57e8c2fd2b5bdd4fd5d1dfc3910a5a543c3fbcaf021ed446ba6eb8f22d5244699b72d6624f5753fc234218c82ef151b2a082fa415414ae807a0d6e93759beaceeb"}}}}}, 0x0) 03:40:43 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000080)='./file2\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:40:43 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)={{0x1cf, 0x6, 0xf11d, 0x17e, 0xd7, 0x0, 0x377, 0x400}, "7b462fe8498a12d713ba4ec61d98049b73ca70a2d700d6f20849344b0075f68f3a87ae738ec6956bea7eaffaff60cb065f7e58a089d7c06242373a75c7302f1e6846044a9f3666f6288ad8168f49e49803880654389fdfa50148c7e0ba58ed3cdb8f8cd7116cccc1240d498b74488b1751f3cca9ad40083a950a01dfd8c8dab0b2268b403735caba3fb59058c9b3c2e90a2f16a9fb3163104419637249c196c611b2ad3ef94bf94deaf2876cb170b809b3b8e51494a44e93d5f43648b259ca3da44364be2ef6dee180759e781bd2c6734e4b5b1a546d0be1ea7298cf212201", [[], []]}, 0x2ff) [ 931.360474] binder: undelivered TRANSACTION_COMPLETE [ 931.378825] binder: 12475:12483 transaction failed 29201/-71, size 24-4 line 2741 03:40:43 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, "", 0x1a0}}, &(0x7f0000000040)=""/174, 0x1a, 0xae, 0x1}, 0x20) fchdir(r0) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x7fff, 0x101080) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000140)={0x4, 0x9, 0x6}) [ 931.488460] binder: BINDER_SET_CONTEXT_MGR already set [ 931.508457] binder: 12489:12492 ioctl 40046207 0 returned -16 [ 931.529478] binder: BINDER_SET_CONTEXT_MGR already set 03:40:43 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 931.532624] overlayfs: filesystem on './file0' not supported as upperdir [ 931.540640] binder: 12475:12483 transaction failed 29201/-71, size 24-4 line 2741 [ 931.550969] binder: release 12475:12478 transaction 4171 in, still active [ 931.559159] binder: 12475:12478 ioctl 40046207 0 returned -16 [ 931.565735] binder: send failed reply for transaction 4171 to 12489:12492 [ 931.574580] binder: 12489:12498 transaction failed 29201/-71, size 24-8 line 2741 03:40:43 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="26707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469721926aacdf2144bd8d67f9b437309f63d2e2f05696c65315c0015eb7fc6eeefb3c73014098531e91e448d344e1cfc1da23d85e89c1ad350a47506f725388ed5729dc958d9f381577e7050a2f219663e307fab22960b4e0287a801ee0c03f41bf610320085d2c35c4af6091993648f35"]) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:40:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1800) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:40:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) r2 = syz_open_dev$rtc(&(0x7f0000000580)='/dev/rtc#\x00', 0x0, 0x0) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) write$P9_RGETATTR(r1, &(0x7f00000007c0)={0xa0, 0x19, 0x1, {0x0, {0xb, 0x3, 0x900000000000000}, 0x3, 0x0, 0x0, 0x4e, 0x20, 0x9, 0x6, 0xffffffffffffff96, 0x9, 0xf401, 0x101, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x401}}, 0xa0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480)) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000340)=""/35) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@loopback, @in6}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[]}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x1}, &(0x7f0000000400)=0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) ioctl$RTC_AIE_ON(r2, 0x7001) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000600)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000300), 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0xffff, 0x0, 0x10001}, 0x14) [ 931.758625] binder: 12503:12508 transaction failed 29201/-71, size 24-4 line 2741 03:40:43 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0xfffffffffffffffe, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) r1 = getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000700)='hfsplus\x00', &(0x7f0000000740)='./file0/file0\x00', 0x1f, 0x3, &(0x7f0000000980)=[{&(0x7f0000000780)="17dc45614cd2f7276c922796e8a9060d8ff3febe1e03aea22c348fbf5c1d59c9881a23239743cc55235b86d06e576946b09bb0c066cd4d1bf2d47e0af18ff395c487cfb1e6b6d718ccc965fd410bd27f58a75af4ca28cac63ba8c76b90077a3f3b6c95d7ab3d6402301876b8adaccb156c5fd4cc49670d4328ddcc87b4ec1a2997e3d39719c19519840f8af229c13cb432782b8fa11fbb8d68aca3cacfc7d6dcbece45e667fb3472da3cf68aa7a3b5ce8f7e", 0xb2, 0x4}, {&(0x7f0000000840)="0fda44cc4095fb6dc09476ac7913813829c7079c68ffe5b57b8563f66a5fc9695edb244ea85295237b385c8d970073c49f5d1edd274b2a0e72268430b86ab5f3378f263fa227657837131f423de492b727041967970079d3e91f87d12aaf9178537938418d7ea2ccf8bc358d264dc453215c2dee64f041061d05bda4fda7345252931dc891ab4bdd38d618f58010c7ffd527b7", 0x93}, {&(0x7f0000000900)="9a5771cb6dec022b931088cc62945b3b395368d48108a0c3b897c59cae2813732d630a59a1616c4f1eaf5e45d78e134c98b6812dc07d2a5ecbb66f219e641305b7", 0x41, 0x5}], 0x20000, &(0x7f0000000a00)={[{@uid={'uid', 0x3d, r1}}, {@decompose='decompose'}, {@session={'session', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0x1}}], [{@dont_measure='dont_measure'}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}) epoll_create(0x240) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x7, &(0x7f0000000600)=[{&(0x7f0000000080)="d2e7337b322c244608afc8f506786943a6ba39fc6b055bf5815898df0d9ef7d8d776dbd1e1d514a38d62d4cd952186abfd4d608dc21101e0df32", 0x3a, 0x1}, {&(0x7f00000000c0)="ead6433177eb92c0ee5eddd997862d8021a1d94bfa57b39c1c48705f666b7ffbfaff122aa7956bab130612", 0x2b, 0xea7}, {&(0x7f0000000140)="23c97ef6a4bb4c695f71a02ec4c39e29ca4744c0eb2394f5d3cae78c738be2919a3453bac7e37b5ea6bbbe328cda6a21f075d946fb1902ce1e91690933663c04e085661275e6767f0901d8a0840981cb8b1537d6d391515e5ce8dff74d0c6c835cc6486faff452d28323e123435bc41888e4f5ae8dad67b5c24cdf2b4dec3776553369b30097a14713432d4e200e19bcd685a6a01d10a6e65abd564f895d1a6387174b0a65a6c59d89c7cc356336224e4db9733064b01e1eb1914aa04b4bd548b48fe9bc4a1e57a8f899664c137d25c7ac75ab50d5c6", 0xd6}, {&(0x7f0000000240)="b92706261a6f62eda46f0271ac301ba1391601b731f4bdd1481fc9adb7356fc74259c6feb2af5da548b7ec6d29978cf37e9c6e2752844bdd5b2c0e60ba670f7f1c8b66a6d7d198fd9061b6f7d73017e8d46da8eb271f64742483983bc5bf1165a244d1a29b6487334fcc885d47f962fd1affeeeab47dbb7017da904d1b3b13cecb18919dc8e415ccdc4aac46db6663ff7d248c0f7e2e844499a0655818176bf5b48e552c27596cbca4469743c17da468bffeeaa37fc5cd5404ad29feb6c61e42301a8735b34dae3655352e6d6686f2dc502a622593c8", 0xd6, 0x5}, {&(0x7f0000000340)="cfb8edcafafeb2e01df2dd3b9ede0b6b1df3f11b26eb10b315cfd13532372702dfd8f472e7d066e577838ad6f0f37c8938da6802dd6d0fd5e26568650eb2a92be52d87a7950c8210cad4ca703ff8a1249207519c57fd5360867cf3c6cf63e9bb8a244e047f7d4d59412b2d93f3e63a4b90ab40f6081e279436af7294178f3719790963e22b214407708fc3db8f039436c4d23b0d38af7db5a177d829956b47d3aa2e1ad33dc86ce0583908d9774c307ce0ffb1f8955fd65eb408aac1b01493d34ff245901759dfca46", 0xc9, 0x400}, {&(0x7f0000000440)="d516a4032f7323736f8ac2d8004df5e3e06c9f8351b6f5ab44d40daf029f3bcf9f0dbc30be0b86dfff94b21e0e64b4935e5facf0ab9543bde749b45cb8540d2b7c0552dff3606dcb5a93feeabd36b80a2a68705a55c3b3ac71194875657522edf1b1496d76060287297130ae4acb1296f5cb89f5b9193a882b05efd57fde8e1c4fd6f44e7fb2747af2e921d142416fdddd9950e7e610aba5d49bbe69c936ce084915b0f5289e2f08d3e73c95ea9a81666468fd2e3896f72353e197883b67351a4379e3e35339c542d8e3a43cbacaa68b1495d336612d1347c090150394de5f9dacb642651af12b359434e8d806988b5f1b", 0xf1, 0x8}, {&(0x7f0000000540)="990c78a7ecc3ea38c6b3390281ff2fba35843b7b21e49c0a9419e8479f94fa56c33b13201ffaaff2fedf5a8a37ce7165c31f645bcb3eb2099ab89f59f8a32153bc4a41f8fa75c7b31083ecbc6eda1a875788af0c74cfc002df0b5b7f064dcd296fa02a42ac3bda21c9295214d91b9108b01f42472b2b94641e0c387e20c4b539dd5f9f9d14d1beeee61f2eaf8982aeb2b864dc219f4e967ce64ad4a72f9ca452b691c72c3d603461f90385619afbe07cda", 0xb1, 0x5}], 0x0, &(0x7f00000006c0)='@!\x00') [ 931.835648] overlayfs: unrecognized mount option "&pperdir=./file0" or missing value [ 931.904950] overlayfs: unrecognized mount option "&pperdir=./file0" or missing value 03:40:43 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x0, 0x20) mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) lsetxattr$security_evm(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f0000000200)=@v2={0x7, 0x2, 0xf, 0x7, 0xdd, "e1c6105b9a803d5b373bcd7052b2cae6a86a39fdfe0c69d1f52aa4c07acef04d9214ca14aa5fedf3c91401f92db05c0192f45e8cb591da2ea2a480f38a47742d4eb0f0c0402320c6e305b2edca599c4df63ad94c998577d08019bd732c19309fccd0a4bdc65393f168cee82209f7f6e7aa6be8e43fc85d3c592f0791238ef6cd762c1db6bfac81d717f9681278911aa3fb2333c3f8e1435a98b4cb9aa93d5eceb44116e78556110322948ef841dfd496d2ca61d4698747a39a8e969cf1c230388f6f7a0741cea00afc0bf28f8d20c930e7542c8e293f4ec15ce55787b8"}, 0xe7, 0x3) 03:40:43 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10000, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)=0x10000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x3, 0x1, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) [ 932.120608] overlayfs: filesystem on './file0' not supported as upperdir [ 932.262303] binder: BINDER_SET_CONTEXT_MGR already set [ 932.267872] binder: 12489:12498 ioctl 40046207 0 returned -16 [ 932.276090] binder: BINDER_SET_CONTEXT_MGR already set [ 932.281413] binder: 12503:12504 ioctl 40046207 0 returned -16 [ 932.288189] binder: 12503:12508 transaction failed 29201/-71, size 24-4 line 2741 [ 932.301447] binder: undelivered TRANSACTION_COMPLETE 03:40:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x4800]}}], 0x0, 0x0, 0x0}) 03:40:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) r2 = syz_open_dev$rtc(&(0x7f0000000580)='/dev/rtc#\x00', 0x0, 0x0) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) write$P9_RGETATTR(r1, &(0x7f00000007c0)={0xa0, 0x19, 0x1, {0x0, {0xb, 0x3, 0x900000000000000}, 0x3, 0x0, 0x0, 0x4e, 0x20, 0x9, 0x6, 0xffffffffffffff96, 0x9, 0xf401, 0x101, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x401}}, 0xa0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480)) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000340)=""/35) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@loopback, @in6}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[]}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x1}, &(0x7f0000000400)=0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) ioctl$RTC_AIE_ON(r2, 0x7001) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000600)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000300), 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0xffff, 0x0, 0x10001}, 0x14) 03:40:44 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x2c7) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 03:40:44 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000049e12cfcc8fecbe911000000000000000000ffff000000000000000000000000050009003d0000000a00000000000002000000000000ffffff000200010000000000000007020000000005000500000000000000ff02000000000000000000000000000100000000000000000000000000"], 0x98}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r2, 0xd1}, 0x8) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000380)={'raw\x00'}, &(0x7f00000002c0)=0x54) [ 932.310058] binder: release 12503:12504 transaction 4176 in, still active [ 932.339567] binder: send failed reply for transaction 4176 to 12489:12542 [ 932.347638] binder: undelivered TRANSACTION_COMPLETE 03:40:44 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:44 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x400080, 0x0) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 932.415172] binder: 12550:12552 got transaction with invalid offset (18432, min 0 max 24) or object. 03:40:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1e) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 932.455765] binder: send failed reply for transaction 4179 to 12550:12552 [ 932.507397] binder: BINDER_SET_CONTEXT_MGR already set [ 932.537442] binder_alloc_new_buf_locked: 1 callbacks suppressed [ 932.537449] binder_alloc: 12550: binder_alloc_buf, no vma [ 932.579865] overlayfs: filesystem on './file0' not supported as upperdir [ 932.587034] binder: BINDER_SET_CONTEXT_MGR already set [ 932.592327] binder: 12561:12563 ioctl 40046207 0 returned -16 [ 932.594189] binder: 12550:12552 ioctl 40046207 0 returned -16 03:40:44 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x800) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000040)={{0x7e, @remote, 0x4e20, 0x4, 'dh\x00', 0x8, 0x8, 0x13}, {@loopback, 0x4e21, 0x1, 0x1, 0x101, 0x8}}, 0x44) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 932.657486] binder: BINDER_SET_CONTEXT_MGR already set [ 932.665791] binder: 12561:12563 ioctl 40046207 0 returned -16 03:40:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x60]}}], 0x0, 0x0, 0x0}) [ 932.723250] binder: undelivered TRANSACTION_COMPLETE 03:40:44 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0x200000) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000380)={0x0, 0xfb, 0x101, 0x2, 0x0, "f2171f506636662bf7b3871c3e1f4355", "cfeb5a222069dd1516e676b22f7689eb309f05e932693aa5dc982499c31e45926395fe5101a090cecf4eda8329e3c44be4613d6a074c3dc9313db4f4016203a6ddb99aa96c2e4558f39cfe397e8b84b00314e2019a91e40b1036c7b89b5c8fd235d7a491be8babdbdf5fd5c8bdb0e3cb49706ddbb7e129d375a159407558251f4989e5712490699340ad180015240fd52d85c770cf8bd03b254b09f5ea8b524f79f660d8043ddc8cde24827cab913c164c7ff05dc323a7731ca8535f1e63737f6a950996655bf576dcb20d24fe4141c833942a548710bb3e3a9218194dfef43dee691b6faed54c47c8695d75"}, 0x101, 0x1) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c6530ae2cfd1e2c6c6f7765726469723d2100000000000000776f726b6469723d2e2f66696c65315c00ab56a19437ba09456c97fc2c9365cbd11b"]) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:40:44 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0x10, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01000080000000000000000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000006001000000040000a019010000339abfe78c526aedc84bd71084dcc9405c582e65f209bd9f030dc6641cea1cfc8d11f2fe3c1d6b538c00ae0ff2fc44c3661e0788d8229bd2512743436de19d44"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 03:40:44 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 932.774664] binder: 12579:12580 got transaction with invalid offset (96, min 0 max 24) or object. [ 932.809697] binder: BINDER_SET_CONTEXT_MGR already set 03:40:44 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10000, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)=0x10000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x3, 0x1, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) [ 932.861635] binder: 12579:12583 ioctl 40046207 0 returned -16 [ 932.867974] binder_alloc: 12579: binder_alloc_buf, no vma [ 932.884363] binder: undelivered TRANSACTION_COMPLETE 03:40:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x500000000000000]}}], 0x0, 0x0, 0x0}) [ 932.980060] overlayfs: unrecognized mount option "ý" or missing value 03:40:44 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x200) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x4, 0x1000, 0x0, 0x7, 0xfff, 0x2, 0x80, 0x0, 0x8000, 0x4, 0x8, 0x0, 0x8bf, 0x6, 0x4, 0xe462, 0x2, 0x8}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000080)) 03:40:44 executing program 2: r0 = userfaultfd(0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x111200) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x7, 0x7, 0xe36b4985b4e22622, 0x3, 0x84, 0x80000001, 0xc2a1, 0x2, 0x7, 0x9, 0x200, 0x1, 0x3, 0x7, 0x8, 0x1}}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00008ec000/0x3000)=nil, 0x3000}, 0xfffffffffffffffe, 0x200000}) [ 933.067154] overlayfs: unrecognized mount option "ý" or missing value [ 933.074187] binder: BINDER_SET_CONTEXT_MGR already set [ 933.097897] binder: 12600:12602 ioctl 40046207 0 returned -16 [ 933.114816] binder_alloc_mmap_handler: 8 callbacks suppressed [ 933.114833] binder_alloc: binder_alloc_mmap_handler: 12587 20001000-20004000 already mapped failed -16 03:40:44 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x802, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740)='/dev/video35\x00', 0x2, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='9p\x00', 0x80000, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose'}, {@access_any='access=any'}, {@access_uid={'access', 0x3d, r2}}, {@aname={'aname', 0x3d, 'selinux,lo%,cgroupprocloself:^bdevtrustedbdev*'}}, {@privport='privport'}, {@fscache='fscache'}, {@posixacl='posixacl'}, {@posixacl='posixacl'}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@subj_user={'subj_user', 0x3d, 'upperdir'}}, {@fowner_gt={'fowner>', r3}}, {@smackfsroot={'smackfsroot', 0x3d, 'workdir'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@obj_type={'obj_type', 0x3d, 'workdir'}}]}}) mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:40:44 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x4000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 933.177570] binder: release 12587:12590 transaction 4191 in, still active 03:40:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xc6ffffffffffffff) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:40:44 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:45 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") getcwd(&(0x7f0000000100)=""/249, 0xf9) syz_emit_ethernet(0x300606, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0xffffff32, 0x0, @ipv4={[], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 933.385008] overlayfs: './file1' not a directory 03:40:45 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x2) sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{0x4, 0x8, 0xffffffffffff0000, 0x5021}, 0x5, 0x1, 0x0, 0x0, "b2526fa9de285cee"}, 0x10}, 0x1, 0x0, 0x0, 0x20044015}, 0x0) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 03:40:45 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400000) fchmodat(r0, &(0x7f0000000140)='./file1\x00', 0xa0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) mount$bpf(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='bpf\x00', 0x5000, &(0x7f0000000380)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303036343635372c736d61636b66736861743d6c6f7765726469722c646f6e745f61707072616973652c00f36cf1341f2d66d54f8221c8904d3ba8d9037cf45964e49bbc2e10631129869551ca9e2df66b496d783c95fb63f09c0aec617757372dccfdb4766670b2ab20150ab6c54b1103fe44193d26477513a9acbd5389"]) chdir(&(0x7f0000000340)='./file0\x00') r1 = shmget(0x2, 0x1000, 0x980, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) fcntl$setflags(r0, 0x2, 0x1) [ 933.410431] binder_transaction: 11 callbacks suppressed [ 933.410441] binder: 12621:12629 got reply transaction with no transaction stack 03:40:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x20) 03:40:45 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x18a, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) clone(0x80a102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x10000, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 933.689594] overlayfs: filesystem on './file0' not supported as upperdir [ 933.862142] binder_alloc: binder_alloc_mmap_handler: 12600 20001000-20004000 already mapped failed -16 [ 933.877822] binder: BINDER_SET_CONTEXT_MGR already set [ 933.883194] binder: 12600:12605 ioctl 40046207 0 returned -16 [ 933.884807] binder: undelivered TRANSACTION_COMPLETE [ 933.894590] binder_alloc: binder_alloc_mmap_handler: 12621 20001000-20004000 already mapped failed -16 03:40:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0xffffffff00000000]}}], 0x0, 0x0, 0x0}) 03:40:45 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f0000000040)={0x1d, 0x0, 0xa}, 0x10, &(0x7f0000000000)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}}, 0x4000) 03:40:45 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="75707075726469723d2e2f66696c65302c6c6f827765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00"]) execve(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)=[&(0x7f0000000140)='overlay\x00'], &(0x7f0000000380)=[&(0x7f0000000200)='overlay\x00', &(0x7f0000000240)='overlay\x00', &(0x7f0000000280)='bdev\x00', &(0x7f00000002c0)='md5sum]\x00']) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x28fe, 0x1) 03:40:45 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x2, 0x2}) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r2, 0xaf8) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0)='IPVS\x00') futex(&(0x7f0000001ac0), 0x3, 0x0, 0x0, &(0x7f0000001c40), 0x0) 03:40:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x5e18230000000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 933.934053] binder: BINDER_SET_CONTEXT_MGR already set [ 933.942762] binder: 12621:12629 got reply transaction with no transaction stack [ 933.951236] binder: release 12600:12650 transaction 4196 out, still active [ 933.980174] binder: 12621:12623 ioctl 40046207 0 returned -16 [ 933.986227] binder: undelivered TRANSACTION_COMPLETE [ 933.991449] binder: release 12621:12623 transaction 4196 in, still active [ 934.017191] overlayfs: unrecognized mount option "uppurdir=./file0" or missing value 03:40:45 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 934.033992] binder: send failed reply for transaction 4196, target dead 03:40:45 executing program 5: socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(r0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000d, 0x0, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="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", 0x200}], 0x1, 0x0, 0x0, 0x20000000}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r6 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x4101, 0x40003) r7 = fcntl$getown(r1, 0x9) getgid() getpgid(r7) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000002240)) fcntl$getownex(r5, 0x10, &(0x7f0000000300)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940), &(0x7f00000022c0)=0xc) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000002300)) fstat(r4, &(0x7f0000002340)) fcntl$getown(r2, 0x9) [ 934.082878] binder: 12665:12667 got transaction with invalid offset (-4294967296, min 0 max 24) or object. [ 934.094556] binder_send_failed_reply: 2 callbacks suppressed [ 934.094567] binder: send failed reply for transaction 4199 to 12665:12667 03:40:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f33"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 934.129499] binder: BINDER_SET_CONTEXT_MGR already set [ 934.149379] binder_alloc: binder_alloc_mmap_handler: 12665 20001000-20004000 already mapped failed -16 [ 934.164018] binder: 12671:12672 ioctl 40046207 0 returned -16 03:40:45 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = socket$inet_dccp(0x2, 0x6, 0x0) lsetxattr$security_evm(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)=@md5={0x1, "d60263832ca0a78c643c277a3c55828c"}, 0x11, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000140)=0x40) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 934.177845] binder: BINDER_SET_CONTEXT_MGR already set [ 934.184971] binder: 12671:12672 got reply transaction with no transaction stack [ 934.216272] binder_alloc: binder_alloc_mmap_handler: 12671 20001000-20004000 already mapped failed -16 03:40:45 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) [ 934.238868] binder: 12665:12682 got reply transaction with no transaction stack [ 934.246554] binder: 12665:12667 ioctl 40046207 0 returned -16 03:40:46 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:40:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x6000]}}], 0x0, 0x0, 0x0}) [ 934.382653] overlayfs: filesystem on './file0' not supported as upperdir 03:40:46 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) r1 = getpgid(0xffffffffffffffff) ptrace$pokeuser(0x6, r1, 0x6, 0x6) [ 934.425081] binder: 12693:12698 got reply transaction with no transaction stack [ 934.443139] binder: BINDER_SET_CONTEXT_MGR already set [ 934.453625] binder: 12696:12700 ioctl 40046207 0 returned -16 [ 934.477317] binder_alloc: binder_alloc_mmap_handler: 12693 20001000-20004000 already mapped failed -16 [ 934.487196] binder: BINDER_SET_CONTEXT_MGR already set [ 934.492618] binder: 12693:12694 ioctl 40046207 0 returned -16 [ 934.493035] binder: release 12693:12694 transaction 4206 in, still active [ 934.517740] binder: send failed reply for transaction 4206 to 12696:12700 03:40:46 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 934.525346] binder: 12696:12703 got reply transaction with no transaction stack 03:40:46 executing program 2: semget$private(0x0, 0x1, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x400000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2c00) write(r1, &(0x7f00000001c0), 0xfffffef3) pselect6(0x40, &(0x7f0000000100)={0xf02, 0xf1e, 0x1a, 0x4, 0x10000, 0x6, 0x9628, 0xfffffffffffffffe}, &(0x7f00000001c0)={0x1, 0x0, 0x4, 0x0, 0x0, 0x9b47578, 0x100}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x5}, 0x8}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x400, 0x0) getgroups(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() clone(0xa0140100, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x11) wait4(0x0, 0x0, 0x0, 0x0) 03:40:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x700000000000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 934.676617] binder: 12708:12714 got reply transaction with no transaction stack [ 934.680975] overlayfs: filesystem on './file0' not supported as upperdir 03:40:46 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140)=0x5) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 934.879833] overlayfs: filesystem on './file0' not supported as upperdir 03:40:46 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000140)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 03:40:46 executing program 2: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000002180)=""/223, 0xdf}], 0x2, &(0x7f0000002340)=""/110, 0x6e}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000006c0)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000900)=""/124, 0x7c}], 0x3, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 03:40:46 executing program 1: r0 = semget(0x0, 0x0, 0x2) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000200)=""/186) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x42) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="3d2e2f66696c65302c6c47b06572646972392e2f66692c65302c776f726b6469723d2e2f66696c65315c00"]) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x44000, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000002c0)) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x5efa, 0x0, 0x610, 0xb2, 0x8, 0x7fffffff, 0x8001, 0x6, 0xff}) 03:40:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1900000000000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 935.129106] overlayfs: unrecognized mount option "=./file0" or missing value 03:40:46 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) socket$inet6(0xa, 0x3, 0xff) [ 935.175171] overlayfs: unrecognized mount option "=./file0" or missing value 03:40:46 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000140)={0x1000}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 935.236298] binder_alloc: binder_alloc_mmap_handler: 12696 20001000-20004000 already mapped failed -16 [ 935.247826] binder: BINDER_SET_CONTEXT_MGR already set [ 935.258194] binder: 12696:12703 ioctl 40046207 0 returned -16 [ 935.290446] binder_alloc: binder_alloc_mmap_handler: 12708 20001000-20004000 already mapped failed -16 [ 935.302781] binder_release_work: 31 callbacks suppressed [ 935.302788] binder: undelivered TRANSACTION_ERROR: 29201 [ 935.343646] binder: release 12708:12711 transaction 4210 in, still active 03:40:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x6c000000]}}], 0x0, 0x0, 0x0}) 03:40:47 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 935.403029] binder: send failed reply for transaction 4210 to 12696:12748 03:40:47 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:47 executing program 2: r0 = socket(0x10, 0x803, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000002180)=""/223, 0xdf}], 0x2, &(0x7f0000002340)=""/110, 0x6e}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000006c0)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000900)=""/124, 0x7c}], 0x3, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 935.469287] binder: undelivered TRANSACTION_ERROR: 29201 [ 935.506345] binder_release_work: 1 callbacks suppressed [ 935.506350] binder: undelivered TRANSACTION_COMPLETE [ 935.556445] overlayfs: filesystem on './file0' not supported as upperdir [ 935.561485] binder: BINDER_SET_CONTEXT_MGR already set [ 935.572619] binder: undelivered TRANSACTION_ERROR: 29189 [ 935.602668] binder: 12758:12768 got reply transaction with no transaction stack [ 935.603020] binder: 12761:12763 ioctl 40046207 0 returned -16 [ 935.617150] binder: undelivered TRANSACTION_COMPLETE [ 935.630042] binder: undelivered TRANSACTION_ERROR: 29189 [ 935.644566] binder_transaction: 18 callbacks suppressed 03:40:47 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x110) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:40:47 executing program 2: close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000000008000", &(0x7f0000000100)=@ethtool_cmd={0x11, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}}) [ 935.644583] binder: 12758:12768 transaction failed 29201/-71, size 24-4 line 2741 03:40:47 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 935.697309] binder_alloc: binder_alloc_mmap_handler: 12758 20001000-20004000 already mapped failed -16 [ 935.722044] binder: 12761:12771 got reply transaction with no transaction stack [ 935.730825] binder: BINDER_SET_CONTEXT_MGR already set [ 935.752407] binder: 12761:12771 transaction failed 29201/-71, size 24-8 line 2741 [ 935.765549] binder: 12758:12760 ioctl 40046207 0 returned -16 03:40:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x6) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 935.815253] binder: 12758:12781 got reply transaction with no transaction stack [ 935.816016] binder: release 12758:12760 transaction 4213 in, still active 03:40:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000009080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x80000003f, 0x1, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000140)={r1, &(0x7f00000000c0), 0x0}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000066, 0x0) [ 935.857987] binder: send failed reply for transaction 4213 to 12761:12771 [ 935.859786] binder: 12758:12781 transaction failed 29201/-71, size 24-4 line 2741 [ 935.872641] binder: undelivered TRANSACTION_ERROR: 29201 [ 935.894352] binder: undelivered TRANSACTION_ERROR: 29201 03:40:47 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40, 0x0) connect$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(r0, r0, 0x1, 0x3) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) [ 935.902986] overlayfs: filesystem on './file0' not supported as upperdir 03:40:47 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:47 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x100) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x100) accept4$unix(r0, 0x0, &(0x7f0000000300), 0x80800) mkdir(&(0x7f0000000140)='./file1\x00', 0x8) chdir(&(0x7f00000003c0)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udplite\x00') ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000200)=""/124) [ 936.077764] binder: 12796:12801 transaction failed 29201/-71, size 24-4 line 2741 [ 936.152943] overlayfs: filesystem on './file0' not supported as upperdir [ 936.357623] binder_alloc: binder_alloc_mmap_handler: 12761 20001000-20004000 already mapped failed -16 [ 936.371474] binder: BINDER_SET_CONTEXT_MGR already set [ 936.376932] binder: 12761:12771 ioctl 40046207 0 returned -16 [ 936.382607] binder: BINDER_SET_CONTEXT_MGR already set [ 936.389214] binder: 12796:12797 ioctl 40046207 0 returned -16 [ 936.389459] binder: undelivered TRANSACTION_COMPLETE [ 936.400608] binder: undelivered TRANSACTION_ERROR: 29189 03:40:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x20000000]}}], 0x0, 0x0, 0x0}) 03:40:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000740)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) connect(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1004000000016) 03:40:48 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x0, r2}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 03:40:48 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) getpeername(r0, &(0x7f0000000140)=@hci, &(0x7f0000000080)=0x80) 03:40:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x200000000000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:40:48 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 936.417987] binder: release 12796:12797 transaction 4218 in, still active [ 936.425629] binder: send failed reply for transaction 4218 to 12761:12810 [ 936.432861] binder: undelivered TRANSACTION_ERROR: 29201 [ 936.484460] binder: undelivered TRANSACTION_COMPLETE [ 936.524858] binder: undelivered TRANSACTION_ERROR: 29189 [ 936.553875] binder: 12820:12829 transaction failed 29201/-71, size 24-4 line 2741 [ 936.564026] binder: undelivered TRANSACTION_ERROR: 29201 03:40:48 executing program 2: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="e00000027f0000010000000004000000e00000010000000000000000000000002122b4d19cbb2a3f2c680a4bcd4718cac2c10ef30742e606f81f3dcb7cd7bf7d18fe284fb900"], 0x1) 03:40:48 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0x5646, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 936.570114] binder: BINDER_SET_CONTEXT_MGR already set [ 936.580563] binder: 12825:12827 ioctl 40046207 0 returned -16 [ 936.590148] binder: BINDER_SET_CONTEXT_MGR already set [ 936.598970] binder: 12820:12822 ioctl 40046207 0 returned -16 [ 936.605938] overlayfs: './file1' not a directory [ 936.612892] binder: 12820:12829 transaction failed 29201/-71, size 24-4 line 2741 [ 936.624190] binder: release 12820:12822 transaction 4221 in, still active [ 936.640020] binder: send failed reply for transaction 4221 to 12825:12827 [ 936.654656] binder: 12825:12834 transaction failed 29201/-71, size 24-8 line 2741 03:40:48 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0xb, @vbi={0x1519, 0x100000000000000, 0x100000000, 0x7f7f7f5b, [0x4], [0x486, 0x81], 0x13b}}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:40:48 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:48 executing program 2: syz_open_dev$usbmon(0xfffffffffffffffd, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3e) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xe2b, 0x4) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 936.708808] Scaler: ================= START STATUS ================= [ 936.722856] Scaler: ================== END STATUS ================== [ 936.776923] Scaler: ================= START STATUS ================= [ 936.792118] Scaler: ================== END STATUS ================== [ 936.799759] binder: 12840:12846 transaction failed 29201/-71, size 24-4 line 2741 03:40:48 executing program 2: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, 0x0}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r3 = dup2(r2, r1) ptrace$setopts(0x4206, 0x0, 0x3f, 0x10) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000800)) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57, 0x3f000000}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000300)={0x2, &(0x7f0000000180)=[{}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000340)={r4, 0x2}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x9, @mcast1, 0x7f}}}, 0x84) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) [ 936.947938] overlayfs: filesystem on './file0' not supported as upperdir 03:40:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x5000000]}}], 0x0, 0x0, 0x0}) 03:40:49 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000140)={0x1, 0x0, {0x2, 0x8, 0x0, 0xb, 0x4, 0xf, 0x1, 0x7}}) getuid() accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000009700)={{{@in=@remote, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000009800)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', r2}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r3}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 03:40:49 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xde, 0x1a1280) write$nbd(r0, &(0x7f0000000200)={0x67446698, 0x0, 0x2, 0x2, 0x4, "5c4f13b19b734c7499e28619f9aa185af95fc060d6fe3a0c0dfdd253d63c5bde3426fe2c82a77e59e1ef9843749d695103658bfb5f4342c3e461bc7a891dc5e41d2904afecc0db4285fc4e9ce4832bf6b2c776a9e28aaaf5f7e31e9ab7016758bfde4d15ad9019c7f3efb6d224cf64f686c519ef57b45bc51efa4034fd976b14f6c63ffcb152602d45e11817cf6c917e377905e69d5d8516"}, 0xa8) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726483f6ac449a43c5902e2f66696c65302c776f72d94bae00000000000053c38de696879b0f0d"]) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000140)) 03:40:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x300000000000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:40:49 executing program 2: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, 0x0}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r3 = dup2(r2, r1) ptrace$setopts(0x4206, 0x0, 0x3f, 0x10) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000800)) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57, 0x3f000000}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000300)={0x2, &(0x7f0000000180)=[{}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000340)={r4, 0x2}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x9, @mcast1, 0x7f}}}, 0x84) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) [ 937.342403] binder: BINDER_SET_CONTEXT_MGR already set [ 937.347962] binder: 12825:12834 ioctl 40046207 0 returned -16 [ 937.349830] binder: BINDER_SET_CONTEXT_MGR already set [ 937.359573] binder: 12840:12846 transaction failed 29201/-71, size 24-4 line 2741 [ 937.360403] binder: 12840:12841 ioctl 40046207 0 returned -16 [ 937.373560] binder: undelivered TRANSACTION_COMPLETE [ 937.382167] binder: release 12840:12841 transaction 4226 in, still active [ 937.433926] binder: send failed reply for transaction 4226 to 12825:12861 [ 937.455715] binder: undelivered TRANSACTION_COMPLETE [ 937.466126] overlayfs: unrecognized mount option "lowerdƒö¬DšCÅ./file0" or missing value 03:40:49 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:49 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x82040, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0x10, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 937.507188] binder: 12873:12874 got transaction with invalid offset (83886080, min 0 max 24) or object. 03:40:49 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7570706572645a723d2e2f66696c65302c6c6f7765736469723d2e2f668243dff440682c866b6469723d2e2f66696c65315c00"]) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 937.562848] binder: 12873:12874 transaction failed 29201/-22, size 24-8 line 3035 [ 937.594149] binder: BINDER_SET_CONTEXT_MGR already set [ 937.611448] binder: send failed reply for transaction 4229 to 12873:12874 [ 937.630737] binder: 12879:12880 ioctl 40046207 0 returned -16 [ 937.663285] binder: BINDER_SET_CONTEXT_MGR already set [ 937.687347] binder: 12873:12886 ioctl 40046207 0 returned -16 [ 937.687374] binder: BINDER_SET_CONTEXT_MGR already set [ 937.722606] overlayfs: unrecognized mount option "upperdZr=./file0" or missing value [ 937.756008] overlayfs: unrecognized mount option "upperdZr=./file0" or missing value [ 937.784729] binder: 12879:12880 ioctl 40046207 0 returned -16 [ 937.790890] binder: undelivered TRANSACTION_COMPLETE 03:40:49 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='uppesdir=./file0,l`werdir=./file0,workdir=./file1\\\x00']) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x100) 03:40:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x7a00]}}], 0x0, 0x0, 0x0}) 03:40:49 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:49 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r3}, 0x10) sendmsg$can_raw(r2, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0x10, &(0x7f0000000ff0)={&(0x7f0000000040)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}}, 0x0) [ 938.008498] overlayfs: unrecognized mount option "uppesdir=./file0" or missing value [ 938.046662] binder: 12902:12905 got transaction with invalid offset (31232, min 0 max 24) or object. [ 938.057549] binder: BINDER_SET_CONTEXT_MGR already set 03:40:49 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) memfd_create(&(0x7f0000000000)='trustedcgroup\x00', 0x4) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 938.091872] binder: send failed reply for transaction 4234 to 12902:12905 [ 938.096726] binder: 12904:12907 ioctl 40046207 0 returned -16 [ 938.119825] overlayfs: unrecognized mount option "uppesdir=./file0" or missing value 03:40:49 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) fstat(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) r2 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x2040040, &(0x7f0000000580)=ANY=[@ANYBLOB='metacopy=off,lowerdir=./file1,xino=off,metacopy=on,xino=on,fowner>', @ANYRESDEC=r0, @ANYBLOB=',seclabel,fowner>', @ANYRESDEC=r1, @ANYBLOB=',dont_hash,dont_measure,uid=', @ANYRESDEC=r2, @ANYBLOB="2ce57569643d", @ANYRESDEC=r3, @ANYBLOB=',dont_hash,\x00']) [ 938.140826] binder_alloc_mmap_handler: 6 callbacks suppressed [ 938.140843] binder_alloc: binder_alloc_mmap_handler: 12904 20001000-20004000 already mapped failed -16 [ 938.156973] binder_alloc: binder_alloc_mmap_handler: 12902 20001000-20004000 already mapped failed -16 [ 938.187148] binder: BINDER_SET_CONTEXT_MGR already set [ 938.204606] binder: 12902:12905 ioctl 40046207 0 returned -16 [ 938.228472] binder_alloc: 12902: binder_alloc_buf, no vma [ 938.234687] binder: BINDER_SET_CONTEXT_MGR already set [ 938.262742] binder: 12904:12907 ioctl 40046207 0 returned -16 [ 938.284606] binder: undelivered TRANSACTION_COMPLETE 03:40:50 executing program 2: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, 0x0}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r3 = dup2(r2, r1) ptrace$setopts(0x4206, 0x0, 0x3f, 0x10) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000800)) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57, 0x3f000000}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000300)={0x2, &(0x7f0000000180)=[{}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000340)={r4, 0x2}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x9, @mcast1, 0x7f}}}, 0x84) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) 03:40:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x19000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:40:50 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000000000001f000080580b000002000000faffffff0180000000000000020000000500000000020000128aca4b047f85b047a31301000000ff07000000000000190000802000000007000000050000000400000000000000190000c0050000000101000003000000050000000000000007000080000001001f00000006000000070000000000000000000000020000000400000040000000050000000000000000000000ff0f00000900000001000100b401312600000000000000000104000003000000ff0100000500000000000000"]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 03:40:50 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x68]}}], 0x0, 0x0, 0x0}) [ 938.378107] overlayfs: filesystem on './file0' not supported as upperdir 03:40:50 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 938.476653] binder: BINDER_SET_CONTEXT_MGR already set [ 938.481972] binder: 12932:12935 ioctl 40046207 0 returned -16 [ 938.496025] binder: 12930:12933 got transaction with invalid offset (104, min 0 max 24) or object. 03:40:50 executing program 2: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, 0x0}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r3 = dup2(r2, r1) ptrace$setopts(0x4206, 0x0, 0x3f, 0x10) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000800)) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57, 0x3f000000}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000300)={0x2, &(0x7f0000000180)=[{}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000340)={r4, 0x2}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x9, @mcast1, 0x7f}}}, 0x84) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) [ 938.564251] binder: send failed reply for transaction 4240 to 12930:12933 [ 938.587143] binder_alloc: binder_alloc_mmap_handler: 12930 20001000-20004000 already mapped failed -16 [ 938.598200] binder: BINDER_SET_CONTEXT_MGR already set [ 938.604592] binder: 12930:12933 ioctl 40046207 0 returned -16 03:40:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x2]}}], 0x0, 0x0, 0x0}) [ 938.610656] binder_alloc: 12930: binder_alloc_buf, no vma [ 938.621016] binder: undelivered TRANSACTION_COMPLETE [ 938.627621] binder_transaction: 9 callbacks suppressed [ 938.627631] binder: 12932:12943 got reply transaction with no transaction stack [ 938.775485] binder: 12950:12952 got transaction with invalid offset (2, min 0 max 24) or object. [ 938.828126] binder_alloc: binder_alloc_mmap_handler: 12950 20001000-20004000 already mapped failed -16 03:40:50 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0xc, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000300)={{r2, r3+10000000}, {0x0, 0x1c9c380}}, &(0x7f0000000340)) getuid() timer_create(0x7, &(0x7f00000001c0)={0x0, 0xa, 0x1, @thr={&(0x7f0000000000)="cb748cc85361109ce242ef07c2c00d45b8ea2be7da7580c0e100a15c9bdebf73722c2806ac702c245ae0294da3716a2b3c4475a0b0d0d540c3ee5f9098a9af92736b9787dc5c9f95fd24680c0ff195c396d519ae43684fd7b9d09d1f00eac75b28da5e8113a7581c2eed0a577c9e4a61dcc494bf6da1e0e673416583d6a6f283dc9ba3c68906d8bf0c35751c7f0155212faa80638683349f5dfb091a760c3514baa17a89f6f5e4485dc82b65d436c5a4932ecfb940e7ad2857a2e848b6229a77c82f1c72b7103b441cf8df6e94c6a05929e8074a750cfd83f710", &(0x7f0000000140)="26f45f27f8d53056a58848e55d905849fd9da0fc4bb365de6a4e16e0202832bd0673bb8188b7fb4c919fb99c5398ce006c613377eb21e3b717048b23a0326847a5fcf9190b9812cbc7ee4ce8c984f84317570db7490629249db03e4c"}}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x12000, 0x0) write$P9_RUNLINKAT(r5, &(0x7f00000004c0)={0x7, 0x4d, 0x2}, 0x7) getsockname(r0, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000400)=0x80) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000440)={@multicast2, @multicast2, r4}, 0xc) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 938.868450] overlayfs: filesystem on './file0' not supported as upperdir [ 938.875774] binder: BINDER_SET_CONTEXT_MGR already set [ 938.903894] binder: 12950:12952 ioctl 40046207 0 returned -16 [ 938.909053] binder_alloc: 12950: binder_alloc_buf, no vma 03:40:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x4800000000000000]}}], 0x0, 0x0, 0x0}) 03:40:50 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x20) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x8, 0x420000) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x9) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x20008, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="4694e51ddde085e1ffb55a7bbaa2ccf6ca1be05b7ae74cc3a41b06b43c671943944c4ffc417c82801e65fb3708fec9f61fec0b49f7e640389f625a2af7c2a349740930f621fde577cc88ed83094979b51876bb9f73c09d63bde77449813fbb0e4960db97ca57994b536ba3bb79b5cf6f312b6c670c58a06abe7abe83e35555b5c285139d699acebde457b3f48ea89ba63f63ad87fe5c85f707892e8fc611b9c49949cf591b6d5c09b28465c89f17bdff414bc2a241dd0b94e6341385b4281a76bff927fe2e19306968475f247746e3e6f714df8e6dcdb4d6db9f86d490bc6bb18be9ae2924a921", @ANYRESOCT, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRESDEC, @ANYRESHEX, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYPTR64, @ANYRESDEC, @ANYPTR64, @ANYRESHEX, @ANYRESHEX], @ANYRESDEC]]) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 939.036134] binder: undelivered TRANSACTION_COMPLETE [ 939.168735] binder: 12963:12965 got transaction with invalid offset (5188146770730811392, min 0 max 24) or object. 03:40:50 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r3}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='vcan0\x00') ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x7, 0x2, 0xfffffffffffffffc, 0x7fffffff, 0x0, 0x6, 0x40, 0xc, 0x1ff, 0x8, 0x0, 0xfff, 0x2, 0xfffffffffffffff8, 0x7, 0x9, 0x36a, 0x4, 0x1f, 0x6, 0xfff, 0x0, 0x7, 0x40, 0x7fffffff, 0x4, 0x80, 0x20, 0x2, 0x7, 0x9, 0x8, 0x16ff, 0x90000, 0x0, 0x4, 0x0, 0x6, 0x0, @perf_config_ext={0x3, 0x4}, 0x400, 0xde05, 0x80000001, 0x0, 0xff, 0x7fff, 0x9}, r4, 0x4, r1, 0x1) [ 939.245789] binder_send_failed_reply: 1 callbacks suppressed [ 939.245800] binder: send failed reply for transaction 4249 to 12963:12965 [ 939.255102] binder_alloc: binder_alloc_mmap_handler: 12932 20001000-20004000 already mapped failed -16 [ 939.285664] binder_alloc: binder_alloc_mmap_handler: 12963 20001000-20004000 already mapped failed -16 [ 939.307105] binder: BINDER_SET_CONTEXT_MGR already set [ 939.336351] binder: 12932:12943 ioctl 40046207 0 returned -16 [ 939.342360] binder: BINDER_SET_CONTEXT_MGR already set [ 939.348254] binder: 12963:12965 ioctl 40046207 0 returned -16 [ 939.359544] binder_alloc: 12963: binder_alloc_buf, no vma 03:40:51 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xc00) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:40:51 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x4000000000) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x80000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast1, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) mount(&(0x7f0000000540)=@sr0='/dev/sr0\x00', &(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='ext2\x00', 0x15, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@access_client='access=client'}], [{@euid_lt={'euid<', r2}}, {@euid_gt={'euid>', r3}}]}}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:40:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x48000000]}}], 0x0, 0x0, 0x0}) 03:40:51 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x5, 0x0, 0x80000000, 0xff, 0x4, 0x9, 0x2, 0x81, 0x7, 0x7ff, 0x780, 0x4, 0x400000}, {0x6, 0x0, 0x6, 0x0, 0x1bf, 0xff, 0x5, 0x7, 0xae, 0x4, 0xf35, 0x7, 0x1000}, {0x5, 0x0, 0x6967, 0x7d7b6560, 0x7, 0x8, 0x3, 0x3, 0x4, 0x8, 0x5, 0xe482, 0x613}]}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 03:40:51 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$int_in(r0, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/247, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) [ 939.563699] binder: BINDER_SET_CONTEXT_MGR already set [ 939.572006] binder: 12982:12991 got reply transaction with no transaction stack [ 939.612687] binder: 12985:12986 ioctl 40046207 0 returned -16 [ 939.638342] binder: 12985:12998 got reply transaction with no transaction stack [ 939.638455] binder_alloc: binder_alloc_mmap_handler: 12982 20001000-20004000 already mapped failed -16 [ 939.695047] binder: BINDER_SET_CONTEXT_MGR already set [ 939.707063] binder: 12982:12983 ioctl 40046207 0 returned -16 [ 939.709340] binder_alloc: binder_alloc_mmap_handler: 12985 20001000-20004000 already mapped failed -16 [ 939.718991] binder: 12982:12983 got reply transaction with no transaction stack [ 939.731305] binder: release 12982:12983 transaction 4254 in, still active [ 939.741062] binder: send failed reply for transaction 4254 to 12985:12998 03:40:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000001280)=0x7fff, 0x4) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 03:40:51 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:51 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000000c0)={r3, r4, 0x8000}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 939.788344] overlayfs: './file1' not a directory [ 939.788426] binder_alloc: 12985: binder_alloc_buf, no vma 03:40:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x2000000]}}], 0x0, 0x0, 0x0}) [ 939.848888] binder: 12985:12986 got reply transaction with no transaction stack 03:40:51 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x24001) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 939.987207] binder: BINDER_SET_CONTEXT_MGR already set 03:40:51 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000540), 0xcf53e35) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)}, 0x0) close(r0) [ 940.009332] binder: 13011:13020 got reply transaction with no transaction stack [ 940.028743] binder: 13014:13016 ioctl 40046207 0 returned -16 03:40:51 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x400, 0x2ac4000000000000, 0x3, 0xf5, 0x9, 0x0, 0x7, 0x5, 0x1af, 0x38, 0x125, 0x8332, 0x10001, 0x20, 0x1, 0x6, 0x9, 0x9}, [{0x6474e555, 0x660, 0x5, 0x2, 0x76b, 0x9, 0xffffffffffffff01, 0xffffffffffff53a8}, {0x6, 0x0, 0x6, 0x7, 0x80, 0x6, 0x0, 0x10000000}], "a2a7201d7365649ecdd9fac3daa2ccfde7212ba81435983a657a15c793c4c9aaee0ad5051905e4cee6bb88f2d27dabf0c966114d88fb8e53e3a2a67f270ebe53c29749c8ecb6c8186606e9474729ca35cb72f97f34df3cc3af441348144ebb5e63b59335916c22081ff2706e3369518edb97fc36184ddecee29ffa11151bddce18019adb0300968553c9fbb7908dcc20e0561112c3de711cdc4a59f5aa5b0ea1c83c236c93b356f67c47ac7a6ccb2cb9d9c9cef6f5b510a23888f027ceadd089d72b8b14b2e9bf83b2aae6b7afa1a01720efa9582fe9cbd1fbfd5801db4744e1", [[], [], [], []]}, 0x558) [ 940.063749] binder_alloc: binder_alloc_mmap_handler: 13011 20001000-20004000 already mapped failed -16 [ 940.084132] binder: BINDER_SET_CONTEXT_MGR already set [ 940.091327] binder: release 13011:13015 transaction 4262 in, still active [ 940.105023] binder: 13014:13021 got reply transaction with no transaction stack [ 940.105818] binder: 13011:13015 ioctl 40046207 0 returned -16 [ 940.115674] binder: send failed reply for transaction 4262 to 13014:13021 [ 940.169371] overlayfs: './file1' not a directory 03:40:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1b) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:40:52 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:52 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) sendto(r0, &(0x7f0000000140)="3b7bfe68be0016385bf92da20682fa67d0828964836d4ca1ae3c5d891eb3", 0x1e, 0x8854, 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:40:52 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x81, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x402, 0x0) pipe2(&(0x7f0000000140), 0x4000) accept4(r0, &(0x7f0000000180)=@xdp, &(0x7f0000000200)=0x80, 0x800) r3 = dup2(r1, r1) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r4}, 0x10) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000240)={'HL\x00'}, &(0x7f0000000280)=0x1e) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 03:40:52 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000080)={@loopback}, &(0x7f00000000c0)=0x14) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 940.423535] binder: 13043:13055 got reply transaction with no transaction stack [ 940.424059] overlayfs: filesystem on './file0' not supported as upperdir 03:40:52 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r3}, 0x10) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_ENTRY(r4, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x5, {0x3, 0x1, 0x3ff, 0x3, 0x101, 0x8, {0x4, 0x8, 0x3, 0x4, 0x8f, 0x81, 0x100, 0xff, 0x7f, 0x34, 0x4, r1, r2, 0x3, 0x9}}}, 0x90) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 03:40:52 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) symlink(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='./file1\x00') chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:40:52 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0x2, 0x2) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000540)=ANY=[@ANYBLOB='nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000014e569c86667992629bf00000000000000000000000000000000000000000000000000000000000000009fe1602516468b78e2c10e00000000000000000000000000000000000000000000000000000000000000005a1c000000000000000000000000"], @ANYBLOB="002c84717c8816836aa62a0f0000000000001dd7fc42f5aa39eed45ca8ae068e00effb5a36744bfafbe7af0311dc09462be2196907dcf61de142a26f0800bfaa1bc14caf80c9b8af991e044154a732186cc80dae833d51290bf8e18b3f33e80a91b6f3ee60b877ac175425aeb23e90c9b88bb57203ede9a16e1e2a53ef9d99a16a9770890bff8eb99fee81e6a90fa6d93b49fb516f9a3754f743370609c2552528958bc9"], 0x78) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) r2 = getuid() getpeername$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000740)={{{@in=@local, @in=@loopback, 0x4e22, 0x108, 0x4e22, 0x2, 0x2, 0x80, 0x80, 0x2f, r3, r2}, {0x7ff, 0x7, 0x3, 0x2, 0x9, 0x400, 0x7, 0x1}, {0x1f, 0x9, 0x7, 0x2}, 0xfff, 0x6e6bbd, 0x0, 0x1, 0x3, 0x3}, {{@in=@broadcast, 0x4d4, 0xff}, 0xa, @in=@multicast1, 0x34ff, 0x0, 0x3, 0xe315, 0x400, 0x3, 0x1f}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socket$key(0xf, 0x3, 0x2) r5 = dup2(r0, r0) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000140)) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r4}, 0x10) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000300)) r6 = accept4(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000080)=0x80, 0x800) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f00000002c0)={0x9, 0x0, 0x10001, 0x9}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000008, 0x80010, r0, 0x0) connect$pptp(r6, &(0x7f00000000c0)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000440)=0x77cbc79, 0x4) bind$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0x270d, @my=0x0}, 0x10) bind$inet(r7, &(0x7f0000000400)={0x2, 0x4e1c, @multicast1}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r5) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 940.747011] overlayfs: filesystem on './file0' not supported as upperdir [ 940.778582] binder_alloc: binder_alloc_mmap_handler: 13014 20001000-20004000 already mapped failed -16 [ 940.804078] binder: BINDER_SET_CONTEXT_MGR already set [ 940.809378] binder: 13014:13021 ioctl 40046207 0 returned -16 [ 940.840688] binder_release_work: 2 callbacks suppressed [ 940.840694] binder: undelivered TRANSACTION_COMPLETE [ 940.852027] binder_release_work: 33 callbacks suppressed [ 940.852032] binder: undelivered TRANSACTION_ERROR: 29189 [ 940.852575] binder: 13043:13055 got reply transaction with no transaction stack [ 940.871056] binder: undelivered TRANSACTION_ERROR: 29201 [ 940.904750] binder: BINDER_SET_CONTEXT_MGR already set [ 940.917334] binder: 13043:13047 ioctl 40046207 0 returned -16 [ 940.917385] binder: release 13043:13047 transaction 4266 in, still active [ 940.932531] binder_transaction: 21 callbacks suppressed [ 940.932546] binder: 13043:13055 transaction failed 29201/-71, size 24-4 line 2741 03:40:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0xffffff7f]}}], 0x0, 0x0, 0x0}) 03:40:52 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000380)={0x20, 0x6, 0x0, [{0x3, 0x5, 0xd35, 0x8, 0x7, 0x895, 0x40}, {0x100, 0x80000001, 0xe0a7, 0x7, 0x7, 0x8, 0x8}, {0xf1, 0x20, 0x5, 0x81, 0x9, 0x3f, 0x100000001}, {0x239, 0x81, 0x20, 0x100, 0x80000001, 0xc83dea7}, {0x6, 0x2, 0x1, 0x58, 0xfffffffffffffff8, 0x1}, {0x7, 0x7fffffff, 0x2, 0x3f, 0x401, 0x3, 0x4}]}) mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 940.954360] binder: send failed reply for transaction 4266 to 13014:13076 [ 940.963309] binder: undelivered TRANSACTION_ERROR: 29201 [ 940.969337] binder: undelivered TRANSACTION_COMPLETE [ 940.986043] binder: undelivered TRANSACTION_ERROR: 29189 [ 941.017704] binder: undelivered TRANSACTION_ERROR: 29201 [ 941.042715] binder: 13083:13085 got transaction with invalid offset (4294967167, min 0 max 24) or object. [ 941.073920] binder: 13083:13085 transaction failed 29201/-22, size 24-8 line 3035 [ 941.081844] binder: send failed reply for transaction 4269 to 13083:13085 [ 941.095421] overlayfs: filesystem on './file0' not supported as upperdir [ 941.109004] binder: BINDER_SET_CONTEXT_MGR already set [ 941.124191] binder_alloc: 13083: binder_alloc_buf, no vma [ 941.129846] binder: 13083:13089 transaction failed 29189/-3, size 0-0 line 2973 [ 941.154066] binder: 13083:13085 ioctl 40046207 0 returned -16 [ 941.172957] binder: undelivered TRANSACTION_COMPLETE [ 941.174667] binder: 13083:13085 got reply transaction with no transaction stack [ 941.178654] binder: undelivered TRANSACTION_ERROR: 29201 [ 941.192791] binder: undelivered TRANSACTION_ERROR: 29190 [ 941.214085] binder: 13083:13085 transaction failed 29201/-71, size 24-8 line 2741 [ 941.221891] binder: undelivered TRANSACTION_ERROR: 29201 [ 941.274866] binder: undelivered TRANSACTION_ERROR: 29189 03:40:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:40:54 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) sync() getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 03:40:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1800000000000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:40:54 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:54 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x80000, 0x10) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000140)=0x9) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7570e178072fc1cc302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e787d9ac5f14794da1c6d3cde406e9673f88abf064044a031071eeecfe76c3fa9084fd641b979a7bdd7b65055086e0833b8ec4b6d703f2b7b2a8416ebdbcd8f14eca0f9c5f7da7d47c76c95ec2915bc90ca89ad54d46147e166987eb3496e2239be67ac82c24a1205828cd8"]) connect$rds(r0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:40:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x300]}}], 0x0, 0x0, 0x0}) [ 943.258214] binder: BINDER_SET_CONTEXT_MGR already set [ 943.263713] binder: 13098:13105 ioctl 40046207 0 returned -16 [ 943.275764] binder_alloc: 13098: binder_alloc_buf, no vma [ 943.282429] overlayfs: unrecognized mount option "upáx/ÁÌ0" or missing value [ 943.282596] binder: 13095:13102 transaction failed 29189/-3, size 24-4 line 2973 03:40:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 943.325260] binder: send failed reply for transaction 4274 to 13098:13105 [ 943.332423] binder: 13098:13113 transaction failed 29201/-71, size 24-8 line 2741 [ 943.348813] binder_alloc_mmap_handler: 2 callbacks suppressed [ 943.348831] binder_alloc: binder_alloc_mmap_handler: 13095 20001000-20004000 already mapped failed -16 [ 943.364702] binder: BINDER_SET_CONTEXT_MGR already set 03:40:55 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() fcntl$notify(r1, 0x402, 0x80000014) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000000)=""/232, &(0x7f0000000140)=0xe8) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x200, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000002000)={0x1, 0x0, 0x2080, {0x10000, 0x10000}, [], "dd75de3b5a3148aab800a4e2f8095afe4932e99dad1895e63272138c56a1786373c8d57f45f3b26ad0ff94b635ce33e93f3a47ebb2daa8a522cbe13ea7ff045a8d2256f5aa36d393caab995d10b35cbea425bd5dc79b8802f3adbde30f240042a2f8b5f28343e039a03dd6b089557b20c42f02be9fae84920e1f8fc6cf04f91ee92ed8e0461f7296f7307b2b0da76cc6458d9b185e3b708c48dfe750c90348f274ec1da912f6595d96ce42a9ffabe23a15bb7ac07491de9356c8f7c79c0e33236c4439f70559dc9a33ddbc5d1d63627708614f4d144d87812758e598a800022e84d854f3117c1aa06164b19803858d3535eb2539fc5e4a19ecdb5a261c2382c90d8a02ea43e6a0a522f8472e632af077afe9c50e1c9c6bbdd660331b29319f7d95739297fea3eb7e3053e6a5e58b3f8d447cda7529a95a094c80503838c12ec79d6a167f4d050ebc99fe08cd2d19d2340ce6641e3578f8b756690133584d3de38d7f872672e4154b7c61ff1d08ca64b0ac5931fa21b0c2b6c25e9119a43facaad6f9eeed068d59a35cf9a1e018ea0053bd54229cb0ecff7cc13616da972eb2f0190be5ad9561a163aa3d6e25a7fbff676b1e740f19b15f413c0320901b5e1aec133dcf5f2a3cf7452c7cf1b6832b7459e59c8cff3257f9befa59f302e996452386ae0aec52694366ffee6eb709c628b3b3a5365768804b995fca8fc25f7fea94450f84bfbb85ed861183bc2e2e82ed0b267f7afa80f38d43e84bc49629d390ec04db90527c7db598c51de71b406943f70fcf857a5be40365918a8de34a396eec34ffc209ecd150b70a681f773861fb96e95183ee12e5cc8ecc88c3f3bc2c67b0a9eb22bf507e22b0b8fa4bf93cb24c8615761d353e08cb48be8fee55be802ed77881d976edd41a92b55615c7e7d728ebe51de4a1c8ae337b6f3e3849df1c458e761349cdd38380ca285b94278ef3ed5616d669ad491d63951068217d49a73ea2602111f753faeb007f13b4aae5967ede1c15fb6f0eaecf0664bc42c1ba7d495e87be7dd31ea5eef1ee768500a9555d8bb121c76828c2f68b46e73f37bb51b99d9fd14e484ec1dde268a1748f6d42b90050c0cff9519919434e094b583d62a65a50607780545d8ec120a4a8e2f98b4a994d5328a4a003ffdcf0abb5901c4398c8d063c397f6768464c943239069d76fa4d75a38bf6836ea3d92658e3c9abb2b0920eb3cc7d5b28bef8713b6261daca4179a6ff93e5bbb3cf911eb16752bdb30e1faa70e1cd82a86fb9ba435d4e1fe0d735353f7022048de6613068e4d88159fc555fc9d31a6d76bcc7a770b6562b2505174da317f45cb3bd633298eec75cbd77ad69dfddc915e69dff70f852948ae58eafc911b33a716b0ae5f102c58e9914155d70b0301fc68522b00069c5aabbbd107b2aa5a2dbf1e21b02705501c2f5c45769796cf5cc9ca25a1c9b40de633bab924bb14e168faae031ae5883190ed882ecc3e2020f93649df45bf40c0cf83b2bb8bf7dc5fa9d74d1b891b14a691783fafd14857407a0ee36affcb5f63bf5744f64c6d06ba2b17420fe32f59058310536cb4b35c1af34555bdfcc14e94bdbe88c751899be6bcbb62f5733a4ba9e0f9ae98a9f22bc276bb10530216f80756de6fd33fb17f226a00db8f178528887f0d50ea4272165ce3d471ffe8ce327dc7ae84ab8817d9eaaf17726537543d6ac792ca63fa3d979982fd677bf3d17f23ca9fc152edf1f3d33be45ca7276fe56544aa7685d16cd5070908c1a9650474d71330117d2672bcacccb030e3c16938507c76f14a471afb772db13fe8490bbb2cdf101db25b4d0144187a2d5f3609eb32578e725c1945cd0b3562e6ae822d9a3317266b664be2398f2fa8054f440101017b4dcd10434974af7e4ec53e0affa01450e7d6ca60f30fbf693c046eb0e60a961e1010e1961ebc4e09edf5247785a3e873c5c954bc7582556b8d5e980b050ca6d11f65e317b1011b3a1a49241518e32da36b4448e6fd1acf6279bbed44adcc8923997737a3a2741718e08540585aa8b9f1577cf4c19dabd6c41abeae924d5d6e1883d98dcc7453a1c061a361ed4b0b63887437e1fd6a37d5f53d39618cdfe7f44ea6cfa24c950010ab656b5842cca4b94642b8e9d92463d82751e628bc6c93c26029cfd7d22210ed53a31cfc5e38759db22fc743bf224c7bbcf9ec161c7399a8a1abe89788f94addd577e40d56458e157a05e65c59aa6100b24b13940d935af21ca868c13e56e53b8c97fa314f4a9e5cad361ed4c3eda4a16e9d7075660f50bc44ac2d4d62f7c26b893362a53865f4f1cad8c9359daaff2549b7f00f0a00b633d5fbf49692dc957c8bb46ca4584cc5db2a83dbf1daf311aaf28835d33f29bf75a6e21b16903d3e94dd45e4bab9a3108be06890c3a5a95da02e5af0696fb1602bc945c331a71eb79e1b1ad7bb6fe0e11a2da04a2b17685a0f5c2356169c39f5eb5d370de0d3282cad9106913b7885e63ed3bd790e54ccb76a1087f582dd6a5424c7962cfa5cf08047ac9850cff7efea5b71e4d558eeac0dbf05c50954519ba33c2f7d92c18056bbce782474e0e79c96644763fdd5897ccd86c2321e0b7c3cabd2bff18bb8c92eb26a0874f57899826a6d222e268e34fa02b1ecbc7bbc9b879a1ad29e8165eebf64d253ae85ba80223c2fcd615f899a633bdbe6b79398ae24984b803c35e37a6ab534873065733da434ce5a41623f78cb6cc5249104b0a65a4d4128f7941e3b4fa390f9b8c740d2df3e0f5c7cad7c099ffda7d1e2b495a0c33a2f9cf14a26e161f8668d247e67ee139ad3f0929980a62973222b7ab2e3c17c87b33a938461dd18839429a5476c2f7f669857a27ff3ddedf88f274cf4d5e8450f0ad84af51db0c8e3cf4b96c84ddd8623467b438bee9707c645616b47e21c545e02de4b72a1cd414dcd20a827f69f5dff2bb1665e902cb72bb10bb18601bfcf91e50a16064a6b898c79ec2d8b61d821f5f11578db65dc2c06dabbee9cb2e52d45ca96f205f9b144e8555508b9d9f410254d4a9ae140873b3a21cb3fc4a22d1acadddab5f9e782e5401153cac4e9de3d39135166988e8edc6a68809bc4730697965176c202a1955e07f95c1fc354fa44b6fb7747cb580bdff1122d6a2d2d4f229c82bc89ca0f74cc0b86db3387edfa95b404086626e7d0e187411d7e338868a5466fcfe4292b5d3ca5ffd7981e0b2f8757b13715845e55efc2761c5f788695eef40d7b72b810301b81d6d40b06ad79f9d1f072680e9ac60e68122a3bff37ff3db1ec8b3f75320d4fa6e25f3926b6c3fe6e8ca32877890a2750a9f077bfc42f95485c63be4731b95864bcb79dedfe86a50d65a384245a1722f49c00e1af68cb2d45bd88417338555d74b2730bbd93a1cf88b6af6c4af3a5bf03ee1b5e5d0b74984d55cadc5c61964309b3463f1fac3ec37e1141d88b82634f6c024472d64125890ff904dd1f61bd404673dc75145ef67004b97f9d51369c9810f4b5d8db5edc955f899af9acba1770b244c0b224ae508b526ae41b126572afa8f23d6fcc361193e134403d49a15186160f7283f1702d9c73a1b13224a2f6c902ca91db48c5657dc880a9cb33c0adf87fbc2ee49f4b66d4fe518a28efc1af2dc353b889a0a770b3286de1bc8eeffcbf74f536a9a3ed4a9a10a27f24c01b5c8071d25c121ce7324bb2a81f278a54a18dbc7a4f38e3ee44962ea0ffe2b1241eb1e78b08ab73d64496b0e5af98a1d522fbf24032c92f8deeef73c10013300a3f1ca2d61ebaeedae700d16702220d1734f38c24974355fd6874c4febc296c8818c2f41564cd41df7bd0a989284723f60cefc85830cfd3af621b7b2471e043fb8ec31b01627827f98c3b3b9bab8596037a84ee65fd6fb1d06f01e3a9237b3934f552927d83855551c81a692d20dd03954ab3c1fcbd0258aa744ba6329bd8ccd87dbcee96aa36f7f807c3edea64b3d3ba00fec35fe9542f430a1b7840c775243f9f9e0aad265c11ef6e0356bada5438638ebbb49f8640779b3c25b730d407a45fd0830092746a320b93910ae087a94f1d580280496a7b1d4b6f8afde9bea486df446404d9dac8bf79dc38a4a913b7f3e240a088bc970e59eccf1586234ebd3268e38b0e1d7b32002fcaa0dcfe0076463d5ae6ff020f4571b1d9568c759079ab183f859d7d9b56088592b1d127bd035a25e17d7eacb252ccc88589354c0d4da13a19008cc939df389fdca7d80466e418995802768e0d200cc9c815f2eb07f6793cc27e720ac45a7b2568bd57ae8680ddd078ff05d9bda3329415472caa06ab6066e5b6b6066e93437e348344aa10ba3a8919c32fca0cbe95ed690c7d6d87b5ea6f5210f27837c5b30cd96aa51239742f3cb052e2ca604a0a627bc06d3ad6edb9aa1337adf20e5277882e1d5af76e1ea8f6e5e692731665db5fa80632bb12ab4b46e75acc1125b24183c8370ba6b5f16433d7c42133bd7a13254ddb8a2ed20279a21004f3414637b5caa0f88367dfddad2e27588145c61f1f4bc9db425c23c091a2beccb85c142b2da4fc8cffab9c1ace4da6fc00ecb57f454c1cc051d00a6f2879d7c90987582528105e356fe5e4af23c3360c40be92686c268f5068d91897ef57b5fbd89549fbfbf4c99a7cf40d150dae2f4fa20a4e1a57e39a2cbc13d7f308f6926d146aa6fe83ad64bed054f129a26c56ae0ee6d54243a59aafa8b68a53b6c94d34c5924234b72129a4a828f21db965f44176efe8e895230dbc14c98e72a9258e42d06650b59cd37de4ee8d18d982045ed4336af467fdebd4d450f6d03bf626b2d37d3ca90d5de22395f1976fe5654b45aab9b66655f64b9f4177d31bd93104d2e1714890cf6a8229a39564830a65075ec4a47a81bdd3f2ef5729576f843c7eb128ebf5aff82ab3dcd3bbca0572ddeaa43f1523d832769c2ff976bd4f23f912b2aad5dbb574f82285c06a6587fd51691a6086a096b112f825e458bda31717074f4429bcf0939737c76b4e694f5ed5493eb5fde7dabbadd44a55100c6eb92d4c33cccc3e61569fe9956b5479163218e9731019c7bc72c60837990bdea29364bc6de27847c60ee21f4d73b40f9aa2ec0fcbc4c3d2b24efd80371c90b01e6b597be3674b3a4a630efee0656b9a496b422125941c8d0a8249b11ba98ff439784067bb14dba2fe38e6316f187f60b10bc50feae29d8afa3ffbc7efa003784c5955b85c3723f07b1a61cfb54454b0484b16e156b5acd1929b31e54296de6c513cb5783f0bb6b3cdf946010f4a4f9776187a2164439b015b8a57d3ba0f8ecd7550b9c54570513ad619b53fd33aa02bafb356d1d6d3de9355c99a45fd0fef3d6700a0616e0ea1ccd84c7bb2f0a94b389a50453f5fd089efdb10de60120ac87129e1009415f7111113075fa9614a01ad273c06d34834b982bda6a2bbaae63b5ee83eabf0b27d9871ede482243ea67ff08ec5569ac8aea10ab03235716fb64dcca78afaa20aa4590dcead42c71ab3119dc62c1a89ca86719954a147a82b9c78428d5161d48e39fec28c8e30ae6febfe811ddce49615c9fab0e441de80e118cf09b468d41344af74e0beb261256b97c9f59606bf49f9d2270bd8113d6f8cc90de223f171a424261cfc862e6eafca3124f645d441134d7276ab1acae41ad65f4120d36d3e2df5e280450fb96d7a69aba7feb3db9cfe6ffe27b78fcc6454814b0ebb05e0b729b3471b6e63c04bc3e993747248cd08fe261289238aab3e6b0a1901babcd7cef7674ac539e706c4bb33ced4cde407cca4d3", "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"}) [ 943.366345] overlayfs: unrecognized mount option "upáx/ÁÌ0" or missing value [ 943.370667] binder: 13095:13102 ioctl 40046207 0 returned -16 [ 943.385932] binder: undelivered TRANSACTION_ERROR: 29190 03:40:55 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:55 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2fcdcd88d1f67d43670208c7ca66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b64"]) chdir(&(0x7f0000000180)='./file1\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x558, 0x258, 0x118, 0x0, 0x470, 0x470, 0x470, 0x4, &(0x7f0000000140), {[{{@arp={@rand_addr=0x7, @remote, 0x0, 0xffffffff, @empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x3, 0x7, 0x5, 0x8, 0xa7, 0xea9e, 'ifb0\x00', 'yam0\x00', {0xff}, {0xff}, 0x0, 0x80}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@local, @rand_addr=0x7, 0x0, 0xffffff00, @mac=@random="29a26dc48fc7", {[0xff, 0x98d919c342cac95, 0x0, 0xff]}, @mac=@remote, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}, 0x8001, 0x10000, 0xfffffffffffffffe, 0x1, 0xffffffff, 0xfffffffffffff801, 'lo\x00', 'team0\x00', {0xff}, {0xff}, 0x0, 0x120}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@local, @remote, @local, 0x1, 0x1}}}, {{@uncond, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x100000000, 'system_u:object_r:systemd_logind_exec_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x5a8) 03:40:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:40:55 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget(0x3, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000140)={{0x0, 0x7, 0x2, 0x4, '\x00', 0xff}, 0x1, [0x101, 0x1, 0x63b7, 0xffff, 0x100000000, 0x3ff, 0x5, 0x25, 0x5, 0x9, 0x10000, 0xfff, 0x4178, 0x1, 0x7, 0x7ff, 0x6, 0x7fffffff, 0x7, 0x9f, 0x89ad, 0x6c4, 0x80000001, 0x7ff, 0x5, 0x3, 0x0, 0x8000, 0x751180c7, 0x8000, 0x7, 0x0, 0x7, 0x2, 0x2, 0x3, 0x8000, 0x9b02, 0x0, 0x2, 0xfffffffffffffc02, 0x10001, 0x37, 0x5, 0x9, 0x7, 0x1, 0x8, 0x0, 0x0, 0x1, 0x2, 0x10000, 0x400, 0xffffffffffffffff, 0x0, 0x4, 0x8000, 0x3476, 0x240000000000000, 0xcf, 0x3, 0x1, 0x5, 0xffffffff, 0x3, 0xe3c, 0x4, 0x8, 0x9de, 0x0, 0x7fff, 0x8, 0xb5, 0x7fffffff, 0x9, 0x100, 0x1, 0xfffffffffffffffa, 0x2, 0x2, 0x10000, 0xffffffff, 0x3, 0x4, 0x1, 0x5, 0x2c01, 0x100000000, 0x7, 0x2, 0x1, 0x3, 0x7, 0x4, 0x1f, 0x0, 0x8, 0x0, 0x10000, 0x8, 0x5, 0xfffffffffffffffb, 0x7130b40000000000, 0x7fff, 0x3ff, 0x0, 0x4, 0x0, 0x7fffffff, 0x0, 0x1000, 0x0, 0x1400000000000, 0x2, 0x100000000, 0x2, 0xda5, 0x7f, 0x0, 0xfffffffffffffffe, 0x8001, 0x69a, 0x7, 0x7ff, 0x0, 0x7, 0x6], {0x0, 0x989680}}) shmctl$SHM_LOCK(r1, 0xb) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', r3}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r3}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 943.556733] binder: 13123:13131 transaction failed 29201/-71, size 24-4 line 2741 [ 943.577267] overlayfs: unrecognized mount option "workd" or missing value 03:40:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 943.622564] overlayfs: unrecognized mount option "workd" or missing value 03:40:55 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x90) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065626469723d2e2f66696c65302c78696e6f66662c776f726b6469723d2e2fe6696c65315c00"]) chdir(&(0x7f0000000240)='./file1/file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x125240, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000380)={0x0, 0x0, 0x2080}) 03:40:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xa000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:40:55 executing program 2: socket$netlink(0x10, 0x3, 0x0) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:40:55 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = dup2(r0, r0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)={0x0, @aes128, 0x2, "4c6d40e1bec5a62b"}) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 943.790685] overlayfs: unrecognized mount option "uppebdir=./file0" or missing value [ 943.807032] overlayfs: unrecognized mount option "uppebdir=./file0" or missing value [ 944.045028] binder_alloc: binder_alloc_mmap_handler: 13098 20001000-20004000 already mapped failed -16 [ 944.054959] binder: BINDER_SET_CONTEXT_MGR already set [ 944.060411] binder: 13098:13113 ioctl 40046207 0 returned -16 [ 944.067352] binder_transaction: 2 callbacks suppressed [ 944.067360] binder: 13098:13158 got reply transaction with no transaction stack [ 944.067848] binder: undelivered TRANSACTION_COMPLETE [ 944.073570] binder_alloc: binder_alloc_mmap_handler: 13123 20001000-20004000 already mapped failed -16 [ 944.097350] binder: 13098:13158 transaction failed 29201/-71, size 24-8 line 2741 [ 944.130400] binder: 13123:13131 got reply transaction with no transaction stack [ 944.139173] binder: release 13098:13158 transaction 4279 out, still active 03:40:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x700]}}], 0x0, 0x0, 0x0}) 03:40:55 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)) chdir(&(0x7f0000000340)='./file0\x00') getuid() mknod$loop(&(0x7f0000000140)='./file1\x00', 0x5000002900, 0x1) r0 = getegid() stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x100, 0x3, &(0x7f0000000240)=[{&(0x7f00000008c0)="87b424550e27cdbc792911520257f7ac863d293be99e0ef553f465828164467b176cdc01ddab14bb9eec77d0b162de38047af11959c8b8652ec709240d388a5ab17a4669250cf492facff83200ef1e58603c464b86fb1037fb9b5d8c693579ad01fe14bacd3565726acec5a7a23c4878516fb5af8857c29620", 0x79, 0x7f}, {&(0x7f0000000380)="6642e10821cea9b1fc5b21f361a2e037c28d0aeb505daf6c69039c6a219a9b20c0bac915f2d35ab5f5d8a865a85dcfaacf0ac06373a0634bf32cf2b89bd7c40454f3046774ddedc180796e5cc5dd906ae0abbeff6489abedf1a28adf1370956ed495f901aabd946ffa4388a9d62f6cc956c3e820ad8429116baf15e9cee70fc49aeae7614e5e5932fe523678b66957c1b751f06e11ae630d209b01ce475099eb9765158105354262b6195214a56570a931761894124393636091f9655d4c4b39520b533fd0", 0xc5, 0x7}, {&(0x7f0000000480)="6115489afef239b6c05078b848af5f3913d5c923712604dea0705945b51c2118c46664a787db1314bed4bf925b91a893c303fc5e3171aa65055869b9f37f96b7b30b54371da6f29a6d5505871819a04b552b54fb540917cfb3996fb5a237dfafb7bc536310b6b0f21fb77ed540e984a293ac01901cf07bcadad38b56ac0f4a0a9cf73e02d715ef8a90324476ffdf57c8c765b60cb4fe9e38158fa1787491ca4d31a8529e30dff9f2819dc9c80012caff6ea3b1955fbcddce5264952acfdd85742fcfed7fc073674f0e665a11b42b557afb6da0088f6190a2921730e6f29ae976c733c2d43bef5f805c8cd5d72a", 0xed, 0xffff}], 0x1, &(0x7f0000000600)={[{@gid={'gid', 0x3d, r0}}, {@gid={'gid', 0x3d, r1}}], [{@obj_user={'obj_user', 0x3d, 'overlay\x00'}}]}) r2 = syz_open_dev$amidi(&(0x7f0000000680)='/dev/amidi#\x00', 0x7, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0x6, 0x5, 0x8}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000740)={0x8, 0x8, 0x101, 0x21280000000, 0x0}, &(0x7f0000000780)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000007c0)={r3, 0x0, 0x4, 0x3, 0x20000000, 0x4, 0x62, 0x200, {r4, @in6={{0xa, 0x4e24, 0xffff, @remote}}, 0x9, 0xea3, 0x7fffffff, 0x6, 0x4}}, &(0x7f0000000880)=0xb0) 03:40:55 executing program 2: socket$netlink(0x10, 0x3, 0x0) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 944.147630] binder: 13123:13131 transaction failed 29201/-71, size 24-4 line 2741 [ 944.170627] binder: undelivered TRANSACTION_COMPLETE [ 944.177959] binder: release 13123:13124 transaction 4279 in, still active [ 944.188678] overlayfs: missing 'lowerdir' [ 944.213459] hfsplus: unable to parse mount options [ 944.230140] binder: send failed reply for transaction 4279, target dead 03:40:56 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:56 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x5051, 0x1) setsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000140)=@hopopts={0x0, 0xc, [], [@jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x20, {0x6, 0x6, 0x40, 0x7, [0xf97, 0x5c07, 0x400]}}, @pad1, @hao={0xc9, 0x10}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0xfff, 0x2, 0x800, 0x7fffffff, [0x400]}}, @pad1, @enc_lim]}, 0x70) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x105) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000040)) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 03:40:56 executing program 2: socket$netlink(0x10, 0x3, 0x0) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:40:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x34) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 944.269967] overlayfs: missing 'lowerdir' [ 944.289664] binder: 13167:13169 got transaction with invalid offset (1792, min 0 max 24) or object. [ 944.306469] binder: 13167:13169 transaction failed 29201/-22, size 24-8 line 3035 [ 944.333051] hfsplus: unable to parse mount options [ 944.378573] binder: BINDER_SET_CONTEXT_MGR already set [ 944.394122] binder: send failed reply for transaction 4283 to 13167:13169 03:40:56 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 944.438690] binder: 13178:13180 ioctl 40046207 0 returned -16 [ 944.448564] binder_alloc: binder_alloc_mmap_handler: 13167 20001000-20004000 already mapped failed -16 [ 944.470629] binder: 13178:13185 got reply transaction with no transaction stack [ 944.471824] binder_alloc: 13167: binder_alloc_buf, no vma 03:40:56 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) getsockopt$inet_dccp_int(r0, 0x21, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 944.484919] binder: BINDER_SET_CONTEXT_MGR already set [ 944.507661] binder_alloc: binder_alloc_mmap_handler: 13178 20001000-20004000 already mapped failed -16 [ 944.523306] binder: 13167:13169 ioctl 40046207 0 returned -16 [ 944.523426] binder: undelivered TRANSACTION_COMPLETE 03:40:56 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_CAPBSET_DROP(0x18, 0xc) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000000, 0x80000) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x37, @empty, 0x7fb}}, 0x200, 0x6, 0x100, 0x1, 0x7f}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r3, 0x5, 0x30}, 0xc) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 944.537003] binder: BINDER_SET_CONTEXT_MGR already set [ 944.547834] binder: 13178:13180 ioctl 40046207 0 returned -16 03:40:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x14]}}], 0x0, 0x0, 0x0}) 03:40:56 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:40:56 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 944.657605] overlayfs: './file1' not a directory 03:40:56 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)=0x0) quotactl(0x7, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000240)="b2021a9fe278bc924163550a1530538478dc449100d26a77536663e95b3ff7c9de6c04d7a0bae6594a462e9117afaeb0c205aa259863ebd0259e6fbbee9c4cbd68c2cca0f2b7f4f4") mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 944.759250] binder: 13200:13203 got transaction with invalid offset (20, min 0 max 24) or object. [ 944.780830] binder: send failed reply for transaction 4288 to 13200:13203 03:40:56 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x307000, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000080)=""/101, &(0x7f0000000140)=0x65) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffff, 0x2000) [ 944.805107] binder_alloc: binder_alloc_mmap_handler: 13200 20001000-20004000 already mapped failed -16 [ 944.815116] binder: BINDER_SET_CONTEXT_MGR already set [ 944.846733] binder: 13207:13209 ioctl 40046207 0 returned -16 [ 944.846737] binder: BINDER_SET_CONTEXT_MGR already set 03:40:56 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 944.846778] binder: 13200:13203 ioctl 40046207 0 returned -16 [ 944.907465] binder_alloc: 13200: binder_alloc_buf, no vma [ 944.935709] binder: undelivered TRANSACTION_COMPLETE [ 944.942421] binder: 13207:13222 got reply transaction with no transaction stack 03:40:56 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @local}, &(0x7f00000000c0)=0xc) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 03:40:56 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 944.953666] overlayfs: filesystem on './file0' not supported as upperdir 03:40:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x16) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:40:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x7]}}], 0x0, 0x0, 0x0}) 03:40:56 executing program 1: mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:40:56 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:40:56 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', r1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 945.212261] binder: 13239:13241 got transaction with invalid offset (7, min 0 max 24) or object. [ 945.242329] binder: send failed reply for transaction 4293 to 13239:13241 03:40:57 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 945.254386] binder_alloc: binder_alloc_mmap_handler: 13239 20001000-20004000 already mapped failed -16 [ 945.264619] binder: BINDER_SET_CONTEXT_MGR already set [ 945.271010] binder: 13239:13241 ioctl 40046207 0 returned -16 [ 945.289221] binder_alloc: 13239: binder_alloc_buf, no vma [ 945.296361] binder: undelivered TRANSACTION_COMPLETE 03:40:57 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:57 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, r1, 0x0, 0x6, &(0x7f0000000140)="70707030bf00", 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r1, 0x0, 0x8, &(0x7f0000000040)='\'proc+^\x00', r3}, 0x30) kcmp$KCMP_EPOLL_TFD(r2, r4, 0x7, r1, &(0x7f00000000c0)={r1, r0, 0x40}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r5}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 03:40:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x100000000000000]}}], 0x0, 0x0, 0x0}) 03:40:57 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x80000, 0x0) accept4$unix(r0, 0x0, &(0x7f0000000140), 0x800) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) stat(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x40000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@access_any='access=any'}], [{@pcr={'pcr', 0x3d, 0x23}}, {@fsuuid={'fsuuid', 0x3d, {[0x7d, 0x77, 0x0, 0x7b, 0x36, 0x0, 0x64, 0x31], 0x2d, [0x34, 0x72, 0x37, 0x37], 0x2d, [0x65, 0x32, 0x31, 0x7e], 0x2d, [0x34, 0x33, 0x7f], 0x2d, [0x0, 0x66, 0x76, 0x0, 0x63, 0x77, 0x3a, 0x62]}}}, {@appraise_type='appraise_type=imasig'}, {@fowner_gt={'fowner>', r2}}]}}) 03:40:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:40:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xec0f0000000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 945.596192] binder_alloc: binder_alloc_mmap_handler: 13207 20001000-20004000 already mapped failed -16 03:40:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 945.694286] binder: 13268:13272 got transaction with invalid offset (72057594037927936, min 0 max 24) or object. [ 945.722286] binder: BINDER_SET_CONTEXT_MGR already set [ 945.727950] binder: send failed reply for transaction 4298 to 13268:13272 [ 945.738199] binder_alloc: binder_alloc_mmap_handler: 13268 20001000-20004000 already mapped failed -16 [ 945.747653] binder: 13275:13276 ioctl 40046207 0 returned -16 [ 945.755054] binder: BINDER_SET_CONTEXT_MGR already set [ 945.763080] binder: 13268:13272 ioctl 40046207 0 returned -16 [ 945.769563] binder_alloc: 13268: binder_alloc_buf, no vma [ 945.782987] overlayfs: './file1' not a directory [ 945.786858] binder: undelivered TRANSACTION_COMPLETE 03:40:57 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1ff, 0x10000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x10000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) getuid() syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0xffffffff, 0x20102) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x500, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000040)={0x739, {{0xa, 0x4e20, 0xff, @dev={0xfe, 0x80, [], 0x1a}, 0x8}}}, 0x88) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 945.799664] binder: 13275:13285 got reply transaction with no transaction stack 03:40:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:40:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x7a00000000000000]}}], 0x0, 0x0, 0x0}) 03:40:57 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e3066696c65302c776f726b6469723d2e2f66696c65315c02"]) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 945.854856] binder_release_work: 18 callbacks suppressed [ 945.854863] binder: undelivered TRANSACTION_ERROR: 29189 03:40:57 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mountinfo\x00') write$UHID_INPUT(r3, &(0x7f0000002000)={0x8, "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", 0x1000}, 0x1006) keyctl$restrict_keyring(0x1d, r2, &(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000200)='/dev/audio#\x00') connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x4000) ioctl$VIDIOC_S_JPEGCOMP(r4, 0x408c563e, &(0x7f0000000040)={0x4, 0x1, 0x34, "7432db12cedf69109b3874e5a6edda510ba74615e1b1b5d834001007d32986b20f9c8aaebcc65a62da8d13d0a794feb7f2d160c210762b79a82e52b9", 0x2f, "65414ec3aa5851088038a81e5e92a0cc7e707b4d326c66b804ad582d937b4f2af6d39f95cdd5c20667764b15e0fc427f78ffa50407688ca5f40a824a", 0x48}) [ 945.946651] binder: 13292:13293 got transaction with invalid offset (8791026472627208192, min 0 max 24) or object. [ 945.961756] binder_transaction: 10 callbacks suppressed [ 945.961775] binder: 13292:13293 transaction failed 29201/-22, size 24-8 line 3035 [ 945.985680] binder: send failed reply for transaction 4303 to 13292:13293 [ 946.029210] binder_alloc: binder_alloc_mmap_handler: 13292 20001000-20004000 already mapped failed -16 [ 946.079955] overlayfs: failed to resolve './file1': -2 [ 946.101544] binder: BINDER_SET_CONTEXT_MGR already set [ 946.124401] binder: 13292:13293 ioctl 40046207 0 returned -16 [ 946.130714] binder_alloc: 13292: binder_alloc_buf, no vma [ 946.138886] overlayfs: failed to resolve './file1': -2 [ 946.156151] binder: undelivered TRANSACTION_COMPLETE [ 946.164603] binder: 13292:13303 transaction failed 29189/-3, size 0-0 line 2973 [ 946.166379] binder: undelivered TRANSACTION_ERROR: 29201 [ 946.214713] binder: undelivered TRANSACTION_ERROR: 29190 [ 946.263134] binder: undelivered TRANSACTION_ERROR: 29189 03:40:58 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x101, 0x84000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0x50, &(0x7f0000000040)}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 03:40:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, 0x0) 03:40:58 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:58 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0xd) mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:40:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x600000000000000]}}], 0x0, 0x0, 0x0}) 03:40:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1700000000000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 946.501583] binder: 13275:13285 got reply transaction with no transaction stack [ 946.502366] binder: undelivered TRANSACTION_ERROR: 29201 [ 946.509389] binder: 13275:13285 transaction failed 29201/-71, size 24-4 line 2741 [ 946.522473] binder: undelivered TRANSACTION_ERROR: 29201 [ 946.582094] binder: 13318:13321 got transaction with invalid offset (432345564227567616, min 0 max 24) or object. 03:40:58 executing program 2: syz_genetlink_get_family_id$team(0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, 0x0, &(0x7f00000007c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vlan0\x00'}) accept$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000b80)) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, 0x0, 0x0, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{0x0}, {&(0x7f0000006e40)=""/103, 0x67}], 0x2, 0x0, 0x0, 0x1000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}, 0x7}], 0x5, 0x0, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000000)={0x1, 0x1f, [{0x400, 0x0, 0xfffffffffffffffd}]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000009600)={{{@in6=@mcast2, @in=@local}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000009700)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0xb, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 03:40:58 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) [ 946.648678] binder: BINDER_SET_CONTEXT_MGR already set [ 946.654577] binder: 13318:13321 transaction failed 29201/-22, size 24-8 line 3035 [ 946.675295] binder: 13325:13328 ioctl 40046207 0 returned -16 [ 946.676163] binder: send failed reply for transaction 4309 to 13318:13321 [ 946.698149] binder: BINDER_SET_CONTEXT_MGR already set [ 946.703704] binder: 13318:13321 ioctl 40046207 0 returned -16 [ 946.709970] binder_alloc: 13318: binder_alloc_buf, no vma [ 946.716811] overlayfs: './file1' not a directory [ 946.720764] binder: 13318:13332 transaction failed 29189/-3, size 0-0 line 2973 [ 946.753117] binder: undelivered TRANSACTION_ERROR: 29190 [ 946.762323] binder: undelivered TRANSACTION_ERROR: 29189 [ 946.770379] binder: 13325:13339 got reply transaction with no transaction stack [ 946.786860] binder: 13325:13339 transaction failed 29201/-71, size 24-4 line 2741 03:40:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x7000000]}}], 0x0, 0x0, 0x0}) 03:40:58 executing program 1: mkdir(&(0x7f0000000100)='./file1\x00', 0x5e) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x6e) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="75707065726469723d2e2f66698c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0062b758b1e356e796f2901dff6278526dde8f7e9b1dad1108e298778db97ca981b1768cff357fa45f2af176e8f059e15dc19b8d5fdf5112362d252f04d4fe4e7d53fa89b4f24e4bd4303b647574a9a5f2b243498d9954f81b89314969411b3b80d7328ab03fb3796e"]) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 946.816709] binder: undelivered TRANSACTION_COMPLETE [ 946.822059] binder: undelivered TRANSACTION_ERROR: 29201 [ 946.917825] binder: 13350:13352 got transaction with invalid offset (117440512, min 0 max 24) or object. [ 946.989058] binder: 13350:13352 transaction failed 29201/-22, size 24-8 line 3035 03:40:58 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @remote}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7f, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000200)={[{@show_sys_files_no='show_sys_files=no'}], [{@appraise_type='appraise_type=imasig'}, {@permit_directio='permit_directio'}, {@uid_lt={'uid<', r1}}]}) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0xec, 0xb72, "419b6edc92b6278444a74bf4f20823680403c2e7a2d266a2c92c4b4238bcc7b0ba754ce4cc7d3c41d83def9afb908d58aeaa29fe8f9c564af0f8cdf29fdc13734d9cfe5e554147813d304621a06512addb91e0f6c19512fd8c292554bdd3c51a87bdf217cb5c8483772eb5ec19847194bac2c313686be7e2580ef2ed1fa6ed6bb573922c9d72a9ce289958638ea7f0c5e1c5b3a943f020cf2e0e7a6494124363c1ced2e4b2c756ffc53eef4120ec2de02b563feae6496dc4b6632960ea62c018049f1d559938b14cd35c5821f63a57a1f698076bd7505aa07802d8107a602a5095b80fddcb66dd5c13731e9439a05f3bcf00050f7ef314fdfaf3e705e8829777", 0x90, 0x9, 0x0, 0x1, 0x7fffffff, 0xfffffffffffffffe, 0xa9}, r3}}, 0x120) getuid() connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 947.029478] binder: send failed reply for transaction 4314 to 13350:13352 [ 947.074472] binder: BINDER_SET_CONTEXT_MGR already set 03:40:58 executing program 2: syz_genetlink_get_family_id$team(0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, 0x0, &(0x7f00000007c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vlan0\x00'}) accept$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000b80)) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, 0x0, 0x0, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{0x0}, {&(0x7f0000006e40)=""/103, 0x67}], 0x2, 0x0, 0x0, 0x1000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}, 0x7}], 0x5, 0x0, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000000)={0x1, 0x1f, [{0x400, 0x0, 0xfffffffffffffffd}]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000009600)={{{@in6=@mcast2, @in=@local}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000009700)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0xb, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 03:40:58 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 947.116138] binder_alloc: 13350: binder_alloc_buf, no vma [ 947.176081] binder: 13350:13352 ioctl 40046207 0 returned -16 [ 947.183979] binder: 13350:13359 transaction failed 29189/-3, size 0-0 line 2973 [ 947.218253] binder: undelivered TRANSACTION_ERROR: 29190 [ 947.271400] ntfs: (device loop5): parse_options(): Unrecognized mount option appraise_type. [ 947.282872] overlayfs: missing 'lowerdir' [ 947.300430] ntfs: (device loop5): parse_options(): Unrecognized mount option permit_directio. 03:40:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x2000]}}], 0x0, 0x0, 0x0}) [ 947.319565] overlayfs: missing 'lowerdir' [ 947.326344] binder: undelivered TRANSACTION_COMPLETE [ 947.338188] ntfs: (device loop5): parse_options(): Unrecognized mount option uid<00000000000000000000. [ 947.371378] ntfs: (device loop5): parse_options(): Unrecognized mount option . [ 947.399260] binder: 13377:13378 got transaction with invalid offset (8192, min 0 max 24) or object. [ 947.431932] binder: BINDER_SET_CONTEXT_MGR already set [ 947.433126] binder: 13377:13378 transaction failed 29201/-22, size 24-8 line 3035 [ 947.438991] binder: 13325:13339 ioctl 40046207 0 returned -16 [ 947.452167] binder: send failed reply for transaction 4318 to 13377:13378 [ 947.491492] binder: BINDER_SET_CONTEXT_MGR already set [ 947.499603] ntfs: (device loop5): parse_options(): Unrecognized mount option appraise_type. [ 947.521334] binder: 13377:13378 ioctl 40046207 0 returned -16 [ 947.524744] binder_alloc: 13377: binder_alloc_buf, no vma [ 947.527704] ntfs: (device loop5): parse_options(): Unrecognized mount option permit_directio. 03:40:59 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:40:59 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="757070c41a43945711656166696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00"]) clock_gettime(0x0, &(0x7f0000000c80)={0x0, 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f0000000bc0)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)=""/195, 0xc3}], 0x1, &(0x7f0000000380)=""/54, 0x36}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000580)=""/34, 0x22}, {&(0x7f00000005c0)=""/250, 0xfa}, {&(0x7f00000006c0)=""/82, 0x52}, {&(0x7f0000000740)=""/223, 0xdf}], 0x6}, 0x7ff}, {{&(0x7f00000008c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/159, 0x9f}, {&(0x7f0000000a00)=""/73, 0x49}], 0x2, &(0x7f0000000ac0)=""/241, 0xf1}, 0x5}], 0x3, 0x2041, &(0x7f0000000cc0)={r0, r1+30000000}) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000d00)={0x5, {{0xa, 0x4e24, 0x8000, @remote, 0x2}}}, 0x88) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) r3 = open(&(0x7f0000000dc0)='./file0\x00', 0x0, 0x9) openat$cgroup_procs(r3, &(0x7f0000000e00)='cgroup.threads\x00', 0x2, 0x0) 03:40:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xe803000000000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:40:59 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000002180)=""/223, 0xdf}], 0x2, &(0x7f0000002340)=""/110, 0x6e}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000006c0)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000900)=""/124, 0x7c}], 0x3, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 947.548849] binder: 13377:13385 transaction failed 29189/-3, size 0-0 line 2973 [ 947.554902] ntfs: (device loop5): parse_options(): Unrecognized mount option uid<00000000000000000000. [ 947.567057] ntfs: (device loop5): parse_options(): Unrecognized mount option . [ 947.590966] binder: undelivered TRANSACTION_COMPLETE 03:40:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x600]}}], 0x0, 0x0, 0x0}) 03:40:59 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x420001, 0x20) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000002c0)={0x8001, 0xffff, 0x8, 0x2, [], [], [], 0x401, 0x9, 0x1, 0x2eb, "99735e70c66b5b30d7a49617b3caf4a8"}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x410400) write$vnet(r3, &(0x7f0000000200)={0x1, {&(0x7f0000000040)=""/176, 0xb0, &(0x7f0000000140)=""/149, 0x1, 0x6}}, 0x68) [ 947.646132] overlayfs: unrecognized mount option "uppÄC”Weafile0" or missing value 03:40:59 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x8000000000000a6, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0xc, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 947.694825] overlayfs: unrecognized mount option "uppÄC”Weafile0" or missing value [ 947.709918] binder: 13397:13403 got reply transaction with no transaction stack [ 947.725573] binder: BINDER_SET_CONTEXT_MGR already set 03:40:59 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffa724, 0x80) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@int=0x10000, 0x4) mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="007f6f834f259aaf7c73b700db0767eff0b3b7b67d129d0c0ce3d707c921b51f198d4a64e7efa947145db97ff431ff8c6f7fef68776c11abdd8515b8e9baa2f7364801ca06fe1c6826384e78e32de00cfa92f155745afd13340f35a381efedf8ef1f7ab755748bafa74353386a124cb219ef3e3569edc6402c74cbc622b60e16969c149b0b4cd933b025e2cc0e44390870f2cf520962ac7f5d5f5f8e3fb9"]) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) syz_mount_image$nfs4(&(0x7f0000000100)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x3f, 0x2, &(0x7f0000001380)=[{&(0x7f0000000380)="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", 0x1000, 0x8}, {&(0x7f00000002c0)="c17efaf8f31d7e77e84180c3e88a6fcf0bbf", 0x12, 0x6}], 0xc028, &(0x7f00000013c0)='/dev/snd/pcmC#D#p\x00') [ 947.743942] binder: 13402:13404 ioctl 40046207 0 returned -16 [ 947.765547] binder: BINDER_SET_CONTEXT_MGR already set [ 947.783003] binder: release 13397:13399 transaction 4323 in, still active [ 947.792476] binder: 13397:13399 ioctl 40046207 0 returned -16 [ 947.804748] binder: send failed reply for transaction 4323 to 13402:13404 [ 947.822637] binder: 13402:13415 got reply transaction with no transaction stack 03:40:59 executing program 2: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000002180)=""/223, 0xdf}], 0x2, &(0x7f0000002340)=""/110, 0x6e}, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000006c0)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000900)=""/124, 0x7c}], 0x3, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 03:40:59 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 947.875368] overlayfs: missing 'lowerdir' 03:40:59 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1e, &(0x7f0000000000)=""/69, &(0x7f0000000080)=0x45) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 947.963280] overlayfs: missing 'lowerdir' 03:40:59 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) chdir(&(0x7f0000000340)='./file0\x00') removexattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)=@random={'btrfs.', '\x00'}) mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) rmdir(&(0x7f0000000140)='./file1\x00') r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x111000, 0x0) sendto$inet6(r0, &(0x7f0000000380)="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", 0x11f9, 0x4000843, &(0x7f0000000180)={0xa, 0x6e20, 0x3, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 03:40:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto(r2, &(0x7f0000000000)="0022cbd309abdbee045474b1463097e9d780f7fb3fcd7d331e798f1ce99f1c17", 0x20, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0xa5}], 0x1}}], 0x1, 0x0, 0x0) [ 948.044652] binder: 13426:13433 got reply transaction with no transaction stack 03:40:59 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,,workdir=./file1\\\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000080)='./file1\x00'}, 0x10) [ 948.318476] overlayfs: missing 'lowerdir' 03:41:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:00 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x28) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 948.365317] overlayfs: missing 'lowerdir' [ 948.521545] binder_alloc_mmap_handler: 6 callbacks suppressed [ 948.521563] binder_alloc: binder_alloc_mmap_handler: 13402 20001000-20004000 already mapped failed -16 [ 948.563325] binder: BINDER_SET_CONTEXT_MGR already set [ 948.581463] binder_alloc: binder_alloc_mmap_handler: 13426 20001000-20004000 already mapped failed -16 [ 948.605888] binder: 13402:13415 ioctl 40046207 0 returned -16 [ 948.626147] binder: release 13426:13429 transaction 4327 in, still active [ 948.646489] binder: send failed reply for transaction 4327 to 13402:13470 [ 948.689940] binder: undelivered TRANSACTION_COMPLETE 03:41:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x1400]}}], 0x0, 0x0, 0x0}) 03:41:00 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) mknod(&(0x7f0000000080)='./file0\x00', 0x10, 0xac71af90) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:41:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f228050000000000950b86bc01abc8464d4f8a906151000000000000000000", 0x20) 03:41:00 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x800) creat(&(0x7f0000000040)='./file0\x00', 0x1a) clock_gettime(0x0, &(0x7f0000001a80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001900)=[{{&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f00000001c0)=""/209, 0xd1}, {&(0x7f00000002c0)=""/52, 0x34}], 0x3, &(0x7f0000000340)=""/168, 0xa8}, 0x1}, {{&(0x7f0000000400)=@nl, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/22, 0x16}, {&(0x7f00000004c0)=""/48, 0x30}, {&(0x7f0000000500)=""/78, 0x4e}, {&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/117, 0x75}, {&(0x7f0000000700)=""/158, 0x9e}], 0x6}, 0x1}, {{&(0x7f0000000840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000008c0)=""/242, 0xf2}, {&(0x7f00000009c0)=""/92, 0x5c}, {&(0x7f0000000a40)=""/147, 0x93}], 0x3, &(0x7f0000000b40)=""/44, 0x2c}, 0x5}, {{&(0x7f0000000b80)=@nfc_llcp, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c00)=""/84, 0x54}, {&(0x7f0000000c80)=""/32, 0x20}], 0x2, &(0x7f0000000d00)=""/233, 0xe9}, 0x8000}, {{&(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000e80)=""/204, 0xcc}, {&(0x7f0000000f80)=""/9, 0x9}, {&(0x7f0000001000)=""/202, 0xca}, {&(0x7f0000001100)=""/23, 0x17}, {&(0x7f0000001140)=""/191, 0xbf}, {&(0x7f0000001200)=""/20, 0x14}, {&(0x7f0000001240)=""/13, 0xd}, {&(0x7f0000001280)=""/71, 0x47}, {&(0x7f0000001300)=""/110, 0x6e}], 0xa, &(0x7f0000001440)=""/102, 0x66}, 0x7}, {{&(0x7f00000014c0)=@ax25, 0x80, &(0x7f0000001880)=[{&(0x7f0000001540)=""/221, 0xdd}, {&(0x7f0000001640)=""/17, 0x11}, {&(0x7f0000001680)=""/40, 0x28}, {&(0x7f00000016c0)=""/242, 0xf2}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/48, 0x30}, {&(0x7f0000001800)=""/88, 0x58}], 0x7, &(0x7f0000004000)=""/4096, 0x1000}, 0x8}], 0x6, 0x2000, &(0x7f0000001ac0)={r1, r2+30000000}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r4}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 03:41:00 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 948.727218] binder: undelivered TRANSACTION_COMPLETE 03:41:00 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x4, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x1) [ 948.856263] binder: BINDER_SET_CONTEXT_MGR already set [ 948.857381] overlayfs: './file1' not a directory [ 948.861801] binder: 13484:13487 ioctl 40046207 0 returned -16 03:41:00 executing program 1: mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d8f2f66696c65315c00"]) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000a40)={&(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f00000005c0)=""/41, 0x29}, {&(0x7f0000000600)=""/141, 0x8d}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f00000008c0)=""/110, 0x6e}], 0x7, &(0x7f00000009c0)=""/120, 0x78}, 0x10000) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x200, 0x0) mount$9p_rdma(&(0x7f0000000240)='127.0.0.1\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x822001, &(0x7f00000003c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffffffffffffffff}}], [{@dont_hash='dont_hash'}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x35, 0x7f, 0x75, 0x66, 0x33, 0x32, 0x63], 0x2d, [0x61, 0x38, 0x35, 0x36], 0x2d, [0x30, 0x66, 0x61, 0x32], 0x2d, [0x39, 0x31, 0x77, 0x7b], 0x2d, [0x3d, 0x7c, 0x0, 0x77, 0x66, 0x77, 0x65, 0x63]}}}, {@seclabel='seclabel'}, {@subj_type={'subj_type', 0x3d, '/dev/sequencer2\x00'}}, {@appraise='appraise'}]}}) linkat(r1, &(0x7f0000000140)='./file0\x00', r2, &(0x7f00000002c0)='./file1\x00', 0x400) mkdir(&(0x7f00000004c0)='./file2\x00', 0x0) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) mkdir(&(0x7f0000000300)='./file1/file0\x00', 0x10) 03:41:00 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 948.912074] binder_alloc: binder_alloc_mmap_handler: 13482 20001000-20004000 already mapped failed -16 [ 948.942496] binder: release 13482:13486 transaction 4331 in, still active 03:41:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x7000000]}}], 0x0, 0x0, 0x0}) 03:41:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x5000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x7000000]}}], 0x0, 0x0, 0x0}) 03:41:00 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000180)) r0 = socket$l2tp(0x18, 0x1, 0x1) fchdir(r0) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0xd8, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080)=0xffff, 0x4) [ 949.094029] binder_transaction: 3 callbacks suppressed [ 949.094042] binder: 13496:13505 got reply transaction with no transaction stack [ 949.215761] overlayfs: missing 'lowerdir' [ 949.231049] overlayfs: missing 'lowerdir' [ 949.651411] binder_alloc: binder_alloc_mmap_handler: 13484 20001000-20004000 already mapped failed -16 [ 949.661096] binder: BINDER_SET_CONTEXT_MGR already set [ 949.666483] binder: 13484:13493 ioctl 40046207 0 returned -16 [ 949.668199] binder_alloc: binder_alloc_mmap_handler: 13496 20001000-20004000 already mapped failed -16 [ 949.682451] binder: BINDER_SET_CONTEXT_MGR already set [ 949.688501] binder: 13496:13505 got reply transaction with no transaction stack 03:41:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x3]}}], 0x0, 0x0, 0x0}) 03:41:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x7000000]}}], 0x0, 0x0, 0x0}) 03:41:01 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65522c6c63db135bca8712033de07765726469723d2e2f66696c65302c77a2b059046f726b"]) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:41:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x15000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:01 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 949.697207] binder: 13496:13499 ioctl 40046207 0 returned -16 [ 949.697952] binder: undelivered TRANSACTION_COMPLETE [ 949.713021] binder: release 13496:13499 transaction 4335 in, still active 03:41:01 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 949.741713] binder_send_failed_reply: 1 callbacks suppressed [ 949.741723] binder: send failed reply for transaction 4335 to 13484:13520 [ 949.767507] binder: undelivered TRANSACTION_COMPLETE [ 949.792871] overlayfs: unrecognized mount option "lcÛ[ʇ=àwerdir=./file0" or missing value 03:41:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x7a00]}}], 0x0, 0x0, 0x0}) [ 949.834042] binder: 13532:13534 got transaction with invalid offset (3, min 0 max 24) or object. [ 949.849806] binder: BINDER_SET_CONTEXT_MGR already set [ 949.856119] binder: send failed reply for transaction 4338 to 13532:13534 [ 949.860753] binder: 13535:13538 ioctl 40046207 0 returned -16 03:41:01 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7ff, 0x102) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x10, r1, 0x80000000) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 949.876461] binder_alloc: binder_alloc_mmap_handler: 13532 20001000-20004000 already mapped failed -16 [ 949.895270] binder: BINDER_SET_CONTEXT_MGR already set [ 949.901503] overlayfs: unrecognized mount option "lcÛ[ʇ=àwerdir=./file0" or missing value [ 949.907703] binder: 13532:13534 ioctl 40046207 0 returned -16 [ 949.916139] binder: 13535:13541 got reply transaction with no transaction stack [ 949.920980] binder_alloc: binder_alloc_mmap_handler: 13535 20001000-20004000 already mapped failed -16 [ 949.932500] binder_alloc: 13532: binder_alloc_buf, no vma [ 949.942602] binder: BINDER_SET_CONTEXT_MGR already set 03:41:01 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000680)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x858, 0x4, &(0x7f0000000600)=[{&(0x7f0000000380)="1eb563b9f86171d1bcfed062920de48116da0f6f274bfc79dc95d578119cfeff1600e4eba0e5bd75ec73b823799306ffc1d6bca0c3c6454e1776ce04dcc41356e5c4595aa283718f3e0bc528625ab58130323318dc062b1b7c2b", 0x5a, 0x4}, {&(0x7f0000000400)="b00e801d8a8fdc0e22ff3e1b191f6f276feba9373940acbd9313696fa5563a98045eb98355efafa5fe2fb107c9aea67a1f21d1e2d2b53ccc3a48dcef5e6c666924d321b1503504c1c06cdfe0e19a97d0cc2ddf22179fd3d1eb1f110fae1c90b21cd6fcbbdc2804dafb5a83780b2a767ed1438a8139c0d43a88c23fe8e66db97c4cfcabd251116a305f1f1584d01bcc489b2aca77d43504e8639da2516749543b76e40ced21342b54010919b052c5090500d65eaf2aae3fb6486ef93ec44e5a9d5b61d4c99f60eecac4cecd753729ac729373736935dde9444c", 0xd9, 0xfff}, {&(0x7f00000002c0), 0x0, 0x14f}, {&(0x7f0000000500)="2aa8a3063fd7c17f40730e4b1357ad7b11113ca4488f09719a28fd2f6d7c39b6a133226eed1465b918bf75ac9f51010d7cc2727ac009983a537a6f240669e6a0ce66324faebee47140bf47a1daf10a72c030a03164350a13420e7286e71ea406640df968201ba4e3a50870736812d058fca12a75d839b65a6ac7887d6e0c931774a1787a10ebce50e99eefeb9aea89c28a54a92d1b10c95d6d6d1d1099b04f5280aa8fe1989e7b2cb0f19fa33ceed9ca29d4f6aa4ace6532e9db94b7ace03f53ab6bb44da09f54e8017cfeb2670447f96d", 0xd1, 0x7}], 0x18009, &(0x7f0000000880)=ANY=[@ANYRESHEX=r0, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYPTR64, @ANYRESHEX=r1], @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x2, 0x80) chdir(&(0x7f0000000340)='./file0\x00') stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)) mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:41:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x7a00]}}], 0x0, 0x0, 0x0}) [ 949.976071] binder: 13535:13541 ioctl 40046207 0 returned -16 [ 949.976322] binder: undelivered TRANSACTION_COMPLETE 03:41:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x4]}}], 0x0, 0x0, 0x0}) 03:41:01 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:01 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)="ca9fbfc52da520d94b7a1ad1f592c181a535b41960f741e37720c80d7b167cf2c8e1a734bb06be83711bb19a7324143d69549888e5b45a4be0") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x1000, 0x5, 0xfffffffffffffffa, 0x3478, 0xc0000, 0x9}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="a6a4e71a1ab277e68acad4bfa44b962aa350e3267a7a4c7834c2e528fb1416efd8ce02a4f1d23c06af3c5dc19497d1e36680b168c8c158ba41eb00274bd42de4f769337bc5ce7576c34d9a1f02e59d85664708ff73601fde1ec76f3064ad088350744ae796cad4877902cdd1e09a8fb9a39f7f7704cf4f461a95e881f3f167bde7f3b2d230a652af0a7c18e66fa3e51d588a4b8ebb4f3268198869ba546fd0dedb4f059db8d7414acdd985ab0333cf7bf2c00c782c549bae4226c8292b705215e570e65b1e8885bd225d1a1b0f5e45e390108d65664ae5cf08d04a6587a8d5a3f1f02fd71af2f4e85887cf3ed0607848dabd46", 0xf3, 0x8}], 0x800000, &(0x7f0000000300)={[{@nojoliet='nojoliet'}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@gid={'gid', 0x3d, r2}}, {@utf8='utf8'}, {@sbsector={'sbsector', 0x3d, 0x1ba}}, {@gid={'gid', 0x3d, r3}}], [{@seclabel='seclabel'}, {@subj_role={'subj_role', 0x3d, 'selinux\\'}}]}) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 950.128595] binder: 13553:13557 got transaction with invalid offset (4, min 0 max 24) or object. [ 950.163991] binder: send failed reply for transaction 4343 to 13553:13557 [ 950.179854] binder: BINDER_SET_CONTEXT_MGR already set 03:41:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x7a00]}}], 0x0, 0x0, 0x0}) [ 950.224662] binder_alloc: binder_alloc_mmap_handler: 13553 20001000-20004000 already mapped failed -16 [ 950.235082] binder: 13558:13570 got reply transaction with no transaction stack [ 950.267340] binder: BINDER_SET_CONTEXT_MGR already set [ 950.280293] binder: 13558:13562 ioctl 40046207 0 returned -16 [ 950.304788] binder_alloc: binder_alloc_mmap_handler: 13558 20001000-20004000 already mapped failed -16 [ 950.333157] binder: 13553:13557 ioctl 40046207 0 returned -16 [ 950.368763] binder_alloc: 13553: binder_alloc_buf, no vma [ 950.368778] binder: undelivered TRANSACTION_COMPLETE 03:41:02 executing program 2 (fault-call:2 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 950.411212] overlayfs: filesystem on './file0' not supported as upperdir 03:41:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x12000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:02 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r1) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r3}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000080)=r1) 03:41:02 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x4c]}}], 0x0, 0x0, 0x0}) 03:41:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:02 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x5, &(0x7f0000000500)=[{&(0x7f0000000200)="8270ef9a16851c90d77c386eae3a7cd9c96e233f9943ed1b4bf1527031cfc94eecf29b13a939575976a0adbee613b4b4b950cc61b4b25f0f1ccfba64c0a5c3d829f17dd1bcac7fd6bdf0ee6f3b1dd0239d5a30110556fa0cea7d5323e36c065510", 0x61, 0x1}, {&(0x7f0000000280)="d1d9e63e4f3743da49da1468417650192aedcdc8940b1cc355e8dba86a1521ff1d43bf0b3d38cd95e98ab350b4dfee011ca6d50c938ac72fc8a7f9d230c8787a15b4ae09ba308378898156b65cddc9", 0x4f, 0x3}, {&(0x7f0000000180)="dd96c643eb2861d2f9d0f432c0f69f3a827e0b", 0x13, 0x6}, {&(0x7f0000000380)="4cdc7052572b8bce6a88a1dcf01a11a9147e657664e6a8626eefac393c8cf81a5dbff4335619d3bedc5b51eee82fb7e473b3aaaceae689a4f9bcc36a093b8b8577784a9fa0fee83bbe3aaee3873b1ddf26bdb282116234fe590034aa85302175fd7d05bbb84e34cf599df5d4d2281a71e074cc5c8f357efc8e835c455a3a1b8c69d5648fe8b62dbbf2ee44cf00f1f1e496ac07a8cd1188161e6d3934a10ca7de9f245990ce30cfe255758a0507e4b23ff2f416a1bf3f56ea2987d1b63d22c1023e70ee2bc08bd96cead28b304e6646f2481614c340a51012bd8bcfcc77bd5b687ae74a690197cd", 0xe7, 0x7}, {&(0x7f0000000480)="f2315e7f238980fa9f4e9d39a917e6c24cea29b61bbd4c51171e10272229dcd73aae6a9366f519b095839d8e78b40cfd378793cfdef89e7a9b6018c35dc03fcf91dea93373957d796cad7427d3df9ad0947ab008c72730", 0x57, 0x4}], 0x1000000, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES32]) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 950.631493] binder: BINDER_SET_CONTEXT_MGR already set [ 950.643223] binder: 13595:13599 got transaction with invalid offset (76, min 0 max 24) or object. [ 950.654332] binder: 13596:13601 ioctl 40046207 0 returned -16 [ 950.662742] binder: send failed reply for transaction 4349 to 13595:13599 03:41:02 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000540)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000640)=0xe8) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x80000001, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', r1}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000480)={&(0x7f0000000080)=@ethernet={0x1, @local}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="47d8df64b9088d52af9f80bb3e0969f1b83501873e841ac9db2d252b778bf0e11cc580589e68647396648b3452eb293cfff006dedc8ec5cd8528d2ee17bc70596ae2b37590f2531db1f71922e9693b7343c699da5f8d22f1433f5d21960401058905986e16703b65d24b9dbfd3e39fe857bbc5270e3ff181b70710b8de4884f0dd79f0b1cf10f6521daaca2d0b0ea38ff04893315b47d0", 0x97}, {&(0x7f0000000200)="c407ee6adb50abc3e9a73557c70f5af2f26244307b815d85633d7fd4b5f92ed83411083afd4173b08456bd0d51cefb61e4fec51d9dd075792fc59014ef39b75ae40d82b98e73821587f0a3ccdd17a4a718248258c41c2d68660eb60455d622a5ed9dce52fc98a25474e0135153c5f4e28ae11082844b193aca4621a0fb3f24e046d26a498582d727d9e7a5970f6657967c57939113599c7034503679b76a104e3ccd7e20c4afe70224d559ce4fd145b27c6d9d59e339839552058a76633979cf7f9ee00bc6558e5224dfbdf09daf56a98a43f19ed44b6b10ae6e1107", 0xdc}, {&(0x7f0000000300)="ed3e91a82c6a6f26281c3e70e9fc37ac7263c669b3414cf3b895bef0af5999d4b8ad7f0e3371108b80ada6816eb81368395727f5ecbb70f2608fbf2a03", 0x3d}, {&(0x7f0000000340)="fa57ddf888d8f96f8f7a438731c49eb192069662c4624791d38df1c90f434084cb1047f3c74dd40ba6e1d0f1822fb24b4762c41ffea5ad1193213a66cf00558fba7314dd1e8d4d6b54f961f5ac8e3c37f6a7785eb3041884272e1cb12fe3ece89aed6692e0d0b1a7b1e7e7cd27dc9055bced3c1343", 0x75}, {&(0x7f00000003c0)="2a443f7db33c431e5c39b653408f1812a1a3e832c2b4c78dd89515c749f03889375cd188", 0x24}], 0x5, &(0x7f0000002000)=[{0x1010, 0x11, 0x8, "62f90c0e17c812d9f98bbea84afc7e8b90da6363d7b978dd7bd502cee180f110eb684cd6757bf7cfc922907cd2686a5f2c07f8cd35b7815f7e617a82da0cab2ea62d25b144cd0a90edda96e849a7b4d7245a0d33a460fb53c65bed2bf7f244768bcea52f6569df0b12ba2bc0977130b435b6898279b27ca5c24ae4dee7b53fc181855c01c06261eb4ff81c5596563e1c9ed73c17c15c658e0f4f512efa4e5070fa3b57912ede5a47821db744589febd3ce927935aaa6bd156c07b0b35cf477c9087eec2a02fedf4dcc98b2842fb0462bd67777fcbc6193eb3aca70f6a2b62eafab1ae70b5bcae0ea3681bc0f185cbd8178b05aed8798d66d7a766368c4e2938dfe176f22dc643e1018b88c66e14c0b65dca91bac0957ecf31fccf6072eccd3a664787ffb733e110f59d26894e23a1c61443c9ec58ee08b460b97a0b141814f6c840260c61c07fd33dcecfed465138f4181acb79b147e46da108cbaa2ae9f3606fc0317fdd153b7a4de0a4c8c00425d5424f9e0ad91d0a6cc49a463572b079859d17426737eb05fee0988b4982033a8f85640760c5a59361a98ce0750c6a7e1beca4458abcfd5c49ee637453ee96b41b1ffb9655b9eee53559f5f15401d520f7a4d1119aaf948574f1c026a7415a4864b56fa47fb6e4383ab5e138c7ad204bcec0ca668fa2c6fadda4efee96e9b4fc8c2d0e581b70bb05a9b5e4a5fda9c66c7117ad9a5077bc4d0cd14f2d4176ddc67babc1ac89f06c84dd8fd7f4b6d3692f3bc4cc47642889aada9e05bdf39b4c7f0feeaa3f63338b65c6e491026a923fb4cbe052d6e617a556d64db215eeaa17a0a87c8558b00114a94d5b0c049fec59024f23b8ebacf6427574066ce35049e2d2ac7e15f67efb74931327ae0d92d0cf15349bc70d0552889a06feeda2135c09567c560c9415c2a0010de4f830a8ea4cc624e257cf1bad965ea23f42fb651f77b7e0619d777fc0ccb288af9d4633c302de1cd7fa5e9cbc47efa660fca20acb24d074531d793935c75ee1a9900e15129556507d0b2fc075ed02ed2a47a6922d010205ac349be2a5692febd2a9f2de4bcebbfc2fe2877af9566f8ddb8158fb779883996a3f30f4fad38da3dd4c5a6310be5a57038a844cb9de5151971b0037a1e7cbeca34c4c033a41c86e774505182f0e3769b18d2ae51fd19a192ef051f3e06e17cc56e601af6fa50c2e8da3f8922cd3408099f38786765505aac8d3c262a4bd0f6009b573ac427511a760c5cd663d172d38e3f605bda2dc9598a05e275bb68295397855b365e36b4cfac068f8b62b60f02ebc7c18f5e632834edca4d5770a1340de4fbdd1805381f40fab0afd265f02d817a0a30d54850c37006944560647e8e8205c65f537b9c6a4b430a73224bb44aa7d8b9584b1244bc64f7a24d980185d14dbc4746bf576194eac7a1abcb30c9b2cfeb9e1cf58eff1b31e4f46fdd174ffe9cbf7c6483169ee9bb983ccd56ac0a890286a7bd9e09970587f63f3f39bbd59230fb6a80a4b30f2090742dfe2ad57eda68ca709cbeeda251f7d4e65ebfecd1b8a547819989ba0258b4ffdd4edfbca4cdf3f79e146896bbcb1ed7daaf56f7ff34efc42368d77e2fb229582cd9aa5cbd3f8d42c5129ac35ed4fafbd1ec968b2ac171be32359393918937a29b2c8c99b7b5e759c4f4bdb0b3a418abcd657a2dddc197cb4052c1a1a8f7fde4ad134c1d01c6264972b5ad7c2c8f5fa7c9e5b471931af462da711f8c9281f5eae76d736d56d1d73f7696b57c043cda3a1e2ba8e2e01b1007a1fab47612559ab37baddb3dcde7207338380198bc4cb8dff758fcc2ab48b8e8c21619015928a62ab858ab0e4531cb1c65652f47949850cb625d7a08fa12ce345e3b51fb7e861f21f7219063103a9901ae668802833ef335ee9620fbe69f352c142fc7157fa00e217313427cd8917ba46ff8491f21fb356c156d065944de6497ebae6315cf9608f29c80e062dca4a4286d6833746445cc9b082f53c9d97b09c10685463edfe4bc6f4b236e866ea15d8990e08791ad321c27a7ba6b927a347a56b9dfeab701768cf2eb57884862e6ca3603b8ba27f103a48b21d43e98eef7c7c2a0ad79d4cd47066b03a04985e366a934c3354c4d55eb0cfbcd5d29db97a9695c9bacf5ec30d3e8e1c9aa8e5ef2e306d7c83158179e46426501d31d7d71dbcb1b51503e39b8fd46688ec9beecf02dc2c218985f69c4ca2f3b7019bc2a9cc736927cb8e1ccb2dfdc5a3e85a82e53a1ea878ca94d95b7e37dc26e902315355ef6e1486dbdea966d0594e0b9c6eaadb58ad34809bdc631b0850390512a927a7550f708f20fe809dc93723a6b1911e347640b5589b7fb1b578c4832d63cb5f40da00fa9121b4395f5b9f9993305d2a341467a5dc573e990d6b9a2cd0b103f3f14e8de231a9b8ae96131fa76877610606d2b196a2175a6821f4d67a2414e877c51abee9eda37e9d91a5bd064cb31fbd77b3a8cd43a70d8a8c842d758992b74475525db6a57c9ded68d8ea72859f6e0907e022e50585ca890497fb64744d76c2089ae472a8ad3010f9b2bf0784ef01f4398243ed1fecd6ac918a4104e433a5107e5909c343825f2ebbab417a8e48712fc7306ac293234e5088c19fa86e767894a63a98c82401f60ea5196f86f4acdf1fd56d12f1a49057a364f4cfdecdc7c7232659e4dea610b17efd7db3e5b3c5f6fc44591b55d3739a38059a8f6cfb4731423b17bc347a68436813b788469c23a4df08e0e4e7631149e81882aa890ba2eeb72d86d5aa925dbf2899ef72cb61087e8d0bab857d76d3abc851fce47677de1baeec40517c7ce37443c8a12eae882a42b2b217a1856d24f9b2fa5b66400b8940a77e03c41121b7850bd65388efbc6209a15a5deb6bcf1e87611f2b4356293eb71140ad5bc0d3b0f5e1f1c3c6a0dcf8c3952ebc0b100e4b1c404b3274cc4b7e6de170a5ac5eb4bd29bb1cf84a8b098c91eb8b01a53d281857adef8b68274d2bf1ebc65d0a2591e1e65b9f16ee3a415465a6c513b72bedb58bda72cb698cc8dc83fccc971237f5883bd787db7dbc6abc96d9ff528b7e64acbcfe11e124c571867fc37fbd70e6e3e03eb835db4e77b77e3c7b60e39086c943b3c19fffde7148cd86fabe76f56bb341bab0c861d0a6256a5dba1fdacb66467eb0ca30fa2887ee1a3015e21b1c049e6554399189108b2818ec40253d05aa07eca529cc8d244c124389938cb30232b7216e590e99f4f97068a384cbd5b9a0685040926760806990b055faefd8402d0577bd2d843ec2bbdd8a34bde40233fde83e1927e6c83deac5c56098bfed95f8c38ce8bdf60848b18f5b2bd5a51972fff5b247b63f3a7dc42dc0c1173dd8b84aa9b5f5c086c9fdedc6ab3509cbf9421fab6c7aeae38a8b5287c8166e31a9865fc91dc6759d21c2fe6bcac0bd7f10743214dc34cd61d8d061f01fcd0522f915cf00b3cb78a9635bb30df2b636f3ea80040a3230c789c583bcee3002d2a5f9abb488cf5258db0f86c32e27dd5c57d168aa0c1ae51fa59840ae7dfc9d841404b96176f7fdbe37f4dfec5de516746f0d70ff8838ad69d420f60bd2695b2757d16170025b44c8d144d3c07fb712828471aa6543f11976dba922f09c5f2fc11b91804bfe2778ea71ea3be1620f4d61a67545b6f0b1401f1a68a54a89e93920fe458eb0e15c81d1c90576b615187822a05172f32dcd3fe3195c48543adff2a9e9792a94a78ace2e09c81a2a2627721b6529347759311704fbca20171c7dcc85a727ba15c0a14e6caeaa3b684b5b6d451a4cc994aae56e11b801fe1e6cd9bc31632b6f28ff4e8741b5ac53e9ee91fb4816c8263de76861aaf4019aa8df0fde7c940e0011f5f08ddfee680fd50143d6d7e65d25996a04a9c514448c4fafa224a9e37a096e2237f27ceb2354ab5b14c68cd69f731e0e23e61f9f6cba5162cda88621efe454dfc6f0d3351298ad8a0ed4bc0af8583ac3b61cd4b8bfc61c8df6a1c10989dd5da70eb1d1e8bc5f486aea193fabd6f7c6cabee1b9d4aa722a0ba2153f7cc289e42c54ead1a83af3cd5376395e5df3ef869d86864e6efd4188f99eac04e5b2842a248c164e7d0e55c8bcee54ce7fa31992e4e81d259e9a21aaea7c2251e3a54649ff165eab43ce85fda1513bb097eb159253e9c92524dc94f12dbbe41d22a0458d1183935419f0c37d6998bf515ad61b64eb3704c68c236071babfa93910cf12dff3ed28e874f1ef51541409aa75d61dab7e60db716a69ba979d17b218717cbceea7308a36e6e742f81a705f93ba67bc1e3a56f55445cb9544bb1819f975fc6e73c1d9ac9f82fb1fc84428f49c70b1f3fe87109e7aa8c8cf76ed9ce17ab5b6ace0fa161ef7e44f82e4446b5309926223e9789c2e576a295add34f86e2d4455487ebeb86d29aeb486c00f2226843cedb2022cd9cecef29e46c626ae9d913fcf73e1e1e24f678332bdc1301c2130768027d82b3e02f1e7900ef227dcbf605fffff17ca6dc29f1fda8b93ba37ddc8d7396c46fb4f257903e9090fe6ea7239f6169c06fed5bb823a9b92aa19a5de947ea5a3635a5176bcb06244fe4d6c42a8ca856ab2ffa9650e8ea65d86a92ccb0e5255466c010af224b295190bdf1099b0c22ffbee5ccccd8a2b95c205e2fa6ccc654b1167c415423248d4f5bfc1d6b1c2bf2990ab6cb1a8baf099a573d6b66020b1ac2a45dc238490911da3fec8229588aa70c3e9ef04e07ce2b89dd0cab464c7d7db5016f593db334c708f228669154683abc056116b19197aced4a5e1fb7544bcc76356a2a4c80c866905f98da7b85864213281d91dbd03d19b4bc0d4fb6aa88997fa37a7fec70817595f4bb7e1ed2aba53eddee6dd0febae46e869dc311c5b4757b6b9d6ac17a73981f48735cf675a8b512d98abe620dda407a65c761038d03dd59d398d75142a8f8c149c38c5aab446f2cfc7ff609fe3cb162b01eca22ab24be4184fab0cdef3a8a0514802cb8ebeb3a89f45826fb635e33892ba5d1ac121abe7c24fc815f1e266b096ffb1d7079f7caac822fb67796c230c526f5871280c98da9e7be2618834ee611b50238fef80ffc48c1e33051bf992806ef802d1cd0b6eb82c424aca864ae6ad402ae87cdce64494ca07477fcac21a8f68a992e60cdfae4fba0abd16cf5ed500038fbe0be4fb312b3b25204f344b07a6215a128244290a581fb9a2679855cca112296db676206f2678e44db6f6ab479a3d93b70afb7f8cde3d567b15247a14f9141d524a5e50a08fc6657233d5c65bc041f3a95c4394483d634a626aa5236beaddcd0b13b1789fa1c78f1bdceca75d4d4d54a859f621446edaeb05f2628783ca0842de9c128ab23b0bd2ad7dabeece24440b7fe08455e82fff8a84b7d8ba1eec3879a4df44b73847eec11573a82c8df95aa0a5906b7635200e2284622429ce780a9fdb9b29f281f39d8e25577006eb3be7b47cfe9e31d646308d292529ce8eab8c4e189c828f3b5a96790f0844a1e0b8b3231555493221560c9e1c89a21397104f3a7044a8bc093efb26cc55c1bff88a83ea462e3ca6a76b611758a4efc568ab94f97cb81aeea9ce420ece92e48b1e5a71dcedd28e4e0bbf3d7e7818fa331bd6bcc3fccc417f1b5d245ec1842eaf38e9aef618d78f1b1803e6691a3a406c2f61b9dfab51b4b7b57acf3c581f6e76bea7bba2c875bc3b0099e96f8dd2e4f3f0ac88f5368584a075223dc1b805ee10ce6c23d483fae759d278e4d28ec514e570b2ab79dad73b1fb715b89b70a5857cc1c548be99ddbf829cd5716"}], 0x1010}, 0x40000) connect$l2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast1}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0x10, &(0x7f0000000ff0)={&(0x7f0000000680)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}}, 0x0) [ 950.707099] binder_alloc: binder_alloc_mmap_handler: 13595 20001000-20004000 already mapped failed -16 [ 950.708514] binder: 13596:13608 got reply transaction with no transaction stack [ 950.724569] binder: BINDER_SET_CONTEXT_MGR already set [ 950.732861] binder_alloc: 13595: binder_alloc_buf, no vma [ 950.739336] binder: 13595:13607 ioctl 40046207 0 returned -16 [ 950.794076] binder: 13595:13599 got reply transaction with no transaction stack [ 950.816688] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. 03:41:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0x3, &(0x7f00000004c0)=""/165) [ 950.852763] overlayfs: unrecognized mount option "ÿÿÿÿ" or missing value [ 950.870385] binder_release_work: 28 callbacks suppressed [ 950.870392] binder: undelivered TRANSACTION_ERROR: 29201 03:41:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xb, &(0x7f00000004c0)=""/165) [ 950.905982] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. [ 950.944912] overlayfs: unrecognized mount option "ÿÿÿÿ" or missing value 03:41:02 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) r0 = syz_open_dev$media(&(0x7f0000000500)='/dev/media#\x00', 0x1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000540)=0x20) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="e80101000000000000000000000000"]) chdir(&(0x7f0000000140)='./file0\x00') mknod$loop(&(0x7f0000000580)='./file1\x00', 0x2900, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x200, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000480)=0xe8) getgroups(0x2, &(0x7f00000004c0)=[0x0, 0xee01]) r5 = getuid() mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=01047775767635312047435,user_id=', @ANYRESDEC=r3, @ANYBLOB="d8d444db0ae80dc690674d32d8726f9bac94b9753d640513006e64926a5d", @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000004,default_permissions,blksize=0x0000000000000000,max_read=0x0000000000008000,default_permissions,fowner>', @ANYRESDEC=r5, @ANYBLOB="2c8563723d303030303030304a3030303030303030303035315f747970653d696d010000002c00e67c08303401ee0a00da1b1382000000000000000000"]) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000200)=0x80000001) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000240)={"6970365c6eff07008000000000000008", 0x200}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) 03:41:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x6000000000000000]}}], 0x0, 0x0, 0x0}) [ 951.009403] binder: undelivered TRANSACTION_ERROR: 29189 [ 951.079207] binder: 13629:13632 got transaction with invalid offset (6917529027641081856, min 0 max 24) or object. [ 951.104873] binder_transaction: 18 callbacks suppressed [ 951.104891] binder: 13629:13632 transaction failed 29201/-22, size 24-8 line 3035 03:41:02 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0xff, 0x18000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r1, 0x10, &(0x7f00000001c0)={&(0x7f0000000240)=""/165, 0xa5, 0xffffffffffffffff}}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000040)={0x6, {{0x2, 0x4e24, @local}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x189000, 0x0) connect$can_bcm(r0, &(0x7f0000000200)={0x1d, r3}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 951.163914] binder: send failed reply for transaction 4355 to 13629:13632 [ 951.202756] binder: BINDER_SET_CONTEXT_MGR already set [ 951.212191] overlayfs: unrecognized mount option "è" or missing value [ 951.215837] binder: 13629:13632 ioctl 40046207 0 returned -16 [ 951.219486] binder_alloc: 13629: binder_alloc_buf, no vma [ 951.271327] binder: 13629:13638 transaction failed 29189/-3, size 0-0 line 2973 [ 951.281094] Unknown ioctl 8839 [ 951.323398] overlayfs: unrecognized mount option "è" or missing value [ 951.334118] binder: 13629:13632 got reply transaction with no transaction stack [ 951.334689] binder_release_work: 1 callbacks suppressed [ 951.334694] binder: undelivered TRANSACTION_COMPLETE [ 951.346285] binder: 13629:13632 transaction failed 29201/-71, size 24-8 line 2741 03:41:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xc, &(0x7f00000004c0)=""/165) 03:41:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x900) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 951.373886] binder: undelivered TRANSACTION_ERROR: 29201 [ 951.380330] Unknown ioctl 8839 [ 951.384499] binder: undelivered TRANSACTION_ERROR: 29190 [ 951.432200] binder: undelivered TRANSACTION_ERROR: 29201 [ 951.465775] binder: undelivered TRANSACTION_ERROR: 29201 03:41:03 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:03 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x2000, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x8000, @mcast2, 0x200}, 0x1c) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000080)='./file0/../file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:41:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x6000000]}}], 0x0, 0x0, 0x0}) 03:41:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xd, &(0x7f00000004c0)=""/165) 03:41:03 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) r1 = geteuid() syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x81, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="8c867b5f8677562bbb0b2d956432d1dd215bc345dd8fed43d4f1f850df6ce83db819abf92fcea18ef63c30e9066722501cee0a452b5952eaa0c24372740db9e4336bf7b2eb48a2ba77a91bb9813edf3974a38746cce247d51d40304887b837599adcefbe78ca1ca9ef7f64010b79a035af24d0c41a1207ea3014a3d058bc8fcb8d8926dbded73abc011f89156c0bac25fa251b68ad630fe1c56b83a649c779913425ac98e8656e91dc3d2602e16d1a7fdeb3db371fce6cb5f15b803ee066a35d", 0xc0, 0x4b8}], 0x4, &(0x7f0000000280)={[{@shortname_mixed='shortname=mixed'}, {@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}, {@shortname_win95='shortname=win95'}], [{@smackfsroot={'smackfsroot', 0x3d, '!&*posix_acl_accesssecurity'}}, {@smackfsdef={'smackfsdef', 0x3d, 'bdevGPL*self$$'}}, {@subj_type={'subj_type', 0x3d, 'vcan0\x00'}}, {@uid_eq={'uid', 0x3d, r1}}, {@appraise_type='appraise_type=imasig'}, {@appraise='appraise'}, {@subj_role={'subj_role', 0x3d, '+^procwlan0'}}, {@smackfsdef={'smackfsdef', 0x3d, 'wrr\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'vcan0\x00'}}]}) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) r3 = accept(r0, 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000040)={{0x5ad5a291c3123114, @local, 0x4e22, 0x1, 'wrr\x00', 0x0, 0x6, 0x18}, {@broadcast, 0x4e22, 0x12003, 0xa63a, 0x2, 0x4}}, 0x44) [ 951.536810] binder: undelivered TRANSACTION_ERROR: 29189 [ 951.604864] binder: 13657:13660 got transaction with invalid offset (100663296, min 0 max 24) or object. [ 951.636852] binder: 13657:13660 transaction failed 29201/-22, size 24-8 line 3035 [ 951.647636] binder: send failed reply for transaction 4361 to 13657:13660 03:41:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000004c0)=""/165) [ 951.698657] binder: BINDER_SET_CONTEXT_MGR already set [ 951.743441] binder: 13668:13672 ioctl 40046207 0 returned -16 [ 951.743470] binder: BINDER_SET_CONTEXT_MGR already set [ 951.750798] FAT-fs (loop5): Unrecognized mount option "subj_type=vcan0" or missing value [ 951.762577] binder: undelivered TRANSACTION_ERROR: 29190 [ 951.770214] overlayfs: './file1' not a directory [ 951.775857] binder_alloc: 13657: binder_alloc_buf, no vma [ 951.782473] binder: 13668:13672 got reply transaction with no transaction stack [ 951.782490] binder: 13668:13672 transaction failed 29201/-71, size 24-4 line 2741 [ 951.799351] binder: undelivered TRANSACTION_ERROR: 29201 [ 951.804043] binder: 13657:13660 ioctl 40046207 0 returned -16 03:41:03 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:03 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 951.836755] binder: 13657:13670 transaction failed 29189/-3, size 0-0 line 2973 [ 951.861371] binder: undelivered TRANSACTION_ERROR: 29189 03:41:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x500]}}], 0x0, 0x0, 0x0}) 03:41:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0x2, &(0x7f00000004c0)=""/165) [ 951.906564] FAT-fs (loop5): Unrecognized mount option "subj_type=vcan0" or missing value [ 951.937562] binder: undelivered TRANSACTION_COMPLETE [ 951.978453] binder: 13687:13691 got reply transaction with no transaction stack [ 952.000639] binder: 13687:13691 transaction failed 29201/-71, size 24-4 line 2741 [ 952.021939] binder: BINDER_SET_CONTEXT_MGR already set 03:41:03 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000040)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0x10, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}}, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x400000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000080)=0x28, 0x4) getsockname(r0, &(0x7f00000017c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, &(0x7f0000001840)=0x80) syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x5, 0x200000) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000001880)=""/190, &(0x7f0000001940)=0xbe) ioctl$TIOCCBRK(r0, 0x5428) [ 952.069765] binder: 13692:13694 ioctl 40046207 0 returned -16 [ 952.101905] binder: BINDER_SET_CONTEXT_MGR already set [ 952.107948] binder: 13692:13700 got reply transaction with no transaction stack [ 952.122689] binder: 13687:13691 transaction failed 29201/-71, size 24-4 line 2741 [ 952.140277] binder: 13692:13700 transaction failed 29201/-71, size 24-8 line 2741 [ 952.156035] binder: release 13687:13688 transaction 4368 in, still active [ 952.163089] binder: send failed reply for transaction 4368 to 13692:13700 [ 952.170328] binder: 13687:13688 ioctl 40046207 0 returned -16 [ 952.173181] overlayfs: filesystem on './file0' not supported as upperdir [ 952.184153] binder_alloc: 13692: binder_alloc_buf, no vma [ 952.205542] binder: 13692:13700 transaction failed 29189/-3, size 0-0 line 2973 [ 952.224976] binder: undelivered TRANSACTION_COMPLETE 03:41:04 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:04 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x81, 0x7, 0xffff, 0x6, 0x0, 0x100000001, 0x10044, 0x4, 0xc0000, 0x80000000, 0x4, 0x9, 0x100000000, 0x3, 0x9, 0x7fffffff, 0xe15a, 0x1f, 0x81, 0x2, 0x2, 0x6, 0xffff, 0x0, 0x80000000, 0x2b8, 0x7f, 0x7, 0x4, 0x5, 0x35aa, 0x400, 0x2, 0xbb, 0x3, 0x4, 0x0, 0x36a5, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x88, 0x0, 0xfffffffffffff001, 0x2, 0x9, 0x1}, 0x0, 0x2, 0xffffffffffffff9c, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x20000000400202) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000100)) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xb) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x6800]}}], 0x0, 0x0, 0x0}) 03:41:04 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='uppurdir=./file0,lowerd/file0,workdir=./file1\\\x00']) chdir(&(0x7f0000000340)='./file0\x00') mkdir(&(0x7f0000000080)='./file1\x00', 0x40) mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x88440, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000180)={0x0, {0x100000000}}) 03:41:04 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 952.499153] binder: BINDER_SET_CONTEXT_MGR already set [ 952.510820] binder: 13717:13720 got transaction with invalid offset (26624, min 0 max 24) or object. [ 952.532274] binder: send failed reply for transaction 4374 to 13717:13720 [ 952.539983] binder: 13714:13722 ioctl 40046207 0 returned -16 03:41:04 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffff5, 0x1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 952.543895] overlayfs: unrecognized mount option "uppurdir=./file0" or missing value [ 952.547931] binder: BINDER_SET_CONTEXT_MGR already set [ 952.565136] binder: 13717:13720 ioctl 40046207 0 returned -16 [ 952.571325] binder: BINDER_SET_CONTEXT_MGR already set [ 952.577478] binder_alloc: 13717: binder_alloc_buf, no vma [ 952.586983] binder: 13714:13722 ioctl 40046207 0 returned -16 03:41:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x200000) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e21, 0x7fff, @local, 0x3}, {0xa, 0x4e22, 0x1000, @loopback, 0x8}, 0x10001, [0x0, 0x4e8, 0x200, 0x0, 0x0, 0x3fc00000000000, 0x7, 0x100000000]}, 0x5c) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 952.594492] overlayfs: unrecognized mount option "uppurdir=./file0" or missing value [ 952.604615] binder: undelivered TRANSACTION_COMPLETE 03:41:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x6]}}], 0x0, 0x0, 0x0}) 03:41:04 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:04 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0092454cebb7c57c0eb0822dbca76034279bb0d223f9c63e7c73042f5259214b1fa20d147d4cd31d1982ad59bd2c168f4f8c3ce0264fada340b968abb301202465a07b7a87c77b43f0cc2eb782add5af70158e259a019c6f92831db7586115bac1b89bcdce74b91aec7d1546561831fa08906a13f41b39eaa46bc4ca6a15a4d45abe651b5031163298ef566101d91b5fa2e2cb1e7c765defd01374ef9bc02b58d95a9aff61c92feec6661aa2f39054fe2020f6e0b33c304785571009c2160833dee135841d"]) chdir(&(0x7f0000000340)='./file0\x00') r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000140)={0x0, 0xc6b, 0x3011, 0x1}) mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:41:04 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:sshd_key_t:s0\x00', 0x20, 0x3) write$P9_RSETATTR(r0, &(0x7f0000000100)={0x7, 0x1b, 0x2}, 0x7) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x8000, {0x1, 0x3, 0x1, 0x3, 0xffffffff, 0xa45d, 0x2, 0xa7, 0x7fffffff}}, 0x43) r2 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0xffff, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000280)={'veth0\x00', {0x2, 0x4e21, @loopback}}) ioctl$TCSBRK(r2, 0x5409, 0x10000) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000002c0)) write$uinput_user_dev(r2, &(0x7f0000000300)={'syz0\x00', {0x10000, 0x401, 0x7ff, 0x4}, 0x12, [0x100000000, 0x7ca, 0x1000, 0x2, 0x5, 0x9, 0x4, 0xffffffffffffffff, 0xfffffffffffffffd, 0x7, 0x779c87d2, 0x8, 0x7f, 0x4, 0x4, 0x0, 0x4, 0x0, 0x8, 0x7b, 0x4, 0x1, 0x9a, 0x1, 0x6, 0x6, 0x800, 0xfff, 0x2, 0x5, 0x8, 0x5, 0x1, 0x5, 0x200, 0x7, 0xb1b6, 0x5, 0xd218, 0x3, 0x5, 0x0, 0x2, 0x0, 0x5, 0x0, 0x1, 0x9, 0x0, 0x9, 0x3ff, 0x5, 0x200, 0x2, 0xf4, 0x8, 0x8001, 0x9f9c, 0xee, 0x33, 0x9, 0x1f, 0x3, 0xfffffffffffffbff], [0x5, 0x4, 0x10001, 0x2, 0xffff, 0xfffffffffffffff7, 0x7ff, 0x8, 0x4, 0x6, 0xffffffffffffff54, 0x1ff, 0x100, 0xb842, 0x0, 0x80000000, 0x9, 0x10001, 0x9, 0x0, 0x6d0, 0x9, 0x0, 0x7, 0x7f, 0x7fff, 0x2, 0xfff, 0x2, 0x1, 0xfffffffffffff000, 0x9f1, 0x3, 0x12, 0x6, 0x1, 0x7bf1, 0x5, 0x1, 0x10000, 0x6, 0x4, 0x3ff, 0xa9c, 0xfffffffffffffffc, 0x8, 0x9, 0x1, 0x2, 0x6, 0x3f, 0x4, 0x9, 0x36c, 0x5, 0xfff, 0x1, 0x2, 0x1f, 0x3, 0x80, 0x3, 0x8, 0xff], [0x1, 0x0, 0x10001, 0x10001, 0x1, 0x6, 0x3, 0x9, 0x2, 0x7fff, 0x2842, 0x7, 0x7, 0x789, 0x7, 0xb0a, 0x5, 0x101, 0x2, 0x0, 0x8001, 0x40, 0x2, 0x88d7, 0x9, 0xc35, 0x9, 0x2, 0x32b1, 0xffffffffffff38a9, 0x4, 0x1a4, 0x4, 0x0, 0x1000, 0x40, 0x402, 0x0, 0x7416f54b, 0x8000, 0x100000000, 0x9fa, 0x80000000, 0x2, 0xfffffffffffffffb, 0x0, 0xff, 0x7f, 0x4, 0x6, 0x4, 0x3, 0x4, 0xad8, 0xff, 0x6, 0xffff, 0x6, 0x2, 0x8, 0x6, 0x1, 0x10001, 0x10001], [0x10000, 0xffffffffffffff7f, 0x4, 0x7f, 0xb6, 0x8, 0x3, 0x2c83, 0x2, 0x6, 0x2, 0x8, 0x9, 0x9, 0x2302, 0x0, 0x40, 0xffffffff, 0x401, 0x100000001, 0x80000000, 0x0, 0x7, 0x8, 0xffffffff, 0x0, 0x200, 0x1, 0x7, 0xfff, 0x246c, 0x4, 0x24a, 0x5, 0x200000000000, 0x1, 0x7fff, 0x304, 0x401, 0x8, 0x1, 0x7, 0x9e37, 0x8, 0xc7a3, 0x0, 0xcb77, 0x3, 0x3, 0x80000000, 0x4, 0x59, 0xffffffffffffffc1, 0x44273502, 0x20, 0x7, 0x9, 0x4, 0x1000, 0x83a, 0x2, 0x5c0f, 0x7afd, 0xfffffffffffffff9]}, 0x45c) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000780)) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000007c0)) connect$pptp(r2, &(0x7f0000000800)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x1e) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000840)={"3a8a8884adc5bd360c966deadaf74e3903bab5cc4797f794bdda4120a435018a92d0bc19b9e151395f5723ddbf9f154c05ed3aa7386ef3c9234456b277eb8c546045f792d6db141cf861c8fe216232c75a35065c9f22b7f819d74446a03661553b475a812247e04f267f3a4e1877962af40d4534f92e9116de748959fa835f455dbfce3ffd6eef4a04b2dc413eb2a324720b5943294da4a5800d118bfbd50b33ec760fe4df59b0f5ee244a0f010ab58d641ce07e3d8a2263042c0239d38374b043593a16754f3354ca424f683dabdd60f0f8caba02e2f448f8dbb5634278d4eb13e972761b1869500e6ea34080b5cdfc9fea5201af9ab087c13627c130582d2b6cfa64476769310a8deaa04fdf3cbc74e6deccab6a3877ede2727b4648774a687ea2885bb38c3f348a2014f35772607261e629b8fd98be2ef1c4de64cfd8bff0a78ed729b61470302e3b6e4719000494d83b4a1fbd608c9c09a748788b5f822a3088d30050dc52a595ebb83aaebeef9794f5cf1471eda17e8807cbe245da4440d859586a27d98d62bc5b2fe0278f7786f45e8a579578b95d7f2f684a016bc99ddeb2be04d7027c3a4006b50052f350dd85a2551789027a4d8fa7380b0154e44a026094885724112bd4591f7c6a11f26beae0308702eacb28f63487f8663d151a772de7cfcdf11bbfa5a83d18b6cebd5ce7190fdfdd4fe9d7371abdfd7aec8416c655bc4a81cb2dde317e1457467f76f2e2b871b3c0f181cf9a56cf6e606c088da1308e3c08368efce175ee2202f8d33e29c4b28797d06c14c3999834e465d2de07b2f5b9f740f7a3d9f4640f9e6fdfca7ccede57ca2e6b899b9d8caef3255c3e1f61c0f8e57b9699337792226fda9886e4e6541b9748710f80d70c5c70b0498168510f89f6c22600d5ace58b825b27492d130190d81ba2b0a7130da6cbb4e4d8cbecf06132aa95b1be472d89ad343324d2e50f5e268efa9512844d5536b3498c25e024785f6a52a0cdc9f55082977fd95848948eb6e83aef9f5db21affc9574f2ab91f2df6f135cfdbd275c5ab09618825d171101d71979ccdb73438edc201a9d3f6feef398d45d7fc8229bf083079e832a6d4f9d4a32e320a34b7e8daba30ba4c1dcfe603f4464c11e9bf0d1a3eccf8856cea911ffc7f87d797d9319bd7e4e6279c3bcd9f01207b8366d919eab26171c95ab4a453a7c7b8d901b59467cb9b4bc4e01645c1fb38f9733bed6ceab099431dec0d2b305c69780baebedb9ab94217286c4208a7d77cfb2f95ca63ced122ab6892090c22b4f018c5b411b464414bced8053db7a5494cd1eb155a27a7cf49bd13160baec1be469f5906c0b8e9305e63aca6e6603a78349081cabffb14254bdd81f5f4956500e8dba899ac3b2ac7d85733b0b2bc68444bf74bcf3ddaaa764f4badb510b5a5af4fb4ff431c773174a640"}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000c40)=[@in={0x2, 0x4e22, @empty}], 0x10) r3 = syz_open_dev$usb(&(0x7f0000000c80)='/dev/bus/usb/00#/00#\x00', 0xe86, 0x40b00) ioctl$TCSBRK(r3, 0x5409, 0x1) ioctl$KDMKTONE(r2, 0x4b30, 0x3) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000cc0)={0x1, 0x0, {0x6, 0x9, 0x8000, 0x2c61b37c}}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000d00)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000d40)={0x2, [0x0, 0x0]}, &(0x7f0000000d80)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000dc0)={r4, 0x7}, &(0x7f0000000e00)=0x8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000f80)={&(0x7f0000000e40), 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x68, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x719b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d3}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc81}]}]}, 0x68}}, 0x40040) r6 = fcntl$getown(r3, 0x9) write$cgroup_pid(r2, &(0x7f0000000fc0)=r6, 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001040)={r3, 0x3, 0x1, 0x101db759, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000001080)=0x8) pread64(r0, &(0x7f00000010c0)=""/86, 0x56, 0x0) write$P9_RLCREATE(r1, &(0x7f0000001140)={0x18, 0xf, 0x2, {{0x8, 0x1, 0x7}}}, 0x18) 03:41:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmget(0x3, 0x2000, 0x620, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x60, &(0x7f0000ffb000/0x4000)=nil) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xf, &(0x7f0000000080)=""/165) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xff, 0x101000) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x2, 0x388, [0x200001c0, 0x0, 0x0, 0x200004e8, 0x20000518], 0x0, &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x400) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x1) [ 952.794868] binder: 13743:13745 got transaction with invalid offset (6, min 0 max 24) or object. [ 952.812014] binder: BINDER_SET_CONTEXT_MGR already set [ 952.817838] binder: send failed reply for transaction 4379 to 13743:13745 [ 952.861560] binder: BINDER_SET_CONTEXT_MGR already set [ 952.868848] binder: 13746:13747 ioctl 40046207 0 returned -16 [ 952.886298] binder: 13743:13745 ioctl 40046207 0 returned -16 [ 952.902872] binder: BINDER_SET_CONTEXT_MGR already set [ 952.906028] overlayfs: filesystem on './file0' not supported as upperdir [ 952.911391] binder: 13746:13752 ioctl 40046207 0 returned -16 [ 952.921769] binder: undelivered TRANSACTION_COMPLETE [ 952.929313] binder_alloc: 13743: binder_alloc_buf, no vma 03:41:04 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0)='cpuset\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c6c6f7765726469723d2e3a66696c65302c776f726b646972cb835456842fc61db451243d2ed69aeaf9827699bf2a6050223e9e19ef2609000000e56f4f4a12bc9d3c2b6c8f01d6ecf363eadf90f3d5f27a0b93ea79dcf2874f30d18616688138df09675b9fe32dfb9ec2fdc89c5fa8a0"]) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8, 0x80000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) lsetxattr$security_evm(0x0, &(0x7f0000000580)='security.evm\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_mount_image$hfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000300)='em1{+securityvmnet0\x00', &(0x7f0000000380)='overlay\x00'], &(0x7f0000000540)=[&(0x7f0000000400)='cgroup)posix_acl_access\x00', &(0x7f0000000440)='overlay\x00', &(0x7f0000000480)='mime_type{posix_acl_accesslovboxnet0eth0]-\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/amidi#\x00'], 0x100) chdir(&(0x7f0000000040)='./file0\x00') getdents64(r1, &(0x7f0000000240)=""/65, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000200)={r1}) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000002c0)=""/47) [ 953.035375] overlayfs: unrecognized mount option "workdir˃TV„/Æ´Q$=.Öšêù‚v™¿*`P">žï& " or missing value [ 953.101924] overlayfs: unrecognized mount option "workdir˃TV„/Æ´Q$=.Öšêù‚v™¿*`P">žï& " or missing value 03:41:04 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x2) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=@/file0,lowerdir=./file0,workdir=./file1\\\x00']) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x600a01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x1ff, 0x3, 0x4, 0x80040000, {0x77359400}, {0x3, 0xc, 0xec65, 0x0, 0x7, 0x8, "8a340d7b"}, 0xeb14, 0x2, @fd=r1, 0x4}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x2, 0x5}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=r2, 0x4) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) 03:41:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7ff, 0x400000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x9) shmctl$SHM_INFO(0x0, 0xf, &(0x7f0000000140)=""/165) 03:41:04 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x3) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x200000000000000]}}], 0x0, 0x0, 0x0}) [ 953.221204] overlayfs: failed to resolve '@/file0': -2 [ 953.238157] binder: BINDER_SET_CONTEXT_MGR already set 03:41:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 03:41:04 executing program 5: io_setup(0x8e7, &(0x7f0000000200)=0x0) r1 = geteuid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r1, r2) io_setup(0x2, &(0x7f00000001c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x200, 0x0) r4 = fcntl$getown(r3, 0x9) rt_tgsigqueueinfo(r4, 0x0, 0x32, &(0x7f0000000140)={0x33, 0x8, 0x3ff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VT_DISALLOCATE(r3, 0x5608) io_destroy(r0) io_setup(0x200, &(0x7f0000000240)) [ 953.263994] binder: 13778:13786 ioctl 40046207 0 returned -16 [ 953.280140] binder: BINDER_SET_CONTEXT_MGR already set [ 953.281275] overlayfs: failed to resolve '@/file0': -2 [ 953.297007] binder: release 13780:13781 transaction 4385 in, still active 03:41:05 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c005ff1cfc6b994fedead799fd24d00ff443ed53643b6c0e5ec4dfa83a351264534be136f76211e7eb3f06035fcef3a746870fa35dc0b30f0a58ed7bf7ea482910bab3fafc6d7465772d23e3671500387b9abcfbd1c23b55923c21c9a7406e609354b66bea2f6d98f4731b6f38578935cbe6faf9441d7ec3c41d26fd9aa41ac5d55bc4bd11beb8a4ee60557dd5f00178aa6d8c49cb7a153ff36e152c47696f8299c"]) chdir(&(0x7f0000000340)='./file0\x00') r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x502) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000180)={r1, 0x24}) mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 953.312609] binder: 13780:13781 ioctl 40046207 0 returned -16 [ 953.321629] binder: send failed reply for transaction 4385 to 13778:13786 03:41:05 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:05 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x9f2) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:05 executing program 5: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000000000000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000240)={0x0, {0x0, 0x40}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000040)={{0xffffff92}, {0xffffffe0}}) [ 953.482688] overlayfs: filesystem on './file0' not supported as upperdir 03:41:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)=""/9, 0x14a, 0x9}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x210001) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) 03:41:05 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1, 0x20000) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000140)={0x5, 0x2, 0x10001, 0x7, 'syz0\x00', 0xffffffff}) 03:41:05 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)=@ipx={0x4, 0x0, 0x0, "8629e4a6c0f9"}, 0x80, &(0x7f0000000300)}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000340)={'ifb0\x00', {0x2, 0x4e21, @loopback}}) r4 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xfffffffffffffeff, 0x10000) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000300)={'irlan0\x00', @local}) getsockname(r3, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x80) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000001580)={@mcast1, 0x20, r5}) connect(r3, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43) connect(r0, &(0x7f00000015c0)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x80) gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001540)={r4, &(0x7f00000004c0)="3474afc1f022bbdf701ee7245ac23ad41c6b56d095a941f2714bc6d9ad5378b96c22043d4e469118543616d80d3e4658569f96eeb337bfe9341b5c7f257cb1a21df371642d3a33a0c6e988403214cdd36474c40b0b9cb3170317da92a157625d9393cdc4cf466217e71e3f1a01cab1117a1b0ac95a5279d4cb170d123b416bfe204d9c7587194c9c34ae2dd4462246bb1b52dfb42bf9d6da57cdbc2a55f72c3262146f49ea6b398529a4c4e34f110f984b013281690061f0548ffdcee580e45b76fe4ffc19f1d524eb13d6957e29e9bf1a425b0733b88e484ba00532c923db0e341e18ec3cff5ebe3910f46495dfb7e926418832bc67d1e06f12aeefa17ba4f25a2675c8f569c0320ec94e2c248194550b726127fba26fce2652a9394e56823f13ccb7ee1b50e2c4ceaa92246c1cec1e43d39c4a3f35e7e747173888a22d92a1d30b463e6c298d945251422b0ad19d6a6d27e98958c88a45dd6dd03fdd55a81c3d48f6e9fab253a2d7d65653ec5e8239b1210a796aee17229300021d1038e2b28f7aa906eb7881afc1fcf2770840223403f57900bc347c4a45e4ed6cae9f7a2796ad8289dff3cd1c2dd2079254d2815716138ab6b062905afca746e6f322d14c914359a7990a45395878645580d52b92c45091845fa5f4a03dffd729d6c300a947a4a8895ab8b9d8d5aed9470dd6d5e5ba96e65ad3e729da3aaa40d663240a945dd5a24e5819b423520a9761e1a368d59898a0297c5f7d56c84349d137253edd1b77743774cf336c6c769d8ab1200a8d7644720554711c617f488479caa453f75e10c38672610592e563c10d1f492ded62cfdec7be350115ae08466b9f6f36d1df1ce9daab14a8fa64c4922a021729c58793188b923ca4c4ed9eaf03a66518ef5cb55f58c0fb076b59a9d9105c5690385125685d3daa62b5ca1d7c18f4bae340287459a73af0d44334ce241f807c72de9c5bb98e26920ad1330765a8eab62f14eae3d759fd127a78783bc148b0a5344b689b0cb3fa12de1150668ba096ebd44be061c5199eab42294e6bd31e4b1c7f1cfb2658d482309311a691d92e3e390838f929e0d0c60c6c537ffe8d90e873bc56958f560b4fb90a08b34fd97de2c5ffded4e895ba1b5284696a9ed9c7fb20e5591f767fa7ef03187e0d72a867ae8c2f3fab8e31af04b32f557173ac1a59828d7939e74280ed444175a594526388c33c8814d898d4307f680fdffc356aed34c542444044e57c1ae2ce4d0efee18184573c913f8134dc7400726f7fc21b1f93845bc2f8ff9f8ea7e24e8391327c3deef764439863d586ca3fb4070d4886e99125516811fdb170c535b1b1040d02742899b0269244b4407935e2a7895a52076cf0e136f55d424714340e787a59d2809258c3c511a1f82c7bc29f0d43de94e1b91fd7405a61824d1bf6870d3bd882bdc64415ca7eb038c7504dc0e3ad232d01bf911e4b83e09033576668fac6e481b2b9bf4e9aef37f01594f3638117a559520d58c32e656df45f0ff2c26841c8af8bfcca2cfdc800d960a9dbed2de6b9b53d8471e9d591e904962e8e69ffb14a103e6316eb4edb359a99a267947f3df63306f098d421b4011534aed6305328ce6c8f2c11e1bab878b9b4af864f44ea99af018b11cd810444d6a6f8d57fbaf3f98dc0738be26b857f7201943ac8b1459e51c56bdb5a332260220a87e0edbd4d79e8f62063046d51eca9c518bf9a76432f0f1a9eee21433f1ed6f0e43e2280568d01b81f5b4c96964d1d3d4e808db7518ab52810cba9e82e6edfa38f318dbd8a5bd24fc5f9474c99019c72225f2a55325b58ff30a4e170830cd6cbd22180c849560de331d47c0222dcdda3aecfdea4bb0e9526e60427e9a7a33203f4a643ca0db83b4427583824f47f0b9fa138412d3c5f14cc0a19c553569c8209f3ba827e0614f8ef46bc6b13b662b01002810e678d413283fbbaac7ba5e68454a4ab1be358bad8f805ce6cbdb66e1c67b81740cf2df0ca8d75863058396068bccc2e93c1ec51473b30cabd5cb2b34989d54d46f3670e520f4decc4c9ae056db64309df5d04a8261502f3ef32ccf790a17297bfeaf2b7661cbc63a745b23668c3a8e60ca87525b09471db7f60c574fa4af157ada14371ad943c7b1e449536dcc5209d031fe9cdc8a420750e424c03f4aae244389a06114563741661594a4b7261a8d4102f6334d08198e0cb74b4374c4f00b5c80a239b5d7ad4120b715f6424f2d8bc4759fd8d8f287ea9ca388b9fd0aec594b486a8a199f464fe99928577cd269528467d05bf1ddb1120e344038e64d356b49e2fa23315b8816507eef4479607776a7bd44c0ef4ec4249549cb295fc1948082c3289b10de550c8fdd22aabcd2c5a7a808197dd7bc757a183f85812c01198b95c7a7ba28fcbad1aa04f46b74977183f4df83d774db625393b9fff499f0f1ed7891d5337ae17aed614a434e12b3f77a3ebe8b85e47932d9d1d60bd6beb184af72af74224263ca63f5d84a59b1af2207112a19bd13120201fe6a3c4083770ffe94f48bd3b9334807aa831a26e0d7c8ad0018514ee0766c67884b345f3118a21434a545f734e6e6fb9240a928a28318e22361e9724537dd620a8a2bf7ca27272667399e4b3b6a0f32892f8a76a425fdf52513ee27af05eeeac4b339422e9ef86c07e79d85ebe4d7ff3906650d95936f4d77ce785b017468dfd672acbd2eb44d6560e37e3e134dbf16a33fb3fe598f0c08bd239eac4f6343e89edf252364a6e659ca8bde1aca986e01df4da95db1bb4cc1a38628e7392d687182e57b1f6c84bf826a7da3a70fa4870d2b4e186849e44ba39bae2d72b30b3e61b94cb125049e356b77218d883ecbc195ef556c12528b746deb8174989605707639b0f37ee25ef40676479afede07f0ce4e995a931be7a7adf4653f0e450952770ad7428331080144abaf33d7a0ac4c96ebd36eaaeb7b9702eebbf791008c04aef1ae97e8dd519893cc47a9045b990f8f4653ed89b42c31076855d67ac58d615026adffc9c1425a418ed574f27de64745005967e068392c396f0e1aea8df572e4b67449e9c2959ebbce29f83e22aeb58986fc78fefc4c3001eaf0cc5720ab385bba2be9b10935e8574127adb84b95a33d71b72691f5de097ab19ad7cfe87bba6c361f768f9ae72686a49da96a42c133b8f07229e48fd3fb674faf3e82e5c3c91c56e6776829ee64ce76c4393e411817ce3eebe76e07ca45ed6390af5544a435e9d564e688237c171a25833bad9550e72a7b2e2c780653d2f8d5fa2f0fca406b94884e9de4940dc5103fc998a9ffbff6c3c14e15654728823ff327352850e3862e6cf7ba2d5c602b09b252ee4a04caeffa773bf84987ff68a9bdd5f4bc265d9afdf9829460f0c41ac5fbf4299fbe0d851be330d4e0a189ff6a59e0145578ea4ddf9034b8a8f90a4d50eeb4f55fc164f115256facfc6ceb87c22db7ac4d760000c013a2e443262372a74b794c07b12fddc17b44a29dd7073b0d6b3f5f5cbe3a8067e0aaf95520ee3a11625f10c3b4c07ae362ab1d1c22fa249e452cf8aaeebb910a3bad2f4898cd395c5abddd51d094da6c5c0ae4c0f735e721e2157088a184f0a69d540f5c14fe14006931bb69fda2b605277ec29843603dba905e7a74cafdd26a0fe64d88fcc5e63d6689a12ea4514d86d290a6d7d8dfb160ce5d4c5bb53e21a010727329f38c83f95170bf73e422796583c90a0cb8d0de069b36fb745f853119bb7aaadaa88bf5def158d4d2b4271be9974415a04898621f3b2b026e9910848fe335c405e8a2ceab198dc7c501b57139a2feef9414901d2c1ce655f5dbd613e2b3bd487a5e057f4409c6cbf7e6758f5713f12ca86f572aeafd21f41185227ff46f7b1e63e03148b9d2e021cd33058f80c1588b618e5d27a91f7d399eb937b52167bc84efb1b1b5f2c84d5b2b59944527f6b49c1b94d8cf245d17050dfd18e0949835bbedf6df9d38599fcdbc2e54c2625dc3f5f52a1e78d59b4101a3e5a81eec24ae0e5d7f69e6e25849c8bd460eb6c2ec29dacd5ce82d25eca51c86f27d7da47d4a08d0c64dae2825079b8d63ccfc608bf7d07ae43969f79a00d5f4282a0c4eda6a512d88cfeb0399d6e490c536bfbc47d7e2b13e7b84dbd91058af131fbba4282538b9be1db8a1e8c3d4f22e9fd455ce089b0b2e6ad2c1d25eb618a897e3ee215d2c4c044f99df8efb306ac0bbc08b2eac06d079b6bf2d1a0e72e245717378d9b8522d7c8a1d26df26b1a22f0a3e6335345bbfedefab9299f745aab780d51fc589f1847bdbae165e14dd0b03ba4cda8104b8f1cb3983d3aa648ad12b6a5458caeaf7b24f07701aad992ec62ddada6be94ad392e531ecf867a8fc8be6aeccb30d571916d3543fdb24ac04c664509b818731ca2147a4083c0f50f4a768e708e2600b72639a964477e3c9f6fd2bdce9c9af521b0016ad6f803d95804d12546399c48b53f5790839d339557ac396de3f33cd9cf2948dc68a8b62044bbf8e97a0bf929550df7714b8eb557a4f0cf060a68e34df0d11896f7e770f252f9a30403fe4d841229e97b264344281c29a4b21fd67b73b69d51ce25635168a6f8feff1d58c05d976bf6c7f85a075fed12719616b0accff68aac5ee994841e1955ab2a39a2198f94a3452bc8ab52061bc476028ca880ea51e16249907bb0ca41aa8d117acf097d98f06f73a7d8d9a765c6146aab17849f783570969f26d3c91aaa3e8adcf49d6f7aeb3d43debcfd899762f91662f8e0b98c8a7640afd5f586e4acdfe2981f33e1c117be30d96c0796a7c4e4bae0f0f970c27074c59ba919ee8d7f4061c71820f6b4011dfa3e5c9200b51ae91e4c6c15dba707e13e1edd5243af9507bb5ba53e1cbea720e74a8d2c52ab191be356a8ce97d62bdc7a44aa5806201418a7e0523d84dbfc35f2787a37eaab293572ca0bbecb8cc16c801aa0e451875eac45760d7c20858f2a4f7f5e00bfb1b34c6afae2d53e88aa52ae15b6ec0de9df446c505833ff5b916b87e80821c26e3b3ea9709683a240468af357e6d03d67a64ef4406ebe53ae12255ce7886a63d1edb64a1a2cb9caeba08bdb667979c1d58a1e2ca239b20ac250fe12680c193ee43c9be1710f48e32a79ca37fd085b71e342db06675e507fd2d347312215b7425694e883af41307e70deca566e14135043b97b89ff6d9ea9ece660ebc64582abdaf05ced0785accd2fe3543ccac4d621c87385d5e97d42876d153d243bd128138f16db117374185abed321606a0a823b9d22a78c727da985bd0fd540c2c2e6f875f2d2e6437b475f34dc670beb7c5490ee7d4e7cab6754740ae352f01d4d353bfec1cb8f38b3e74c4ace6b92f8357e447aaa9dc675f40b2b4c801c9e3dca0d91feb9e64fd534a623d07428636e59fa74bb114041a8bd1a95cb2ac2b1379b0fec670c586dcabce174f000e04abf38f1115cd0edd4a2da895135e16784356ed866d4462035dd4e09a8946eaee8a7ed2b32938f67d4848a9fdc8670a493e24f0e7736594567aee849a261341dd7acd2e0f8ede3a66253b9bec96fe052712f48bb7817582427a1840d17df5d7d0012990f9d56187a39e1a5f427b96d2632f8c84d6d84c18ae7cec937cf11e356edfa30570cc06ff87431a655da717c04fbcd71a12a0081dc877c6bee6bf632d471e9dcb07378b65499ff6371fb6052d7a5677e7c09aad79b9be9c142fb7beb2171cd7091e4d1067c273476cfa6f36ab5b52024882a5e968df46f448be15728fa604896d12da51661c7a113b881", &(0x7f00000014c0)=""/102}, 0x18) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000480)={'syz_tun\x00', {0x2, 0x4e23, @rand_addr=0x5}}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000001640)=0xd000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000380)=""/121, &(0x7f0000000440)=0x79) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f00000002c0)=0x7331e915, 0x4) listen(r1, 0x5) 03:41:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$int_in(r0, 0x5473, &(0x7f0000000000)=0x9b) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 953.775310] overlayfs: failed to resolve './file0': -2 03:41:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x13000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 953.982146] binder_alloc_mmap_handler: 11 callbacks suppressed [ 953.982155] binder_alloc: binder_alloc_mmap_handler: 13778 20001000-20004000 already mapped failed -16 [ 953.998287] binder: BINDER_SET_CONTEXT_MGR already set [ 954.003666] binder: 13778:13795 ioctl 40046207 0 returned -16 [ 954.011560] binder_alloc: binder_alloc_mmap_handler: 13804 20001000-20004000 already mapped failed -16 [ 954.021751] binder: undelivered TRANSACTION_COMPLETE 03:41:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x300000000000000]}}], 0x0, 0x0, 0x0}) 03:41:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000580)="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") ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) r1 = getpgrp(0x0) ptrace$setopts(0x4206, r1, 0xffffffffffffffff, 0x100000) 03:41:05 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/vga_arbiter\x00', 0x441, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x68, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x68239199, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20040005) mkdir(&(0x7f0000000300)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='9p\x00', 0x20008, &(0x7f0000000380)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@access_any='access=any'}, {@cache_mmap='cache=mmap'}, {@posixacl='posixacl'}, {@uname={'uname'}}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0xf4}}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, "23246e6f64657673656375726974792665746831c62e255e766d6e6574316367726f7570707070305b24"}}, {@dont_appraise='dont_appraise'}, {@seclabel='seclabel'}, {@subj_user={'subj_user', 0x3d, 'broadcast-link\x00'}}, {@subj_user={'subj_user', 0x3d, 'posix_acl_access'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@pcr={'pcr', 0x3d, 0x33}}]}}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="75706065726469723d2e2f66696c65302c6c6f7765726469723d2e2f67696c65302c776f726b5c0093e950cee805b2bdc5fdcaa5097d3dcddcd737b1b41212e0d8671ec2806eaddf17ebdd04835d81e720a96a938709b8f89af6b418a419313f4665a057aadb1ed6f165476dbb3bea0819d1d592714f95e6884f8b"]) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:41:05 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0xf9db) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)={0x2}, 0x0) 03:41:05 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 954.036197] binder: release 13804:13805 transaction 4389 in, still active [ 954.062677] binder: undelivered TRANSACTION_COMPLETE 03:41:05 executing program 5: unshare(0x22000200) clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x2000) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000040)={0x1000, 0xf000, 0x5, 0x242, 0xa000}) dup3(r0, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 03:41:05 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 954.172113] binder: 13845:13851 got transaction with invalid offset (216172782113783808, min 0 max 24) or object. [ 954.181430] binder: BINDER_SET_CONTEXT_MGR already set [ 954.195626] binder: 13850:13853 ioctl 40046207 0 returned -16 [ 954.233619] binder_alloc: binder_alloc_mmap_handler: 13845 20001000-20004000 already mapped failed -16 [ 954.276774] binder_transaction: 7 callbacks suppressed [ 954.276785] binder: 13850:13862 got reply transaction with no transaction stack [ 954.321277] binder_alloc: 13845: binder_alloc_buf, no vma [ 954.343054] binder: BINDER_SET_CONTEXT_MGR already set 03:41:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = shmget$private(0x0, 0x1000, 0x8a, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet_sctp(0x2, 0x1db9fe3c802a9cc3, 0x84) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) r3 = memfd_create(&(0x7f00000000c0)='bdevtrustedsecuritylo%ppp0\x00', 0x6) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x400, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xfffffffffffffa1c, 0x1ff, 0x7fff, 0x8, 0x0, 0x6, 0x8000, 0x8, 0xb94, 0x0, 0x3, 0x7, 0x1, 0x4, 0x8000, 0xff, 0xff, 0x553c, 0x7, 0x1000, 0x9, 0x3, 0xab22, 0x3f, 0x2, 0x258bf611, 0x3, 0xe00000000000000, 0x1, 0x1, 0x8, 0x7fffffff, 0xfffffffffffffffe, 0x4, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x6, 0x3}, 0x29200, 0x1, 0x5, 0x7, 0x0, 0x8000, 0x10001}, r2, 0xf, r3, 0x8) 03:41:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xec0f00) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x4c00000000000000]}}], 0x0, 0x0, 0x0}) [ 954.371360] binder: undelivered TRANSACTION_COMPLETE [ 954.378205] binder: 13845:13867 ioctl 40046207 0 returned -16 [ 954.402116] overlayfs: filesystem on './file0' not supported as upperdir 03:41:06 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:41:06 executing program 2: socket$netlink(0x10, 0x3, 0x8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400203) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3f, 0x41) write$UHID_INPUT2(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0c0000001e0042b5a0d77833ef77468efcb4c091eabcf32ead17ac1ca57b7b72994e3079489a0da95b56e4ebb82642f6ce3fee33aa06df92e26d8ea7d674b77797e394eb8c7a86291f39b5b78378087c7003f8d24bf6691280c74bfe48a6bd07ab5fca16"], 0x24) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x7) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000100)) [ 954.496955] binder: 13879:13881 got transaction with invalid offset (5476377146882523136, min 0 max 24) or object. 03:41:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x401) truncate(&(0x7f0000000000)='./file0/bus\x00', 0x4d) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = inotify_init() getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x80000002) truncate(&(0x7f0000000040)='./file0/bus\x00', 0x0) [ 954.551450] binder_alloc: binder_alloc_mmap_handler: 13879 20001000-20004000 already mapped failed -16 [ 954.567019] binder: BINDER_SET_CONTEXT_MGR already set [ 954.572977] binder: 13879:13881 ioctl 40046207 0 returned -16 [ 954.575662] binder_alloc: 13879: binder_alloc_buf, no vma [ 954.599981] binder: undelivered TRANSACTION_COMPLETE 03:41:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x14000000]}}], 0x0, 0x0, 0x0}) 03:41:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:06 executing program 5: syz_open_dev$sndtimer(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffff7, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300)="3819c3b57c3715d7940261bd0f99873bdaa2c49e488aa6336976fa91397f40c19fda", 0x22}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000480), 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = getegid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000980)) gettid() setregid(r4, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080), 0x4) [ 954.730358] overlayfs: filesystem on './file0' not supported as upperdir [ 954.757645] binder: 13896:13898 got transaction with invalid offset (335544320, min 0 max 24) or object. [ 954.769611] binder_send_failed_reply: 3 callbacks suppressed [ 954.769621] binder: send failed reply for transaction 4401 to 13896:13898 [ 954.808268] binder_alloc: binder_alloc_mmap_handler: 13896 20001000-20004000 already mapped failed -16 [ 954.828958] binder: BINDER_SET_CONTEXT_MGR already set [ 954.834424] binder: 13896:13898 ioctl 40046207 0 returned -16 [ 954.843960] binder: undelivered TRANSACTION_COMPLETE [ 954.976614] binder_alloc: binder_alloc_mmap_handler: 13850 20001000-20004000 already mapped failed -16 [ 955.022203] binder: 13850:13862 got reply transaction with no transaction stack 03:41:06 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:06 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) chdir(&(0x7f0000000280)='./file1\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) r0 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000100)=0xe, 0x80000) getsockname(r0, &(0x7f0000000140)=@can, &(0x7f0000000200)=0x80) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhci\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000340)={0x31, 0x6, 0x0, {0x6, 0x0, 0x8, 0x0, 'overlay\x00'}}, 0x31) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x200000000054000, 0x1) 03:41:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x60000000]}}], 0x0, 0x0, 0x0}) 03:41:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}}}, 0x90) 03:41:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1e00) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 955.140918] binder: 13921:13924 got transaction with invalid offset (1610612736, min 0 max 24) or object. [ 955.153364] overlayfs: unrecognized mount option "uÊ;ŸOO¢ý6./file05lowerdAœ=./fils " or missing value [ 955.166434] binder: BINDER_SET_CONTEXT_MGR already set [ 955.171741] binder: 13925:13927 ioctl 40046207 0 returned -16 [ 955.179693] binder: send failed reply for transaction 4407 to 13921:13924 03:41:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/mcfilter\x00') getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x424d, 0x1, 0x8, 0x9, 0x80, {0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x7, 0x0, 0x4, 0x0, 0x1000}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r2, 0x100}, &(0x7f00000002c0)=0x8) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) getsockopt(r0, 0x5b57, 0x1, &(0x7f0000000000)=""/236, &(0x7f0000000100)=0xff2b) [ 955.204232] overlayfs: unrecognized mount option "uÊ;ŸOO¢ý6./file05lowerdAœ=./fils " or missing value [ 955.211217] binder_alloc: binder_alloc_mmap_handler: 13921 20001000-20004000 already mapped failed -16 [ 955.231407] binder_alloc_new_buf_locked: 1 callbacks suppressed [ 955.231415] binder_alloc: 13921: binder_alloc_buf, no vma [ 955.245549] binder: 13925:13934 got reply transaction with no transaction stack 03:41:06 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @rand_addr=0x6}}, [0x9, 0x3800000000000, 0x6, 0x0, 0x0, 0x5, 0x1, 0x9, 0x5, 0x7, 0x5, 0xfffffffffffffff9, 0x2]}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000005040)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000780)='/dev/media#\x00', 0x0, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000680)={r2, @in6={{0xa, 0x4e23, 0x4, @mcast2, 0x6}}, 0x3, 0x3b0e474b}, 0x88) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f00000001c0)={0x0, @speck128}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000000740)={0x8001, 0x0, 0x10001}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000200)=""/44) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000180)=0xff) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x811, r5, 0x0) 03:41:07 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='overlay\x00', 0x2084000, &(0x7f0000000200)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d311c06fdb5aefc812e2f66696c65302c776f726b6469723d2e2f66696c65315c00e79fb5ac125a68f8cf34045214217fbf8f70202d3b95f519d64466db9ef191d4d1b05bcc38b85e91394b9ac1a6c88d418768280ad30ae80c3b7d06a84218a0f65355e1e6eb901d7fb7bc45"]) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 955.255327] binder: BINDER_SET_CONTEXT_MGR already set [ 955.260650] binder: 13921:13924 ioctl 40046207 0 returned -16 03:41:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x4c00]}}], 0x0, 0x0, 0x0}) 03:41:07 executing program 2: r0 = getgid() r1 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000580)={0x2, 0x7fffffff, 0x4, {0x8, @win={{0x2ec4, 0x9, 0xfffffffffffffffc, 0x1}, 0x5, 0x8, &(0x7f0000000380)={{0x100, 0x8, 0x7, 0x4}, &(0x7f0000000340)={{0x6, 0x460f90be, 0x3f, 0x3ff}, &(0x7f0000000300)={{0x401, 0x5, 0x0, 0x79}}}}, 0x281456ec, &(0x7f00000003c0)="f0cbff9a1c693f7fcf4805e760b5698d059d1032ac6e635fc603eee8a426210cd8d17a0c3a5ef3adf6cbb2e18f8190742cb16b0b9499663c4db4285fdaee557fbf6a71a92f4498a770", 0x9}}}) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x804, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x6, 0x4, 0x0, 0x1}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4080) setgid(r0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8a7, 0x422002) ioctl$VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000040)=0x3) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 955.436174] binder: 13946:13948 got transaction with invalid offset (19456, min 0 max 24) or object. [ 955.468324] binder: send failed reply for transaction 4412 to 13946:13948 03:41:07 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) r1 = timerfd_create(0x4, 0x80000) pipe2$9p(&(0x7f0000002480)={0xffffffffffffffff}, 0x80000) r3 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000024c0)) r4 = syz_open_dev$audion(&(0x7f0000002500)='/dev/audio#\x00', 0xc1, 0x20000) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002540)='/dev/sequencer2\x00', 0x400900, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000002580)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000025c0)={{{@in6=@ipv4, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000026c0)=0xe8) getgroups(0x1, &(0x7f0000002700)=[0xee01]) r10 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002740)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000002840)=0xe8) stat(&(0x7f0000002880)='./file1\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = open(&(0x7f0000002940)='./file0\x00', 0x40000, 0x0) r14 = openat$ion(0xffffffffffffff9c, &(0x7f0000002980)='/dev/ion\x00', 0x20402, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002a00)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, &(0x7f00000029c0)='+.\x00'}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002a40)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000002b40)=0xe8) lstat(&(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002c80)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002cc0)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000002dc0)=0xe8) r20 = getegid() r21 = syz_open_dev$evdev(&(0x7f0000002e00)='/dev/input/event#\x00', 0x8001, 0x0) r22 = socket$kcm(0x29, 0x5, 0x0) r23 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002e40)='/dev/ptmx\x00', 0x10000, 0x0) r24 = socket$nl_route(0x10, 0x3, 0x0) r25 = fcntl$getown(0xffffffffffffff9c, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002e80)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000002f80)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000003040)=0x0) lstat(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r30 = getegid() sendmmsg$unix(r0, &(0x7f0000003280)=[{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000000280)="279d363317d8cb65eaaa7e161114cf7fee83e78c5f0f2f0ec653e2608e2dcf41d578f73ade1462490e473580b782ebb617e224946009fd52f785321da20efeaae769c9a197d67b960c2228ce0e47da4d403e876eec2018921d2e7416619030df042240", 0x63}, {&(0x7f0000000180)="6ce1ce8bbd40f2cf17cd7e76801f8e", 0xf}, {&(0x7f0000000380)="8d08c719980987317498fc377238b14887e0640d85d6aedcf403071e94c020d7c5adf369f88a84fc849f84db6554e2620aa23faf72ab1ff0b7458b569fc9da90c21faff8160a7cf42ad57ae0afda747c4bd8131a47a61b95b7e1c8e5f3677b8f795c5ccc169f147f7b6d7ac892", 0x6d}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000000300)}], 0x6, &(0x7f0000003140)=[@rights={0x28, 0x1, 0x1, [r1, r2, r3, r4, r5, r6]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x18, 0x1, 0x1, [r13, r14]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @rights={0x20, 0x1, 0x1, [r21, r22, r23, r24]}, @cred={0x20, 0x1, 0x2, r25, r26, r27}, @cred={0x20, 0x1, 0x2, r28, r29, r30}], 0x120, 0x20000000}], 0x1, 0x40) [ 955.496218] binder_alloc: binder_alloc_mmap_handler: 13946 20001000-20004000 already mapped failed -16 [ 955.534100] binder: BINDER_SET_CONTEXT_MGR already set [ 955.540960] binder: 13946:13948 ioctl 40046207 0 returned -16 03:41:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x6c]}}], 0x0, 0x0, 0x0}) [ 955.571752] binder_alloc: 13946: binder_alloc_buf, no vma [ 955.661695] binder: 13959:13960 got transaction with invalid offset (108, min 0 max 24) or object. [ 955.671632] overlayfs: filesystem on './file0' not supported as upperdir [ 955.710370] binder: send failed reply for transaction 4416 to 13959:13960 [ 955.722741] binder_alloc: binder_alloc_mmap_handler: 13959 20001000-20004000 already mapped failed -16 [ 955.732963] binder: BINDER_SET_CONTEXT_MGR already set [ 955.746630] binder: 13959:13960 ioctl 40046207 0 returned -16 [ 955.752743] binder_alloc: 13959: binder_alloc_buf, no vma 03:41:07 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) rt_sigaction(0x28, &(0x7f0000000080)={&(0x7f0000000000)="c422099a65f2c4a1a162b66ecee103c4a279411ec44251ba8f00000000c4e1792876030f0fe01c65f2436c66460f594a90c481e5d99900000000c4c2e997580e", {}, 0xd0000003, &(0x7f0000000040)="660f381c1c1966db6c360b400f034eba47d1b0be000000dc741d0066440f38103ec481f854921a000000a01d80000000000000260fae42d80f5d9c0e05008020"}, 0x0, 0x8, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:07 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @rand_addr=0x6}}, [0x9, 0x3800000000000, 0x6, 0x0, 0x0, 0x5, 0x1, 0x9, 0x5, 0x7, 0x5, 0xfffffffffffffff9, 0x2]}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000005040)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "cd607774648fdd0dac844be4f9b1d329d91eae837252e6cb920290c9d73d52b8a9ace7b0a440006535651282191a94f337131e6dc38451052abe84bc051f67439e97fb440a8bff6403f2f3406092adb35f6e886c3f9c6b6bae7cd2d48962ef32bc10395b73756ebb708fd0185c547b8f5eb4e7d4fde4ff055a16549fac4fe38ebc943587f7b235da3d393473bf05c0da85a20e9a40d59698672283d1787d02d8534ad35fdf428f02c28ceee6b04fe57d5e96bca46334707693c0110da3e96f1f5f6bed28d74ac7b75710ac2e3861cbed023c263c63e61b6acd5d7ef55a2c9ad7c05129f1382bd536a58d9ca8ee91c9d6c8bb200c9e6c5540a9438cd0c475e8ce"}}}, 0x128) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000780)='/dev/media#\x00', 0x0, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000680)={r2, @in6={{0xa, 0x4e23, 0x4, @mcast2, 0x6}}, 0x3, 0x3b0e474b}, 0x88) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f00000001c0)={0x0, @speck128}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000000740)={0x8001, 0x0, 0x10001}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000200)=""/44) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000180)=0xff) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x811, r5, 0x0) 03:41:07 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x0, 0x2) readlinkat(r0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/40, 0x28) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x3ff, 0x40000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000400)=0x0) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000440)={r0, r1, 0x7ff}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x78, "57f7c375d4d31f4e2da0be1d729ef3f16599ed28e6ce1e5fcdd73dc922e48a60f4506ec002fc7e5b745693c814d57e22f306dd29095929e666ff8f94941cbeb61ce6eb914fae79cbb107cc7bf2f945656b8f0ac8dd8f9c9cd44b5cffa5ebf71472b9336573fff96d4ca98d127c86e04bb1c98f88d84ae641"}, &(0x7f0000000200)=0x80) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r4, &(0x7f0000000280)=0x4) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x3, 0x1) 03:41:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x74]}}], 0x0, 0x0, 0x0}) 03:41:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xe803) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 955.935799] binder_alloc: binder_alloc_mmap_handler: 13925 20001000-20004000 already mapped failed -16 [ 955.955076] binder_release_work: 40 callbacks suppressed [ 955.955082] binder: undelivered TRANSACTION_ERROR: 29201 [ 956.066256] binder: 13974:13981 got transaction with invalid offset (116, min 0 max 24) or object. [ 956.088041] binder: BINDER_SET_CONTEXT_MGR already set [ 956.093363] binder: 13980:13984 ioctl 40046207 0 returned -16 [ 956.106809] binder: send failed reply for transaction 4421 to 13974:13981 03:41:07 executing program 2: r0 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0xf38e, 0x8000) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000300), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xae7) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x5) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'bridge_slave_1\x00', {0x2, 0x4e24, @multicast1}}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000240)={&(0x7f0000001080)={0x11f4, 0x10, 0xb, 0x200, 0x70bd28, 0x25dfdbfd, {0x7}, [@nested={0x1080, 0xb, [@generic="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", @generic="f340d14a71040acad928b56d792cc9e92138b9676087a8ecc45899df38ee9b7cd3295f52fd4a82f23afdfc2e0e22711ed2654e7e1055ac2fac5bce867bc69cfd37564228a86ab502de2b286cef9b3b8ff71e2aeb5711d2a6da3725931034a49fd103736fcce2b6ec5ebb24cef75d4d539de0609b84d195ef99a57aa3"]}, @nested={0x18, 0x5c, [@typed={0x14, 0x17, @ipv6=@remote}]}, @nested={0x50, 0x4b, [@typed={0x8, 0x76, @ipv4=@rand_addr=0x8}, @generic="89d358e3abb61c08542a1ea36152e7690c4ddf3d4c20fc3064fe2b92c4da31cd1aee200b85807ae6be48cec5f5aa10df1b3b3f6999ebef7a14aa0a4afdb69a668fa3b1"]}, @generic="269da5da633b230a79a70f86b8edcaa497ee0bef1f612c1418f7c0e2a8b30c7ddab3cce4d1b8e9ad70d3005672ef1329cd2ef7ce17", @typed={0x8, 0x85, @uid=r3}, @nested={0xb8, 0x2c, [@typed={0x8, 0x73, @uid=r4}, @typed={0xc, 0x4d, @u64=0x4}, @generic="26998eb74b850072cc2f3841220ae336721af6667cf8d9c3872bc0be941b6e3cafd1e41e7fc49580c8b80ce3790f6354a2d00e8fbae994d026b6f2ffe70a28e129a4f3b6f4366cabe532e674d7b4ce258f2f98954c11a31fa119663b3109130737b86bd890e9bcd2364f12ac607838b2c03048ef31598f237fb56cd0b9d45c8eac11bef6e7f17defcba2fabea0a4e386fcfa4acd829bdef9115bbc530941f042"]}]}, 0x11f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 956.122646] overlayfs: './file0' not a directory [ 956.154325] binder: BINDER_SET_CONTEXT_MGR already set 03:41:07 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) syz_mount_image$ceph(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)='./file1\x00', 0x800, 0x4, &(0x7f0000000540)=[{&(0x7f0000000200)="4ffbd1aeb16f92f5cf824ea7e1fe1714fafa0c633578a030a7e654290d3c332f3afeb58547f1bebe01c8b6ea0b1e83cbd4089167cf5c11bf7071817bf9bf574adc61610c7a97c5d70bdb5548d1cf7d96f7c7bf795200", 0x56, 0x2}, {&(0x7f0000000380)="7333e93ae58369af9a2fc29ae036bd4cf30aae574a6a695789e655b89184fdc606ec7048b259832fdaca11b50bbefd40b7b704e335b40f65f7986e468f0e9dba20a64b7987116ab19db1a686ad1edeb0076090bb173fd6e89c417bbebe61199e19a1e45cb692dd98c113257a23259950bb1fdfe02adc4fe184eb06662c2ce28af1dc5afacd5800ff32098b4f78d65f74473ca0249c70bf72", 0x98, 0xffffffffffffffe0}, {&(0x7f0000000440)="64427e6fcf9a2bff5dea10f52c7ccf21ea02c93fe4aa7e510c8c1014c228ec16ec2dcf64cf385f39cb32bd179a32388db3968dba69725e887f69e0eb92961ee74687ee721eee9927450fc627679626f490cee30d4517ed0243edccd7922acb186d3d3ad50cef4f153c405aed1c141950b218d037aace727190c231dfa197f781ddd1e7d4707e72a0caab5f33f80ae66e6880b500d2db279e40e6882b0d2ae175d4778129a675ffe4c05514ae6d6b925d6f6d5d12715f010c71a9822b7a52069a29a4919662c9ef796a8418e748809ea83679787448", 0xd5, 0xff}, {&(0x7f0000000280)="57879ad2d97042ba718fb3e4f6c9c9b7d64ddb00e5c46d73b8656ffe4f7144ac1ed44f1daa7cbc713bede99a8b1e6fcb963bf29ddb3d35a92931d717c6d05e03952ee82f81d267ecad2cb6", 0x4b, 0x1ff}], 0x1000000, &(0x7f0000000180)='upperdir') mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000640)='./file1\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) lsetxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f00000005c0)='security.evm\x00', &(0x7f0000000680)=@v2={0x3, 0x0, 0xf, 0x6, 0x65, "4e97214b4e1806385fc2f669cf3b287bcd4f626c6cff1345a144e530efe42245a51e8a43e647cf74fa4dc5aae602f388b758a9a321a8354dca82b12f25eeafb5d53346e09e7c9854f1c7c10c8ec4a651e040786d5db5f1740ffaedecb04532fb0816ad4e6c"}, 0x6f, 0x2) [ 956.175713] binder: 13980:13991 got reply transaction with no transaction stack [ 956.185899] binder: 13974:13987 ioctl 40046207 0 returned -16 [ 956.185971] binder_alloc: 13974: binder_alloc_buf, no vma [ 956.194867] binder_transaction: 26 callbacks suppressed [ 956.194884] binder: 13980:13991 transaction failed 29201/-71, size 24-4 line 2741 03:41:07 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) r1 = timerfd_create(0x4, 0x80000) pipe2$9p(&(0x7f0000002480)={0xffffffffffffffff}, 0x80000) r3 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000024c0)) r4 = syz_open_dev$audion(&(0x7f0000002500)='/dev/audio#\x00', 0xc1, 0x20000) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002540)='/dev/sequencer2\x00', 0x400900, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000002580)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000025c0)={{{@in6=@ipv4, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000026c0)=0xe8) getgroups(0x1, &(0x7f0000002700)=[0xee01]) r10 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002740)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000002840)=0xe8) stat(&(0x7f0000002880)='./file1\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = open(&(0x7f0000002940)='./file0\x00', 0x40000, 0x0) r14 = openat$ion(0xffffffffffffff9c, &(0x7f0000002980)='/dev/ion\x00', 0x20402, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002a00)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, &(0x7f00000029c0)='+.\x00'}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002a40)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000002b40)=0xe8) lstat(&(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002c80)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002cc0)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000002dc0)=0xe8) r20 = getegid() r21 = syz_open_dev$evdev(&(0x7f0000002e00)='/dev/input/event#\x00', 0x8001, 0x0) r22 = socket$kcm(0x29, 0x5, 0x0) r23 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002e40)='/dev/ptmx\x00', 0x10000, 0x0) r24 = socket$nl_route(0x10, 0x3, 0x0) r25 = fcntl$getown(0xffffffffffffff9c, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002e80)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000002f80)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000003040)=0x0) lstat(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r30 = getegid() sendmmsg$unix(r0, &(0x7f0000003280)=[{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000000280)="279d363317d8cb65eaaa7e161114cf7fee83e78c5f0f2f0ec653e2608e2dcf41d578f73ade1462490e473580b782ebb617e224946009fd52f785321da20efeaae769c9a197d67b960c2228ce0e47da4d403e876eec2018921d2e7416619030df042240", 0x63}, {&(0x7f0000000180)="6ce1ce8bbd40f2cf17cd7e76801f8e", 0xf}, {&(0x7f0000000380)="8d08c719980987317498fc377238b14887e0640d85d6aedcf403071e94c020d7c5adf369f88a84fc849f84db6554e2620aa23faf72ab1ff0b7458b569fc9da90c21faff8160a7cf42ad57ae0afda747c4bd8131a47a61b95b7e1c8e5f3677b8f795c5ccc169f147f7b6d7ac892", 0x6d}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000000300)}], 0x6, &(0x7f0000003140)=[@rights={0x28, 0x1, 0x1, [r1, r2, r3, r4, r5, r6]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x18, 0x1, 0x1, [r13, r14]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @rights={0x20, 0x1, 0x1, [r21, r22, r23, r24]}, @cred={0x20, 0x1, 0x2, r25, r26, r27}, @cred={0x20, 0x1, 0x2, r28, r29, r30}], 0x120, 0x20000000}], 0x1, 0x40) 03:41:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff9000/0x4000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 956.224009] binder: 13974:13988 transaction failed 29189/-3, size 0-0 line 2973 [ 956.283507] binder: 13974:13981 got reply transaction with no transaction stack [ 956.332650] binder: undelivered TRANSACTION_ERROR: 29201 [ 956.341131] binder: 13974:13981 transaction failed 29201/-71, size 24-8 line 2741 [ 956.349331] binder: undelivered TRANSACTION_ERROR: 29190 [ 956.365853] binder: undelivered TRANSACTION_ERROR: 29201 03:41:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = fcntl$getown(r0, 0x9) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000100)={&(0x7f0000000000)=""/228, 0xe4}) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 956.386914] ceph: device name is missing path (no : separator in /dev/loop1) 03:41:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x2000000000000000]}}], 0x0, 0x0, 0x0}) [ 956.433546] binder: undelivered TRANSACTION_ERROR: 29189 [ 956.498121] ceph: device name is missing path (no : separator in /dev/loop1) [ 956.528364] binder: 14008:14011 got transaction with invalid offset (2305843009213693952, min 0 max 24) or object. [ 956.557362] overlayfs: './file1' not a directory [ 956.579946] binder: 14008:14011 transaction failed 29201/-22, size 24-8 line 3035 [ 956.624690] binder: send failed reply for transaction 4427 to 14008:14011 [ 956.668896] binder: BINDER_SET_CONTEXT_MGR already set [ 956.674472] binder_alloc: 14008: binder_alloc_buf, no vma [ 956.684888] binder: 14008:14011 ioctl 40046207 0 returned -16 [ 956.694230] binder: 14008:14018 transaction failed 29189/-3, size 0-0 line 2973 [ 956.724328] binder: 14008:14011 got reply transaction with no transaction stack [ 956.724443] binder_release_work: 4 callbacks suppressed [ 956.724449] binder: undelivered TRANSACTION_COMPLETE [ 956.733312] binder: 14008:14011 transaction failed 29201/-71, size 24-8 line 2741 [ 956.745115] binder: undelivered TRANSACTION_ERROR: 29201 [ 956.758426] binder: undelivered TRANSACTION_ERROR: 29201 [ 956.771839] binder: undelivered TRANSACTION_ERROR: 29190 [ 956.786496] binder: undelivered TRANSACTION_ERROR: 29189 03:41:08 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x101440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x400000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000440)={0x0, r2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x100, 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x200000, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) mmap(&(0x7f0000ccf000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@ipv4}}, &(0x7f00000002c0)=0xe8) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) getegid() add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffe) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 03:41:08 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x20200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x400000, 0x1a8) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20000, 0x20) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e20, 0x9, @mcast1, 0x3}, {0xa, 0x4e23, 0x8, @mcast2, 0x4}, 0x7, [0x800, 0x3, 0x6c1e, 0x2, 0xb0, 0x7f, 0xfffffffffffffffb, 0x1f]}, 0x5c) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 03:41:08 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x10) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000200)) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x2, 0xfa93, 0x101}}, 0x30) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:41:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1600000000000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x48]}}], 0x0, 0x0, 0x0}) [ 956.884640] binder: 13980:13991 got reply transaction with no transaction stack [ 956.885324] binder: undelivered TRANSACTION_ERROR: 29201 [ 956.892192] binder: 13980:13991 transaction failed 29201/-71, size 24-4 line 2741 [ 956.994118] binder: 14028:14030 got transaction with invalid offset (72, min 0 max 24) or object. [ 957.000212] binder: BINDER_SET_CONTEXT_MGR already set [ 957.003231] binder: 14028:14030 transaction failed 29201/-22, size 24-8 line 3035 [ 957.003249] binder: send failed reply for transaction 4434 to 14028:14030 03:41:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 957.045710] overlayfs: failed to resolve './file0': -2 [ 957.067430] overlayfs: './file1' not a directory [ 957.077186] binder: 14033:14037 ioctl 40046207 0 returned -16 [ 957.077289] binder: 14033:14041 got reply transaction with no transaction stack [ 957.092595] binder: BINDER_SET_CONTEXT_MGR already set [ 957.106114] binder_alloc: 14028: binder_alloc_buf, no vma 03:41:08 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) acct(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) [ 957.112556] binder: 14028:14030 ioctl 40046207 0 returned -16 [ 957.135325] binder: 14028:14040 transaction failed 29189/-3, size 0-0 line 2973 [ 957.149716] binder: 14033:14041 transaction failed 29201/-71, size 24-4 line 2741 03:41:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="48000000694d1f3de0c14949af8d36d450a40f96c85593506ee167adc4d2a3858f49bada7268c6dd404f1332f5e07943ff2e50703453b1f69c1c4fe75dc1c83e4802123c91c8261bb7a9816a2173"], &(0x7f0000000080)=0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e24, @local}}, 0xe, 0xe552, 0x5, 0x20, 0x12}, 0x98) r2 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x5, 0x0) symlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00') ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000040)) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000340)="4f7a08053607979d42ffa161fa9c7e5052df23bad9effc1aacdf1cc2cec40154bf96c272eaa760aa74775fc036337a8c28527058420d171b203270d3fba8d0d062ac09ff1ad5d13b86e705", 0x4b) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x2) 03:41:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0xfffffdfd]}}], 0x0, 0x0, 0x0}) [ 957.237312] binder: undelivered TRANSACTION_COMPLETE 03:41:08 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket(0x0, 0x807, 0x4000000000009) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x100000000) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "3dba86ceeab087b72118e93b9a9f11e2df875b76714fb4dac9effe76e159db6081b7dcd313169986da52fd7b34ae4ccd4603f1e8ab585403547e6f2017db00"}, 0x60) 03:41:09 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 957.345959] binder: 14053:14056 got transaction with invalid offset (4294966781, min 0 max 24) or object. [ 957.382468] binder: send failed reply for transaction 4439 to 14053:14056 03:41:09 executing program 5: modify_ldt$write2(0x11, &(0x7f0000000240)={0x1000, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0xffff}, 0x314) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x8080) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000000c0)=""/195) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000280)=0x4) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x3, 0x94, @name="d509c5da24d2e0829c5d0ce470ce42a0672bdbc9f7bfb19527f6499a9ef26196"}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200002, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000200)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) [ 957.431257] binder: BINDER_SET_CONTEXT_MGR already set [ 957.454835] binder: BINDER_SET_CONTEXT_MGR already set [ 957.461397] binder: 14053:14068 ioctl 40046207 0 returned -16 [ 957.468129] binder: 14064:14070 ioctl 40046207 0 returned -16 03:41:09 executing program 1: mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f69723d2e2f66696c65315c00fde2574881a63c7303af978e527e1e87d73181cf75876bf4dc66b67855ec957e1d9fd9118fe0cff3743541ebd5756168277de8c95ad802af93f3c93554f24f8154b28602b8c0327f5734f4e86d0db4b1387716b2824064b3ac2af0c0000000000000000000000000000000000000000000"]) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:41:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) shmget$private(0x0, 0x3000, 0x7c000140, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) shmget(0x0, 0xb000, 0x1, &(0x7f0000ff4000/0xb000)=nil) r2 = shmget$private(0x0, 0x1000, 0x54000100, &(0x7f0000ff9000/0x1000)=nil) shmctl$SHM_INFO(r2, 0xf, &(0x7f0000000180)=""/165) [ 957.480555] binder_alloc: 14053: binder_alloc_buf, no vma [ 957.500767] binder: 14064:14070 got reply transaction with no transaction stack [ 957.524886] binder: undelivered TRANSACTION_COMPLETE 03:41:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x7400000000000000]}}], 0x0, 0x0, 0x0}) [ 957.695911] binder: 14085:14087 got transaction with invalid offset (8358680908399640576, min 0 max 24) or object. 03:41:09 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:09 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0x0, 0x20000000, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), 0x0}, 0x20) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000040), 0xc, &(0x7f0000001300)={&(0x7f0000000200)=ANY=[]}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000040), 0x0}, 0x18) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000000040)=0x14) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000380)={@loopback, r4}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair(0x1f, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vhost-vsock\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="7a64f6bfff9c6ca28be45c3904ff", 0x0, 0x101}, 0x28) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000500), &(0x7f0000000540)=0x4) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="0f20d86635200000000f22d83e640f58d80f060ebaf80c66b818d1f18866efbafc0ced77193400f2cda90f01cf660f70d6cd", 0x32}], 0x1, 0x10, &(0x7f0000000240), 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000100)={0x38000000, 0x34343452, 0x0, @stepwise={0x2, 0x2, 0x80000000, 0x2, 0x20, 0x101}}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1fd, 0x0, 0x15004, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 03:41:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x800000000000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:09 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) write(r0, &(0x7f0000000000)="5c18a1318d15341f4c89effcbb97edaf8419c7d5607d44f5d829fbca5aba738d937da3d1b25afb575031fa0d08bb175042f912404b76d6", 0x37) socket$netlink(0x10, 0x3, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfffffffffffffe00) r2 = syz_open_dev$vcsn(&(0x7f00000036c0)='/dev/vcs#\x00', 0xceb, 0x2000) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000003c0)="3d77084b351de33babeee051eb039a2beb26262babf67a072bfcf5570825d1903773db684485c26cfe1aea73b9802b95f2e6cfee2e31f18c60c3ae1b7717da827fdc31939435a01e8373508d6cdc08bd9f65b2121b254341e229093dda5af1f5bb108d0f20deeb7768b979b4f3e9cb24fa022a468aead77b58d8fda7a5a9aa78999226c1432f8e2428742404be2a679f74f7f4e645ab7e24824fe219ec", 0x9d) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r4, 0x82, "bf6c85", "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"}}, 0x110) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x300, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x7e5, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x48004) [ 957.737995] binder: send failed reply for transaction 4445 to 14085:14087 [ 957.767794] binder: BINDER_SET_CONTEXT_MGR already set 03:41:09 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000001840)='/dev/usbmon#\x00', 0x2, 0x2000) openat$vhci(0xffffffffffffff9c, &(0x7f0000003240)='/dev/vhci\x00', 0x4100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000001b80)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001bc0)={0xffffffffffffffff}, 0x111, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000001900)={0x8, 0x120, 0xfa00, {0x1, {0x0, 0x5, "93ce9ceca12571743c5b9db5fac1ea7f8799fdc1fd7e8581e86765c6afa5a442d06e397903dbbad973a5361193bcc68323f26f3eb843a333d2ffff55222f84eb1a3e6389f7cd96f1ed2abf85944c5aaa43e515508ebfceee6fe51b7bcfcf0fd91345baeb363f21ff4d16a228195fb7f9048797abc21ed09e01eab69830b7144cb912b475442beb7ede99a1172a13a86223f3966091778280ded825a8bd87535886c499e2e7bcf75e6ede77bdaba65831d3bcced7be3350922208d08b31124482dcdad7ec74adc1a97f54a96364a266160f6c0c1c43edd821681bc313dcce50d3b85597daeca366bb5f72c014176be85bdd300e04c7d6b74e7f94a8daf7a78007", 0x4, 0x40, 0xff, 0x8, 0x9, 0x800, 0x3f9, 0x1}, r1}}, 0x128) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001a40)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000001b40)=0xe8) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000140)='./file1\x00', 0x3, 0x8, &(0x7f00000016c0)=[{&(0x7f0000000200)="4955d21c3cc48f44255b31a3f4101d79b254a562c3d5982cab79a1bd47e8824d8b257b8b9889ab9223547e08cd45aa8d12bd4c540f3b3ec1129ccf301a8cd304f2e2295d9e3ab5fe1e66b17909d0199c5fa186c3ac44eefddda6bdc9ffa661e550aa4b429087553fe16541d5d892faea1c7070ca076f30318d261793da71c7d2da78c351affc2b5c12ed33b2a96de0e2ad6a1264dda17d2ccb99d3feb69705227b4a23fd14bf8b4ff0a739e15f582199130837aec77da1c43c96793789f52b", 0xbf, 0x401}, {&(0x7f0000000340)="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", 0x1000, 0x6}, {&(0x7f0000001340)="173cc08e2c157454862b0bb00e103a1caac44f2a325ba8d0639072be4399e1b228368e99f2903dc2b9b421dfafcb4feb5e85797fc4f94e6615a8d53949381c10f78312def9eab618d48105d44c28200b90acf8c25d0b6eb5ddcc4d4f5c5b9409b297b7e7e4b524394598e41dc5038485ff907c645a9f6733071a814d2352baed1b59b0aa43f6e9937e658809625fae961675bf34afb64a6a", 0x98, 0x400}, {&(0x7f0000001400)="f48c7b1b30919ef86c4b724dd0ba1797f8a571c71d75c91fc6a8cf26f9213fb1c2de2a4420342e38d08206d01214cb4ffa1224a593cfbeda697bede5bf2dc31843d50e67d45a31a9c130b0dace4eb86424fe62e393b84500c46e7622360257d82042d6d11b17547497e05b4601b93d4d635bd1ec59c66ec72e273a703bdcf3642cee44e2047c738241734df9026b104c6d1365f35a6df5e9c36a2abeafc585f68554aa1588b5f3989d6bd04470db15", 0xaf, 0x8001}, {&(0x7f00000014c0)="7a2c68a3e7c5ffad1de6414b85448f82bd491edd002af4427f550bf70f9ab1ab3e99fa8ca7b36ba2a730e135f30f0235f97fe555d808930de4ace3b6903e6cb085b444820568c6e813df73ca2ec58de918b6fc033133604ac731024454498e3873e7b33a3982fba5d195a381c09cf967f8ef46d7767436c73ce1c56ba57c6ccd715a35090658933366e832cc500fa7", 0x8f, 0x3}, {&(0x7f0000001580)="4d1675a1199def18cff2c2b7658de7ca44b60bcc69c153d3634fbdec89758f0349852a9cf7ab5e00192d057a2317ce388ca029862b573fcbe3824b1515c447706826f6d02c35928d8cf159ea298b622e10819262c99a7f8f081ac8c30adf0f7b215f", 0x62, 0xfc}, {&(0x7f00000002c0)="4c5631a509f351fc7b98dc624543879a2b3b78dd0370c3fd48199df355a71ff47c8cb7be", 0x24}, {&(0x7f0000001600)="34d15465cd1e48c5dc9311f11c27f4db835a25aa0a33c91d72e9ff1720c3a5ce6da912edb659016ca311f972e0d53c7f38e3a35a37681358983be6f701ae16b7698e8f271c90adb7bfbf828b2136ef43e9f4a313e84613989164909078e625bc5539fad2557abc95b79c6e09f39b98e917ba2a19713548cf7b701142a2f1bc492e8e103c3e34043548fe613d5b7d9486361cf22af78c128297ceb5", 0x9b, 0x40}], 0x20400, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x180) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x10000, 0x0) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000001800)) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="75f07065726469720090c4376c65304e2bbf27fea64cfd2c6ce30000003d2ede1572c8362f66696c00000000000000000c44faf45c68f29b61022bf9f86b6469723d2e2f666900893ee640e1665442a2f6b92afa7b5ca9d07f9258ebe25757ac"]) chdir(&(0x7f0000003380)='./file1\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000003200)={&(0x7f0000001880), 0xc, &(0x7f00000018c0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="c8000600f06e03365a5fa73f2a2232421476e9c43861a803d6edaf3341b752abb54b8a9176e91dbc6005364c42ab82c8174dd360bf6ad78522032e0a01bdb1ee9b23ee0b002c29b6b9bd71e76576c07c591a8e1a8dafc2f60db4df91de54effd6f6eb7ea2cf662202fc189d4485cce242310961655d67cc91d744e5bc0ec141dceccf5df2165796628a416f65e4490083f0580bccc3592d0535e02dcecde12657519f40ac8eaa4e13ec32514a8e9445bb21dc24af94d2408ed6ac90ae49372c986b60d065aeb00000000dc000100d8000e0000000c0001006761637400000000b80002000c0003000100de05070000201800020008000000ff070000ffffffff0000000007000000180002000900000001fcffff070000101f0000000900000018000200cc0000000900000002000000b90f0000090000001800020000020000090000000000000006000000ffffffff0c0003000100a6200000000018000200ffffff7f07000000070000005c4f0000f8ffffff18000200050000002d7200000200000000000000ffffffff0c0003000100d802050000000c000600ee3482e7903c521f00003c1001003810030000000c0001006373756d00000000200002001c00010005000000db0c0000000000200600000001010000730000000410060033fd27f858942fd2e3a4e2e0059df3a81949ce7a2bde6d626f0166b072ee46abd9bbcf41f5134e2bce5420903e20ba0eded7cdbb76e6c22f1cc6349e83c7bb815f76124053f4690ae934b3a393438ce9bb283306f7cec54918969fdbf709d4c30cbc36ce4f835bdcb0a1c678b3e2c3024d9675d7638f54a6758ee0c74eb6428829231aa69708e3de56fd174f4009786b56d5cc7fa45036d46848c3bd510852bbf36ebc840cb9eacba27e42e807f2850af4aaf1e730036e0ce0f2fefecec937de46d9b5123d1da26d2b12fc8ed6a1602cc114edfe3708ad81f7eca4f09e7b69488163e553a355d3442604bffd947b22903b0aa619296a51ec8a2ddfa3e4bf9172d6d77b8c6b8510f948656458235c03c5a3035185fa34800ee54819fbd41066dd4cfa87929f408657a7cab38472bde793cfe1a8390afff7e19e98dbd79d457ba631ea31e445578d716da249d877a60926978b875c570a7333185b1e5abafe60813410e9bd55028d68d21ebc1e645956917cff46b9493a5cf0dc2a5e187e4fb9f379ce2b7decbc810b4b9d33f346284fd68c00ced9dc7a152778a39f2760944479aed682b1149da539040666f7bb05889721e9065942324e018f365e7b2b4379616859adc0aa46acb73fb52df150e8ef249e8cc97ecbf9415d70046842cedf4f3222520909f3531e4a8f69b31bcd70501ba5003952fcc375886fc03851c33498475f1f0c9f857998564f650d9eda95db6f714847d2dc85f0a69dbcacea2ca05b21a4ec5bc754273c6f436730aa37272fa993de15071c889866f493c818512c7c281c74bdb7cb0b7607f27486bb47aaa2ecf8193fc097fa10ea96c045e90f06b73d24be84e0f086dc56d7fb3c23f8ada779ca028a159cc365fd6939cf2e0caa04304c4c413ccd98662b45fdba9c39385d98ca4789a164afeb9ed2803bb6bb01aaaf4d9e4121ce4585ff5c2c46336bec7dffa2e1dc7a80d9e6becfa3e25e008fc8945358b855dd9e0effa355af115eee46c7f7dd301050feed2145207d7ba793701947b8336186afd7985a8854a84b474ba607eed1ae5929278693522605231f2c438a6284460be78f1806b2a83f44493f8df251063da3f38679484e64db671273228d243ee0ce6bd11cb99a4b828c8dcc1c3591eb92cf02a9345be757ce25a16fb10c7832b95cefcdbe6ab3915d9473bcb832c28ee7221df80034d2186b7ad91c78c473a6ab45a8f4584ffa19684613cb5a4076447f147195c19ff1f610335f8af37451942a55221b0cc81cbd42ebf43ed411f5854c3bc57a04c421d558e2b4de8f83fb2bcff9f12158411c59b25cc528413bd5fb982b41799e5b7a870132cb6eb10f8b9f327c0e41b9dd8cc246b7562045949a1102903a8feb29016d2d6118e1bf96225b1dcdd10a39be7813c3a4f66afc1a16920fdc9bd7503cfab0b43d90c0f97c8aa0e54cff622c8cfa49e10aabb74e2d90bbc6785ae91e4f642dd483bdaaa7e69f11b0834faac52e763fb5c4563611af57a209da10c9422021dc1a62dcbfef073f9bdee5ee4d389e0e02253f75bc15b146ca2e7dd2783d7fa20555922dbb1cd73f621460bb7348654170f301578d8aa467246f0f364f9115fce54609a13470479c3d99a651e0d828cf9b2e3763081ed18959b1b2ed890fa091350f6e681c5a49cfad5058b1cc6d794bdc1d0284a0d7a9c3bbc3ca09dcb719870668b913024c00bfb5ec1f08985199979d80aed94438b49aa03bf6e20baaf3acbacff0bb876d91d5d6de9af665d4e9e39da666bfb1ab0720c4bfcdb86fddb9fa2ecfc44fa6b79b5b376055619b337d822e1ba1bb8f62db590421bf33bd32cf6e584971d3400aa6e5e6996587598c74fe768cc2ca85a28517b061af7171f0e5abf2e64834707ecae2b828b8b2a823ca74ca2861ad82c7dd3feef4080d74e18bc41326456bb94777368cd6160ceb7eef28e24a9fd1baad6ddd7c0508e734bb96ca1dd80574791aaee248f3dbe052082b607e72d3d6be6a01322e0d9c50863cbf809ec1d0a71415960343b6a17facf3c332eeca822b204f1dd7b7d06e50b2013f91b657f61efd644b4f6f016cbe612bb233f04d7b846e43c2453ec95db5ca384290a8d1df39cdb98a48c4f55e11efd3c7b1eea6c32f909863172212a314fa29f6be3b805b444e34a732efbdb1ee11b1fa13ac8a94ed91e18c97f463a1cefff7ad058460e70f6d9fed7b8b812f01ec9abf92b410a09219d5a5b8e776d3f472838de22bd7a4a38a1bc5e0357e33baaa3068f96e96ddb2318a945cf295c49003e41e7b2907b821a7fe517e253af46b3900dbd4a61ed2fcbae6d733fc0431002b3ae31dfc66074a79a14d7f8e0055b3ac6231d67fe12e3b86297150ec2303a423732a087ae04e92c52caa9c1114fbea88244ac2a5de368cbcc65b6132c08919bc2c96c88780f83e48f88f7feb178be1991842b085b7ae84a9a2cc70be7e37bb4f77279779f9efb0f5b5df00dfe51a3e8df307debfe034e8589e42e3fa76e3e7209064fdc05d0fe089d96810687ac470817374d3dc3e04fb1cf8f763f6b9c78da62b38017b659e963992a04183146c3a1f998e4b85333a2c4721398db781633babdf477a62a5cb2700abaa7b96816c38c85b672b899197554f913b89a00237a398642a96c833e68369cde6ccbd48f65fc380674c96cac248838257559fe46db19e096f341e18f2120760cbbdcc628c8a8c9f395aa9be308decfeb9fee03e71c6a3920e23bcc8169fb9510c2a79a5d5abc8ede8f430db8dd059a36c9891192270cb14e95ee8eb4aefd434fce73748cd7598ac5478122752b3ebb5d50b85f4fec09c30e260888a2c289e588515639a5f8ac47bd7a60a4dcfad1af6e80e0e7c35a17a4d74a69f8f8848fdeea2869a9bf690dbe4c253c743893030a7b11fe0d6cb7671c1052a2ad35c026068476664627729b8595e284ef7ea0cdafcd7de0be1c936726229371c656d08e5d26afd831592530e7390362026d45cc063c2cc8d3a966662bf1aa2abe4d6e58af7c42b4751f148549277d6215c207765f664da2f5f16f6577086ebad7ed92fe770fee3d6cfe55a4c5d9c2444bfaa0be7ac18b2339f56fe0e1a8264324e62bba8b2dfee7c13f81cf60b8b7cba9a7a47294eaeffbf3d35d890e66811fce9fd34cfab2191d386855c70a7e9907dbbe704d6ab67f9ec6948f8af7bc950de1a71cb543935640bdba7ab23ce066141b7c6b3510fa97138663f82fdef83528658df95dac493f9230a66bec5c5101a84d61c440f5950d44624b4b3bc71ad4ad4bf81d228bf279d376cb7648eb4718ae2d95706a42cd806e59c1ec7a0e0f1d8213da8dfc2bafdb7c3262057297940e917504dc5a728b5647467fdb3e37370519430075e3629742b4751ab18dad692f6e1b0e0f3de815abbe40ede98748c94f33cbff35a090538e8ef9c99358fe6bc0c1fe8ab215020feb5643a0a913a94d7fec910e7aab79227af349fd71f5a75460cf6c9a3b24ce43b7ff0b3b6918121a154b0a01ee4150f1a6b47b69df859f832ffdcbf3180b72700c17540372366e0dc07a86fcdee65a169335b78f3d598e9d6720f0fa85eca0e3715a27da24a3d31f2c329585680045e3a22170e120770e6e4b42d14293939465d2512457a31d2ae24f905cec6f0780b40881d13994c5f10e9c07126726d88fdcbad91362d54947014fa150e01f65e29413ca14426e3427786fb25f1ebc3d6aac80b33f9c79ba49d20df789f994bb349ae50ff6af7d897a6c738941e603706e748550112c81ddadf01bdca3eb2405b25e8be1d5c3797f1d2b4e2eb27cccd56e1e443c9b8d20b98b91dd8718cf090f3bb1d81cbf78e1905cbcaf8249e6ca80e7a5fb5eacb0639de7418f2f0ccae2da9100f83d0e2fc0a24f9f8c2b0d01883da79ea4aca5dacf469e0e4e07eb6ee18f1b50bd7905b9b8481020421c7527bb59a7d549cd2b17702f01a4d08c172ca5010aafcb4299b9a9955c9aeac5da4a07fceb35df95f4ce7a3eed9f8e09d2a48f9e45bd730ab97a2ebd9bb3ea1b4ecd39c9bdf042df1660c49c82861c8dae3f2c7a6bd61d68838e150239ad256b1dbc15306089b7aa3e0c624d2c6c90d530587c5886aa3eb1699b78c60b5b7a5b694e4a8a4031ef574b31db44a44f09bf715f088f72d857fc1b97656d14c6ae3962144576c342ccd5a3c23d777e2abd62093068e875398a76ae90ffc85d8a23529bf5197b9a91f91e8c9ab718c751c5f282cfda2d182a5a60796e4e010706bf9a2d1c08caf03cbf392af7a7096b8ed3482a42a21891361d9e663933cda25ec03c829d73f38ef6b6f119bedd5185801ce31aefd3347c22d883ca9d0d177362643d1642416344c29ed67df2c1cbaf71d5e4d7c88b58fe91ea4affc45419b20d8d49fcfab0020e51c4d71e3bb08cbb5c3e61181da383d05125fa5e53ca4329e9b71d78341bdd5ded204542a821f81155dfcae075cc6b2402ab288b6e7360ab67bf7217c3fc00be590b63191cb893b85aebd737c855db4e58b3b090e007dc4340462c16a837886c2da17b6ef0e0bc7e6467ff29817a380ae70cd128120664ffeddd0c70b56dd38505fcba03185b49aa5b81ad5c30b05e167fa1efce0a2431753adb07d8963038a19d7a7b8cfb3bec0112e353755111bb298c2e950c9466b434b9ad85b4e7281036d572b91b96f2bf5f8fe5e8fb8bacbfa567037679fb4f2a0e351266d9e560bada677185443e3ae468f2917108092cd2743cffacf64ea5015b2b9ce2f65ff632e7934e9025cf1af218001578a8ee79cb62bbcada90c683c0acfd68a398d3674b691a1e5111ce72cbf80a75de3a1d35167d292fb9fefc3d8e830c2bba14f872b79103a8aff6f59d50f039719226a76241be3153c4ed37ca4457a2762a94718213cb8127da21557c9a626fcdf45b4312935e8996350973f32a59a3df75bb3ec1dab1c2813add8a6f22d180b31d54ed0de48db3c756558bee569524a6eafb96bb008ff5d6fd21994ec8708eea5c66d115b31109999602f26850a2af5c4577bac7e4fde661d2674a1be4def21ba6b62dcfad59b15c114a1b6f404982d271de05073751ae8590112114068bd4279526a41278e524d7eae3824f31fb188cbe8d00d42d1f33761aa49d5810802e73c735a87887790521a4d9599ccd50d83c98062ce208b219bce4896e281950c9e083837c07e37e31ade8fe1ee5e63e6c478c207b8089d91bffadbcb0b7dcf068e10372a04161497b4ea8745b0f5f6e8d737e8cd6a96093830861f09db485a086138e4837f56264f18b862deba89674297d4628771070808ecee8dd3b7c1480397ebffb7799f5ed6cfb0ca950fb1a9a9102dae140fdcc4d8926d0630e2fa6b180fbeeb34161f95943b667dd39759208c6ab00f49e6981e0c274f886f3bed6b50a9e75d6e1f2d2cc0ac789e46dbf0bc2bbfe9c6c23f154a3467b5f39a565199bcb203eb29e531db6f39e439a3552994156dbf03b66ecc4166f9064e62f6e4054de7bf21faecbfdb93dd882bf0b419cca3db428ae5db8af5cebbe4d4bcc18ec4d36b13823a2ec977fc59036efc888264e6320ba68f436d25affc6e21729034ed8cfed4f854d5e04c6d8c8e5fc61b213089d5be76378d33904881b74678f5d175f83f62c5d06a20c2c6e5da938846e61830929ac61bf835e8c73429d5490b79090f9f7a7536d8d9d99b048bdd51aba0f10abe383b87e2f3af9860ce20236b1fb440c2329724382abfd914e04083d52774927bb805045553d8a811dd7cd49c3d7f1d6cb06541731b80b70000fc000100f8001d0000000c000100766c616e000000000c0002000800040000000000d80006005a5144390809c85c943797a187f086aacc0eb27fc0a4e42b62bc56d9ee3038de0bfecd90dd3183bb342d1411a0dcdbff5a3674e7000efb123e3bcd793c9e41b004fcccaf0208ee5e47a467dfb1260b8fd0868bb1c526f2fb89f4d3aea3e35f565a157f3df040a7608475e8b7d1c0722daaa74566b0e67658e7a50697a6d484cf36d83547242317c54818fdbf04c3e263ce4cdf44cadff9c1c0c593f1f6415e942e707509dbf2b638cbd2869a2f1803a6c30bc3a76e5fcd8761822e3e766a9895e057e8cf7aa6801af6623f9ef78b6382e714d1190000ac000100a8000c0000000c0001006373756d00000000200002001c000100030000004e0c000003000000000100003f0000001400000074000600a5fd4a9e89e9e41f9448bc15e9eaa019069ef060f5e3b119f50aa94773656083f3b1fdf0acebd8b3a21697d3766e836c9f5bde9527b16a9c34cb7d13ad2fac042b88ca71625251b8e370ad5bfba5fc4bba4f4ad7bd6b2dc7d72409e47c29e68dc1826adcdd4a82d9f5e6b2d9040000000000"], 0x15f4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000003280)={&(0x7f0000000180)='./file0\x00', r0}, 0x10) [ 957.783481] binder: 14085:14087 ioctl 40046207 0 returned -16 [ 957.815170] binder: BINDER_SET_CONTEXT_MGR already set [ 957.820619] binder: 14096:14100 ioctl 40046207 0 returned -16 [ 957.853102] binder_alloc: 14085: binder_alloc_buf, no vma [ 957.885547] binder: 14096:14100 got reply transaction with no transaction stack 03:41:09 executing program 2: socket$netlink(0x10, 0x3, 0x9) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffff0000, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x4000000]}}], 0x0, 0x0, 0x0}) [ 957.930824] overlayfs: unrecognized mount option "uðperdir" or missing value [ 957.963511] binder: undelivered TRANSACTION_COMPLETE 03:41:09 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 957.987595] overlayfs: unrecognized mount option "uðperdir" or missing value [ 958.067843] binder: 14123:14126 got transaction with invalid offset (67108864, min 0 max 24) or object. [ 958.091316] binder: BINDER_SET_CONTEXT_MGR already set [ 958.103980] binder: send failed reply for transaction 4452 to 14123:14126 03:41:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x7400000000000000]}}], 0x0, 0x0, 0x0}) 03:41:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) 03:41:09 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cgroup\x00') getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x5247646f, 0x8001}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x7}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={r1, 0xc95, 0x8, 0x1, 0x8, 0x1, 0x1, 0x2, {r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x1f, 0x1, 0x0, 0x6, 0x9}}, &(0x7f0000000280)=0xb0) unlinkat(r0, &(0x7f00000002c0)='./file2\x00', 0x200) [ 958.129186] binder: 14129:14130 ioctl 40046207 0 returned -16 [ 958.146302] binder: BINDER_SET_CONTEXT_MGR already set [ 958.186752] binder: 14123:14126 ioctl 40046207 0 returned -16 [ 958.192863] binder: BINDER_SET_CONTEXT_MGR already set [ 958.219363] binder: 14129:14132 ioctl 40046207 0 returned -16 [ 958.235738] binder: 14136:14142 got transaction with invalid offset (8358680908399640576, min 0 max 24) or object. 03:41:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) write$P9_RREMOVE(r0, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f0000000100)=""/165) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/13, 0xd, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r1, 0x4) 03:41:10 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x5]}}], 0x0, 0x0, 0x0}) [ 958.314229] binder: undelivered TRANSACTION_COMPLETE [ 958.320793] overlayfs: filesystem on './file0' not supported as upperdir [ 958.350515] binder: undelivered TRANSACTION_COMPLETE [ 958.430636] binder: BINDER_SET_CONTEXT_MGR already set [ 958.448747] binder: 14155:14157 ioctl 40046207 0 returned -16 [ 958.464727] binder: release 14149:14152 transaction 4462 in, still active 03:41:10 executing program 1: r0 = accept(0xffffffffffffff9c, &(0x7f0000001480)=@ipx, &(0x7f00000002c0)=0xffffffffffffff91) r1 = syz_open_dev$rtc(&(0x7f0000001540)='/dev/rtc#\x00', 0x1, 0x40) splice(r0, &(0x7f0000001500), r1, &(0x7f0000001580), 0x0, 0x9) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x0, 0x0) mkdir(&(0x7f00000015c0)='./file1\x00', 0x20) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000001600)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f00000016c0)={r3, &(0x7f0000001640)=""/103}) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000380)=ANY=[@ANYBLOB="001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00') bind$unix(r4, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) chdir(&(0x7f0000000340)='./file0\x00') lookup_dcookie(0x7, &(0x7f00000013c0)=""/151, 0x14) bind$unix(r4, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:41:10 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x4, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005ac0)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) 03:41:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1000000000000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil) r1 = shmget(0x0, 0x3000, 0x1, &(0x7f0000ffa000/0x3000)=nil) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4, 0x101080) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000080)={0x5c, @broadcast, 0x4e22, 0x3, 'dh\x00', 0x23, 0x2, 0x5f}, 0x2c) shmctl$SHM_INFO(r1, 0xf, &(0x7f00000000c0)=""/165) 03:41:10 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 958.587219] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:41:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x400000) renameat2(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:10 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x1) 03:41:10 executing program 2: r0 = memfd_create(&(0x7f0000000000)="2c766d6e6574302c656d3163707573657491212d29266367726f75702a76626f786e6574303a2500", 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x81, 0x1000}, {0x8, 0x7f}, {0x5, 0x8}, {0x5, 0xfffffffffffffff8}, {0x2, 0x5}, {0xff, 0xffffffff}]}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000100)={0x7, 0x2, @raw_data=[0x8, 0x0, 0x1, 0xfffffffffffff0ab, 0x40, 0xff, 0x7, 0xffffffff, 0xffff, 0x8000, 0xffffffffffff0000, 0x7, 0x8, 0xc000000000000, 0x10001, 0x4]}) socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x10001, 0x1ff, 0xfffffffffffffffd, 0xc74, 0x1, 0x1}, 0xa8}, 0xa) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x0}, {}, {}, {}, {}]}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x86, "426e96fea83f3efd1b7805bc958a2316fbaa6137c5f1bc5a7216c37ebfd40f19ade8b0239c3e2d1a0128172e86c7f14bfb8a33185f25fcf593e10d88dfe62f4481f19678065372b41bfb5c3f6c166982a0c8b04c56c09bc77cb93bcdf7f086fed38191447759acc22b370a049ee4de50812bccf0280510c8e6f9194d10b3275f90b2d974e3c9"}, &(0x7f0000000300)=0x8e) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={r2, 0xa7b}, 0x8) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000200)={r1, 0x2}) [ 958.675963] overlayfs: filesystem on './file0' not supported as upperdir 03:41:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) ioctl(r0, 0xb66, &(0x7f0000000000)="ffab2a6add04fff123986e0996bd84da4abb007ce2ebc7b0af44b2ff3f58a7b41dae074ccf1e5aea98079e3c") 03:41:10 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) r0 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0xdda, 0x80) utimensat(r0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:41:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmget$private(0x0, 0x4000, 0x54000104, &(0x7f0000ff9000/0x4000)=nil) r1 = shmget(0x2, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xf, &(0x7f0000000000)=""/165) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={r0}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x1, 0x6, 0x3, 0x0, 0x4, 0x4, 0x8, {0x0, @in6={{0xa, 0x4e24, 0xbaa8, @ipv4={[], [], @broadcast}, 0x9}}, 0x461, 0x463, 0x1, 0xf79, 0x8}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r3}, 0x8) [ 958.853345] overlayfs: filesystem on './file0' not supported as upperdir [ 959.077784] overlayfs: filesystem on './file0' not supported as upperdir [ 959.217180] binder_alloc_mmap_handler: 12 callbacks suppressed [ 959.217197] binder_alloc: binder_alloc_mmap_handler: 14155 20001000-20004000 already mapped failed -16 [ 959.233188] binder: BINDER_SET_CONTEXT_MGR already set [ 959.238699] binder: 14155:14160 ioctl 40046207 0 returned -16 [ 959.245489] binder: undelivered TRANSACTION_COMPLETE [ 959.251797] binder_alloc: binder_alloc_mmap_handler: 14167 20001000-20004000 already mapped failed -16 [ 959.261896] binder: BINDER_SET_CONTEXT_MGR already set 03:41:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0xa]}}], 0x0, 0x0, 0x0}) 03:41:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200, 0x1) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 959.268023] binder: 14167:14173 ioctl 40046207 0 returned -16 [ 959.268091] binder: release 14155:14204 transaction 4466 out, still active [ 959.290269] binder: undelivered TRANSACTION_COMPLETE [ 959.296288] binder: release 14167:14173 transaction 4466 in, still active [ 959.304510] binder: send failed reply for transaction 4466, target dead [ 959.345986] binder_alloc: binder_alloc_mmap_handler: 14208 20001000-20004000 already mapped failed -16 [ 959.358234] binder: BINDER_SET_CONTEXT_MGR already set [ 959.364968] binder: 14208:14211 ioctl 40046207 0 returned -16 [ 959.371901] binder_alloc: 14208: binder_alloc_buf, no vma 03:41:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x18, 0x2f, 0x829, 0x0, 0x0, {0x2}, [@generic="99"]}, 0x18}}, 0x0) 03:41:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1500) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:11 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000080)='./file1\x00', 0x0, 0x18}, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:41:11 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x109000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8000) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) fsetxattr$security_smack_entry(r2, &(0x7f0000000180)='security.SMACK64MMAP\x00', &(0x7f00000001c0)='/dev/rtc0\x00', 0xa, 0x1) 03:41:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x1400000000000000]}}], 0x0, 0x0, 0x0}) [ 959.395148] binder: undelivered TRANSACTION_COMPLETE 03:41:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x3}], 0x1000, 0x0, &(0x7f0000000580)="43289d81be2346c074ba167730ba7ea6d51de4fafd8d49d3be9eab26cf95acc58221d5bb9cbd400a29e0fbdf3b3e4490ebe08c97ccca3a1dfd01e84660d23d745798a99eebb5f60d72ace5bf9fdfd3400cfc2f5e4db5a82295ace8b6222de957fc8d8ce65787f810a0a573199aa20a339b0686a200b9eba7b1eebb410ecb95f6d3f4bcad25d67efe96b03855d1c5f024191b0a11b91201564852699709975ce62cf3898d931db1b6e9b0b2c3160bc7da7b9e310b34764b695e190746375294be806106ed97d909ff709dccbda93f6654da3d133801ba10c168bbe208f2d2856d98ff75ad68278bccf4dca2175b88d144de30d24c3388f49ac0b830c27c575dbb5a23e7e1a0390a77fb4c37a33a8cd173ae2605ecb3146f74ed5000da6b36437c1743a31aa9c45c426880603ad975cb4db1f6de61585c59b74362cfe3422e523d6a39e8d62e59775e88eb971e1d4611a97c4e33b6e902c7795ef82045cb2ff1726532eaa4fa38c222317c4e6361bf98dda6f038fe2cd87dc0ac5ae3bcca498061df4ca30c5a2c20748aa3dcd96387c6ef325b76ef026a98de8e96b550ad5895205c88e2c0e5591669c7a6c8d456298ae5d42e6cc00479f16501fd3b8ce64f8d804f69788b662a4dc642d61cca8ecf94adf0c478d0e57b04413bca97065e9ca25118e36ad01eb8e22c54216a61892cf3e071cf7f5da2d841bdaa7982846b991be3be783849ed727c309d07fe5fbdcbce2804c2e0772f9f2dc658f144c8c4dc67cf2e4073a24e6d305c389b583a583a92e08fec20125c00763f549232dfbd77b1dbfe174b4370935e4dbae1a4f6ae967a4331ce9358a70854bc819a186b510fa554d219cff2d92fc33b34757050004ad6c68f4a2ce832440b81c1dda21ef90d851aff7cabd4bb6ce2a6a0a8391ffb0fda6c416be370d695491e7573e93caca1fb1d88dbf962a5f9780b8b7456542f8099a11c8ce62f758d7cab16af5ceb013f8187736015c447fc89920a7516d52ff0832987d60c784551d2ffb5fe182a9524c667a2ad729da6647a9bf2742068cb4ec1bc6c22f423e21f0f2b7fbeb974f9e5131fd3fb5d137a538e2b6e5d3c989033749681ef836cbf39dcdb49a54e35b251894f890bb07850399e9d6425afed082b30420c4178755c5e2e99171aa44b0ddea82ae0059a893ae7cc6a1bf6aa8d678ebc8f0cd1647ecc642e1e06eaa3204e0c51d46719b03492b2805009b93e52f82283537bd706830649a4b08c354fdb8643c7ee0a3365d6ad8e86740121187c94c45a3611ddde0331142326096f8b7b4d4d4c45a62a4212c94ef3d1090d920782bd4a776cbc92e2646c72d704abb9218420f3ffd30730e16738b0ad286413beaa9a1d2877ab5e419cc4bc36ecee32e11fb05262752be266a565c55da391d87cb15c14f9c2189d74073f420931a7c4cec0616e1d454ee2d97df988d6d148920f9e83cbe74e40bb618c6cb99028aaea23e81db4c4fff97bea970dff1eb26670dc0546ff7a1301db96f3557ada68fb2c0d8aab7c48257711972d3f8b83bb827b2d7800be19fa5f623c617ba577e49d7b162783717a07441a51f14895cc26044961eb1d3455974790e0d3bf78d8424d82032e60f2b193ef7955f136a6dc4ce46fa816192357db2b45c1d623ceda063301d5f345a0594e5c204e978f62de07ad663a11c7907e143983ea1a1e0a756c2279e31627121c913cae6b1228a7a64c74fbb96c5be7824900ef622673b9718bcb830ccc2fb41ca4238019ae7f6b5dde250e2df1fa1c94ce599bb8fcef843bd08ccd841dad7a9cd5bb7a426e804acd7d88fcf44f5a028ba92c7e5866f9a59f862e33934f1f0b3e476304025d15ffc4063f7f19146b473b9a0c72c03b690cb41dca910601cbaea128859e81fa6ef16d4f8963f85c4b68e86a1a9bf4b63d6a0b4175f774138b2091145772dd90efa714d421360b499b19f3698bb1d98acd23de717439fcb3756cbd6047bfe119725ddcfef13b8a2e5fa2fff20c64d6b420d0bef7f0307d86be43035c75b47fa9a28ee9d1b1c16963afd4ad2ab3dbecb3c5ae69c8abcdb546639cf897c46d159c9b6e132fab747106997a8df498bfb4b5b6d933db9c5082fd3449f2b6afd69df1ace8bb93a34817d12666c6fa8227b22ed2a575cd6aa15b7b3d3fc2be106c6406efc18e4863934f426825e659679edfaee0574f7836aa81154259d693d90de69017a7cd039aecde2e6c4883eaa6a5a1c71a4becb238219fca67cdbd677d73172601c6af45f547436215c571bac5faa6c03c77221414572459ca68ad364cf318ed3f133c53d38495f8de736ed2cfb8ff4a4a7fcfbebe441e29fd5f19ece57548e68aecd545e1513e42b3f080bf3bddb336944dc5d82afec636aaa7c87603a391153fa38b40721ea97d44d73e63bfb215fb4e1a72864dc7e9ecd529dcf14404cc354891d46e110db9d27ab8333f27a441d41573b161b2aea3d1f84a0e7c6dedb1eb5b9325184b44669b218b241dfc70acc0bf87eeee95783b5c7280b5221bd1be4291b0ad2234a4b3230cbc53fc41fa878311652db0c147aa765585b72207d3b0085687a4c374f016dcfcc5a3d6833b34594a89329986a6b80ee289eca66ac0532033772a11c0661299e6fb9c1702366f07aa3c973c127a65f0dcb29a2c340868260b0af4aa1108a77e5c5612d9b5a55a1292de9a6a8767d4b5031cbbd2d6d21615490e860f3ed859897139fa255fa6b1b2f23e0aa0d6e7520af15518065dbdd72227029c4f3c225a129e9211e211f75ace7f4be50037e731359dd6eb95d69d4204a263ee93bd58118505c89368a31e8f9a59260348a80dc02f3f38197bff08beb331f272a29d3ddc0274f83c1ae044a1d1bb198a1649c8cb24df25e799d17b194f4ea858a0b0fedceb311fab68fd088484f0fa7859f0e9ea16bf0453186a579722f22595d925334d43f1e2794fe2bc8866e18a634013f6ed4a26ef7b52ad202de041051dd6e19e78df75a9836fcd1def25c6a84494b31ce150d9a9b9ac83673d5ec83885fad062bdce15c30b01cb14b7497e5a832b54921de9d833e9ebe79b3571b95fe23456669541fd86076177779a306035c1be31dda2c0572ea0779877ccb278a283ffe8194a68cf620fde01047e14994a16b0a7607c257b4cc95ed62ae499e2bb9fb885cde00fa80ba8ba4ed5e78d847221acd8db820ee51eb578deec0419872f6ce599e6507420c0f75558b23f5300f7ca9ca1637386aa3c6e40be7259e175475afd34f24610fb1d88a74ce7776869c12fa56799eab2150e11f06dca3dcc16c5698a66aabc65cef3447bbcab2bad96a3864787c804468d005fe73c94a7e4f907a3af8579910ed54a0d77c359e0ec6730f3b24f1dfaea602bcc9e408c5f80d573cb7938663fee0c2ca6fba70aea4ec4f6e947417ad81253cce513d47b1c0ed0221ef71b6b6e1aae7b0a6c271bf47ffbecf969db0f7578caea2d7122ca97cda78b478225437789bbf345a2ae077e77ef0fde967a4d09261a698f44e66a2a8a1e8ef527b94edfd87c8d257e03303c76787d2626205a82e42c63dd7f8d65ea319b0a8260853165f348df43151f8f9ef75891cf42cdecf141c938c6551330d567559d4706bffc751219bb1f80381841d92c5a4792e46527e3e7e6b35e448feb1acc5754ecfe781fef7ba876b40efd6497f3190e119827d9fb9de86e43847b5f5d9f0845248464cb783eca1a402bde6563fe841dec78519e7133bde4def3dda92f95c0d0a4b02c082b0a0b93c9a6c510507b4eccbc62237cfff2604510523f2cdc735acf0e7a8fbdcaf5cd1cc8cf5de2fe98346332ed09b5940a29ceb78c54fc368518c2da0754efeb214e5afa8f11ef5e76ec1ffb9e0694503375a0c809eb6646b0740aaef8371b1fe9266b5a589eb4a9e4a2ba4abad737b70c65790d1939a2f5d65bb27d8db69b806b33c555f727954b675cc9b33d27f1bd21e957dc8cec421799dc90b85c1854c1a3d817c85991446fb26c4eef673b21f05ee21af5aa1cb22495cb13cd5fc574cfef90a101342c1c708ced042dc88187040e312155a01217ebc65fffa7f8e89bfabb943dc7f6c4ce60556aa4e687f8eb75b5ad0ad9b385bfdbab598151dfbe61998ebc6530c56a4612f1c566383e9ade1d3a1bfb0194e4922615e4d833661e884bf236dc01bc7eecc27ffaa156d67ed54bca54b5585c7742dc053be3e8ac7f178bdf17a191116d41646778ca11f7023f4f16eded9b87ee91c5d142655861def4a17dd97048d2f43a2a3d99bb4b29d1496feccf393fd575ac84cb0399d5b528f1e63316d2a0280eb99de1cfc48d8c032e666a98a5e71f8ff53dd6afdfeef7b5b1acb1678c05e30b63312677720b05663f6f2b321cfe32841b63fda794073d47149e7e84611e26e6932ba1bbf23327e1a9a133cd0f2e661f5db77b0f4e8a5e2e74d0e4524640e53f096f7c96a2cd94e92a653382ea50f7cb2b24fd9c7064e2fd0a0431d52d42f1f45eec36f2eb65b706a14880411ba9bfb185126a46b265b15d8a59c6b1d00afff87b854023f5705b401925346179607d1bdb8bcbc41e26bba2f71415e595e137c2db406023285b394af14b49c4f6946ebb9dd624381d7a3d002e495baab79360973e0d139efec87cdedde701c2e9c387ffd0ae850ca836dbe69c3e3d0897089db87444b92e3587de6bbdfb1001cd5ef525453eb5a3aacce27cee50b4c59334f80fed6c2af6aa7df58b06e421522f95f1495214a631266a4221852995968c759ce62d0005b8f24ede75ff2003f7927b57c9dc6a86543880eac26114d4f9220656fc6ac51444c28cb150eb96b93b2ed32c2756a24b0d4efee5e9aace3d4a4a43e23c3add904c8bd89f04ee69e74bcbd85fa419f3b749c04a2b2cd691d922434fd5db2211006f737ae63962998be706701c16e442e53fcbed59f63ad5ba722970254c7c31f570aba61ea617adc120be4866f69d8699e17507199be37f07aef4bbffb4ce8e9c8b715c151c1e686557ab4c78f2bd54f1ecd165e6042ad01dddc4a64274c24fa826637eb5b1326693f261f480df947a809c17e107f6f79c12b192dfcc3789acb780b5a2ce21cb043ea2601a228ad5beae904f0c5bea2c84bd929a02892b748fae627d4f3c8b9072f8cfd662eb486bf9039f8da776d05c3237d598bb891167bd3a4be2c5831829ccad79e042954b394174f333b94163fc9cfd454112de90597d1abe1853642458d6005a487cc8fea038852453c91fb4a36ced496af2bef3cfbbafaa7de72bd5cd0a5ee851aa6f33939d204ef9d2a95b0a46ecd128ebb0268661d8870c5fd7845c6d57a4c3213b50707acd66d48ea429aa4882ef62b03dc5e2d37984472c0ebbe464c12258b46d84c638d44ef022b9a075e4193561aa44f478fe77e75d2da5002a5f32973e42c11eff8d14c74d1e20acc5474c28d498b65b20f59da9f7512bf84140610946009a690eaee5d4fbf2a2fc6b26aef636c1b16197e85dad58cceb39d12e47a75622025ad9f99b56985835d8cace7a90d8731a5f8d242738266c1334cc6c3405348ee0ce4f1d61e517c4417169dd9140add95182b763381e70294548471eee2ddb325c31a500ae40295a75e94dee6c8dcfe563f5ffa6f07773323e1ed5a66480c4c1bb9b5e560fe82a67aa8de9a10381efa7a6daf8a7e2e3daab2294f2c3811ba5551306c9d16e2686f248825299b7a1e8a55e752e01c6593f7493939292944ec7c25556b99a1d39cf7259e54cbd8605722e909096c6a848c9d65c1b3a01cc1fa6"}) [ 959.496138] binder: BINDER_SET_CONTEXT_MGR already set [ 959.506492] binder_transaction: 7 callbacks suppressed [ 959.506502] binder: 14214:14229 got reply transaction with no transaction stack [ 959.512680] binder: 14222:14226 ioctl 40046207 0 returned -16 [ 959.546707] binder_alloc: binder_alloc_mmap_handler: 14214 20001000-20004000 already mapped failed -16 [ 959.558307] binder: release 14214:14221 transaction 4474 in, still active 03:41:11 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c000a1e6fab89cdb738094aab41cd26da4cc138951bad548c78035f2c7119f14a17a3c8b5d7dc677617ae72ce956002a82ed553fe3da0a3336034cd1a5c78e9580cd443e8b9b2d3c2f1"]) chdir(&(0x7f0000000340)='./file0\x00') mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) 03:41:11 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x4d, 0x5, 0xfffffffffffffffe, "46d5ee5e41985ee36a2a8d6561daebf6c9fb4bd5515feb2de0abebd32d83b9805c6783ed7571a56ec9961bc8fe03e5eb28d3447a2465c96e55414e6496e5c0283390ef7f93f716b79897f9ee00"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2287, &(0x7f0000000200)) 03:41:11 executing program 2: socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x600) set_thread_area(&(0x7f0000000080)={0x600000, 0x20000000, 0x4000, 0x3, 0xab7, 0x0, 0x1, 0x0, 0x3, 0x2}) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r1, 0xf, &(0x7f0000000180)=""/165) r2 = getpgid(0x0) ptrace(0x4219, r2) ptrace$cont(0x20, r2, 0x3, 0x7) [ 959.591594] binder: 14222:14235 got reply transaction with no transaction stack 03:41:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r1, &(0x7f0000000080)="7b7f2d5bc549e26e41fa5f0ce28a8becd8e08a4a06af63b9b0226f724e214ee1a07d2f61bb50b6aa05"}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x0, r2}, 0x68) [ 959.718501] binder: 14238:14244 got reply transaction with no transaction stack 03:41:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 959.856489] overlayfs: filesystem on './file0' not supported as upperdir 03:41:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x7) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r1 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffb000/0x1000)=nil) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x2000, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000040)="956e81dd77cabbae0072275b3f1e3fbfcdd1", &(0x7f0000000180)=""/107}, 0x18) shmctl$SHM_INFO(r1, 0xf, &(0x7f00000000c0)=""/165) 03:41:11 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chdir(&(0x7f0000000340)='./file0\x00') ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, r1, 0x0, 0x7, &(0x7f0000000180)='workdir'}, 0x30) mknod$loop(&(0x7f00000001c0)='./file1\x00', 0x2900, 0x1) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000240)={@local, 0x0}, &(0x7f0000000280)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000002c0)={@ipv4={[], [], @multicast2}, r2}, 0x14) 03:41:11 executing program 5: ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f00000002c0)={0x1, 0x1800, "60f5a3f6efd4174105cd433cb6f71a40516eb81045434c8d", {0x100, 0x6}, 0x1f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000000200)=@random={'os2.', "2d2d29b92665746830626465767573657276626f786e6574304000"}, &(0x7f0000000240)=""/6, 0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000300)={0x81, 0x29b, 0x8000, 0x3ffc0000, 0x0, 0xfffffffffffffff7, 0x6}, 0xc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000100)={0xd, 0x5, {0x53, 0xfffffffffffffffe, 0x9, {0x3, 0xc15}, {0x2, 0x97}, @const={0x6, {0x80000001, 0x9, 0x0, 0x8}}}, {0x52, 0x40, 0x70ad, {0x0, 0x2}, {0xf744, 0x964}, @ramp={0xfffffffffffffffc, 0x3a, {0x5, 0xffffffffffff3fde, 0x6a, 0x8}}}}) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) write$binfmt_misc(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="48e9d64dae771fafdf7769af97e4f9a5e89cc9a2d331fa4baa35b3eacde018ce89d2f7456038c50117a4554fdc77ab8ccb047e2e36d8f14cd220"], 0x1200e) [ 960.132196] overlayfs: filesystem on './file0' not supported as upperdir [ 960.277150] binder_alloc: binder_alloc_mmap_handler: 14222 20001000-20004000 already mapped failed -16 [ 960.296253] binder: BINDER_SET_CONTEXT_MGR already set [ 960.322652] binder: 14222:14235 ioctl 40046207 0 returned -16 [ 960.324451] binder_alloc: binder_alloc_mmap_handler: 14238 20001000-20004000 already mapped failed -16 [ 960.339992] binder: undelivered TRANSACTION_COMPLETE 03:41:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x7a]}}], 0x0, 0x0, 0x0}) 03:41:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f0000000000)=""/134) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) write$P9_RREAD(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x15) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 03:41:12 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4180, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xf) r1 = socket(0x11, 0x2000000000a, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8000) bind(r1, &(0x7f00005a2000)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) [ 960.380218] binder: 14238:14244 got reply transaction with no transaction stack [ 960.388121] binder: release 14222:14278 transaction 4478 out, still active [ 960.420083] binder: release 14238:14239 transaction 4478 in, still active 03:41:12 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:12 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000001680)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) [ 960.434212] binder: send failed reply for transaction 4478, target dead [ 960.498084] binder_transaction: 1 callbacks suppressed [ 960.498097] binder: 14289:14291 got transaction with invalid offset (122, min 0 max 24) or object. [ 960.509502] Unknown ioctl 8706 03:41:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:12 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x200000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000), 0x0, &(0x7f0000000600)=ANY=[]}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000180)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r0, 0x0, 0x12, &(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r5, r1, 0x0, 0x12, &(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', r6}, 0x30) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffff9c, 0x4008af21, &(0x7f00000002c0)={0x3, r2}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ppoll(&(0x7f0000000080)=[{r7, 0x80}, {r7, 0x80}, {r7}, {r1, 0x4}], 0x4, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={0x9}, 0x8) [ 960.540783] Unknown ioctl 8706 [ 960.554904] binder: BINDER_SET_CONTEXT_MGR already set [ 960.560220] binder: 14295:14297 ioctl 40046207 0 returned -16 [ 960.574857] binder_send_failed_reply: 4 callbacks suppressed [ 960.574870] binder: send failed reply for transaction 4481 to 14289:14291 [ 960.608592] binder_alloc: binder_alloc_mmap_handler: 14289 20001000-20004000 already mapped failed -16 [ 960.634767] binder: BINDER_SET_CONTEXT_MGR already set [ 960.640299] binder_alloc: 14289: binder_alloc_buf, no vma [ 960.650470] binder: 14295:14303 got reply transaction with no transaction stack 03:41:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000000000000000002000010000003e0f0446376e00000000"], 0x1a}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000001cb, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) [ 960.662906] binder: 14289:14300 ioctl 40046207 0 returned -16 [ 960.683763] binder: 14289:14291 got reply transaction with no transaction stack 03:41:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x3f00000000000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000400000000000"]) restart_syscall() ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) 03:41:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x400000000000000]}}], 0x0, 0x0, 0x0}) 03:41:12 executing program 1: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r1, r2}, &(0x7f0000000140)=""/107, 0x385, &(0x7f0000000280)={&(0x7f00000001c0)={'sm3-generic\x00'}, &(0x7f0000000000)}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x800, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000002c0)={{0x89, @empty, 0x4e21, 0x0, 'sed\x00', 0x4, 0x4, 0x5b}, {@local, 0x4e22, 0x2003, 0xfff, 0x801, 0x2}}, 0x44) 03:41:12 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = mq_open(&(0x7f0000000000)="df7d76626f786e6574306b657972696e6700", 0x840, 0x80, &(0x7f0000000040)={0x7f1, 0x100, 0x3, 0x6, 0xe3ed, 0x1000, 0xc9bf, 0xfffffffffffffffc}) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:41:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x8125001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r0, r0, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x6) syz_open_pts(r0, 0x8000) [ 960.877921] binder: 14318:14320 got transaction with invalid offset (288230376151711744, min 0 max 24) or object. [ 960.944516] binder: send failed reply for transaction 4487 to 14318:14320 [ 960.977015] binder_alloc: binder_alloc_mmap_handler: 14318 20001000-20004000 already mapped failed -16 [ 960.999126] binder: BINDER_SET_CONTEXT_MGR already set [ 961.013564] binder: 14318:14320 ioctl 40046207 0 returned -16 [ 961.027332] binder_alloc: 14318: binder_alloc_buf, no vma [ 961.039848] binder_release_work: 38 callbacks suppressed 03:41:12 executing program 1: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0xffffffffffff4836, 0x82) r0 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x1) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000140)=@xdp, 0x80, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/114, 0x72}, {&(0x7f00000000c0)=""/48, 0x30}], 0x2, &(0x7f00000013c0)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000015c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='/dev/loop#\x00', r0}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x400000000000224, 0x0) socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0) [ 961.039854] binder: undelivered TRANSACTION_ERROR: 29201 [ 961.064220] binder: undelivered TRANSACTION_ERROR: 29190 [ 961.098416] binder: undelivered TRANSACTION_ERROR: 29189 03:41:13 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x100000001, 0x101400) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2c, 0x3, 0x0, {0x4, 0xb, 0x0, 'keyringem1)'}}, 0x2c) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x5}, &(0x7f0000000140)=0x8) 03:41:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x3000000]}}], 0x0, 0x0, 0x0}) 03:41:13 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe0, 0xfc74}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r0, r0}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f0000000280)={&(0x7f00000001c0)={'sha384\x00'}, &(0x7f0000000240)}) 03:41:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x6000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 961.348574] binder_alloc: binder_alloc_mmap_handler: 14295 20001000-20004000 already mapped failed -16 [ 961.362339] binder: undelivered TRANSACTION_ERROR: 29201 03:41:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x2, 0x209e20, 0x8000000001, 0x1}, 0x3c7) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x100, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0xffffffffffff75ad, 0x7, 0x7fffffff, 0x4, 0xcf7, 0x42, 0x8, 0x3, 0x1, 0x3}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x200000, 0x0) [ 961.456248] binder: 14352:14355 got transaction with invalid offset (50331648, min 0 max 24) or object. 03:41:13 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffff9c, 0xc058565d, &(0x7f0000000100)={0xfffffffffffffffb, 0xf, 0x4, 0x400, {r1, r2/1000+30000}, {0x5, 0x8, 0x2, 0x3, 0x7, 0x100000000, "e771f612"}, 0x1, 0x6, @planes=&(0x7f00000000c0)={0x10000, 0x3ff, @fd=0xffffffffffffff9c, 0x3a}, 0x4}) sendfile(r0, r3, 0x0, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x102, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0xc943) syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x7045, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0xb0}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 961.504063] binder: BINDER_SET_CONTEXT_MGR already set [ 961.509396] binder: 14362:14364 ioctl 40046207 0 returned -16 [ 961.520060] binder_transaction: 28 callbacks suppressed [ 961.520077] binder: 14352:14355 transaction failed 29201/-22, size 24-8 line 3035 [ 961.541200] binder: send failed reply for transaction 4492 to 14352:14355 [ 961.556626] binder: 14362:14364 got reply transaction with no transaction stack [ 961.569199] binder_alloc: binder_alloc_mmap_handler: 14352 20001000-20004000 already mapped failed -16 [ 961.579263] binder: 14362:14364 transaction failed 29201/-71, size 24-4 line 2741 [ 961.587661] binder: BINDER_SET_CONTEXT_MGR already set 03:41:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x198, [0x20000580, 0x0, 0x0, 0x200005b0, 0x200005e0], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast, [], @broadcast, [], 0x70, 0xa8, 0xd8}, [@common=@dnat={'dnat\x00', 0x10, {{@local, 0xffffffffffffffff}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}]}, 0x210) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x20000220], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1, 0x8000000214800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x1}) [ 961.603358] binder: 14352:14355 ioctl 40046207 0 returned -16 [ 961.639877] binder_alloc: 14352: binder_alloc_buf, no vma [ 961.660380] binder: undelivered TRANSACTION_ERROR: 29201 03:41:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x400000000f) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f0000000000)=""/165) 03:41:13 executing program 1: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x220, 0x0, 0xffffffffffffffff}) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0xc001, 0x0) 03:41:13 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 961.687965] binder: undelivered TRANSACTION_ERROR: 29201 [ 961.695727] binder: 14352:14368 transaction failed 29189/-3, size 0-0 line 2973 [ 961.711079] binder: undelivered TRANSACTION_ERROR: 29190 03:41:13 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r0, &(0x7f0000001b80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001c00)=0x80) connect$can_bcm(r0, &(0x7f0000000440)={0x1d, r1}, 0x10) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x2, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x0, 0x5}}, 0x20) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x800, 0x0, {}, {0x0, 0x7530}, {0x4}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "27ff84d9a3eb1d586a35d085dd7e9bc0513d68af80fe4e671906368ab3814993f3c41dd78e5c3a8a35d849afe054c14b8516a29a153ed9e5b7e67a63085c758f"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x7, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 03:41:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x68000000]}}], 0x0, 0x0, 0x0}) [ 961.803893] binder: undelivered TRANSACTION_ERROR: 29189 03:41:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x1f) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = open(0x0, 0x2, 0x8) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x7e, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000200)={r2, 0x9}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) getpeername$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000300)) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x3c1) sendmsg$nl_route(r3, 0x0, 0x8000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000000240)={0x0, 0x0, 0xd9a38e04431eecec, 0x5}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) setresuid(0x0, 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r4, r5, 0x0) [ 961.951889] binder: BINDER_SET_CONTEXT_MGR already set [ 961.957517] binder: 14391:14401 got reply transaction with no transaction stack [ 961.974737] binder: 14399:14400 ioctl 40046207 0 returned -16 [ 962.003253] binder: 14391:14401 transaction failed 29201/-71, size 24-4 line 2741 [ 962.062450] binder: 14399:14412 got reply transaction with no transaction stack [ 962.075856] binder: BINDER_SET_CONTEXT_MGR already set [ 962.087333] binder: 14399:14412 transaction failed 29201/-71, size 24-8 line 2741 [ 962.091253] binder: release 14391:14395 transaction 4498 in, still active [ 962.102486] binder: send failed reply for transaction 4498 to 14399:14400 [ 962.110669] binder: 14391:14395 ioctl 40046207 0 returned -16 [ 962.126162] binder: undelivered TRANSACTION_ERROR: 29201 03:41:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x2000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:13 executing program 1: syz_open_dev$ndb(&(0x7f0000000480)='/dev/nbd#\x00', 0x0, 0x2000) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000000c0)={0xffff, 0x3}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) r5 = fcntl$getown(r1, 0x9) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000680)={r0, r0, 0x6}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000000000, 0x0, 0xfffffffe, 0x1107, 0x2000002, 0x0, 0x1000000000000, 0x0, 0x6]}, 0x3}) read(r3, &(0x7f0000000340)=""/251, 0xfb) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000005c0)={0x6, 0x8000, 0x6}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x5, 0x500}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f00000004c0)) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) socket$inet6(0xa, 0x0, 0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xa90, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0x5, 0x4}, &(0x7f00000002c0)=0xc) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000580)={0x1f}, 0x4) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) r7 = shmget$private(0x0, 0x2000, 0xc1, &(0x7f0000ffa000/0x2000)=nil) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0x800}}, 0x30) shmctl$SHM_INFO(r7, 0xe, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000440)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f000031aff8)) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f00000001c0)={0x9, 0x6}) r8 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x8000000000082003) ioctl$VIDIOC_ENUMSTD(r8, 0xc0485619, &(0x7f0000000040)={0x8001, 0x2000, "9812b3286b24862012a5ded836449d696ad4477500e1b212", {0x6, 0x6}, 0x4}) ioctl(0xffffffffffffffff, 0x2000c0984124, &(0x7f0000000080)) 03:41:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = dup(r0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000200)={[0x10001, 0x103000, 0x5005, 0x1000], 0xfffffffffffff7c0, 0x60, 0x24000000000000}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x8}}, 0xff, 0xffff, 0x9, 0x5, 0x4a}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r3, 0x100}, &(0x7f0000000180)=0x8) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:13 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 962.367630] binder: 14419:14429 got reply transaction with no transaction stack [ 962.382666] binder: 14419:14429 transaction failed 29201/-71, size 24-4 line 2741 03:41:14 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xff) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x40, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000004c0)) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000000)="bc", 0x1, 0x20048081, &(0x7f0000000040)={0xa, 0x400080000024e22}, 0x1c) fcntl$dupfd(r0, 0x406, r2) getsockname(r1, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x80) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhci\x00', 0x1fffff, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000202}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xda}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x881) r5 = accept(r1, &(0x7f0000001480)=@l2, &(0x7f0000001500)=0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000500)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @mcast2, 0x6}, {0xa, 0x4e23, 0x7, @loopback, 0x2}, r6, 0x10000000200000}}, 0x48) sendto$inet6(r5, &(0x7f0000000100)="d2", 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) close(r0) recvfrom$inet(r5, &(0x7f0000000300)=""/203, 0xcb, 0x1, &(0x7f0000000400)={0x2, 0x0, @dev}, 0x10) 03:41:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) [ 962.741896] binder: BINDER_SET_CONTEXT_MGR already set [ 962.756356] binder: 14399:14412 ioctl 40046207 0 returned -16 [ 962.786389] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 962.808129] binder: BINDER_SET_CONTEXT_MGR already set [ 962.813579] binder: 14399:14444 transaction failed 29201/-71, size 24-8 line 2741 [ 962.826375] binder: 14419:14424 ioctl 40046207 0 returned -16 [ 962.826565] binder_release_work: 4 callbacks suppressed [ 962.826571] binder: undelivered TRANSACTION_COMPLETE [ 962.850154] binder: 14419:14429 transaction failed 29201/-71, size 24-4 line 2741 [ 962.867501] binder: undelivered TRANSACTION_ERROR: 29189 03:41:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 962.885768] binder: release 14419:14424 transaction 4502 in, still active [ 962.912451] binder: send failed reply for transaction 4502 to 14399:14439 03:41:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x1000000]}}], 0x0, 0x0, 0x0}) 03:41:14 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 962.946016] binder: undelivered TRANSACTION_COMPLETE 03:41:14 executing program 1: r0 = syz_open_dev$video(&(0x7f00000004c0)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x8, @sdr}) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000080)=0x80, 0x80000) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0), 0x4) [ 963.112045] binder: 14453:14457 got transaction with invalid offset (16777216, min 0 max 24) or object. [ 963.128925] binder: BINDER_SET_CONTEXT_MGR already set [ 963.157740] binder: 14454:14458 ioctl 40046207 0 returned -16 [ 963.182184] binder: 14453:14457 transaction failed 29201/-22, size 24-8 line 3035 [ 963.191597] binder: 14454:14458 transaction failed 29201/-71, size 24-4 line 2741 [ 963.213592] binder: send failed reply for transaction 4506 to 14453:14457 [ 963.240835] binder: BINDER_SET_CONTEXT_MGR already set [ 963.264821] binder: 14454:14463 ioctl 40046207 0 returned -16 [ 963.285503] binder: BINDER_SET_CONTEXT_MGR already set [ 963.310332] binder_alloc: 14453: binder_alloc_buf, no vma [ 963.350594] binder: 14453:14457 ioctl 40046207 0 returned -16 [ 963.475740] binder: undelivered TRANSACTION_COMPLETE 03:41:16 executing program 1: mkdir(&(0x7f0000000740)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000380)=""/109, 0x200003ed) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x1, 0x8000, 0x1, 0x6, 0x8, 0x8}, 0x0) 03:41:16 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x436101, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xaa23) r1 = socket$netlink(0x10, 0x3, 0x100001) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:16 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1d00) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:16 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r1, &(0x7f0000000200), 0xfffffe3e) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x1a00) 03:41:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x2, 0x0, 0x0}) [ 964.467225] binder: BINDER_SET_CONTEXT_MGR already set [ 964.473971] binder: 14478:14486 ioctl 40046207 0 returned -16 [ 964.500450] binder_alloc: 14478: binder_alloc_buf, no vma 03:41:16 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) sendmsg(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@tipc=@id, 0xfffffffffffffdac, 0x0}, 0x0) 03:41:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x2, &(0x7f0000000100)={0x0, 0x28, 0x6, @thr={&(0x7f0000000000)="c4f6b907245c7f4dbc7483a1a855cc80d6f32fc9a0dc2b1670be10d2b2b9353a483e24aa86e7b21b6adf097e93ac8f3375c074528fa7c89c47e128da769c386695d00bee70c29c4468a37f5bcb81e41b88df717842f1f51a6ae7d4b24745b463b4b58bdc63799ae5", &(0x7f0000000080)="f6501e8d2a67421311d78e5753393bd529f062e4168056006e7878f7249551a0dda36061df4f126fe7cf08090ac3278de450f99d975b583d731fe69531a4156319d06e457516f5e90ae1f88049658c06c24c62cb9cb38fbc7e9d4c503932146d5e"}}, &(0x7f0000000140)=0x0) timer_gettime(r1, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x3000, 0x9, &(0x7f0000ffc000/0x3000)=nil) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000200)=""/179) shmctl$SHM_INFO(r2, 0xf, &(0x7f00000004c0)=""/165) [ 964.515159] binder: send failed reply for transaction 4511 to 14478:14486 [ 964.526343] binder_alloc_mmap_handler: 6 callbacks suppressed [ 964.526359] binder_alloc: binder_alloc_mmap_handler: 14481 20001000-20004000 already mapped failed -16 [ 964.554885] binder: BINDER_SET_CONTEXT_MGR already set [ 964.561743] binder_transaction: 3 callbacks suppressed [ 964.561754] binder: 14478:14496 got reply transaction with no transaction stack [ 964.613425] binder: 14481:14483 ioctl 40046207 0 returned -16 [ 964.623732] binder: 14478:14496 ioctl c0306201 20000380 returned -14 03:41:16 executing program 1: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = dup2(r0, r1) futimesat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x0, 0x7530}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r3+10000000}, 0x0, 0x0) 03:41:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400100, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x6, 0xfae, 0x1, 0x3, 0x10001}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e23, 0x60000000, @remote}}, 0x4, 0x3}, &(0x7f0000000200)=0x90) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:16 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fe) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x408c0000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) 03:41:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000140)={0x348, r2, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffc00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ab}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3131}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x130, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x23a}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf6d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa31a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_BEARER={0xec, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x100000001, @mcast1, 0x100000001}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffffffff, @remote, 0x8000}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x100000001, @mcast1, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}]}, 0x348}}, 0x4001) clone(0x150f00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x40096100) [ 964.835780] binder: 14513:14517 got reply transaction with no transaction stack 03:41:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f00000000c0)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="06ba968a69ec14a8b40da541d65ae349", 0x10) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x20, 0x40000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x50}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0xa18, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 03:41:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = semget$private(0x0, 0x1, 0x8) semctl$GETVAL(r1, 0x7, 0xc, &(0x7f0000000040)=""/113) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x22) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[0x1, 0x7, 0x1, 0x80]}) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xd000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 965.251977] binder_alloc: binder_alloc_mmap_handler: 14478 20001000-20004000 already mapped failed -16 [ 965.264574] binder: BINDER_SET_CONTEXT_MGR already set [ 965.269890] binder: 14478:14496 ioctl 40046207 0 returned -16 [ 965.271196] binder: 14478:14537 got reply transaction with no transaction stack [ 965.276675] binder_alloc: binder_alloc_mmap_handler: 14513 20001000-20004000 already mapped failed -16 [ 965.285004] binder: undelivered TRANSACTION_COMPLETE [ 965.300329] binder: 14478:14537 ioctl c0306201 20000380 returned -14 [ 965.307505] binder: release 14513:14514 transaction 4516 in, still active [ 965.321150] binder: send failed reply for transaction 4516 to 14478:14537 [ 965.348439] binder: undelivered TRANSACTION_COMPLETE 03:41:17 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0x1}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000140)={0x56aa, 0x12}) 03:41:17 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) select(0x40, &(0x7f0000002000), 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000000)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x2) 03:41:17 executing program 2: r0 = shmget(0x1, 0x1000, 0x220, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/95) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000100)=0x9) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) 03:41:17 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x74, 0x0, 0x0}) 03:41:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x18000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:17 executing program 2: socket$netlink(0x10, 0x3, 0x0) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 965.472657] binder: 14544:14547 got transaction with invalid fd, -1 [ 965.491863] binder: BINDER_SET_CONTEXT_MGR already set 03:41:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6}, 0x2c) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x2b5) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xee, 0x410000) recvfrom$llc(r2, &(0x7f00000002c0)=""/80, 0x50, 0x2000, &(0x7f0000000080)={0x1a, 0x315, 0xff, 0x1, 0x9, 0x4, @local}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003840)=[{&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/98, 0x62}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/115, 0x73}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x0, 0x5, @dev={0xfe, 0x80, [0x0, 0x0, 0x34000, 0x329]}}, 0x80, &(0x7f0000000340), 0x72, &(0x7f0000000380)}, 0x0) [ 965.522430] binder: send failed reply for transaction 4519 to 14544:14547 [ 965.538161] binder: 14546:14551 ioctl 40046207 0 returned -16 [ 965.545643] binder: 14544:14547 ioctl c0306201 20000380 returned -14 [ 965.552814] binder: 14546:14558 got reply transaction with no transaction stack [ 965.594322] binder_alloc: binder_alloc_mmap_handler: 14544 20001000-20004000 already mapped failed -16 [ 965.603563] binder_alloc: binder_alloc_mmap_handler: 14546 20001000-20004000 already mapped failed -16 03:41:17 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xf, &(0x7f00000004c0)=""/165) write$FUSE_IOCTL(r0, &(0x7f00000000c0)={0x20, 0x0, 0x7, {0x100000001, 0x4, 0x6, 0x6}}, 0x20) r2 = getpgid(0xffffffffffffffff) ptrace$pokeuser(0x6, r2, 0x3, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x3ff, &(0x7f0000000580)=""/4096) [ 965.641124] binder: BINDER_SET_CONTEXT_MGR already set [ 965.681943] binder: 14544:14547 ioctl 40046207 0 returned -16 [ 965.681947] binder: BINDER_SET_CONTEXT_MGR already set [ 965.681975] binder: 14546:14571 ioctl 40046207 0 returned -16 [ 965.705054] binder_alloc: 14544: binder_alloc_buf, no vma [ 965.711783] binder: 14544:14567 got reply transaction with no transaction stack [ 965.730230] binder: 14544:14567 ioctl c0306201 20000380 returned -14 03:41:17 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x50100, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) memfd_create(&(0x7f0000000000)='^=\x00', 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400204) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000002c0)=""/165) 03:41:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x60, 0x0, 0x0}) [ 965.813314] binder: undelivered TRANSACTION_COMPLETE [ 965.873526] binder: 14583:14588 got reply transaction with no transaction stack [ 965.902889] binder: BINDER_SET_CONTEXT_MGR already set [ 965.917225] binder: 14587:14590 ioctl 40046207 0 returned -16 [ 965.932130] binder_alloc: binder_alloc_mmap_handler: 14583 20001000-20004000 already mapped failed -16 [ 965.947732] binder: BINDER_SET_CONTEXT_MGR already set [ 965.957691] binder: 14583:14584 ioctl 40046207 0 returned -16 [ 965.969086] binder: release 14583:14584 transaction 4526 in, still active [ 965.980439] binder: send failed reply for transaction 4526 to 14587:14590 [ 965.991647] binder: 14587:14593 got reply transaction with no transaction stack [ 966.014335] binder: 14587:14593 ioctl c0306201 20000380 returned -14 [ 966.692705] binder_alloc: binder_alloc_mmap_handler: 14587 20001000-20004000 already mapped failed -16 [ 966.715554] binder_alloc: 14587: binder_alloc_buf, no vma [ 966.721274] binder_transaction: 11 callbacks suppressed [ 966.721289] binder: 14587:14598 transaction failed 29189/-3, size 0-0 line 2973 [ 966.746078] binder: 14587:14593 got reply transaction with no transaction stack [ 966.746460] binder: undelivered TRANSACTION_COMPLETE [ 966.764845] binder_release_work: 21 callbacks suppressed [ 966.764850] binder: undelivered TRANSACTION_ERROR: 29189 [ 966.764872] binder: 14587:14593 transaction failed 29201/-71, size 24-8 line 2741 [ 966.770398] binder: undelivered TRANSACTION_ERROR: 29201 [ 966.776176] binder: 14587:14593 ioctl c0306201 20000380 returned -14 [ 966.804710] binder: undelivered TRANSACTION_ERROR: 29201 [ 966.837925] binder: undelivered TRANSACTION_ERROR: 29189 03:41:19 executing program 5: accept(0xffffffffffffffff, &(0x7f0000000040)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x12) r0 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x1, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f00000000c0)) r1 = fcntl$getown(r0, 0x9) r2 = getuid() lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000800)=0x0, &(0x7f0000000840), &(0x7f0000000880)) sendmmsg$unix(r0, &(0x7f0000000940)=[{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000440)="7b5f9c9a", 0x4}, {&(0x7f0000000480)="f199796f8328df0815dc44fb006dce88879c40227817f7394c7cfd493326ca6cb453a08eca7faed1e8e3a20d12ce3e791655627e9b1737efc767", 0x3a}, {&(0x7f00000004c0)="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", 0xfd}, {&(0x7f00000005c0)="f75575e5e5bcebfa6e36f1385b9e9e2cb9fe0eabd623e6c2adba2a581df13bc4cf51b56eacd049861d26cc8f5583cbe301d07aa8788def3d87aec8cab7e940c14f3235a055d28d3e2a25fbee2a5c5d9ca91a02b6fce4bddc128a2546cb7e4755f1465ab44f5d29334aa711f325aab67a7873c940f800288bfa4a545b9437a7b8fb8f9acec69716ed902e3c4c060adb", 0x8f}], 0x4, &(0x7f00000008c0)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r1, r4, r5}, @rights={0x18, 0x1, 0x1, [r0]}], 0x58, 0x4040014}], 0x1, 0x4000) r6 = getpid() getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000), &(0x7f00000001c0)=0x4) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/current\x00', 0x2, 0x0) tgkill(r1, r6, 0x6) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x2) write$P9_RREADDIR(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="a60000002901000002000040000000000600000000000000ffffffffffffffff0407002e2f66696c653020030000000000000000000000010000000000002e2f66696c653080000000000700000000000000ff030000000000000007002e2f66696c65308201000000040000000000000081400000000000002807002e2f66696c6530000100000005dd000000000000cc0b000000000000fe07002e2f66696c653000000000301053904efb85ee52d8b6f80a7bd074de06020dcf9b7dc15765df49248c6865b048d0179e6062dc5da7a99a54bc5fe8b8d3ba8a6d21ddae4f909bde2e5e096e31472d0a014d37a643eef078c0fd1170f8e6fbb3e0"], 0xa6) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000100)={0x9, 0x1, @value=0x8}) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000140)=0x7) 03:41:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x0) ioctl(r0, 0xffffffffbfffbfa3, 0x0) 03:41:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmget$private(0x0, 0x3000, 0x1a00, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:19 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x4000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x6000000, 0x0, 0x0}) [ 967.916281] binder: 14602:14607 got transaction with invalid fd, -1 [ 967.920276] binder: BINDER_SET_CONTEXT_MGR already set [ 967.922855] binder: 14602:14607 transaction failed 29201/-9, size 24-8 line 3077 03:41:19 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'ip6_vti0\x00', {0x2, 0x200000004e21, @dev={0xac, 0x14, 0x14, 0x1e}}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000003c0)={0xa, @raw_data="d0db0e85db5bbb0f19bb95c8d3d398083b490da7cb6510cd67f7f364135f45e83580d551a427fe7533c7eb064ccb0b91456463676012ca43043b29c6c260af3bc3d387e66332d8c9db0430fd4250c21d6c8349b7f3b8c8bdfcf6de2be25f7225cffe26304c1c5e1bf6377f057ea9d7c4d985361394f7707f527bfefcaae345a09b461d30a41d77f147316143a647fc167b150d3365d98d8edb2c36704aa2126249927a2505c994b1886bcf39efaddf4ad4838917887869fd5cc2471946d24fcccad3c650646e6bf4"}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f00000001c0)={0x4, 0x0, [{}, {}, {}, {}]}) 03:41:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = shmget$private(0x0, 0x8000, 0x40, &(0x7f0000ff7000/0x8000)=nil) shmget(0x3, 0xa000, 0x4, &(0x7f0000ff6000/0xa000)=nil) shmctl$SHM_INFO(r1, 0xf, &(0x7f0000000000)=""/165) [ 967.974952] binder: send failed reply for transaction 4532 to 14602:14607 [ 967.976679] binder: 14604:14615 got reply transaction with no transaction stack [ 968.002358] binder: 14602:14607 ioctl c0306201 20000380 returned -14 [ 968.014646] binder: 14604:14609 ioctl 40046207 0 returned -16 03:41:19 executing program 5: setrlimit(0xf, &(0x7f0000000040)={0x8d}) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) [ 968.041615] binder: 14604:14615 transaction failed 29201/-71, size 24-4 line 2741 [ 968.063735] binder_alloc: binder_alloc_mmap_handler: 14602 20001000-20004000 already mapped failed -16 [ 968.081502] binder_alloc: binder_alloc_mmap_handler: 14604 20001000-20004000 already mapped failed -16 [ 968.098382] binder: BINDER_SET_CONTEXT_MGR already set [ 968.124940] binder: 14604:14609 ioctl 40046207 0 returned -16 [ 968.124953] binder: BINDER_SET_CONTEXT_MGR already set 03:41:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0xecbf0285c242655f}, 0xc) 03:41:19 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x100000003) ioctl(r0, 0x1002008912, &(0x7f0000000040)="0a5c2d1d3c1262718070") r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x2d) socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x50) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) 03:41:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000240)={0x5, 0x656, 0x8, 0x4, 0x6, 0xe0b3, 0x9}) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000001c0)=""/127) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x22, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}], 0x10) close(r3) r4 = memfd_create(&(0x7f0000000040)='\x00', 0x7) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) close(r2) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f0000000140)) 03:41:19 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 968.171014] binder_alloc: 14602: binder_alloc_buf, no vma [ 968.171159] binder: undelivered TRANSACTION_COMPLETE [ 968.186401] binder: undelivered TRANSACTION_ERROR: 29201 [ 968.188115] binder: 14602:14620 ioctl 40046207 0 returned -16 [ 968.212083] binder: undelivered TRANSACTION_ERROR: 29201 [ 968.242465] binder: 14602:14625 transaction failed 29189/-3, size 0-0 line 2973 [ 968.300311] binder: undelivered TRANSACTION_ERROR: 29190 03:41:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) mlock2(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x88, 0x65, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) dup3(r1, r2, 0x0) 03:41:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x74000000, 0x0, 0x0}) [ 968.372323] binder: 14639:14645 got reply transaction with no transaction stack [ 968.377804] binder: undelivered TRANSACTION_ERROR: 29189 [ 968.380771] binder: 14639:14645 transaction failed 29201/-71, size 24-4 line 2741 03:41:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xfffffffffffffff8, &(0x7f0000ff9000/0x4000)=nil, 0x1) [ 968.486518] binder: BINDER_SET_CONTEXT_MGR already set [ 968.514377] binder: 14649:14651 ioctl 40046207 0 returned -16 [ 968.543320] binder_alloc: binder_alloc_mmap_handler: 14639 20001000-20004000 already mapped failed -16 [ 968.559132] binder: BINDER_SET_CONTEXT_MGR already set [ 968.575064] binder: release 14639:14640 transaction 4538 in, still active [ 968.582602] binder: 14639:14640 ioctl 40046207 0 returned -16 [ 968.591488] binder: 14649:14657 transaction failed 29201/-71, size 24-8 line 2741 [ 968.592181] binder: send failed reply for transaction 4538 to 14649:14657 [ 968.600211] binder: 14649:14657 ioctl c0306201 20000380 returned -14 [ 968.637693] binder: undelivered TRANSACTION_ERROR: 29201 03:41:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x10000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0xecbf0285c242655f}, 0xc) 03:41:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgid(0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:20 executing program 1: syz_read_part_table(0x8cffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000000)="5244534ba7011c0000000000030000307f62f9e31af9a651af50695e39", 0x1d}]) socketpair$unix(0x1, 0x800000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0xe8, 0x0, 0x0, 0xe8, 0x0, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xc8, 0xe8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6ba, 0x6}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 03:41:20 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:20 executing program 5: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x901) r2 = dup2(r1, r0) bind$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) getsockopt$inet6_dccp_buf(r0, 0x21, 0x0, &(0x7f0000000100)=""/170, &(0x7f00000001c0)=0xaa) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x8, "7175657545300000000000ff01000000000000000000000000000000000000001900000000000020000000000000000000000000000000403300", 0x6b17}) write$sndseq(r0, &(0x7f0000000000)=[{0x23, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 03:41:20 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x200000, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/142, &(0x7f0000000100)=0x8e) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 968.942542] binder: 14669:14682 transaction failed 29201/-71, size 24-4 line 2741 [ 968.955420] Dev loop1: unable to read partition block -1677721600 03:41:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYBLOB="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"]], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=""/233) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000002240)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002280)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000002380)=0xe8) r4 = getgid() sendmsg$unix(r0, &(0x7f0000002400)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000), 0x3, &(0x7f00000024c0)=[@cred={0x0, 0x1, 0x2, r2, r3, r4}, @rights={0x0, 0x1, 0x1, [r0, r0, r1, r1, r0, r0, r0, r1, r0]}, @cred={0x0, 0x1, 0x2, r2, r3, r4}], 0x248, 0x2000c000}, 0x8000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002440)='/dev/ppp\x00', 0x80, 0x0) ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f0000002480)={0x2c82, 0x8000}) fstat(r1, &(0x7f0000002540)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 969.010985] loop1: RDSK (2137192448) unable to read partition table [ 969.025704] loop1: partition table beyond EOD, truncated [ 969.048422] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 03:41:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x15, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x20, @local}, 0x10) getsockopt$inet_mreqsrc(r2, 0x0, 0x2f, &(0x7f0000000180)={@empty, @multicast2, @local}, &(0x7f00000001c0)=0xc) r3 = socket$inet(0x2, 0x80006, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000440)={'filter\x00', 0x4}, 0x68) r4 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) r5 = dup(r1) accept$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r5, 0xc0385650, &(0x7f0000000000)={{0x1, @addr=0xcfc}, 0x8, 0x8000, 0x8}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$TIOCLINUX6(r4, 0x541c, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 969.274764] binder: BINDER_SET_CONTEXT_MGR already set [ 969.280139] binder: 14649:14657 ioctl 40046207 0 returned -16 [ 969.294981] binder: BINDER_SET_CONTEXT_MGR already set [ 969.300291] binder: 14669:14672 ioctl 40046207 0 returned -16 [ 969.300294] binder: undelivered TRANSACTION_COMPLETE [ 969.300309] binder: undelivered TRANSACTION_ERROR: 29189 03:41:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x14, 0x0, 0x0}) 03:41:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200, 0xce0960ab397e5614) epoll_create1(0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@remote, @in=@multicast1}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) fsetxattr$security_smack_entry(r0, &(0x7f0000000340)="93956375726974792f534d41434f3600", &(0x7f0000000140)="766d6e6574306d643573756d65746831747275737465642a637075736574216d643573756d2e2b263adb6264657600", 0x1e8, 0x2) epoll_pwait(r1, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x7f, &(0x7f0000000080)={0x6}, 0x8) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f00000000c0)={0x0, 0x0, 0x103, 0x2, {0x4, 0x7, 0xea6, 0x8}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x800000400200) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000300)={0x7f, @broadcast, 0x4e23, 0x1, 'nq\x00', 0x22, 0x101, 0x56}, 0x2c) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000380)={'filter\x00', 0x2a, "0255437af5f816242e58b1521b71da9f074ae3619a6b1256b94ea937cdb4a3413d2c504d359b8365d849"}, &(0x7f0000000100)=0x4e) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x20000, 0x0) [ 969.338159] binder: release 14669:14672 transaction 4542 in, still active [ 969.355708] binder: send failed reply for transaction 4542 to 14649:14705 [ 969.374405] binder: undelivered TRANSACTION_COMPLETE [ 969.443637] binder: 14713:14714 got transaction with invalid fd, -1 [ 969.451169] binder: 14713:14714 transaction failed 29201/-9, size 24-8 line 3077 [ 969.460229] binder: send failed reply for transaction 4544 to 14713:14714 [ 969.470071] binder: 14713:14714 ioctl c0306201 20000380 returned -14 [ 969.481821] binder: BINDER_SET_CONTEXT_MGR already set [ 969.495709] binder: 14713:14714 ioctl 40046207 0 returned -16 [ 969.496022] binder_alloc: 14713: binder_alloc_buf, no vma [ 969.508878] binder: 14713:14715 transaction failed 29189/-3, size 0-0 line 2973 [ 969.521771] binder: undelivered TRANSACTION_COMPLETE 03:41:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x3f000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)="6e756d615f6d617073004faa4b5fdd57d25f40443d323bea8fea110d3d009e0bb26ebd3753ba76c98567fa15b9b0c7e21dabd684889fd2d17c76315701a173e3fb2065bb59d995d6aff4ef715c77616b44c317e5530a1969f3bb76fabcd71dd4808800b9c8879c2ddd20bb9ad76af985fed4042f26dece9758f59c4b16e5a86bcea21368bb14ce466f792c641bc152661669667867ceee86930fc529d9f9ae35c8aada187dcd03") mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x6, 0x9, 0x1}) pread64(r0, 0x0, 0x0, 0x100003) 03:41:21 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='./file0\x00', 0x202000, 0x28) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x1, 0x7fffffff, 0x7}) 03:41:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x600000000000000, 0x0, 0x0}) [ 969.756476] binder: 14720:14722 got transaction with invalid fd, -1 [ 969.769998] binder: BINDER_SET_CONTEXT_MGR already set [ 969.772248] binder: send failed reply for transaction 4548 to 14720:14722 [ 969.791175] binder: 14720:14722 ioctl c0306201 20000380 returned -14 [ 969.796552] binder: 14719:14721 ioctl 40046207 0 returned -16 [ 969.811835] binder_alloc_mmap_handler: 3 callbacks suppressed [ 969.811851] binder_alloc: binder_alloc_mmap_handler: 14720 20001000-20004000 already mapped failed -16 [ 969.828250] binder_transaction: 2 callbacks suppressed [ 969.828258] binder: 14719:14733 got reply transaction with no transaction stack 03:41:21 executing program 1: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) lstat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0xe8) syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000180)='./file0\x00', 0x7f, 0x4, &(0x7f0000000380)=[{&(0x7f00000001c0)="bf1a9fabb9113508de4299e732b3c8c84f0c68f4166947d6c3b7e721", 0x1c, 0x1}, {&(0x7f0000000200)="08144d76ca8d9bd58b747327f6e3e8b38c6b837d1714067d50cac5a4b4c966d439c5b45418cca332ddb56707140dd68d87224e60bc38d52a0c54ed362f98c90f1963", 0x42, 0x1ac9dc7a}, {&(0x7f0000000280)="d898ad64cebb0a298ce76ad1856450b7293fd2419da13a8c81f3cec410a8731913fad6bd16dedfef83203eb349f8120e87a8e831e1eba33275", 0x39, 0x9}, {&(0x7f00000002c0)="f61a7161ee111fbd51c3ba3fe3b5293aa77548ca334b92cee27fb8d68547376121", 0x21, 0x40}], 0x1000000, &(0x7f0000000640)={[{@errors_ro_remount='errors=ro-remount'}, {@balloc_test4='block-allocator=test4'}, {@usrjquota='usrjquota'}], [{@dont_hash='dont_hash'}, {@fowner_gt={'fowner>', r1}}, {@measure='measure'}, {@seclabel='seclabel'}, {@seclabel='seclabel'}, {@dont_appraise='dont_appraise'}, {@fowner_gt={'fowner>', r2}}, {@euid_gt={'euid>', r3}}]}) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) open$dir(&(0x7f0000000340)='./file0\x00', 0x40, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}}) 03:41:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 969.872007] binder: BINDER_SET_CONTEXT_MGR already set [ 969.878372] binder_alloc: binder_alloc_mmap_handler: 14719 20001000-20004000 already mapped failed -16 [ 969.888104] binder: 14720:14722 ioctl 40046207 0 returned -16 [ 969.894608] binder: BINDER_SET_CONTEXT_MGR already set [ 969.901784] binder: 14719:14721 ioctl 40046207 0 returned -16 [ 969.908222] binder_alloc: 14720: binder_alloc_buf, no vma [ 969.914769] binder: 14720:14732 got reply transaction with no transaction stack 03:41:21 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 969.943757] binder: 14720:14732 ioctl c0306201 20000380 returned -14 03:41:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x68000000, 0x0, 0x0}) [ 969.995370] REISERFS warning (device loop1): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument [ 969.995370] [ 969.998356] binder: undelivered TRANSACTION_COMPLETE 03:41:21 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x1, 0x101000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000500)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x3) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r1, 0x5, 0x2b, 0x3ff, 0x6}, &(0x7f00000004c0)=0x18) r3 = syz_open_dev$vcsn(&(0x7f0000000980)='/dev/vcs#\x00', 0x1, 0x0) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f00000009c0)={0x7, 0x9, 0x8d}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = accept4(r0, 0x0, &(0x7f00000006c0), 0x80000) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000b80)={r2, 0x5, 0x8, 0x2}, 0x10) bind$vsock_dgram(r6, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r8 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_int(r8, 0x21, 0x11, &(0x7f0000000280)=0x200, 0x4) r9 = syz_open_procfs(r7, &(0x7f00000003c0)='net/sockstat6\x00') mq_notify(r9, &(0x7f0000000140)={0x0, 0x12, 0x2, @tid=r7}) inotify_init() r10 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) bind(0xffffffffffffffff, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x22e) mq_notify(r10, &(0x7f0000000b00)={0x0, 0x12, 0x0, @thr={&(0x7f0000000f80)="a3ae89dea01df5f71b4c036520f23f156614fc3d24282d77a060db4b6f0d998cf91349e78a3546d711a76872168b6dc5a17c1d54d3bbb647fbb637e64f700a1066738e81a6f14d1c0bfea8229474f1f029d2f3ef2b33519fcc2aedb92a78d5d870ef9cab2eca9845170c6806fa322cdae8efa583b242c6e0991079eb51b5c050903f8561f5d449eb3f0f9c406440f5edc1cf19cdfa8fe66dab564418697d1d869c0b102497fb5b7885814c5c21f0bbe32160", 0x0}}) ftruncate(r5, 0x651) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200400, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000180)=0xb) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000bc0)={r2, 0x568}, 0x8) socket$nl_route(0x10, 0x3, 0x0) mq_timedsend(r10, &(0x7f00000e6000), 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000b40)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)=""/176, 0xb0}, {&(0x7f0000000600)=""/82, 0x52}, {&(0x7f0000000d80)=""/177, 0xb1}, {&(0x7f0000000740)=""/186, 0xfffffffffffffd16}], 0x10000116, &(0x7f0000000840)=""/193, 0xffffffffffffffd4, 0xdf7}, 0x10000) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f0000000c80)=""/200, &(0x7f0000000a00)=0xc8) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, &(0x7f0000000a40), &(0x7f0000000ac0)=0x68) r12 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r12, 0xc0145401, &(0x7f0000000040)={0x3, 0x1, 0xfffffffffffffff9, 0x2, 0xfff}) [ 970.093396] REISERFS warning (device loop1): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument [ 970.093396] 03:41:21 executing program 2: socket$netlink(0x10, 0x3, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x12000, 0x86682) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10800, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x902, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x20) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1) [ 970.142047] binder: BINDER_SET_CONTEXT_MGR already set [ 970.174653] binder: 14750:14759 got reply transaction with no transaction stack [ 970.176603] binder: 14751:14757 ioctl 40046207 0 returned -16 03:41:21 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x4000) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) pipe2(&(0x7f0000f61000), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 970.233706] binder_alloc: binder_alloc_mmap_handler: 14750 20001000-20004000 already mapped failed -16 [ 970.246577] IPVS: length: 200 != 24 [ 970.264771] binder: BINDER_SET_CONTEXT_MGR already set [ 970.280760] IPVS: length: 200 != 24 [ 970.284105] binder: 14751:14764 got reply transaction with no transaction stack [ 970.286292] binder: 14750:14756 ioctl 40046207 0 returned -16 [ 970.291910] binder: 14751:14764 ioctl c0306201 20000380 returned -14 [ 970.345319] binder: release 14750:14756 transaction 4555 in, still active [ 970.352403] binder: send failed reply for transaction 4555 to 14751:14764 03:41:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1b000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:22 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:22 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e23, @multicast1}, 0xffffffffffffff1c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) rt_sigaction(0x0, &(0x7f0000000140)={&(0x7f00000002c0)="c46255287ff28fc968024bc7f0460fc09308000000c443fd01a3bdd2000000430f6a86ad000000430f0d62c72e0f2b5f00c46178ae9b00000100c4a37d1df70067660faeb100000020", {0x1}, 0x0, 0x0}, &(0x7f0000000380)={&(0x7f0000000200)="450fa8c482e538b86e3eebbddb1d0f000000670f69e5fd0f1f40008f6850951bcaf045fe42008f68088e918a1a46e507663e660f71d7f5", {}, 0x0, 0x0}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000500)=0x0) r3 = getpgid(r2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) fcntl$lock(r0, 0x5, &(0x7f00000001c0)={0x2, 0x3, 0x4, 0x7, r3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x38}, [{}]}, 0x58) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x25, 0x3, 0x0, {0x0, 0x4, 0x0, 'bbr\x00'}}, 0x25) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000400)={0x2, [0x0, 0x0]}, &(0x7f0000000440)=0xc) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000004c0)) write$binfmt_misc(r1, &(0x7f0000000580)={'syz1', "7808f25d5799f5c2725f6b6af035b30665d39bdbad04b32e3011cadb569e7f09402fbf7d42ba25870d9dc8181d36a9028876b33c3748fc9d2af7a0707b9557ee16dc65eabeb5d5153e684a23cc82e834ea58809b59ae2febbfd817fdc99492c8dcf2801b8ce20149ac7369557b604c7b725d01eb1fca6255004d4cb03f176120aa5bb9dbc646a967e6b5df8681bd8c0a9993f96f393f1e59e53fbe50073076e0a8bac79d27ff40dc9d84bd01be9249a8e089863ba6dbefa88d493c8b60a3ed1310ef29a61c9806"}, 0xcb) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000480)={r4, 0xfffffffffffffffe, 0x20}, 0xc) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340), &(0x7f00000003c0)=0xb) 03:41:22 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) dup2(r1, r1) 03:41:22 executing program 5: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'vcan0\x00', 0x7}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x80, 0x9, "3ba01b6d93afe336ac22e968af1f9ccacf433f2a3c25c26fef184234033b96a0121d4d4605dd380ad60061fba45757fb47f04f3257247bfae307285b5a8b97ee7e0276e0c77e87bb3b7956b1c42e52c2fefb31d2ab960a44c3c5ca828a69d1f9b00aaaf4325878cb6d3d8547e84e4b284ca7a0d92f1d702f51cf768c027f59af8bfc77d3eb9fa7675daced236a85abbcc4c1183c1f5c1cf247dcb8de6598ee4d3b2433740f7650e1cb6de07ac73fb2e33647c72ecd9072effc0177b2b76dcec90657cd9dc6dc22da78448890e6d8aac231c6fdf4775cc06817378f2a74438b2cbced48205241452e8ae004adfea6966b39f13cf03e871b99a6f3b9267aace34b", 0x80, 0x2, 0xffff, 0x100, 0x10001, 0x0, 0x4, 0x1}, r2}}, 0x120) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000070000000d000040050000a9ff01000000000000000000400000000001000000e4fffff0d9f7fbb1d163e2ff040f0000000000000a00000006"]) [ 970.805491] binder: 14781:14795 got reply transaction with no transaction stack 03:41:22 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x200000) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000080)={0x1, 0xd58, 0x1}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4181, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) fchown(r0, r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:22 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/video1\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x602, 0x0) clock_gettime(0x0, &(0x7f0000000340)) mq_timedsend(r1, &(0x7f0000000400)="d12fa1532f7489e4631b58d620bdd3751dafc88794ff01b59a515ed1465504ed62d06e0824b78d2549922fceb36153206ed80cd0ca13e153e25dbbdca1b74fcf7e83dd26d5c20622abd9a652bac8d531102ca5a51a0674118cfb0d79632922acc6f1bf3c29fb04c2c48918873310850974caceebd6d2b5b7a739fe5e3c1553ea3e294ed30562d404", 0x88, 0x41c, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, 0x0) semtimedop(0x0, &(0x7f00000a8000), 0x10e, &(0x7f00000000c0)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dmmidi(0x0, 0x0, 0x200800) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000005c0)=ANY=[]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="2e2e640fc7a80900fdb8e8038ee0f2e053baf80c66b820bbcb8866efbafc0c66b80000000066ef0f95610166b8150000000f23c80f21f86635000040000f23f8b800008ee8640f9a8803003d0000", 0x4e}], 0x129, 0x0, &(0x7f00000000c0), 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x4, 0x7d, 0x0, 0xffffffff7fffffff, 0x2}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) [ 970.933495] binder_alloc: binder_alloc_mmap_handler: 14751 20001000-20004000 already mapped failed -16 [ 970.972068] binder: BINDER_SET_CONTEXT_MGR already set [ 971.017479] binder_alloc: binder_alloc_mmap_handler: 14781 20001000-20004000 already mapped failed -16 [ 971.027750] binder: 14751:14764 ioctl 40046207 0 returned -16 [ 971.080581] binder: undelivered TRANSACTION_COMPLETE 03:41:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x500, 0x0, 0x0}) 03:41:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140)=0xb37, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000000)='vmnet1)%GPL\x00', 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x7, 0x4) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)={0x5, 0x8, [{0xfffffffffffffffe, 0x0, 0x80}, {0x9, 0x0, 0x6}, {0x4, 0x0, 0x4}, {0x1000, 0x0, 0x400}, {0x400, 0x0, 0xfffffffffffffffe}]}) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 971.133880] binder: BINDER_SET_CONTEXT_MGR already set [ 971.141039] binder: 14781:14795 ioctl 40046207 0 returned -16 [ 971.148697] binder: release 14781:14786 transaction 4559 in, still active [ 971.157474] binder: send failed reply for transaction 4559 to 14751:14801 [ 971.173651] binder: undelivered TRANSACTION_COMPLETE 03:41:22 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0bc5351, &(0x7f00000000c0)={{0x50f}, 0x0, 0x1ff, 0x0, {}, 0x0, 0xfffffffffffffffd}) [ 971.272871] binder: 14816:14818 got transaction with invalid fd, -1 [ 971.312070] binder: BINDER_SET_CONTEXT_MGR already set [ 971.321727] binder: send failed reply for transaction 4561 to 14816:14818 [ 971.337728] binder: 14821:14823 ioctl 40046207 0 returned -16 [ 971.350431] binder: 14816:14818 ioctl c0306201 20000380 returned -14 [ 971.370570] binder: 14821:14823 got reply transaction with no transaction stack [ 971.383491] binder_alloc: binder_alloc_mmap_handler: 14816 20001000-20004000 already mapped failed -16 [ 971.397598] binder_alloc: binder_alloc_mmap_handler: 14821 20001000-20004000 already mapped failed -16 [ 971.398287] binder: BINDER_SET_CONTEXT_MGR already set [ 971.418074] binder_alloc: 14816: binder_alloc_buf, no vma [ 971.435515] binder: BINDER_SET_CONTEXT_MGR already set [ 971.439899] binder: 14816:14818 ioctl 40046207 0 returned -16 [ 971.456620] binder: undelivered TRANSACTION_COMPLETE [ 971.463112] binder: 14821:14823 ioctl 40046207 0 returned -16 03:41:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xb00) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x341100, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 03:41:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f00000000c0)={0x3, 0x0, 0x800000}) dup3(r2, r3, 0x0) dup3(r2, r1, 0x0) 03:41:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x3, 0x0, 0x0}) 03:41:23 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 971.799730] binder: BINDER_SET_CONTEXT_MGR already set 03:41:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f0000000000)=""/165) [ 971.824393] binder: 14836:14839 ioctl 40046207 0 returned -16 [ 971.842608] binder: 14837:14846 got reply transaction with no transaction stack [ 971.851618] binder_transaction: 10 callbacks suppressed [ 971.851633] binder: 14837:14846 transaction failed 29201/-71, size 24-4 line 2741 [ 971.867891] binder_alloc: binder_alloc_mmap_handler: 14837 20001000-20004000 already mapped failed -16 [ 971.878325] binder: 14837:14846 got reply transaction with no transaction stack [ 971.886579] binder: release 14837:14841 transaction 4567 in, still active [ 971.894729] binder: 14837:14846 transaction failed 29201/-71, size 24-4 line 2741 [ 971.902653] binder: 14836:14848 got reply transaction with no transaction stack [ 971.913604] binder: send failed reply for transaction 4567 to 14836:14839 03:41:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x30}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f0000000000)=""/251}, 0x48) [ 971.921023] binder: 14836:14848 transaction failed 29201/-71, size 24-8 line 2741 [ 971.929145] binder_release_work: 20 callbacks suppressed [ 971.929152] binder: undelivered TRANSACTION_ERROR: 29201 [ 971.947371] binder: undelivered TRANSACTION_ERROR: 29201 [ 971.955084] binder: 14836:14848 ioctl c0306201 20000380 returned -14 03:41:23 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/video1\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x602, 0x0) clock_gettime(0x0, &(0x7f0000000340)) mq_timedsend(r1, &(0x7f0000000400)="d12fa1532f7489e4631b58d620bdd3751dafc88794ff01b59a515ed1465504ed62d06e0824b78d2549922fceb36153206ed80cd0ca13e153e25dbbdca1b74fcf7e83dd26d5c20622abd9a652bac8d531102ca5a51a0674118cfb0d79632922acc6f1bf3c29fb04c2c48918873310850974caceebd6d2b5b7a739fe5e3c1553ea3e294ed30562d404", 0x88, 0x41c, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, 0x0) semtimedop(0x0, &(0x7f00000a8000), 0x10e, &(0x7f00000000c0)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dmmidi(0x0, 0x0, 0x200800) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000005c0)=ANY=[]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="2e2e640fc7a80900fdb8e8038ee0f2e053baf80c66b820bbcb8866efbafc0c66b80000000066ef0f95610166b8150000000f23c80f21f86635000040000f23f8b800008ee8640f9a8803003d0000", 0x4e}], 0x129, 0x0, &(0x7f00000000c0), 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x4, 0x7d, 0x0, 0xffffffff7fffffff, 0x2}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 03:41:23 executing program 2: socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x80) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3f, 0x20000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:23 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:23 executing program 5: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x3fffffe) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x100, 0x4, 0x2557}) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x10000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) pwritev(r0, &(0x7f0000003440)=[{&(0x7f0000001100)='I', 0x1}], 0x1, 0x40000) syncfs(r0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) fallocate(r0, 0x20, 0xc000, 0x8000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0xab, 0x0, 0x0, 0x22}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000200)={0x8, r1}) [ 972.223412] binder: 14863:14870 got reply transaction with no transaction stack [ 972.239604] binder: 14863:14870 transaction failed 29201/-71, size 24-4 line 2741 [ 972.577971] binder_alloc: binder_alloc_mmap_handler: 14836 20001000-20004000 already mapped failed -16 [ 972.604486] binder: BINDER_SET_CONTEXT_MGR already set [ 972.610820] binder: 14836:14848 ioctl 40046207 0 returned -16 [ 972.611077] binder_alloc: binder_alloc_mmap_handler: 14863 20001000-20004000 already mapped failed -16 [ 972.625053] binder: undelivered TRANSACTION_COMPLETE [ 972.631461] binder: undelivered TRANSACTION_ERROR: 29189 [ 972.660377] binder: undelivered TRANSACTION_ERROR: 29201 [ 972.666615] binder: BINDER_SET_CONTEXT_MGR already set [ 972.674513] binder: 14863:14867 ioctl 40046207 0 returned -16 [ 972.692242] binder: release 14863:14867 transaction 4572 in, still active [ 972.716613] binder: send failed reply for transaction 4572 to 14836:14883 [ 972.753210] binder: undelivered TRANSACTION_ERROR: 29201 [ 972.774693] binder: undelivered TRANSACTION_COMPLETE [ 972.796326] binder: undelivered TRANSACTION_ERROR: 29189 03:41:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x11) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x4800000000000000, 0x0, 0x0}) 03:41:24 executing program 5: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:41:24 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r2 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xf, &(0x7f0000000000)=""/165) [ 972.945169] binder: BINDER_SET_CONTEXT_MGR already set [ 972.958116] binder: 14888:14895 ioctl 40046207 0 returned -16 [ 972.969187] binder_alloc: 14888: binder_alloc_buf, no vma [ 972.977309] binder: 14889:14892 transaction failed 29189/-3, size 24-4 line 2973 03:41:24 executing program 1: r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="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", 0x115, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) [ 973.019658] binder: send failed reply for transaction 4574 to 14888:14895 [ 973.027314] binder: 14888:14901 transaction failed 29201/-71, size 24-8 line 2741 [ 973.046444] binder: 14888:14901 ioctl c0306201 20000380 returned -14 [ 973.048284] binder: BINDER_SET_CONTEXT_MGR already set 03:41:24 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:24 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x4) r1 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000200)=0xffffffffffffffa9) shmctl$SHM_INFO(r1, 0xe, &(0x7f00000000c0)=""/198) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x1f) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xc3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000040)=""/62, 0x2000, 0x1000, 0x10000000}, 0x18) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) ioctl$int_out(r3, 0x2, &(0x7f0000000240)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) [ 973.070882] binder: undelivered TRANSACTION_ERROR: 29190 [ 973.077132] binder: 14889:14892 ioctl 40046207 0 returned -16 03:41:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = accept(0xffffffffffffffff, &(0x7f0000000100)=@hci, &(0x7f0000000000)=0x80) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080)=0xfffffffffffffff9, 0x4) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYPTR64, @ANYRESOCT, @ANYPTR64], 0x2f) [ 973.219733] binder: 14909:14918 transaction failed 29201/-71, size 24-4 line 2741 03:41:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) r2 = getpgrp(r1) fcntl$lock(r0, 0x27, &(0x7f0000000000)={0x2, 0x0, 0xc014, 0x100, r2}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000100)={r4, 0x1}) 03:41:25 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000040)) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000140)={0x2, 0x0, [{}, {}]}) fanotify_init(0x0, 0x141400) r2 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000240)={0x64, 0x6b, 0x9, 0x5}, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x900, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) listen(r0, 0x5) r4 = syz_open_dev$dspn(&(0x7f00000003c0)='/dev/dsp#\x00', 0x9, 0x100) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000400), 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000440)=0x8001, 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000480), &(0x7f00000004c0)=0xb) r5 = dup(r4) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000500)) r6 = openat$cgroup_procs(r1, &(0x7f0000000540)='tasks\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000600)={0x990000, 0x1, 0x3ed4, [], &(0x7f00000005c0)={0x9909d2, 0x1, [], @p_u32=&(0x7f0000000580)=0x5}}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000640), &(0x7f0000000680)=0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000006c0)={'NETMAP\x00'}, &(0x7f0000000700)=0x1e) pwritev(r0, &(0x7f0000000b00)=[{&(0x7f0000000740)="90ee2dd29c63058aac113665d472133468c847a2c81baedb56aa8c8552af6759d823a59c1d6048a0df9c82bbf083ff2c53e2a8a08a2783e36bbd6efab6ab37d5fabf5ce858c2f69cc237df1bf9b938a8e4123f7e0e431e3de278dcc56f7e1556e04a5583ab6b5d548d56b2b19d98de8c3d380eefe4433f12dd1c6c8de5ae753ebd7c2d57798eb29e437cccaf5155f29e7cb73be699e352f7716cf4172b9855ae6137fcc1c76a25530b9fe2c2eeed16", 0xaf}, {&(0x7f0000000800)="1b80ca2ecf960d1c89c49bbdf66bbc2a31435b2a274d7597a1aa8279098027db31cd55c3d2343991e66956e9e7c952bdfeddac135723828d4230f950fb2883c61fae5219f9801f7277cc54e84dd7f40e6ac6421c30db8c6950b6c32c7802220bd9b9454d78a2c9c4d9783bd7cd2859a4106fbe69a1025b0af0e6286668ee0e4c03ef08451c0da021eea9741cd81526ae78fdfb3ea1964c6415da829ec31d116f0427f820fda868bd1b1c7b26bc2e54ab2e5779ba69b7008b74edadbf16093cff25fba7c33d5d0e3029ff07c8644b81a18bed762a8404e06757826d", 0xdb}, {&(0x7f0000000900)="36bc153a78001381333ca903ffc64fac5d5f6ccfd5eb06f1bc3912df99b89cad83ca56851ed24b089c67c21b55ffb8f1eaba9f935d880b9fb5ebc221d8b9d116df39dc794b9287ee3a9f683810165d2dc29e3bd502f34eff", 0x58}, {&(0x7f0000000980)="4e4824a263fe765d69c32381724843bd9cfd2f274dbcc8ea728f3f99cccd58ad91d5ac9487df914dfce74b633ab027c1449608b545cd445345ae261220f1482b1230f05592c9026a51e4c055aa292b3c6087c58864c73675a9e69de6cd2566092f0b63501637d35eeb69346fbb3c1b29eef6f74d530c3f41a18bfdaba9ba9e23f08f8e5a24f79c4ef7732796c0628d11c69d1519ef2de29b435bef631df990eb198307f4b72e2a411615f90eefc14f620e2da4a28c", 0xb5}, {&(0x7f0000000a40)="6dfc6e9cd6b91358a3bc386e34bf9cde7a13f329e86a99ff825daf0e7df7d84e01f07b27d95e4f195fb4338bf529f9aa84d79c9ae8bb2278a7cf4df78f920d915508fe30cb6b074eba8d03b4d9e5fd85d4b954eabf6b5f16e0e69ed3049afb3824d4e9768d122b06ab89140ddf28d749b4a05fd5a7e9571d484fcb1850b110d4a8270e98d9d251d243be9f88dd21ff12a808805b4bb2d8b281fc17baa750c8e017643ce4d8", 0xa5}], 0x5, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000cc0)={0x0, 0xad, 0x51c, 0x7f, 0x7fff, 0x100000000}, &(0x7f0000000d00)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000d40)={0x0, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x16}}, 0x8, 0x4}, &(0x7f0000000e00)=0x90) sendmsg$inet_sctp(r6, &(0x7f0000000f40)={&(0x7f0000000b80)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000bc0)="a1079910fb248cd1ed1b6ffa705ee5f887ef039f756e94175ec85cb6b4c9070c0c60142af1cb53733a2c0503273b30d2a38978fd043fe83a5f365b1d1b66a7273d54b78f5a54d72ae5acf0c2b3fb1cba9d8df9170594d530d3ca7966c3e0edf458357cab2974de86ad4174b84a7c1dd3f5c52ed93609874e2127187e0c96b4e720ae5ba17b5013a4e67462a62d4ba84709551c7f6407150a4e", 0x99}], 0x1, &(0x7f0000000e40)=[@authinfo={0x18}, @sndrcv={0x30, 0x84, 0x1, {0x2660, 0x7, 0x1, 0x100000001, 0xffffffffffff0001, 0xb02a, 0x80000001, 0x3ff, r7}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3ff}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x4, 0x0, 0xff, r8}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x1000}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @local}}, @dstaddrv6={0x20, 0x84, 0x8, @local}], 0xd8, 0x20040000}, 0x4001) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000f80)=[@window={0x3, 0x30, 0x80000001}, @mss={0x2, 0x8}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_GET_CHILD_SUBREAPER(0x25) accept4$packet(r1, &(0x7f0000000fc0), &(0x7f0000001000)=0x14, 0x800) 03:41:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x2) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000580)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) r6 = getegid() r7 = getegid() r8 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="02000500", @ANYRES32=r2, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="040002000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES32=r7, @ANYBLOB="08000600", @ANYRES32=r8, @ANYBLOB="10000500000000002000040000000000"], 0x64, 0x1) [ 973.740486] binder: BINDER_SET_CONTEXT_MGR already set [ 973.746911] binder: 14909:14918 transaction failed 29201/-71, size 24-4 line 2741 [ 973.758667] binder: BINDER_SET_CONTEXT_MGR already set [ 973.768723] binder: 14888:14901 ioctl 40046207 0 returned -16 [ 973.784093] binder: 14909:14912 ioctl 40046207 0 returned -16 [ 973.784158] binder: undelivered TRANSACTION_COMPLETE [ 973.815602] binder: undelivered TRANSACTION_ERROR: 29189 [ 973.843331] binder: undelivered TRANSACTION_ERROR: 29201 03:41:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x700000000000000, 0x0, 0x0}) 03:41:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, &(0x7f0000000400)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={"000000000000000000e9dc00", 0x200082}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200000, 0x0) socketpair(0x2, 0x801, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') 03:41:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) pread64(r1, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000100)) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x2, 0x1, 0x800, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) r2 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000300)=""/148) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x81, 0x80) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, &(0x7f0000000140)="7a0605b908b157d88136c7bc3eb3b9ce6836426c961ee3889c40f401c21f79366ed67d67f7813c85d8dbb2760fe1487737cb7c4fae74cf59176eade2a1580bae496a98cfb20489a5c1d13ee78343d9c9407ce3ed676d487910babd1e8cce75f9fa4b75b5ea2a838cf17e375465b6ddcda9e196d71d5efe9ad44a8d9b840dca8d958ab8f016107a30b5777bd0e952cda9506531931923597a254c353416f9d5976aecfd422f5c6071270b4719c797a7ab6ba144ababc13b33397fd9"}, 0x10) write$cgroup_int(r3, &(0x7f0000000280), 0x12) 03:41:25 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:25 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x4081) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, 0x6, {0x10001}}, 0x18) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)={0x9, 0x1, 0x3, 0x20, 'syz0\x00', 0xffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 973.871969] binder: release 14909:14912 transaction 4579 in, still active [ 973.885845] binder: send failed reply for transaction 4579 to 14888:14935 [ 973.924708] binder: undelivered TRANSACTION_ERROR: 29201 [ 973.952581] binder: BINDER_SET_CONTEXT_MGR already set [ 973.964527] binder: 14951:14956 ioctl 40046207 0 returned -16 03:41:25 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x2f) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'\x00', r1}) listen(r0, 0x100000000009) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x6, 0x18200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000001500)={'veth1_to_team\x00'}) sendmsg$nl_xfrm(r2, &(0x7f00000014c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10104020}, 0xc, &(0x7f0000001480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="90110000200010022abd7000fbdbdf253c000000fe800000000000000000000000000019ff0100000000000000000000000000014e2300004e2300090a008000ff000000", @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="ac000700fe80000000000000000000000000001eac1414aa0000000000000000000000004e0400024e2100040a00008029000000", @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="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"], 0x1190}, 0x1, 0x0, 0x0, 0x14}, 0x0) r5 = accept(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100), &(0x7f0000000140)=0x8) [ 973.976779] binder: undelivered TRANSACTION_COMPLETE [ 973.989193] binder_alloc: 14951: binder_alloc_buf, no vma [ 974.012010] binder: 14948:14952 transaction failed 29189/-3, size 24-4 line 2973 [ 974.035433] binder: send failed reply for transaction 4582 to 14951:14956 [ 974.044635] binder: 14951:14961 transaction failed 29201/-71, size 24-8 line 2741 [ 974.060726] binder: BINDER_SET_CONTEXT_MGR already set [ 974.086285] binder: 14951:14961 ioctl c0306201 20000380 returned -14 [ 974.091168] binder: 14948:14962 ioctl 40046207 0 returned -16 03:41:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) r1 = getpgid(0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000180)={0x5, 0xff, 0x800, 0x4}, 0x10) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000140)={&(0x7f0000000040)=""/242, 0xf2}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) 03:41:25 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:25 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x2002) 03:41:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x264) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000040)={0x1, 0x1, [0x7f, 0x7, 0x10001, 0x2, 0x9, 0xb5, 0xc6, 0xc2b]}) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0xffffffffffffffff) 03:41:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xffffffffffffffc6) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'bridge0\x00', {0x2, 0x0, @rand_addr=0x4d0000000}}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x40082, 0x2) 03:41:26 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x280100, 0x100) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x4, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0xa000000, 0x0, 0x0}) [ 974.749894] binder: undelivered TRANSACTION_COMPLETE [ 974.755978] binder: BINDER_SET_CONTEXT_MGR already set [ 974.768289] binder: 14972:14974 ioctl 40046207 0 returned -16 [ 974.774549] binder: release 14972:14974 transaction 4587 in, still active [ 974.783353] binder: send failed reply for transaction 4587 to 14951:14992 03:41:26 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 974.800575] binder: undelivered TRANSACTION_COMPLETE [ 974.877739] binder: 15000:15002 got transaction with invalid fd, -1 [ 974.894635] binder: send failed reply for transaction 4589 to 15000:15002 [ 974.895458] binder: BINDER_SET_CONTEXT_MGR already set 03:41:26 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000100)={0x10, 0x5c, &(0x7f0000000040)="35d68d3543ee3ea3b857b2a14aaefb0385e922ecd6cf36f25525c0b2e3d54f8bb994c50921191a8ae1ee369016e9b077013f1889f945a26d1339afc001a2e6846b7845275e1523fea788586729c7b7c1dcf66f5d3eaa7968d0d1873676e74cde2bc973268060bae3076551adaab212c65a4f54c3ba70aa7e76fc0be2ebe692d25a2ae01f2c3a23b5bce5c027f0772ab997f8f1cce7d11a112e6544db5e05651715377aa6a994e451b170b9d784224d1e", {0x1f, 0x2, 0x42303159, 0xc, 0x40, 0xfffffffffffffe01, 0x1, 0x1000}}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) shmget$private(0x0, 0x1000, 0x1080, &(0x7f0000ffe000/0x1000)=nil) 03:41:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x2) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 974.919943] binder: 15000:15002 ioctl c0306201 20000380 returned -14 [ 974.928971] binder: 14999:15006 ioctl 40046207 0 returned -16 [ 974.955157] binder_alloc_mmap_handler: 6 callbacks suppressed [ 974.955173] binder_alloc: binder_alloc_mmap_handler: 15000 20001000-20004000 already mapped failed -16 03:41:26 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000000)=[0x2, 0x3, 0x2, 0xee8, 0x9, 0x80000000, 0x8], 0x7, 0x9, 0x1, 0x7, 0x5, 0x3, {0x80000000, 0x100, 0xf7f, 0x4, 0x2, 0xff, 0x101, 0x5, 0x100000001, 0x0, 0x5, 0x9a, 0x7, 0x6, "517be99ef9b7397d53bae064bd84965b23ca26c1250af1040d5f29e0c15a8a32"}}) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xb, &(0x7f0000000200)=0x0) ftruncate(r0, 0xf75) r3 = open(&(0x7f0000002000)='./bus\x00', 0x941042, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x4e22, @loopback}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x6, {0x2, 0x4e20, @remote}, 'team_slave_1\x00'}) fallocate(r3, 0x20, 0x0, 0xfffffeff000) dup2(r3, r3) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 974.999030] binder: BINDER_SET_CONTEXT_MGR already set [ 975.016049] binder: 15000:15002 ioctl 40046207 0 returned -16 [ 975.045581] binder_transaction: 5 callbacks suppressed [ 975.045592] binder: 14999:15017 got reply transaction with no transaction stack 03:41:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x13) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = msgget(0x0, 0x0) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000000)=""/73) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 975.107341] binder: undelivered TRANSACTION_COMPLETE 03:41:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x2000, 0x0, 0x0}) [ 975.324377] binder: 15028:15029 got transaction with invalid fd, -1 [ 975.346761] binder: send failed reply for transaction 4593 to 15028:15029 03:41:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') setuid(0xee01) faccessat(0xffffffffffffffff, &(0x7f0000000040)='/', 0x0, 0x0) [ 975.385090] binder: 15028:15029 ioctl c0306201 20000380 returned -14 [ 975.414157] binder_alloc: binder_alloc_mmap_handler: 15028 20001000-20004000 already mapped failed -16 03:41:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmget(0x3, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) r1 = shmget(0x3, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000280)={0xff, 0x9, 0x4, 0x26}, 0x10) shmctl$SHM_INFO(r1, 0xf, &(0x7f00000001c0)=""/165) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff7fffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x0, 0x57, 0x8, 0x100000000, {0x0, @in6={{0xa, 0x4e23, 0x7fff, @loopback, 0x5}}, 0x3, 0x80, 0x9, 0x80, 0x8}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r3, 0x3}, &(0x7f0000000180)=0x8) [ 975.459026] binder: BINDER_SET_CONTEXT_MGR already set [ 975.478434] binder: 15028:15029 ioctl 40046207 0 returned -16 [ 975.517471] binder_alloc: 15028: binder_alloc_buf, no vma [ 975.528384] binder: undelivered TRANSACTION_COMPLETE [ 975.543944] binder: 15028:15029 got reply transaction with no transaction stack [ 975.551442] binder: 15028:15029 ioctl c0306201 20000380 returned -14 [ 975.693710] binder_alloc: binder_alloc_mmap_handler: 14999 20001000-20004000 already mapped failed -16 03:41:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1b00000000000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:27 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000340)) syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) ptrace$getsig(0x4202, r2, 0x572a, &(0x7f00000002c0)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000240)={0x959, 0x5, 0x4, 0x101, 0x19, 0x4}) write(r4, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f0000000400)='/dev/midi#\x00', 0x9, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:41:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_user\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e22, 0x1, @remote, 0xff}, 0x1c) shmget(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r2 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r2, 0xf, &(0x7f00000004c0)=""/165) 03:41:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x4800, 0x0, 0x0}) 03:41:27 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x404}) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000180)={r2, 0x3}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) [ 975.834304] Unknown ioctl -1061399792 [ 975.839885] binder: BINDER_SET_CONTEXT_MGR already set [ 975.869001] Unknown ioctl 1076909650 [ 975.872872] binder: 15050:15056 ioctl 40046207 0 returned -16 03:41:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000b80)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001ec0)={'team0\x00', 0x0}) sendmmsg(r0, &(0x7f0000005880)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x4, 0x2, {0xa, 0x4e23, 0x8, @remote, 0xeff7}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="d2d0f26f033d3d023a55c4ed075d1c1f2d019c230bae997d492896113bf7d66701bf2e2be5ae47a90089b2cb5d42f646aa52804d2f07ee8914aef9834f74899f6fd75cc1a5e0382c8e0e81bd476d6ab3aa82b2fafe1f78f4cfb754138668034f77df8a286974c6485b39dabb53a4a56a948e79306c7d58e0ab262983e20d6b72526ecd4824310a1dca4ccbb4cc7b79ed5ff942947ed683554f915f02e835b9ce222faf81052509587deb8bc27ea011fb82d5cecc1da5229852d98f6c75f1f820286d49679466a7651db639", 0xcb}, {&(0x7f0000000180)="85d356f56f5efea40bf7450e66328e18156edd6e54efb67568aa73d29ae51190e4b17334b576bed79728fe6738b9b4cd7ef24fad73a787d5ae74c689ee007e82de0ce30a8395a6f4e98e2ec2255c4fdda8aa77786dc7c319d27ec2682538a53f7bad6ce67181c287febb501a4628681f6c83d01a61dd072c54758ae0cf954130246dbb0fa5a7a9825bdc0da6c55320d2d4622db572d6b28d331074f743d3e8ae5239855e22ca5ddac58ff984b19845210ad08dcb9a82766d399fb068bedc308c0ee690689945b07f39e228a0475af4b5b2d51ff9", 0xd4}, {&(0x7f0000000280)="0d548efeb1", 0x5}], 0x3, &(0x7f0000000580)=[{0x70, 0xa9, 0x9, "4752ac5d0dbe548048781e9667189021d15e91e340ef5299069f7769434cec17d3cc1d9d57afb9d86c568ff330e23bc5d225aa7dfdf2127cb9c34866d6c9a2b9d9882bbdeee710562aee6dac88c2350acf9acbf13496e22e9fe835704c7c7341"}, {0xc0, 0x0, 0x6, "e685ab910b45c3089c849bbfaf76fb9289a26945a6a569990160a8d3c52ad416718f2595d2340d7d3618de4e39b722469e79b0dc7a80559dd659ec3484fbf73dae7ea9e4e7859631d193ccb03cf10163cad97e844c0a7d390b087fcbbf1653f9b3890879a484c618ab500fdb3b67b4220e19c98a65f64e4eaaeb0d51ba2c7ebded2a3e26e9abc8f0aa5d8ec75f685d57d1f33c9e7e01234652c48c6aae39d0b52803581a9899d09a210e0002b228e80f"}, {0x110, 0x113, 0x6, "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"}, {0xc8, 0x1ff, 0x6, "a9451ff84d5fa9a406d71200ff92f30da219981ad4309257abf9759fcba5bb13102ef11c1e42363c5c34d37c0b8c5e0f9a0f169f013f687251c25868b2802b0b4b8f22a3e2cd2be77641463035c6bca913529216c30bb45d156a54effc8de6b75c1375668b62d5b07ceccc04c650d717b24d4f2181672aa267f2d659480ea18c7578700f3337cacd3fa624638efaccef062a937dfacc814f24fa067d79ea40c6866cd530e3927e50ddf2ed9220547af31c3ad7"}, {0x88, 0x10c, 0x2, "e91b82f4c991ca1fc484dd0bf93d22f2e66a05d74934c79b76347857880974b13a6d64960b0d79bb4718f78a0282aeba529d2461ed482df3d44ec9812409f16c5110e272b7e16c05b7a6403ea55a968f89c1a5c3cd73cf84ee9cad54901428cc2c7e50e038e04081c69c203db439c0d40828fd8d"}], 0x390}, 0x3}, {{&(0x7f0000000300)=@nfc_llcp={0x27, 0x0, 0x2, 0x3, 0xc8, 0x8, "e29c1f1526c9ea33f292dace9091afeee0807b6f53dfff83258c165f95a26add299e16b907d80f9f82c5fbfc415c00d92f43a10c8fed1150d63cdc3b9a4600", 0x28}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)="d001875e8bc54e4c643dbbf7dab6600b0abd73326e64ed1fefa6c2b074be616c751a869457fb99b6b740ceeb87234fdd168ef71af8f893fbc6e9ee1eed3a", 0x3e}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="5800000000000000050100001f0000001a6f25da30ab4832fb714eb8e42c07a2bc18f5f38ae084bea23429c5d2c838d8d44b4da80472e3668c879f125d89de4ec1912aafed69af5f70cb2b0c2fc98c8cbe1d000000000000"], 0x58}, 0x29}, {{&(0x7f0000000940)=@ipx={0x4, 0xfffffffffffffc00, 0x1, "955c13afae23", 0x6}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)="d5cb272545d373d18e46", 0xa}, {&(0x7f00000009c0)="d4cef04245c41cfedbea328486e770aa29cac21013d21a4d549f4ecb47296fc49387fb6cd452153bac8baa0e240b9651729fdb", 0x33}, {&(0x7f0000000a00)="5e514679025668e7862969a3ade996a2916b1a", 0x13}, {&(0x7f0000000a40)="d742aa09d1e6c59213e9dbb8a1533a48dd9113748171", 0x16}], 0x4, &(0x7f0000000ac0)=[{0xc0, 0x195, 0x6, "bc969cedbff9628b8c1188dd8c1498c84e26c12ee5c5383a1f2a78e9ebdc41e9b0c7b51f0c0e37ff35ddf27382e0f692b0608fdab04c4e40a6774c5b1caf342fcbce1e4423727a30db46b2535bc815de73233768439780dd344f6f485498db5e7789e0e4d7c753d5096e8c0c58ab17c1efc8e9db3e090d58e9ecedfaba00290f63a1ebedc916811ca01a746d4ce7c1fce779ddb1160acc80db63fd93340a1bad0358bd8df099553027a717b0d566"}], 0xc0}, 0x8}, {{&(0x7f0000000bc0)=@xdp={0x2c, 0x7, r1, 0x1c}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c40)="520a9de6569c5ccc4b3fcdffbd6b7b9e0d4498e567d3", 0x16}, {&(0x7f0000000c80)="67400167c8db3bc6df50a872337d51ab105f8f0ff8f0786dba6810cae77188ecda3dfa4ee773db634d6418275b98936a917d490e99b8c370441080a11b11eb372640e45a5a9b3cf0d5cc2ae3eb004f2393fd3e9d6b3ee66828c1197d1ca9495163753fbd283270aa313a76aba52b6c6a3d2f60d79247c7236e5c8313b62619c9139ef8dbf6b34e92b0a67b7e86486d37fae54c8cc1f285f08eaa13aff3b3efe7608e22f2db53e4d8f348b89990c56ecbdf6a", 0xb2}, {&(0x7f0000000d40)="2a09bab2be245eb90917b2b82d59bb2e1383c69b2cbc88dc2cf3adf10f", 0x1d}], 0x3, &(0x7f0000000dc0)=[{0xf0, 0x105, 0x1, "d230023a9a090c01213798b7906c2792af86f6a4d56f7c6724e7e151eb2089702bbd8d85921cbb4766d092ca805512fc23b9c37b131bb41d7a8991277a1836c7054d17e4b2a54ba47c237cdf73a61b5911645b865158a02deddeb9b64c9f51c43c40542720db79b46982871b522aaaecf8b1ca3a2ac013fbef7639b25d3d576d7298f99b1c1f765633537cb14c8a2cd940e53e226fa248b543f988be4e0f73f3522e9822f49911b2713f0c5a38c4fd67edcfe920ac2fda2b9140053387721036a9fc12ab319bcc6869d24cab5a47debe820d2b84009c23b799972c4f11cd78"}, {0x1010, 0x11e, 0xfffffffffffffffa, "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"}], 0x1100}, 0x3ff}, {{&(0x7f0000001f00)=@hci={0x1f, r2}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001f80)="07b29d17690a6fc9e0b7ed1bc520180492f9e45e812a6192695960f55c872c1d17d4f457a810950a0d4d4f34d60274b1cb97732270ec9ed366e20b7d64a5baf768835ea59f03512cdc8fbeb83f581d072ae4371b", 0x54}, {&(0x7f0000002000)="b66e885e102e187059f77ea251a3ebab3dcee648d0b08d9836ed9ac2bc6422504386d7de4f021af36a33b5dc673bf99f92", 0x31}, {&(0x7f0000002040)="f6e5fe722eed81599622af1ec391ee84723176307c292d2d2f3b3a3b42b9cbcff8a9e9e9018d19bf1a80afad6a5d2294054204bd0a51cc3db57b889230c4bfea143dfe441cd41648dcafcdd7119f90f14fd19c1047ddcc03790ba2e3fa789bc3e0be8b11ee67b1bf7f79d70f95febe1b7db9a44e39a5902976ea71c834a1abee537f10f426407330c9bf6b50a0d183d0f74a830d60f7e7a16d7c0bc77e0be5821ebe9bf32d825ff2214f4f0be27ffae3f2f59a9539cd310d7a94e9ced0312d2955c6f4575f1ec341aafe7f", 0xcb}, {&(0x7f0000002140)="f2", 0x1}, {&(0x7f0000002180)="fea7e62d0c1b26ec65d7410fdad25c43cc5b35f4e6c1d5ed73e49d5093bc259e913a2e19bcc92a66f343ff1d8a3c995a9addccffaba1d6a9f4c0bc", 0x3b}], 0x5, &(0x7f0000002240)=ANY=[@ANYBLOB="40000000000000001701000000100000f4ebd02ceb22a654987887b216778d9320c74b335d3393ef19a19bde69ed6bf74048b7fc3e835fbf45b2a10f00000000"], 0x40}, 0x20}, {{&(0x7f0000002280)=@sco={0x1f, {0x101, 0xffffffffffff8001, 0x3, 0x20}}, 0x80, &(0x7f0000002300), 0x0, &(0x7f0000002340)=[{0x108, 0x13f, 0x96c8, "3d187b2d0855267e4b0a7f68b2022a7a4b343468dc75fc9dd9999e8e0ae110b8c12f7fb62cfe0f529c5069acb829f66ce85e375d4420a2ee0c41b7f36176ef6ac39ed980485e12bcdbabb56e48e381ee0e2a1853033adf116a9d514ef7409a70d02ee370ea720ae83e69e5837ef1eba0c89328134306c68cde3a1704c6a9e12908a13e1491454f5d5141dafa219c4cdabaa0f6f1c0bb08f1aa41e181e362798c96243a16ad8ff72a04ba6238d1efad94040dc12b26073b5e9ace0fbb3ac720954b409d532978677d76357ca9b554c15495d8f4e486b8411e55069b22394e1ff4b3f4d708304bd6cf74a1657f54714c13c0"}, {0xa8, 0x8e, 0x1, "5bf6370c9a59ee8df68fd28d69b9e57eb4baacb2067b16bf4adc6c6e5afbd8567951921cca1cd045b0b941ff17e53c8288837dd3997fbb91a594b0cfd116287942b6e712e9a2028696e9b1cb64f6b280270321ddbd43aecda789d142859b17050f196651e659ae25b3fb22817fe7a819cd02261d8f8fc9d79d6cd2fc098eb9f165fdecce93be2dbd4c1138d4067323e5d4f7d70b7e"}, {0xf0, 0x187, 0x7, "c4228fb2d2f59f9ed7edc8241897a6b8c3f33d4be8daf0954ba176b9fff22d46d5218369baa39ffb5a3fc3058901c153ba58525d2ea5da7a1f29230954202a3c65d15722f3699185084046b19fa633901368d4141659496f81b8feed47013486479fa5aa46532ffc2ddbfd2791edee03de12f37690fa183340989ecc1072db459c3d59a0a878d2e1800f9b505a5e719587e992557da1d0f1ed52fea72b5bf7f403cb4a12cd3bbe4d358afa27e3b907c28fbb4bfffbb98e408ce69def284f7aa86deef55ff53971b722cd071d4d0503c9073a94b2861bc18b9baf98fc1b"}, {0xc0, 0x11f, 0x5, "be6e4d733a711a5c6ad52cca1b71deeeff4415be66845bc4629baa574fdff4866ce43dbcbe08c146119dddea48a3d8b7ff32c169e69ef95e630e7acc4ada07558ab423e575ab38c0c24bfde2b6e30220cca13fa00588fd9c825afe6dba6cc06f87754a2e1b4bd9b2ac11c2ea5b52411132f1f3812816f28df46a385070f6ff79e202a7a93a0575f433a9b7077f5503683a98f5a1a829cbfea83eb62e4d42aba71614028c1b919a5d92ef799d5c"}, {0xc0, 0x6, 0x8, "e3a7dd464a54aa003dc321724890db4b6650df0b52b0c7fe6cf32e7c1ea64e63b9c7c7e658e94784cf5f7406a80dcd2e6219a0fbda0cf9bc948e3b6219255c7d1a9a565ece56607145dcaeb0e157a1fd3677b1546808a0eb8a867c8f8576ed7d28026e53772f50b25a8fba643ac83e8d887ca21fde5925f768c6c8f27f54c2cd222898f7f68c10fb9efa387f196a82b4a1207bf39d43a3e846d9529442ddd6dba9248f55092aa003f43af5"}, {0x10, 0x10c, 0x6}, {0xd8, 0x117, 0x4, "0b0cdf6e68647e076288334009354b899a3aeb092fd9dd4429e5bb987532e2f4d4f01027f95eed4c5703d995c66ec399b7f563811e5bd6e490a86d6ccfb16a352cc98162f17f86590b226599e074cd9789869513b7bcf3a093c32bb93bb068747d1722eb0cfa255f82adf4d9691bc0690daa2d76ac3d57e0711c871c6d2c85798453696cbbba4973adee79cb30de96c08abae366adf0d4009f474ec34384d90bd94ca4c8818a7f902655d67585ad60498c387c387301690d056fdd98f77fe2b3b570ab7c7d"}], 0x508}, 0x80000}, {{&(0x7f0000002880)=@ethernet={0x306, @random="13b817abab37"}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002900)="7d915d08c801e339799505489f077d4ff13713f9bc20249c7ff1f47f0a90", 0x1e}, {&(0x7f0000002940)="9ee17052587974f6b489ae3e4c8314cd267f0641694f0560ea403cf7b46f3933496d3d53aa8f04ed11222a56c76a8029d1ea445bd0033a06fa6168ad649f3ff20003795a449efc69dcf344fb985078a2330e034270b55d6476ccd2674ebfa079220821f444108ac2a59b3d5712af838d161eb5b22dded7b15d140110611236762c1eeaf3852eb4c82f32822e119415edc7feab33e6d007873bf821358c42369d8b44f33a28aaa08411e5b5cd6ae625b3f5a88cdd305824c2c9a301cc0697eff14300595a53548a3e3c0dfe27f081e4d2c51c78b7a4520ca5d600d1fd3b530138", 0xe0}, {&(0x7f0000002a40)="a974732a5c8859e7d8ab3e8c54f543b270d1a2cec4", 0x15}, {&(0x7f0000002a80)="ce15f5fb77f3a56671eb71d7f70fac58b9d2ce07705d40014eac7d70ddbd7c7b2e930e5136f6be77fdcd794ba45b23bf56623723db53c560db974e774bc764b66d339e452a4d61404d8670062f41ef347c10e97abfc7a804a2f046cc1933dd820a07a430e60b978c0aa4f8e89e6eac175b0288abaaa9fce6661e29cc2238d87d322c03bfab86750c020931b86d78ccd89bc85676b8", 0x95}, {&(0x7f0000002b40)="ce842e9c2097e19cb75bdb1677df4685043e0835a168afc6b8bf13d74a55473793ceecd659c0c24e294b810910bfefcdec5fdd4dfe2be4636bd9b0c5669d80583acb70dca6ac699277ac43eb508e7f66ec6592cbd7d5b5969287f63768e555321548bcc2ee9f0d33f3b2f7e355d680c242972678444aad72de5a4e7133eaf40f74775a4e70ef8e8f0c6f427a83ed39d85b9ebdc5354da19273b2b0d959edd1dd8ab6e525f6db52765ce580b5b5385c8d62bed0c70c501004beeb828f7d3d471d607222eff823c0f9c4f7f8ca19a138fb5d1c653d80a2e11cce8e1b72566512d9f55aa959d3deaaa4ccca3bbcf418e64f90f52217de", 0xf5}], 0x5, &(0x7f0000002cc0)=ANY=[@ANYBLOB="f0000000000000001f01000001000080793c3a084976bb0de2396c81987814dcdd3508d37d4985e388f5ba9c6dac6d3a171478608cfa53763b7ba358af7cf5fe1961d8ce0f202e75a1fbca378eab122df5c57d0f27f1848774dd6980390cd92e97a40cc131b24f39b24cbd6c1a07d0f7eb23d5be93c2acd8905bc0e841d3d454da9ddad7aad9fd635df29bbce941e74c7978764a3fb533444e63c901998b7dedb57f8e53153fa066f07dadaa639b351f9ecdc7b3e93eb7027a51fee041ae50c32b219b71d5abf8eacd5e048d95c81ee6de19b3e6f98322a4b908d1491afea57c7acc93fe68285aa387a8da8d42fafc1ed0000000000000003f0100000000000878c2e6de6c6dde42fbd061e4e1d77af2d518574d0d7279a2035d8a26b4c7111fc0b0d280389acb5696e7e4da38ba89e112ee2ceda23adb588596199d230a35f639dc5aa56f7ae75472304664987a95953b77ab2d83a40777ebc8be1bf3c7bb797955f80c05a1d1ee76e6f37f223811f9d43ef055f20d83b796afaa36ad08e909e36c5e4797410195227e261fe3e76ac8ca4fbdd0e8ba14264bb753293bb0dc358c7f1ad4a5a845f40f6561c379a4a3bf0752551079823951cc00000000000000d0000000000000001f0100000000001883b7dd197fc6ab2bbb2d64857cd1e07590c43967251ae478321830631fb9098d3488e90f0e82556233fe2566a0c3909b8f91c260b6393e3af367c58cfae686b9a34f6c47db81b7a679beef46b9bbe4745e15c210368b7a3d0596399cc85483f1ce69491b1dcd38bdb83cad736475ff4c8f209bbb0848d646761885fc5261555918231c46c9d27dbd4ebf4a82b8ccf3912a0f6067187eef653674e7f02803c6656a83c95cb2c279a57eb5aecbabeec7fd6bbef481c9f80000000000b8000000000000001f010000010000005b5f455f0fb7f61336ffaf8457f42f0415df6ac61af45f93cd421b103562502d3563a969e89b0db282738cb37123f42cf3dd72530fc22a8152303cef87e457c2c7a72445d9ab4f93a335962191b4c458c30f88aec8206ebeb92cef093a84a7da4e29c796e132fcab37f742b4163c244e23bc53b0acd0c93cf8af3a5c597549f5f141b54565a6ce43eced338f95575b649c3a39a6df0e4d6e98a4cd606da2ddf781b97b1807d59500101000000000000001010000810f0000c3f85b7ab8b55abd22425550b6a5fcab6277ed24fb6db68603564f6c69d19bde2da83feb9c90ba1be39caecb0b1de578be668b61ded877447b4eb88d768a44792f32fa1370d54c95af862781864dd1e2aeb79bc79df80054e8484b16f99e953ca0057f31de67a92ff5e9f06ec49a515716f49d99660ab80bd92c292a0ca6aeb9a276ee3ddea0f85a7f32935c0625c81b63a802cfae38e9e0e72634ed40ccab13828c70ec5129c5b4bc41759b2e218e5e457eb0db83e405e443327634830fdaa8e26a87db419f465ca47790e0c70d2b0ea9c02553038dc461602058901889db5a78532575afff70a410a8151e079058689e2c5ce02de4286806c892bcc26fb4d2ac7b278f9ec9df9b9c776ad6417c5b0bf62a981e0b5444ec7f83f88e8ff0986370ef0c8a4e03dbb06c8910f3bcd6197760e44eb8a98bd774d7c7100de0ce2d1b0339a390f817743f98fe4086f7c0a5614767f0b34f1d48b10aaed2b7a12108d92b85fd11e023f553b53ea1633915e55f0e1dc3cdf129e962fce97a1b7e24016ad50559d30d4dfbe10fa09294add502617b1b1b6cf38c6ba449462fff1afaa79213f06aa24a6c079408f3eadc49a0120b233983842350d84a0cb17079b10d8b55783add44a8c600161aa583a36ae7b944917d783a5db52bfacdc86cbcd4a47f7e1e6beba6a633cab4e944781b58bfae203323a3b918e4969235c46c6de117190631bf9b1b9a5ad431a38a6f6c0aeb374ab4de78d2c6950c93b1d99cb8f9fdcf0bb7c7f3d416ba8ea145f4ccee80d1a6ddc917be50773c366a46c4e5758ff710c0566f32bd504e5937e179a5088f9a494622d9cee03b0acbdd9bebea5aae0391695aa2e2a968aada6bf360ff885c9ecc6b5019aaf97f96a9f8aa05ab0b35d4f412074e085f5eab44cdfeabb48638639dbfd0606738ac8492762fc72e091ef24f3294762e8c413f221b2a70c8b54cebdd5649afb7089a4bc1f0dd5409e37bdeddb211a36b62eccd80ce33fc2035130364a14916d3444e61d1da4343cf8f4a18a05bba80bb56db5610ab2c602472e29dc0e226213a99df8f14b2db1e32b9e704d331ada410f4e3de9952d4ab609a8e70755f85e19a1f00a03e17641abff37ce49419b43cb9ba720df1b10b42ba64c6240c78ccdc1af662db1cefc29e85e5785b2b1e30ee8c6d4fe7e047125be2ed06e85faeecb3505fa179b7600073356878436cf5c24a686daa1ba5685406c12cd60a0e8793f3c0edfead965aeeecee8e79f5023d5b5da3f9fd5a471682bbf867e24f4b54f75506b2eb351f1b950fb89454667fa1f974f05f5020c42b75704e25c9c4549799842a7eaa89f02cc9fd286ad754c408dc47c1982b8f9e772f7fb742f8603debcfd4705c8bd52f7db7ae179f5a146d39a7a3eae0914942e07ad5d77d654d7a1c77d6ecaee347fb59f25c603f6d8a2fd4d391c38506e6241ca5c5fb7b5af90ff66a31293445bb28a504452511a81ac5ee99622643e501b658bde8bd29da362826972c77176f9e07be7978ff8f0946a32be4b883c02a2c9006333ab9dea4267c5f42d4a8a552e57a160c7ec9c4041fee906e87cfeaba76ab5aeb70e03f54af8d21d43a1c2e02b6af5742f1bfbb2aa515c64e87c7d7a88d4edc4fbbda6e601fd2cb5519ad1a3534c48ddb6830885ff20fa2c429135700446d01953b18472e9eaca17ac8542c691bfd601660cafd295a2dae397b2e922985f5e38cc9868409a4c015218741402ed588487cda8aec17ed734439d834cf08d0a32d286c345003f7d43d9a0edc966524c072a8a9dff66fb57f0e93a6632eed056225c9ba12ac2a4be178838a995ed1c7d70170aea8765a37ab219ad6931501c58a5ca2257a38140cbc0f046da674a4b6dcfa9c8d7807427b92e3a65283526d8049341f9deae12cc929c94d1e5262503edf6b2466f4a0e27857290452c88b83eb384ec16c1958357a7e737208a76fb5c78af54421e85d24e8c8425d8ef48f3bf468ba99fc5585e0361ee2a3697e29b2c47c107ad4a053ca8b3e03bae186fd02157bd7e9bd553770bea1fc561489b4d0b7a46e75caa3908a9b936eece235fe470f845266d88ca00738e2c1a1f9692c3fc0dfe3cf7b57007a0be11b73c5803e9a76ec0a0375426d3b62426a9a408a200528ec393de10189b78298ceb28b6d2cb72a4f35e2f6cea8bac34c1893bd250db8de322c23f225ea01ef54bdbf4422c5ee6f3e068128f0a1d797237bf60b331eeb3043420ab9c4d44d824663b3ee4d38bee79756d0740add55bd9809ba9300679a69d93b907fdc586c5b9dfc5b11a45849745b84301fe14e99f26fc25a2d870d47ac913d93e67ec173fa6817d6984b8cd041524af832d43d934d0e5f6fd5a5642d42b3e132998c5ecc8362029a2629a95643cbaf4b33b3457946eb80d76387d9e27c2c8755b3825a565f4f0f8425fe432a7c1190de560af73f18bd68a9091137b5f667c6432594b6461dfe314969d111b98e9c2e9eaaeab81f4cd7363420dfb6735f03c77234fea15f4b050693ad988a6573298174552830276324129606b7d748b48a6696adf3f703e8728594c1504e92adc2bff5a9772e8ec10576450085519a77b8bbe00c15078e4adc5d532ada3bee8e5e6bae3f0ac7cc21bfe0728f84b35d7e5a3fffaf6a7a93d4cb2baf1dc1ed6dfc8ea3f6a32c07a34dd32187f46f751f2176cc33d9963b8544130999ee4288d3d20933620d1f93ce300a6c847d0df043ac3beed7703a17b82530b5b1f32713e47777d27f1d7ab828f54daf21ec897ae835aeef153fd395bdd170efd2a0ee0bc41acaedf46f0bb7d4d4d2c2182bf5893cb88c863a41b32ee0085b1bf69d984c2c1db101c399ab75ed65ffa19ac79283d6359e16033efdb5435d509218bb1de1ccef36ed84c86b6e6001475c1a1d6268410ae19f4b17e5b3ccbbd210f5cb05ffe7cd07f03e224dfb2fe5aa137ffdee900e7290923b4da9f13970dc783bc53f20c78681bc302379516ad1b5779ddd4bdf64dac79c4db0c9c14a64f0716bdfbc3bddacb43d36ce57253edfec5fe9d42b7acba029b2951c8d2df7f80b9366aab95ee55e27f7f4247a6ed3a9c00a14cc0c2db9161413ed27e26c151594bd5bd2b6cbd8db030b63e24e8fd4502feb48b25ac17cbdb307525c75e714c6f1a9c0c645d3ef43badf0ff78e6d882c94cb1c59ad36b756585ed472317fb23ceca85b63b7c5cb8e0384b90f7e467cef68caf09b01c58fdfffe49a4ff777f950689ac8c470e9c7a1e5e949b68377fb2fdd28f5a094005ef8778ca10722c2ceb011cb8219618de5539abff5550f25cc89237b190603bbf64e934b16d3d994182d16f37c500fa81faaa02f3c2605c93e11a711991a7cb37fcb4df4f12fc4d99c70d748253567b0538e5b3bf175e0f1256e77867823b605f067124aea2ac55a0eb06581213a23bd288e601f5b0c4a1ceffd6e5094ebfb54d59e1a0803092c09b8b0061335ee08fbbb1782c353f7efae8ed4f5064de086134a331a03bacd5de163a07cde090a9fc8be0b60a9ab7f641934e7e7789d303c65f46510edb8a63314b29b362db95fe28108c089ba6cf405ffafbca971266854fb72077ddbf5f427376caca41abd17afe63c07b27f0115081f6d46ff8a87513e581f7591fb291d4c41486c1eb0c8e4ab591b28e66bfbadbef797a07229f677a39d4671dad400a884f02e27a41a19b1532fd9a74f57e4c248c6f918cfb0ba0fd4e5debdc1a46d3adb49278ea3c0ccb7fc48a2b6b9d2bd5d9e25dae4cdf166889ea9ba342da753d729acadf87e6c517e239dd2f858516d3825f53fb8c4e57f0fcb312fb9209b6c05fd848ccc75a916d30cc3da575b4a2b7d5a96da6d28a4f180ce6cd683b4cf731db939137e4661e5091c63bffe7051d112f39bc1500066b334846b68e7bdf6c538ad5b123f7b4e22578e22c31c5d0411331407bd72a54af9c68c9b971dd477e24e601a14437a0444dc332dd67613e0be4383fc889b98edcc18d92ba3ef0e04db77fc1ce65ef0c050cc252d9cd955a1f3b88bd46edc383b0a761a62af7386bbdd2d2c71338349cd8dae3d6e2c49f693e47fef00dfe9e1600ba6c02b62f38bdcaaa230d097f194b51a77e30ed88be9a6dc3a411761b297742bf99b87c3a70b5bf1b1d77804b7986061b75a4119425adadf1f6cd5ecaf4f0bc71684fc54f322fd63fdf535d1739872553a19ec66436f2446cc3e2356ab41368eb8eadcd0e85cc272ce3b9533dd0fc492868b8f284b4d7af056f707b1b64eda593022fa32bfa645540edea78a05bf859c0e0ccbd2495a7b976d024c27d121a1d6f1adf9c806190210549c5880900f3a1eab63c0dd25610e3d3ccdb8c385da3902c248b31ae0286fd1fdefef0a4ac7e5caef7d60f179ceae1b24e79d057aa1f76ce097370499ba843f913104cdd78df08c311a93acc70d4726cc3d70a409f19aecf72323392df3afe32cdc2dddf56f35e2a9b076aa24eb880cb75cad84b1afac6401b4eac0578dffaffca78816eb3ae9b283181119bfd129a732fa4497b5807d0bbad28327853e0798d6b60c4716a6c6ae655cf6d729f4cb82532c1cdaeb8c49c58413c13bbd27326c0dc656f20666510b7496a89d7456969dbcf5ca38f3aac6c1db294148fa08aa181531dbd5a31dd67802ea5627d9137d6e00bbd626f7563da83ae1052423b693a18dadba110c51316c0721661964731e0094e169ce2aa6e246e286ba1c2851de69d4163be168775b086e98cc67ea5445280a106e356c2fd1012eaf7cd0424be0a2b7e5389d6b2dd57cd8497ff5fa5ff3319ba3717f1cfae57eaef437f0b1d9405c2e89af16ef03b827878f40f7b0104110fd4120a8e2394c690f7f26898ae32f0b0840f845717ec88590a4a3f8c53304fbcbe20678d73c060ee020f266bab389b47ca0d67cd2bff6976e6a450ae2636b340a0a3a5615a355041d91a5ec6a0e74ba8233c30e6ea0a7c1a893ec4d2564036cad2427098a7b914ba7fc5a50a8d047487534fa81d1540c7d1b1c4384a3d4e8ca84ea1d8b24aee4ecfdff3f4a4ad7767b63368d4abe69ac78c22647489347fc5fdfb003665343dfe957e4f14e7626e6ed3b291547ddee3969d271ae0669a2413560dcc8f22f42d08b2a69cb8b0d2fa85307b29b73f5f2cce00ef981c52bbee34da4040d09be0c04c72ad212860efd6f48cef424018e561890e26fd25c52bf177d29e64d35f129067a6f3ba9211f1fe13f00ed4c6a70c7043be76f70a05739fe53f3a54572e769eaa91dc8a93db34973962cd0b0de05c7c9372873ccba7401da56f1ed45e06e6dabeebb91a373fd9246981038e830c64b85feb4943ccad8f31a2c1630b775be1a05a875925344da24130014353b1343732e1563b8151a21d1777942b9ccaf024e5fc6509f44c8c2ab6dbf8190323331eb5d4948f3d6683f1559c9a8801078d7082f308b83620470c6b4092536a20acda44e5480ff8166a40dc4a2e3066209f1a4b0149313baa90f14ba57663cb16b0f06bbd2768191a49e8b9da90fded892ca339a07c1131ea57bbe5f70fb5e16195af0790ce890ec76fa2dfd042937c24ea7719cfa179d8cfbae3128ec9364c7b5ac4c3174123ca293756548ec506e23b99a41c932eb633fb3ec38dbb6392b42b0a0bce6c3f29dbda49da67b0e3a9d4fccd8eb46772c5f647d93b55d08dfa00434e42695337dfb8954833fa244d930e0ca6912b4947eda1dc6ad07fe226c0f7629f486a0964d188b1977df20dfe21bae12504a810e35561fcfcdab85f41a19359f6ef9e6cd3096a9272b2ddf77c9bce747d786101000000000000013010000020000006c8e7f197fc9d8c378d088687433612e4d402c855ff0f550da502a36ec5539d7dd88345dfd22cc31d6985e7ef7de3f4284c7d61af3f2b8d1b6cbdb7c150701e09c2896fc76ab5c2d085bb2ec771e3f21fec5695d3adad0f0dade629de01a392e3e7fa03de0db6e6cc5a3f59ef06789c85b56f7f77cd85cdeddc7b0c31eb84f9eebe218ab6621d72c6d286b71d0867fba463501bda58410950524cba10cee4a025e9fde22f17c29e7ffbcb63dab3287ef2dd6f55deaa0046e271ca974657ea231269a50926e4e9b04ef7b7500ac5bf2c7b1815d93df2fbe5ef7563f63ea764caf92fab4da1981a981021094d1a70177e25ffaa30d1ae7a15fd409a7b972c6efafb1ecad935d85a40f17b9b93490e0e70cb4e14c9a1f273e6b17bcabac7b744797696184a0b47454ae65f472fcae6698f3a38d8a83bdc4726b759f5a09ebb660cf74b8f8c1783d3baba81e0bf1d5dfaf81f115009e2ca737e0900ccb78a0814475c309920eab8e5ad0724183706182fd3f91477145edf56e82276fb20a5947cec57ac766fdb34f4fde6f82663c60c8c82e767ead4b466de2ea4a12a42ad04081ded16090f236b16da1817b1ef89f111782c5ad4650bfec93c673fa6ae86697c5ebb7e383428f5fb34111bb920ebc51ce1155e034925ba039ff44a267addb62951d0a62221a7aa2225b1c9bf3e5def9b0eaff5fd29f2191ae09e57fa4492eafe118e694dfcaa24e659de8298de65bb6a020907c56bf47f2047f2dde67c033b34cf682ded6d23bb57557f731348bcc5b5663457cb1ce21c3aaaacd35c11d82a380b12942fc836a8af509159ccb88e963801cb7bc907fb1f3182a8be995bfc1b1dc1b0f702e7f67056bafb018743fab02af91b6f08ff1fea0de35209d786fc69b59dbc7c5a56f67ba26451b85edaae89889528c50e25af06b2105aa4bff7b4362a865570c7b24f7a39bea46fcff1c480f6180a43abecacc06a14880e419fe13d83f560166eb272b2e58586a69995a4fef602142aedb001bec3d9008c27eb0c70cefbaf36d8c9bb332cca627af1437345b1ddc530c1fc79e8b372780e83d00d328fb0f89dd81c31b4a78adc59cbd4f7cb59e0feedcf1c96aa7bc8cba919df265fde8c6bae00ec40de3f6f4faa2de131c257bfd78e071b502f9146cad36941f01190ae95df956ca50cb44adbb6206681ff985e0accd4f166b0ceaca12bc563d4ed9133209644fed05550330e4441d269fa8be90fd5c0b4da7a570836b5cc5f0b4f39a19f33a904366524f4429929a27d55e8ffd6851496233da259ce5768ed9614868fe0b85125a972c17c924b53cd45af3e39a7a57aba7cb2e832cf71274a09d8c8525893648695926d6148903547a811117d09e72abd91d9ab17fc81d73f2a21db5dae9a8ab8e4f6bcaad136efedf79903b6538a1b9d209961d17b9ccdae578b53aee3de3fe55780c2cb9a39ee0dd11ebaac1bcd02e41afae11eca8308523e742a156f2721f81291de8ce474ca05a43330e3da7ef72696547e23a966250ba76b242855f9afaec5725553108a11b7218b10409483099785cfed42a2d60ab341800126b748b97f164d0a9d2f3a0a3b1f4eef9a3af5f2397df09d4300f4b0550d9eb9e416fd42f46031cfd68b4a0e7924b0a56e095a408b20611fd1c79ebb01cca5610b84065d5b4ed29e33b39b0fe773de2651fba9b05c34eb056a3b2ba74fd86360ff30ba9d612ac36de34446c5220a24d1e3b161828470a385bf7b102731a16dbedde9643e1139344e0cc04b5c85c8b2b70422bcb029cf9717075f812e9424121f59272b3c5b176a5816414b8e823f5da35de29fbaeca5c1a54ac9dbc9df4b55141ac28a7f85a7008077c56418bd5124763e404ce723a6d67aef091c5fd676733ee02ab338b269c32ee0aeaab998416948e95917f6299778f4dd51946a1ef9b14c18ee7caf4b4c3d5ab9ac7eab028eab710014865550298215d6464919208afddb5b484bd24317ad6fdced3ee5e227554e91721e189323f1889ab9e48bfe9ab56f3b4d9eb6f587d4bbeb87f7f54cf165036bc868f7c40c0d7f3f6f88fee4d5050156e830a890a1851e03ae8d0e014a644c70d5016f67db81dba4a900a5d06133d661176a75b8f99597d858a4b294979a5d85530e0a515eeb8e0c542938e29a5f32a7cc83d259ac8113a952a34e7443625bc70e91d5b90dff9d17876895986b07a00bf15726408f1332fddb0f1371e05cd22e01ed48015f52288cf99ca342df2c8224d8db05cc2a53814c25f90a476f7a29826a3650694bcb949a7d6c490123a5083cb7990d4daa5a448f074fa23b3da46d57d5e150ba363d4c254cb4c0d976a8c0d027367e77e1f81f0a4b004ecd63cbe1b5ca4f72789785d10943023a8d5d4b8da49b11ccde1579549914cbabbd79bb0603be47363cb575276eb192ab46dd028bcaa481d81e1116aa9e7969b40e23c4af4c4cea7a26814ec82f086ee20ba00458536e17f5cfa99b6856eea789ca811691dfbb67f5a62a09776f6713a68f39f895e18bb0694933ed1f31976410bcb0c0a12e518cd00744a1fb4ed4f9f326e7a4519c719bf3008c7bd2d16e4c9a9fcd3ceb617d73db96f404d2ae1df230c4efaf3acb823ffe71359d5ee8c856226bf59630a4e188f4c563316ad0dd449d2e698ed350bda68167c393d1d5d60bee885ec6f2facc6275a30f5f950e5ad11eed8051cf2fe2557707cac6b51189556221fdfce7012d1e5a255e6ce71816aad6c53092ac1c6902f1dc3bb6667fb3fcaa8bf6a624e6cc813b64571a46a62d8eea956eb5c3e4806d82826a102ed3dd5c9539f24e02904109d1f1a026ece0e7829a4f0bff2fe7882f2d81d3e12bb55dee510960fe95ca7176ab19c12236124b6a96147ff051ef7e726d8d8ad5e4ff576c60a7f43d546e5a83746546a31c7eba8648f5c1c217996efa1d819c62b5a9cbd30b3d9b2425269dd0f3de9258107be2041d0bc393ae02cbe33cc53c9bdd3b42c086d85f4d249dc99c914d5cc3a9b3120138cccb383dfd28b3d2a15676eabd842bc8d090b545d1e2936f9f5750ab694e6b9449800ed2e441e2b2f4c6324d701d7e530f4a627fc10d2a56c659e343aebe3ca8415e7011bfec32da7488dfa90d0110f2464f6a251642b96c3da7c050e3ec0d0dce20fed2ec7fc9dee5be9ba95df5cfba1849cc1d99d5e117c8bfb6357b98ae261bd2c32e39d6cf71c3f9bf3127f1364ffe0aeda4fa270a97b507a4fa7ec7986bae54fea330ec3e54c09315cb5addf7281fcf85f41026a4bf22f2a234a68202a33dba800808e022a1857bf14195e87e946cba610e6473d910aed06481be08adeeab31e387833e93a0ad79fabf0f236bceae126563696ac18956dea40b444ef95fc0c0e53ea04e22d5c53a7c05311732cdf98d7c668f89f8cb274341b5cfb77742a084e241b76de5a3ec0b3a3219b5d90b51866b6040682d89b70998e05b725e3342ae752e02010bab9c63b8cc1c04d0a8ade78f250338d1084db5e3b08641ae4f5bc512cae2bcd4212fc189a636ffda855c9523e9af5ef57cee4553aa043f14bd4a7a08ebffef4ce8d28f64d7bed10ac02408b9c45b4820e4c020d0d757d2c7fb8090b6fa1dfd18e6c37b7e24be7b6214524489d57fc22792abdae9cbf8d9b89c86d5836a847db9272933218611f3273ca58bbd204902b22441bc58d2291882bd906bea589683a15ae49ffc19ef9c59a75fa9d7be0909e9ad61dfa01d0a69b9804eae6444d1ebc84f043cc3a352a0bf91440e25538923b2982c7856facfc750288fcba505c589978a678a08eb8192b2b4ddd4aa18df9861c436342bb6141dd2d4cef5346e3c2394f2b642d6c4232c0926828fd302f79e925908500d6bee1d4d9d63d6158c4db71b825ec490a134a20a7ee0010ae4ad762c6378807ce2e4a28424055b78183b9201ea331092d3b772922407ace9d9f92a461332b5d31385fb794c1ea42a69a08e22a56dafd9dde878c50e3afac5cd4cd759568e93cc6210bb7930455127665549911d51378447b1c883d0d652e32d30658571e6ef689d1ec029331f68b9f6f70884762e00ed80c35f6880c87e10d48fa12b6662998a6ad1880807fc5e5d189a375eba40879afaeaf191d94fc4a2747b869aeb31b6716a356553fd4bc4062e33bbc538141db9ecd33e6bcce2f0ca09899eaa365acc0bc6e42f816df6c16c2d5763390f3e30f32ad98fdc70f734589dd8fdbcfbc16a4e2b131c8bd9e777ce73512a74678374554e8310db371ad04ca506468232d5908a5058bbe4baf3c252c252931a087eb2b286a8cdade5aa70cbb870591bc8f3dc00fe4605b5d4d27ccaebdaf4c5d276fb81ef1856942723adc92da28186706b5150502f86c810d35db5a88a10f889280839f351eb30d5d5694ac6b54ab67f52b4d18886d675de4aef4ee31c8d4e68014bb7276e19904d3bc93d054f27fd54a6fee845539b5af9117f783ed1a887fed1e0ce38d643ac6a5c7633ccdac1da0a952a5393d4a38e18aed32f26e224adb41e534c936d5ca2097908f45f30f5d016f46cffe30565fbfc28cd49609d2af99ec656e5fb633dd6e117de7f65374110aaeeee4dfd9493001b2f5b893a79a13cc138850da0cbc2bddfd80ccb47a703b290dfda6f1505e3496af2cfe6023e9dc0e9bcde8c0bf31b70c28f9deb226ab457504c9a78d6a47ba27ceaeedef7ec154bd20bca90242a5f2c3864a58fc28a6d5dce328457700c55f3f80d493a06e4be13e5350c0294f23a05a821ee42631ea684710994fb2ea5e60f46214d717658c734f99ff59898fb18fa7d7b34b9480d5290812dd46f3d12e765aef15632ed9361cd5af470dcc0be18a995f3d73cb5063aff0682ae42def45f73e1cb73ec89066bdf30600962155c588463868fb16232ffeb67b57c0e27e1fdb3426de6c47a49a1d901c8815c2850c1c7736b45d33f64e719ac95fb613289e938ff266c5fefc1dff4b1149c7e87b9ef33062fbff993ee3afef37c4bd6ae99c7425361a02c5bccd96f90d8d42bb5c8a5602b84796793ebcb329593c395913fc5426670fc99a1338cb7f599011d3c59f5a340a62913a03318d0ecfed4d13287c2ea90e79d1ed849fe305d66f0e985bf6c6b50e6e5097a74a094f638aef333cc2ba3ec43dbb9b6fcf5e1cf749028c590f3ee9ea0fdccfa4620843cd335177cbfb38793a70e995cba83d57f29e228bc54c10c5776397ce3a98fb6c5feb4171ecca194ba2525594b064aa1d3bceb31f01391e8ebd236df43ba751cecdaef97d05aae5e84e3d3bb8aaf483f03551a12fd0027415ead66f833e278737189b7634ce689980b1fd592596321b1db8690908b861dbdec7d4f0b330ee8c2196ed8bad1c44d4c8fb82938f2884d6bf4d38330439e7ccca85f6dd8f9a53d669a9a679a829bb408ae0275814603410283b64ea273ef3d59e5669c1bf52a7df659326a499239fac175fe7601207b7acfe4af8fa4bba1acd8cdda429fdebe4c2cde2e50adc801bb6f76c1b9749755a71b595d98eb9dac92c01f9eb0b69895f4d1f71b469bf365c51e3dcae962628a08aaf19a91679bd43fbfdd879f0be286c16893831f1734cef9c3365d2e5b6b261c9e6d5a7fcdbc19eb477ab96b4696bc8c937918b68b2788ac9d01d65fa2040cf2826f7d5c1d6c4f97b135ea92c511bd8ceba0d0a00e93d9d0e569f8335adf70a78eae60904a118fc57df78ef1910635fc282daab1d2b9fd9b6a1660e1ba9d337e7549bfe000000000000000000000000000000000000"], 0x2368}, 0x7}, {{&(0x7f0000005040)=@rc={0x1f, {0x4, 0x8fd, 0x101, 0x360000000000000, 0x4, 0x200}, 0x9}, 0x80, &(0x7f00000053c0)=[{&(0x7f00000050c0)="17d00e135f819ff5b7a7e3c20763e4e72f4003a6e06ae5ca82ded05b25a06666d71e6e3e0394d5062983cbf1ce32a2b52ff09411c3861fa1", 0x38}, {&(0x7f0000005100)="b082882f5e91905c466ee99958b6af5a9c67bd3ef5ebec0a77a967745d0c71edf847c94c6912a4aaa2b5698c01bcb12d70c4da389d7bdd78b466312439c9e5c1809417c1c2b774b4e0fa349f834813f559494d8cd2fc72b583483ff8fa5930c0593096c6354d6285b937517045f376d8d6287af06b3147fa31cd83ca740e7dfe518dcb1f65be6873c4d40257502405b402957c3c6d010b494a6cae43ab43176fa3b83debb4982a", 0xa7}, {&(0x7f00000051c0)="757ca9b1eefc8e69f338674ec5e4749762f2807eef864391", 0x18}, {&(0x7f0000005200)="a0af4a9bf5cf98ac6a7388de39072b640ce0cb91a7efaa23cc76f51cf60b9dccb3f9c5fa83700539a1ec8776d4cdc921a661fe969717f4091751bf2fdcf570958bcd47fed282d8c681b971cd541cacce0ba8f044a680f05104b4f95397b27859c278caaea0a752591fda54d3022349681f0911c5", 0x74}, {&(0x7f0000005280)="e672714607ff7eb402ca7cd664bfd0ba8386e95675ea534e1e139a516376205d400df82d9f70c20acfcefa4b2f7406676511e269f14aa3e2b5d281c8589eee04d10fd94b7fd2033b8e1fa9f391e637ef923e450e89b94043a92e8f85d8bff44327784bfd89c36c4035e8156af377beca1c79fe247aa4a17a89c2eeca89fec66c87219cd505930a0b34bf2d3ed38ea8c6514301c93261bc990a2a421658b79ea2cf94be0f8715fc244e5e1911c22a5eaed25d1f8c0337a82eb3e8a6a2b738059abc1c94de46dfd3820f541da03bf1e67ac6d8f1d9b0a7efbb421752d16365", 0xde}, {&(0x7f0000005380)="b97268ccdc7454c39f19bc4fc64576a7f9e87700b77c9aa79ac61eab198671d538ef357974698920868d", 0x2a}], 0x6, &(0x7f0000005440)=[{0xf8, 0x0, 0x101, "f35e8d99eadf710f612e9ad9fe19b2dfaf70e1bf4d107913ef6895945caeb7f6bcd871f596e96373d7fedab0bb970cf5597c237dc12befc0823d4a105a0ba0b66b985e5ac20a70b977ffc6a2a17b02fb1ee36f800d5e778c3a6ea546d6503e3da89e99b23270b9234d3a5755106ad7c8ec48a802db6e0c5ffef972fd8083753d7cb95e0b57581dd4cf415257fd802158729e06ea5b0eefc7d548c1a404526a2659a8647d716e09f2e9ccc34540235cc6deef70bb2cb5ae4cab1923483a183ad1d53891389ee467f8b65f356baad8635cf162eec632fe3dca9e4150a1d407d860a36bab"}, {0x68, 0x1, 0x600000000000, "484ea160c1a21b1ebf13c1c06609463e8b30828524e02d4e181d592a6d3f0baa37beb03a5c601cc3a5f3c8d3fbeff5aae8bd879fb487403d617dc8e8bb2d47d4087a6e8687129ce943834d2bd2ddd304002bfe6b"}, {0xa0, 0x10d, 0x7, "0e0e6a3342fd1e2a7d8df7a2ce75b0f6ef9916957047e6a06b9e8584670d1509e1200d37f3ce0db899d5ca06b62ca2f8f31fa949b4a046f0e0401c394a784500bb1295e66f4a444346ea5b1addcb0c98412a50e7f877c5df9e356713d3d184104588533bc39bdb3c3c8b83f00e4767e6bbac1fb5a8786e82993cd0e9811eb652454cfafe130c1fe16435aaf98092"}, {0xe8, 0x102, 0x3f, "ced188adc9669ef856377ab42ed6c1ed42c662abf13c163a0731f54317f9a8b6dbdca7a00746ddc84ddf4d23c116c6a715f10f33da142ec6ec4f11829dc2f17cee5e6531a0d863496d87d744ef7bcdb7e55a663fe972a9e17ba2418d31a0990ebf7b7383a446465d2586b947809c6b83a87d9e95de7eecc2f201c8c1dce7fd9c8cef253da773c9a9ce4887763094f61a7e8eee1afc6ac4c1d7dce5a9e965f71c0dacc9e167e73904e879266c326272e0a1c35a835ad251a1727d2e44c90d4fb3ff625be0806d889b3c493457788524562a70d6b81a"}], 0x2e8}, 0x8}, {{&(0x7f0000005740)=@in={0x2, 0x4e22, @rand_addr=0x5}, 0x80, &(0x7f0000005840)=[{&(0x7f00000057c0)="dd8ff83ac95b7f9f3ac882c8b45d1f6478fe3905ec4cd79017499d562ca5f216b4549da4194a52ceb8081eafdfdf329f44cbe02c9326f0325f7201e52065ff44af570287f6cbe8415e18992218df5c5ffa2d9fcb", 0x54}], 0x1}, 0x7}], 0x9, 0x800) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000002300)='/dev/null\x00', 0x200200, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getdents(r3, &(0x7f0000005b40)=""/91, 0x5b) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000005ac0)={0x8, [0x482, 0xfff, 0x0, 0x7ff, 0x6, 0x9, 0x10000, 0xfff]}, &(0x7f0000005b00)=0x14) [ 975.875106] binder: 15052:15058 got transaction with invalid fd, -1 [ 975.894580] binder: 15050:15062 got reply transaction with no transaction stack [ 975.926913] binder: 15052:15058 ioctl c0306201 20000380 returned -14 [ 975.936625] binder_alloc: binder_alloc_mmap_handler: 15050 20001000-20004000 already mapped failed -16 [ 975.949665] binder_alloc: binder_alloc_mmap_handler: 15052 20001000-20004000 already mapped failed -16 [ 975.970030] binder: BINDER_SET_CONTEXT_MGR already set 03:41:27 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) [ 975.985976] binder_alloc: 15052: binder_alloc_buf, no vma [ 975.999473] binder: 15052:15058 ioctl 40046207 0 returned -16 [ 976.014866] binder: undelivered TRANSACTION_COMPLETE 03:41:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x4, 0x0, 0x0}) 03:41:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0xa0000001}, {{0x0, 0x0, &(0x7f00000043c0)=[{0x0}, {&(0x7f0000004100)=""/97, 0x61}], 0x2}}], 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000040)=0x10001) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)}}], 0x400000000000148, 0x0) [ 976.145424] binder: 15076:15080 got reply transaction with no transaction stack [ 976.190121] binder: BINDER_SET_CONTEXT_MGR already set [ 976.204189] binder: 15082:15086 ioctl 40046207 0 returned -16 [ 976.218625] binder_alloc: binder_alloc_mmap_handler: 15076 20001000-20004000 already mapped failed -16 03:41:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) fsync(r0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000200)={0x8}, 0x4) r2 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) fstat(r0, &(0x7f0000000240)) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000000c0)=""/215) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000000)=""/182) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, r4, 0xa01, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000340)=""/141, &(0x7f0000000400)=0x8d) ioctl$RTC_VL_CLR(r1, 0x7014) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000001c0)={0x3, 0x1, [0x2cd, 0x8, 0x6b, 0x2, 0x5, 0x9, 0x1, 0x9]}) accept4$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14, 0x800) [ 976.244342] binder: BINDER_SET_CONTEXT_MGR already set [ 976.273309] binder: 15076:15077 ioctl 40046207 0 returned -16 [ 976.279949] binder: 15082:15090 got reply transaction with no transaction stack [ 976.286681] binder: release 15076:15077 transaction 4605 in, still active [ 976.303282] binder_send_failed_reply: 1 callbacks suppressed [ 976.303292] binder: send failed reply for transaction 4605 to 15082:15086 [ 976.307955] binder: 15082:15090 ioctl c0306201 20000380 returned -14 [ 976.627481] Unknown ioctl -1061399792 [ 976.632689] Unknown ioctl 1076909650 03:41:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xd00000000000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:28 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x840, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7fffffeb000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000de930000008a5ffdd3af30000042833ee4379f40560000000000000000000000000000000000000000e73df6bb5556b90e9a718af1fda2afc781271a02b3408aa7395abee3e7d663a1fca957741bb18bb9cbdd608c536da1386417cd4f5d184acd4cc3917ac18d341e253ec09fa3a38e5ae0d169dba6a88c87451f"]}, 0x15d) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) 03:41:28 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000), 0x4) write$nbd(r2, &(0x7f0000000080)={0x67446698, 0x1, 0x2, 0x4, 0x4, "545e1620b4a9179f3af598cdc14dcaeadb7a8ea33d90f8860da8338341edb1f15da270015ef9131c8ec7a5421118f27d610313b8a0ab"}, 0x46) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @local, 0x401}, 0x1c) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) listen(0xffffffffffffffff, 0x0) 03:41:28 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:28 executing program 2: r0 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x400) fgetxattr(r0, &(0x7f0000000300)=@known='system.posix_acl_access\x00', &(0x7f0000000340)=""/252, 0xfc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) syz_read_part_table(0xfffffffffffffffb, 0x7, &(0x7f0000001880)=[{&(0x7f0000000480)="ed1af4cbc7f6d3070e95d4f425936fa9a843bc26a2aa59d7d9cc919d2cc14206a30123bbfc683355e3e455d8", 0x2c, 0x3}, {&(0x7f0000000580)="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", 0x1000, 0x6}, {&(0x7f0000001580)="17d435138b9a1c09749c86c46aa19750063266abb0fc92fa63abf6d0f5c9402613caa0253fb7ba421498a56f0299a1c0f53d0eb51a23b53345148b0768544abe531e34cbfc4ade647db1b8a6dd010b4a471d646ef441fc27781009a5b9afb73aa378805e3edb37d8f29b5d83e8318e04479bceb63a66e76a6e68d3a176e99dc615f9a0a59dc84127f38741a859e5b2386835dda32c0475f4c4b5626e3290fe7493d86d111b4956ea1dcc8693ce35045986df933569023b2422e8774d6a9a0718b19f749e7ad13ddc181a2aa3de9544d2c582896b6670db02e963d9348923", 0xde}, {&(0x7f0000001680)="414d1a096bf296285da7e8a407a4b3096b3fcc6e38c23f6ffd2f2a69eb37112aac14039c667090b1744f5a12e6d5a740d982d1a2a23ca3b4cce2336299", 0x3d, 0x1}, {&(0x7f00000016c0)="09af9c6d22544ba9695443cb1a03913648847dbecbe21b47a467f93c5db2888d63fd50f048d5c982da3e911672bc5fa56132e5fe49d3b1b2a8687406523ccb65fe748d9e1c84688d8d0559eb0487952a6e83d5cb81461e8e0364bfb257fa304e118ac0f73e9991e3793c902e788e", 0x6e, 0x884}, {&(0x7f0000001740)="5640dec2b1881e77fd410dc83b0519b2bc7c66b99eb397beda73f73e32d8f5656fe113d486300e43bc53da21e4aa791d0c6508a0969a55ec12ff813ba1c0ce1774b7785fb9b1d838b5a3d71ce41bf6371291f97335e3f6829606c11b74e3ee265ffb9f61bc510443cc51092bc6552533d0a2ad4c34d302b5e112dedd5b399442bdfcd1ce8b403db859c10e756dcc72968e7d5549bf1b4e965bddb5df3cbd3837fc7149d8a69d8675579312745606c3329655d5596a61e44d416c1ce3c127ec9db8eec92b337c31fb2b259d879699dae419541970984c9f765bcf6a57df4398322eb24511a5479b2dd0dd866e6c423c5b9c", 0xf1, 0x10000}, {&(0x7f0000001840)="f21542fdedaf184538db0cdc0bc28b3649a084f3686a55c434", 0x19, 0x2}]) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xf82, 0x400) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000001a40)="2ea3ae041fd437cfd9696ac9fc740630ca452b99bba926f83c8cab2aec0287717d5f14367de4b24e9c5151888ae0c395f5dc96ef17a4432a093bea0b7fc7eea95cab986b826cf47135937336a611d3caca875c8a3e00a30e411642e7023697", 0x5f) write$UHID_CREATE(r2, &(0x7f0000000100)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/159, 0x9f, 0x9, 0x4, 0x9, 0xd729, 0x1}, 0x120) r3 = add_key(&(0x7f0000001940)='encrypted\x00', &(0x7f0000001980)={'syz', 0x2}, &(0x7f00000019c0)="165ecac3beaac073bdb102d1e1bd8ddc2dba5966eeda2804f418e47dd4ae768d9a23d5671a58aecea524ad42ca2000c2082ad4f720cd6aceb99464a29ce173ecba19bba432df06c5a86f1c7e8910ec1de084f173222eff17cb296341a98e29a0918d4a31d9af40b57a83ba9796d924b988f10613872562", 0x77, 0xfffffffffffffff8) keyctl$setperm(0x5, r3, 0x200000) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) [ 976.980942] binder_alloc: binder_alloc_mmap_handler: 15082 20001000-20004000 already mapped failed -16 [ 976.999333] binder_alloc: 15082: binder_alloc_buf, no vma [ 977.017844] binder_transaction: 11 callbacks suppressed [ 977.017862] binder: 15082:15101 transaction failed 29189/-3, size 0-0 line 2973 [ 977.092744] binder: undelivered TRANSACTION_COMPLETE [ 977.098128] binder_release_work: 19 callbacks suppressed [ 977.098134] binder: undelivered TRANSACTION_ERROR: 29189 [ 977.117942] kernel msg: ebtables bug: please report to author: Wrong len argument [ 977.132958] binder: BINDER_SET_CONTEXT_MGR already set 03:41:28 executing program 2: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}}, 0x100) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f00000001c0)) pread64(r1, &(0x7f0000000100)=""/110, 0xfffffffffffffdfa, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) r2 = shmget$private(0x0, 0x3000, 0x7c000400, &(0x7f0000ffa000/0x3000)=nil) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2f81000094479e9e7c6bfb639529c220ef303266fc8fa528920c9a114c47dca1a3663cb1e3854a66bf8e8eb21eab8b0bf6d3516d2e14597643d330d8a48512ef4fdc93c257dad6aa8e8a26e0ef9c027aec0d014e25ad08c4b658e0a752894c5ec88cc51656646170972102139c5ad73ebc2313e513b64bd749c709a3a9e1e401c305f7ec7850ea3adc3b0e6748c84ff1dede08ed2a3ef99166e9975540ad22ee5686644d9b11447a3bf4d3c08bf2573daa48052e6a34a1a67eba0dc120ae5cc23faa6525e344c5ed3dae6fa94f7a590eeccfb8b00fc4edddc9d84e059d6e", @ANYRES16=r3, @ANYBLOB="00062dbd7000fedbdf25080000002c0007000c000400070000000000000008000200001000000c000300060000000000000008000100020000005400090008000200c600000008000100018000000800010001feffff0800010007000000080002005a3c0000080001000500000008000100080000000800020031d70000080001000300000008000200150000007c0005000c0002000800020049000000080001006962000014000200080003000001000008000300060000000c00020008000400ffff0000080001006574680008000100756470002c0002000800030000000000080001000900000008000300020000000800010003000000080001001400000008000100696200000c0006000800010093000000180002000800020004000000040004000400040004000400180007000c000400050000000000000008000200ffffffff10000600040002000800010009000000340009000800010007000000080002000400000008000100fe0b00000800010007000000080002000600000008000200b5040000"], 0x190}, 0x1, 0x0, 0x0, 0x20040004}, 0x8000) shmat(r2, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x4, 0x4) 03:41:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x2000000000000000, 0x0, 0x0}) [ 977.143048] kernel msg: ebtables bug: please report to author: Wrong len argument 03:41:28 executing program 1: write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000040), 0x81, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000016) epoll_create1(0x80000) 03:41:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000080)={0x9, 0x20}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000012000500000000006500000007000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c657230000000000000"], 0x34}}, 0x0) [ 977.190105] binder: undelivered TRANSACTION_ERROR: 29189 [ 977.197520] binder: 15104:15110 ioctl 40046207 0 returned -16 [ 977.207066] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.220773] binder: 15104:15117 got reply transaction with no transaction stack [ 977.251638] binder: 15104:15117 transaction failed 29201/-71, size 24-4 line 2741 [ 977.282730] binder: 15120:15122 got transaction with invalid fd, -1 [ 977.303301] binder_alloc: binder_alloc_mmap_handler: 15104 20001000-20004000 already mapped failed -16 [ 977.329866] binder: 15120:15122 transaction failed 29201/-9, size 24-8 line 3077 03:41:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x38, 0x800) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x1e9, 0xb4}, 0x8) [ 977.358152] binder: BINDER_SET_CONTEXT_MGR already set [ 977.368759] binder: send failed reply for transaction 4611 to 15120:15122 [ 977.389387] binder: 15104:15110 ioctl 40046207 0 returned -16 [ 977.397869] binder: 15120:15122 ioctl c0306201 20000380 returned -14 03:41:29 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 977.410269] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.436016] binder_alloc: binder_alloc_mmap_handler: 15120 20001000-20004000 already mapped failed -16 03:41:29 executing program 5: socketpair$unix(0x1, 0x4000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='sit0\x00', 0x8b) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}) sendto$inet(r3, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000380), 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) [ 977.479271] binder: BINDER_SET_CONTEXT_MGR already set [ 977.530851] binder_alloc: 15120: binder_alloc_buf, no vma [ 977.548249] binder: 15120:15135 ioctl 40046207 0 returned -16 [ 977.557251] binder: undelivered TRANSACTION_COMPLETE [ 977.562454] binder: undelivered TRANSACTION_ERROR: 29201 [ 977.565473] binder: BINDER_SET_CONTEXT_MGR already set [ 977.571585] binder: 15120:15137 transaction failed 29189/-3, size 0-0 line 2973 [ 977.585223] binder: 15141:15143 ioctl 40046207 0 returned -16 [ 977.606766] binder: undelivered TRANSACTION_ERROR: 29190 [ 977.649144] binder: undelivered TRANSACTION_ERROR: 29189 [ 977.656087] binder: 15141:15150 got reply transaction with no transaction stack [ 977.663618] binder: 15141:15150 transaction failed 29201/-71, size 24-4 line 2741 03:41:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1600) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:29 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) 03:41:29 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x402, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) creat(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x802102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="2f6465762f6e626c30002e106a6411e190e6d1720735acc8257dc469949f7e4bd2736b52c0edc406a4d1689642bb72389eb51b871fb6cd55758d57bde0aad5c92b329cdbf78aa7d0973e916ac242d9c3e4ec793a86a5dbdeaaecc6d3a23d4d9895aa09b57ff8464bd472eea5b0dc7d18a40895095205fe42e27d2aaf61b3459f1d54dd9173ae6dcc6cab0c0266ac0b97909bbf5d07fc3bfddb0f1524c0869491df50f0b8fc5aec0598d2d246165f800000000000000026758c1d011575c6051bbd2799bf29dce1619c3dd36894a8df4b11204209f0cd9b08caa233ec689d75fd1f95c332f8e1ec7e1bf678835878e3bb7aa5afd57db7e9"], &(0x7f0000000980)='./file0\x00', &(0x7f0000000d40)='hfs\x00', 0x0, 0x0) creat(0x0, 0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) 03:41:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x7400000000000000, 0x0, 0x0}) 03:41:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34074}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x2f, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x0, [@typed={0x9, 0x1, @ipv6=@loopback={0x400000007000000}}]}]}, 0x2c}}, 0x0) r1 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x164, 0x6a82, 0x2, 0x70bd2a, 0x25dfdbfb, {0x16}, [@typed={0x8, 0x8d, @fd=r0}, @nested={0xd0, 0x68, [@generic="a2bbe1cc00d22c546bd9c3a1a55cdbeeff3db78513f45833923324da5544a9e08148fea0f2f610059874a6c2bc88f6b762130d36a40b0d056179009280d13d42d8330cdf87762cd7e2d2fd5349c8d8cb36566147b4819c12d6b637bc1f807b890b36142c751823bd0ba9020b75d713e535724dda7439d669e0e2", @typed={0x4, 0x43}, @typed={0xc, 0x40, @u64=0x1}, @typed={0xc, 0x1, @u64=0x20}, @typed={0x8, 0x69, @pid=r1}, @typed={0x18, 0x48, @str='}ppp0}wlan0vmnet1\x00'}, @typed={0x14, 0x7f, @ipv6=@mcast2}]}, @generic="4f469e7d7d2410c45f554d08a6381a379688", @nested={0x64, 0x13, [@generic="5a59587986c5afb27762578c14515eaf90155ef8b2a118d139f3a3be3e98bc036182a38f0f9b3c533575b554b6a4555a9c77bf482b69ae115eed50775df705bcb1f4f87b0085451d048fd01ddfce10f208e1859941c649a27d2797c5d3b9d6"]}]}, 0x164}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000880) 03:41:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x10003, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getgroups(0x3, &(0x7f00000002c0)=[0xee00, 0x0, 0xffffffffffffffff]) r7 = getgid() mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x800000, &(0x7f0000000400)=ANY=[@ANYBLOB="7f87616e733d75645d6c746769643d000000005de059d2603f9178f95c89bd36b9197da45a70ccd3d5e158c6963123661fcdf4a0", @ANYRESHEX=r6, @ANYBLOB=',uname=,dfltgid=', @ANYRESHEX=r7, @ANYBLOB=',obj_type=teql0\x00,permit_directio,\x00']) ioctl$KVM_NMI(r3, 0xae9a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) socket$inet6(0xa, 0x7ffff, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000140)={0x4, 0x3, @stop_pts=0x81}) [ 977.870221] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 977.879008] binder: 15157:15161 got transaction with invalid fd, -1 [ 977.881913] openvswitch: netlink: Message has 1 unknown bytes. [ 977.897650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 977.909439] openvswitch: netlink: Message has 1 unknown bytes. [ 977.943960] binder: 15157:15161 transaction failed 29201/-9, size 24-8 line 3077 [ 977.971395] binder: send failed reply for transaction 4616 to 15157:15161 [ 978.010304] binder: 15157:15161 ioctl c0306201 20000380 returned -14 03:41:29 executing program 1: capset(&(0x7f00000008c0)={0x19980330}, &(0x7f0000000900)={0x0, 0x0, 0xfe, 0x10000}) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x5, 0x80200) fcntl$addseals(r0, 0x409, 0x4) socket$nl_generic(0x10, 0x3, 0x10) linkat(0xffffffffffffffff, &(0x7f0000002b40)='./file0\x00', 0xffffffffffffffff, &(0x7f0000002b80)='./file0\x00', 0x1400) [ 978.056491] binder_alloc: binder_alloc_mmap_handler: 15157 20001000-20004000 already mapped failed -16 [ 978.069660] binder: BINDER_SET_CONTEXT_MGR already set [ 978.075350] binder: 15157:15161 ioctl 40046207 0 returned -16 [ 978.081747] binder_alloc: 15157: binder_alloc_buf, no vma [ 978.088090] binder: 15157:15174 transaction failed 29189/-3, size 0-0 line 2973 [ 978.122283] binder: 15157:15161 got reply transaction with no transaction stack [ 978.135867] binder: undelivered TRANSACTION_COMPLETE [ 978.141433] binder: undelivered TRANSACTION_ERROR: 29201 [ 978.149397] binder: 15157:15161 transaction failed 29201/-71, size 24-8 line 2741 [ 978.158479] binder: undelivered TRANSACTION_ERROR: 29190 [ 978.164525] binder: 15157:15161 ioctl c0306201 20000380 returned -14 03:41:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2d4, r1, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f12}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9df}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffe4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x700000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x699}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x38}]}, @TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8a3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2800000000000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x4}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x44810}, 0x40800) 03:41:29 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x8001, 0x0) write$binfmt_aout(r0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x1820) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x3, [], &(0x7f00000000c0)=0xe4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r1, &(0x7f0000001580)={&(0x7f0000000200)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)="757381b7508cf0aa92e5abcaf94a138b00206fe7ddc6c80c1a637d5aef1ac350739441b948cec0aaf744fdce7dc19df3832ed2ee51d165ed0d0cc4f8b40dd8e1e58614688d4e92570642b2660d004db69402269d23fbd4ad4c8ca01077ad1bdd7fa4029d8c357cd6f908bae4fb43c120d483d44d03b81375bfcf6052795d2459d44c2abed7c591af0f58ad6a42d82b2d8da8715a26f770fd369ab20e3d8288346c068345735a1ecbbe05242f7e2de9f9391dd4baf6063acf182cf2de", 0xbc}], 0x1, &(0x7f0000000380)=[{0x1010, 0x114, 0x6, "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"}, {0xd0, 0x119, 0x4, "fe0559d8578734b908a07e6acde9886b240bcbc51672caeb515cf6e0ff71258747b98aed99f5531b6568e4aadd8e0eb95e4405e5b6699fbd2daf24f5b07a62913de65d2ccf5bf0de6dc64a2d066131b83eb68a52696e8a57c5fb22054cd76f89c7ff8fb44c75938e75c36eeb58889ddac00712693f8e72741bbecbf4eacd6a992513e2de62e6d429c592db5db936eb639771dc5718666819c8dd17d7355da4362a6138024de94d8777d799ebf6a7d6a5ef69ea2e0b8092348e8862"}, {0x20, 0x10a, 0x3, "84b8ebd21dbfbb5c6aaf"}, {0x88, 0x11, 0x7, "126671ca8702de0fc9c67bab83f5cfae19c693e43a414632592c7aede517fd7d454e0211fd627290367cf2cf4ad192e136cb171e7b40a0dc10c8ce793dbaf6d52cac3b91507993c4ad80dcf74bf20bb2fbb34d9984e1a936b6ea349bd5dde89d8c5074325d4ecee73a21a2b9634f2d007cde5f659b"}, {0x40, 0x114, 0x2, "fa06c30e1e2f75c8389d7f86206a1b5250868f10a91e07161b9e0c3df3b3d2526ecc4b2313f6a2cff966"}], 0x11c8}, 0x24000080) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000420007031dfffd946f61830002200a00090000e7fe1c40000c1ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ebea8653b1cc7e63975c02007b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:41:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x6c00000000000000, 0x0, 0x0}) [ 978.173019] binder: undelivered TRANSACTION_ERROR: 29201 [ 978.279109] binder: 15184:15189 got transaction with invalid fd, -1 [ 978.303571] binder: 15184:15189 transaction failed 29201/-9, size 24-8 line 3077 [ 978.313730] binder: send failed reply for transaction 4621 to 15184:15189 [ 978.328776] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 978.339981] binder: 15184:15189 ioctl c0306201 20000380 returned -14 [ 978.343371] binder: BINDER_SET_CONTEXT_MGR already set [ 978.352995] binder: 15141:15150 ioctl 40046207 0 returned -16 [ 978.353508] binder: BINDER_SET_CONTEXT_MGR already set 03:41:30 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:30 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000001c0)=""/220, &(0x7f00000002c0)=0xdc) [ 978.384459] binder: 15184:15189 ioctl 40046207 0 returned -16 [ 978.392449] binder_alloc: 15184: binder_alloc_buf, no vma [ 978.407531] binder: 15184:15194 transaction failed 29189/-3, size 0-0 line 2973 [ 978.509464] binder: 15202:15206 got reply transaction with no transaction stack 03:41:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1d) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000200)=0x80) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x5, 0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000140)={r2}) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000180)=0x4, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4002, 0x0) 03:41:30 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4100, 0x0) inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000002c0)={r1, 0x0, 0x1000, 0x2, 0x6c}) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400c245821d2e61a45dc252c48f9c7fffffff1bdc4641112542000000000000000000"], 0x14}}, 0x44000) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r3 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000200)={0x2, r3}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000300)={0x800100d, 0x5, 0x68a642adb083c493}) 03:41:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x600, 0x0, 0x0}) 03:41:30 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = geteuid() fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file1\x00', r1, r2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) utime(&(0x7f0000000080)='./file0\x00', 0x0) [ 978.847322] binder: BINDER_SET_CONTEXT_MGR already set [ 978.865992] binder: 15211:15214 ioctl 40046207 0 returned -16 03:41:30 executing program 5: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = getpgid(0xffffffffffffffff) r2 = getpgrp(0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x29, 0x6, 0x0, {0x2, 0x5}}, 0x29) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000000)={r0, r0, 0x1}) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) socket$xdp(0x2c, 0x3, 0x0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000100000, 0xd00, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) [ 978.889382] binder: BINDER_SET_CONTEXT_MGR already set [ 978.903971] binder: 15202:15204 ioctl 40046207 0 returned -16 [ 978.918093] binder: release 15202:15204 transaction 4626 in, still active 03:41:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x200000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000100)=""/255) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ptrace$setregset(0x4205, r2, 0xc4d128c710389f5c, &(0x7f0000000080)={&(0x7f0000000040)="c51d2ff51465e5ba10fc9f86d18b16f5fc5774acbecfdf6cf33026f4e923212c558387f76663203036d4addfeb278b7aa78d3066", 0x34}) shmctl$SHM_INFO(0x0, 0xf, &(0x7f00000004c0)=""/165) rt_sigreturn() 03:41:30 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 978.934451] binder: 15211:15225 got reply transaction with no transaction stack [ 978.943220] binder: send failed reply for transaction 4626 to 15211:15214 [ 978.955113] binder: 15211:15225 ioctl c0306201 20000380 returned -14 03:41:30 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x4, 0x40}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r1, 0x1000, "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"}, &(0x7f00000011c0)=0x1008) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60093afc48a41d71dc0600083a00fe8000000000000000000000000000bb000000000000000000000100000000000890780000000000"], &(0x7f0000000100)={0x0, 0x2, [0x0, 0x100d4f]}) 03:41:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, &(0x7f0000000080)=0x1e7) socket$inet_sctp(0x2, 0x0, 0x84) fcntl$addseals(r0, 0x409, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000380), &(0x7f00000002c0)=0xfffffffffffffe3b) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x3f, @ipv4={[], [], @multicast1}, 0x9}}, 0x0, 0x5, 0x81, 0xffffffff, 0xa7}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e21, 0x101, @loopback, 0x5}}, 0xffffffffffbffffd, 0x8001}, &(0x7f0000000280)=0x90) fcntl$dupfd(r0, 0x406, r0) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10880, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) 03:41:30 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000002780)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001100010000000000000000009fec990d982e7931d48077346a0b53b380141950db57c98c45a25a00000000000000000c6f9cec4b3846ffbb203d797fb04ebc62c30d5a71fd092b2c1d9757591ba8132aec8e8b07b410181dc778b93b27a2d0f904afa4b8b77dccc096485a143dcbe5f32d50c84bc3f6e2f369d36c448a9aec4fbdf4f2d4aeaebed61928e5f0de0d108ccb9433d053576f", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.\x00\x00\x00\x00\x00'], 0x28}}, 0x0) socket(0x13, 0x2, 0x1) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x67, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x40000000, 0x0, 0x0, 0x1000000) [ 979.244730] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 03:41:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_pts(r0, 0x5) r3 = dup3(r2, r0, 0x0) write$UHID_INPUT(r3, &(0x7f0000001240)={0x8, "8f5399b92b714be4da219b319ba8ce98c694e7beaf961c4863d1233ee223c0acdb0479f32f813bc6ced250665fd482570909aa847bdeef8864d1c15b51fe06c37462d6a8ed9e0ead7676535df6114fff9016c28a5c3a8ee6c71e4d4ed63596717fa5e803ce16db70654417564588bbd34e2ba5c09384dd535203a619ad552966e2be677e2e28939a619235decadcf254be3672a89d1a4cfe7f3146b183a47c05b4a51c92140c0e29cf57f787887a1b3ab8c9317ad3289601f9c7a3ef722a0e0d4f8e575d9c1f842cbdf900164b1f7f25326d0011dd83c7884f139156ec6a64e979f81ad7de99cc5dca577ee1885d45def56f190e7efb0e5f0e20fa7f21d6cd6e91c14020386083c732cb1df0d8bcbc03aecea9895e3adc61d4b7f84a498e626ea10bf812eca306e09561fd3cd3d8c3ef8474e64c38017e709c2722b41da3d82fe70ac0c96848f288776a35724fcda1b344886ce1471de785d5a2e43bc2e829225fa7820e9d6982ee3b4f30723dcc52f4a937c4c84af75ed6f7f726c76d22f0bc22b4bd26e05d155a7dc053b682aa3b660226a3bbb051ca02a80e7ed41ec043477db004e44664b0548f898acbbbc161c0677e3d11aeeedd5748d202c46297a922794ffa97c95073c48c6534565ca7eb1761a4d966cd71c40d75a4c17a8a37d6b374c4855c3a77e7ddcb0a08d5fb37feeb3c9e40ca1eaaf20fd148611652e74c079e4d3a821e5f9a846c77bec91a5c3c8f07b6150832be375ce465a8ee42f51a158533e34ae1aec413bcc2e8fd5af6185ca52d55e939ecbe0fe0d2aeb9f275990f05deb1906e50d63813794d39c34253f4fae0b5523c3351334b96d9389667973107dd4198539301c2a770d37fe49081f0b6476532a5b9b1e5bf5e8d1396fd792ef8222af44986be2ca9485e869cf079f9c5cc383805cfe6792c3f1ca4b4896dafc9d9ce9159befe4178fc6c74e66dc0d45d3f3a601ed54b7772dcd861005132e16550810c28895e439b5f29484c1e6bf74d1f108d1ba6a4c6c8327ee1ac850dced5c923088f610b259fab838b567c8c94e9e76d22778775670e12bb8b79773db390593055d62dd3c267c8cfe9906e2205d0cfc70dabb560944c106630f4286a8c1d5f14b128b6eaf455e57bf40ec11a4d838544c1cea93713274d19d567bee09155c0043382054a88665fb4361737538f7f1fed308b7db0e4580ef96e1090b1e4b53a01eeb2c0fb84ff6987b2f4536a45ffb167a0d32ff5d6799fbb1d0e47fe22fcaf5a51d5ac994746bc9a61ec5aedfda2de6e63f6c8f75b53cbfc7b2a742060038596a181f7585de362b16b72563db13835bb16ae4144d4e35d382e5d0f8f207bdf4ed7caa1c386c7a34f152d5345dc182a18cc03865f553bc227966a3cda8dac0a45f1eb300021871be9008be7ec10f47984d3595963b4341d7fa14c9ac30944edccb38628db04f099de774ddb37a431ce6bdf43b4841c94698c32813a909b55cb66915e1e79ecf98066c3d7df40cc30f7c5e223ecc36099165f052be4748f1208e27f39b686021d3022150c66a91d30968a23de74151cd1c775071e643ff1ddbaa20c8f26011d5c17d813cb4d20b89bcb4233adea1ce0e9a858c9a80f69f079e3fc484e9743b198629c151427a3a44f5198933e93bb7a1af5768dd6866af2dc536eddb4cc000bd4a005c0be7d681a41b9d7d3d5d32ba3f3bd9a48d20988458f79ce0fa9b003eb45b7dd1cbede004667e111f3907c8682e554b6e613a6813eff431e6153c1b2089d9949c387e3369f5ae5424bc1d1aa2d61a3bf9e8af997b5eac30ade92589adcb0a192650e0c6e20497f4eeb88d29f4de1c8fadfc980bc9df4b3da9369a2f8207bbdb2d950ec32debb6559823702e5411f78621348e5ae159554ff54432e12630b1ca2b582b8795e767f2a5906ae1e9515d9bc9c8c4a193a7661eb6150b1367ce4a0b10575406910c0a5c84dc1f0ba4e2dc347cc3c36d93e17af7c6bea97df72c5659c668bc25cec75bda5caf186ab6bfeb23804d3f5b8f96554851a99891c21d9ce2c8ec42a15ea12ca84fa5a64b05919cd0f15506f621e5442a88993d0572a0d7b6f8f9c3d4f88f6f719a13f9e867d8b00d4eb63bd01fcf5c133e79f2ac4cd3f80b5a24000a4241d6da7152a4a1c06d49a157338a7443a24f087c443192f8e8f130f32f5c7abcfeba5d9b91fd62c7e3ae8cfef759e2ceaff9757198c4c5967f130de28320e5cd5c70c80dd1ac9f733e3a3541d162a7adee8005744b237246d5d0879eefb35f5a38e1a2759aea7e347818abdee4f45c2be4c4233b182e1b30f2ef3500978c4ee4b08e2402e15d5cecbe671d2323f06dcbedb2736276b3bdcb4ce94861fac7c020a35dd91a058aef87889246bc84b00526ef4583cdf817888c99c20c7456b7d12e98fef77638fafa5eee94ed64af2041bf3a4b4d713205c820c70f1e1db627127fde997765574b0b140d26545179e052dc86cf240683983501fdf2716e9120762504e8d55727b5ba4dec2b60d8c28abf381788b4b5be12a56f0a6da5ad3f1a0c185f4fcc45c976fbc234b295be23b7d0c3a48b9b4836923c2723617058ece75e493cc118be89513ce3ebba717f2ceb44d5b19e66ed39fccd195cd2d67dc004dcad4c42b4c18165c6486101da703e792eadf6699f8b9b1488393e813f0ccfabe650b3e9a2ebc84212f94d729d21a893562e3fee375a9d00ef64989994b231f71e4972434a96d29517dfc2c31a7cf045a92985e3532d5ce6b1103942bd9ed80c45ec9ee1fb2428d9f0d9ea358bd548f84b8894a7b50c815c62b8a8e9b544b8b5c14dc986c019903dbaaafd0b8be1d113caf3fad660260ed532276a66fcbd0dafbf1a38611bd32eee4ee4ed1172ce9decb00c7a5d3a7eefb977d7dadef44d2b63e95054bfc86a5c0928470beb6efab4253bf16c89c86572dee99c99ebbb9f71f8b050232625bf422efa04d730b03684ccf71d955fff82b1259e00ebe714957f273d86ac9c1fb981ebbd2a630e2a09f844587efc54bef8f3146eaf499204f9cca9261d5853f531890dec7be7cb803656a26a865a395b3ba08dd8920c4b6510528e60b29f07fc08f72c841d9edddb6624e9950cd987b795ca54ebfda05a51fa304f9fd20b3858fe07cb2b2928e521929324383ab0b21d1342441ae3b91f36235197ed0c16b8ba9669ee39112fb61ce9452671bef04ce946dd4e08f794356d86a9a1446e51c3f065b0fe5cbab9a123716d12d6ae6fbc2f13eaa77ae8b6f995d9767f0b48fb71d36379ea08566cc833937d6d23139b92310a602429ff4629f91521c6a51a9ad3ef1fa07de2f6c2fe3d358fd4d5471f572ca9477720f807589f41670ae20bf67aa717386b738a3c4cbfe7202e6f450f6141cdcc374ac79808bb5914045cb7bec89a787feee69361df5028a19d7cdaa8f3ac2bc3b5250fdd58146d2da4fba75762f7d49cdd71b45c8dba820b97641240f5e525f5c445e0e0654bab6af186e14f9e59490b90ad5cff7aca80635eed963baab3f402900459ba67f1e14e7984fc14539dd555653d58665630eec6a7b61cfa4e1347a74942d1aab4785ed0537ff4024ad3cbdbe51dcbcaaeb25dcc42caca41b4e14d5c620e960d774ffb8db30f65806ae057eddb71551e32cedec1c1f79ff0a08e54cfdca2b140220cfc494eaafcaa6babc1382acf16fad20bda38ecca9fe10b09fdf4e2a54d5dcfab4ae53eff0da83b2a4b97966c0e098a172d2e27076c5920e996d0b0335e692099eb4b098eb404c7cbadc6f47e46b307036f8e5ff5c931872e0d57598b807f1d7ec22161fd9ff0cea2ee4acdb9fc309d8e993a24c290f746e5a90a3aee5dab612339b9391e10ae50bf7701b2feb8ef1a7f33efc3607335fe975c5d6a4fe6ef04648739996c45ea30ec4d01ef0bec153aae4893b90fdf256f9f4e632df74993cb66936d275a5514e6571a743b66e1af861a9d387560498bc9e0ae10c7d2ce161c98e2ad6c24d5f2aaa2f908879b378b2f19e32fb5edb0279d7e22abf8bf3a7454662066aece1e58ab46e842f8edc2776d0b4212cafdab3983a2791f4112535c5858a57b7d5b1c63d170baec419d6efe7131185dbbdd6ec9d74f04f3027f12f79f539dac297002de2c946370e906a0169cc407487e2d1a5635c23bc1f0e3c460ac2c3536236a90ad10a6de8b3a405e7eac42fea6f6a91cf71d77fa556bb5c144cfdef5941c20b90bae6e2e047dc52aaa6b484368188e2d71f02e8bbe5c8a96c1aa7393384c7b2f4bc077074b33fda1c63f2d1624a6641549865caff226fee93429a7cbed8f5057422d443c2bd4e243c75e5d722ad149ab5b0a0c5cdeca2c5756eb31858ebf66bfe7d502ec3ebe14d248e0acfc418af26070b69eb5890cd1459f7d10586ca4a20213c572c387e9512580b5332cc82ccbb85c6bf2fe3185ca9886efbbeba582cf0ff61d5f8e6e3d0cdcf21eb614f836479cc1552edd2cfae7aad64e7cbedb5d115dc9aa3f3ce064678d55c67e155f93c960b36c815430139a56c223991d55f36ac78602070a568117ee966c765521f0c34b9ba70e9bb13087ae1e29f7382d95f4414811690f90c179cf4b6bfd0d1cab8889e9f5454ede47dc2e5b3446935ce6dc92f54d9df5702c933d9dd509f1e33e05aca669ddce50d6b47cbf35014e78124654d3ec64a77dbc232f86c2c2d1e0b02057ae37c65e670a228db4ea9806bb48e1f80c0a811e0fdd831b61d62f1148ff329cbe7f2160567ea503d6ad77e695bdd0dc915cf3a09494f8f6803db5a4016c83d771b303d5f18f22f4e0f748a0542271e09ea3767739a8777a2e918cf46115dc4ac9d6bb605640fb22f99b0153811d0c3a37744e2754b82262d9e0219c74c90d48fb37ccdb359faedbd1bbe6d4c42da2120c0a44c45d2de601c3dd75bbd8439e945b388b164b78d46436ff11e1c27d1d372d0c61eadd5e9f862f5f3244e40af4be2897265c121fd4616e9f0999268cae66b68e58b627e4e7f2cb1f4b8f018a0132c8c7895fe663f103e9ba1a40254dcea2bd5d386908a12523290233a835212f3d624be6ca13337d77ff55b866fe11692bf61c55dadc3c24ccf90d3df02f396653e82a863f6a9a6444b5d569675dc42e7e6d25766c9444106b3303c39c8cf9c31a62fe0ce5c7937e3d203809a33361c3c5f4c5ef2faad3c2fa434e6963719dddccfaab00553165ffce6550270ba3c7c5b41fdcb2ea2e7b133413a69742ee837d8cf0d629c73425fdc1dfea488e4126cb210e7dfb54b486b52f8104d8bf019fd60e8e0f08865a17b66cf18fb92b4e975394b1aab6e9435855d682fd140a280a09ee8c4bd99ee5c4f975c4ac1e1d920568be6857d406b079ad2a37dcb4593cffed61c347e288d9b23baa26542c91827c418734dfc1dfd0fe429770501f3c30e8995a59cbe8e9a9905f435d103a614e3972775ecb5b878b8d02b8e3ec52d50286ab53113b5b2412a85a70013f908ae70bdc5ba1761ff66c0dc80229cfd74c956360c4e84af3d73358c0dfa044524bbed34e9706c7958aa1fac304ffe309ea5353c961fdcb145639dd6187e4eb5514ac5385d9c77bb90022c47161948461700ae6647433413d0968c37ef9e18b8d2cf0cf500ee9e476ce5c3d1c8e0f959e59fac4fe4cd41243ecd3e77ba616c9a53ce1738074b20476422ed181d50e7e742a311ae21d6b6d1b1d2a4e8b5f618440951724444152da732e470827c365f64882d6af4e53f6252309a65f558ed62eb18886ef11f96c181c3fa6bfc3ff779c0004e52110acb", 0x1000}, 0x1006) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x101]}, 0x6) 03:41:31 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000000c0)={0x2f, @loopback, 0x4e22, 0x3, 'fo\x00', 0x0, 0x7, 0x3c}, 0x2c) syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0x7ff, 0xa0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x8001, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000080)={0x0, "f36add7f4ef4930052826c796513a6c9ab9b23ac0f23f6a37906f354a8f6c7e3"}) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x7f) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) [ 979.637516] binder: BINDER_SET_CONTEXT_MGR already set [ 979.659973] binder_release_work: 1 callbacks suppressed [ 979.659979] binder: undelivered TRANSACTION_COMPLETE [ 979.660030] binder: BINDER_SET_CONTEXT_MGR already set [ 979.681812] binder: 15211:15225 ioctl 40046207 0 returned -16 [ 979.698711] binder: 15232:15234 ioctl 40046207 0 returned -16 03:41:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe59, "e02c63f8de05689232b61fe8b46ed38ca22992392a0416ed8948cd6bdd6a68b2"}) r1 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x10, 0x400000) timerfd_gettime(r1, &(0x7f0000000400)) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="2fa6a7a584b5fa46a65b3f6e56bdab8eb2eac450d074da53bbf4301060edaf174753e94f04dffabe8f290ceffbdd7c0b09abc220400b7a314a744184d87c8de92571f1f97e298b13a2512b77872595aa49cdbfe7e9a254d38201d93f7edf8a83bc920b7888cfb6d01b4aae3c44f0c9653cac1d15fcf5688fce196075671b63d09490d431a68adb5019d4ccce261ae2e66c73bc4d1f5b76a87acc3d989b3cacbe54dab5566ff6fbd858", 0xa9}, {&(0x7f0000000140)="8ad0167ab5228ecabe619d9c38411e0ca49bf08ec91616c4fc09cc05af7e828a5dcc83bb96e45f52eca11ce6556749234bbcb989e1f75d680d8705cfa59095c17dd8c47ec172c657f3a1cbc76118df2df4f04abb40b62799afa74ec572c2e758fe20bfdd8eb2189868c912e2f118b2d7da485cde3501b4ac5d2c13df7f509fd78a10fe4787bc34b85334586efe4d8501f79fdf076c54", 0x96}, {&(0x7f0000000200)="d02e7855e9f6dd5d64bca6d94af67d6545d87da0bcb3c834bc8ac684f0b325f38cba", 0x22}, {&(0x7f0000000240)}, {&(0x7f0000000280)="f1c91a1948074f10d06efc25be99605a9ceb119bd4efca3e8a7e517f6c714ee51468e8ba03f18581174667b3af0e29bd4632fa9d95872ec43f19ee27bb05320e66cd302256d6d6a348e54d79a00e5adbc794b05f6aca97cae3b2c92a904b747a9a6b3ebac0678220277f1a46e0f351a0b122d8a83ddc63956bf340adec33f3aa2a927553f1f35424f55fcfcc8a", 0x8d}, {&(0x7f0000000340)="01098e8dc4bc16014a4df7e76a48aa17dcf61aacb724979d710dbd4d21d1fee02dcb7a08346fce34e91e408641f1fb36ba6be375b87fbe2fb1bf9d30f11704969d3ae0993d3b1efd1b379cecdfe76ce6d0de82fb2550ff2d226fe215d2bde134ac0dec4c80f07b33608c7ed8e02b0a86e04a3cb14840849acedf7661d8faa4853c09106e03970b2e0a8f", 0x8a}, {&(0x7f0000000400)}], 0x7, &(0x7f0000003780)=ANY=[@ANYBLOB="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"], 0x1278, 0x800}, 0x40000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value={r3, 0x284}, 0x8) 03:41:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1a) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x200000000000000, 0x0, 0x0}) 03:41:31 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x50}}, 0x0) r1 = dup2(r0, r0) ioctl$TCSBRKP(r1, 0x5425, 0x4) 03:41:31 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 979.705176] binder: release 15232:15234 transaction 4630 in, still active [ 979.712719] binder: send failed reply for transaction 4630 to 15211:15258 [ 979.735306] binder: undelivered TRANSACTION_COMPLETE [ 979.835433] binder: BINDER_SET_CONTEXT_MGR already set [ 979.848032] binder: 15274:15277 ioctl 40046207 0 returned -16 [ 979.859254] binder: BINDER_SET_CONTEXT_MGR already set [ 979.865023] binder: 15269:15279 ioctl 40046207 0 returned -16 [ 979.871146] binder: release 15269:15271 transaction 4633 in, still active [ 979.879483] binder: send failed reply for transaction 4633 to 15274:15277 03:41:31 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:31 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) r1 = epoll_create1(0x80000) unshare(0x8020000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000580)=0x80000000008001) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x1, @local, 0x3f}}, 0x5, 0x5}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000340)={r2, 0x1, 0xfa}, 0x8) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/mnt\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, &(0x7f0000000340)}) setns(r3, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000000c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000680)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000380)='trusted.overlay.redirect\x00', &(0x7f00000005c0)='./bus\x00', 0x6, 0x2) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x0, 0x15, 0x5, 0x10, 0xa, 0x1, 0x3, 0xee}) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={r2, 0x81, 0x2, [0x3, 0x2]}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@local, @in=@broadcast}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000a80)=""/150) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xffffffff, 0x9, 0x5, 0xc385, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x5d, 0xfffffffffffffffe, 0x2, 0x1, 0x6, 0x9, 0x1f, 0x9, 0x0, 0x6, 0x0, 0x6, 0x8a, 0x3, 0x0, 0x5, 0xc00000000000000, 0x3dc, 0x0, 0x8000, 0x101, 0x0, 0x1, 0x8, 0x6, 0x80000001, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0xe6}, 0x4, 0x3, 0x1ff, 0x0, 0x5, 0x4, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) fremovexattr(r4, &(0x7f0000000080)=@known='system.sockprotoname\x00') [ 979.911688] binder: 15274:15284 ioctl c0306201 20000380 returned -14 03:41:31 executing program 5: syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfb6, 0x4800) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1, 0x8}, &(0x7f0000000180)=0x8) syz_emit_ethernet(0x27, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaad7a1fc61ecc5a3a152ffffffff0002f0000010000000000000035193b69d7cadf007582f0000504242319bb61a213626"], &(0x7f0000000040)={0x0, 0x2, [0xc25, 0x1fa, 0x921, 0x396]}) 03:41:31 executing program 5: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, "d6c3c4fc94493a124016461c3abd59efebe566048aee519f9a2d1df4e7c62eaf"}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x20000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x9}, 0xa9) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r1, 0x0, 0x9, &(0x7f0000000000)='/dev/dsp\x00', 0xffffffffffffffff}, 0x30) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={r3, r4, r5}, 0xc) sendmmsg(r2, &(0x7f00000016c0), 0x3ffffffffffffed, 0x0) syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ptrace$getregs(0xe, r3, 0xfffffffffffffffb, &(0x7f0000000340)=""/137) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) add_key(0x0, 0x0, 0x0, 0x0, 0x0) 03:41:32 executing program 1: syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="e2", 0x1, 0x7ffffffe}], 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000140)=0x80) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.SMACK64IPOUT\x00', &(0x7f00000002c0)='posix_acl_accesseth0vmnet0%\x00', 0x1c, 0x2) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)=0x8, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200)=@int=0x80000001, 0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x4004005) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x20100, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x10000}, &(0x7f0000000680)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000006c0)={r3, 0xeb, "e7398c8b875dc44f77eac653007e235127fe2415c97d98e9c4616a71cf6a83cf3a66778464f88b0771f04b2735cf3900fdd156a7bab2506288122050ddbf9dd9b187cedd504561aedb187f2fdad6f7a68a413b5f52041cf0e5fc0a762d174df0ae5cfb1161564be41912aedfe74481c4bc2c19abe3387663d04fa1841ad39f434d4ace308186d9fd1ccfac4c1418991c659e397acf1adc32410482f77a97476c0e449667b44e210a6a0558c9dc50cd834ac3b251f65bde7a3df09a561b9a388771aa7c0ae8a6160ecf2a7592b3cdb539399014efe5f7c230343d203dd4475c9f09a7b02e9daa48c033bfe9"}, &(0x7f00000007c0)=0xf3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x200) 03:41:32 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)={0x0, 0x0, [], {0x0, @reserved}}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=r1) 03:41:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x100000000, 0xe0100) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000640)={'ifb0\x00', 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2c3c) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x2b8, r3, 0xc, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff00000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d0c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ef53800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x38}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe43}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb66}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xea}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x557b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x89}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x67ac}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="f46d5087133bc397d687890b05265f8414aa197171ce92e33058910e5cd8d83f7580d233c360a83424a00b1cc6f564e4cf49ceb4b820de7cbac84ebbb9014d4d7dfc962eee436c5d9010b33a4fcbc75ee27aace4c939a895dddf2ea61b7b3a3655c9d36f97abf9f87c5395c9768904a38ac9d22bec84dab5691ec65ddbf05d0661733f349dd8e3bd6a63a89f56beb7f4a7d5cca03ef29bfa1412469d63de1ebe1cded7d663334523555cf873eb001d2cac3e7d878c9e679662c47ab78fc0297b975897d1a8aa8b49112902e4628de4bb94f2c36c757e1b7621c99f2f15ca130b277d508fc90d2a82a58f24aba4420a45b530ce5dd32b4f", 0xf7, r0}, 0x68) getsockopt$inet_int(r4, 0x10d, 0x1, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) [ 980.505453] ISOFS: Unable to identify CD-ROM format. [ 980.541631] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 980.578007] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 980.618199] binder_alloc_mmap_handler: 6 callbacks suppressed [ 980.618217] binder_alloc: binder_alloc_mmap_handler: 15274 20001000-20004000 already mapped failed -16 [ 980.644344] binder: BINDER_SET_CONTEXT_MGR already set [ 980.651864] binder: 15274:15284 ioctl 40046207 0 returned -16 [ 980.652140] binder_alloc: binder_alloc_mmap_handler: 15286 20001000-20004000 already mapped failed -16 03:41:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xf) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:32 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x5}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x200000000000803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='gid_map\x00') preadv(r2, &(0x7f00000017c0), 0x1a1, 0x0) [ 980.658195] binder_transaction: 4 callbacks suppressed [ 980.658204] binder: 15274:15326 got reply transaction with no transaction stack [ 980.682132] binder: undelivered TRANSACTION_COMPLETE [ 980.689236] binder: 15274:15326 ioctl c0306201 20000380 returned -14 [ 980.706251] binder: BINDER_SET_CONTEXT_MGR already set [ 980.725909] ISOFS: Unable to identify CD-ROM format. [ 980.733996] binder: 15286:15288 ioctl 40046207 0 returned -16 [ 980.734466] binder: release 15286:15288 transaction 4637 in, still active 03:41:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x500000000000000, 0x0, 0x0}) 03:41:32 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 980.771104] binder: send failed reply for transaction 4637 to 15274:15326 03:41:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000003, 0x3) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xe109, 0x50040) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000003c0)) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4}, 0xfffffffffffffef9) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x100000001}, &(0x7f0000000340)=0x18) r3 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000680)) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000740)={r2, 0x1, 0x30, 0x0, 0x4}, &(0x7f0000000780)=0x18) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000000c0)) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) chdir(&(0x7f0000000540)='./file0\x00') ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000005c0)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r4) open(&(0x7f0000000180)='./file0\x00', 0x40, 0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)=[&(0x7f0000000b40)="72616d667304"]) [ 980.814617] binder: undelivered TRANSACTION_COMPLETE [ 980.862346] binder: 15334:15335 got transaction with invalid fd, -1 [ 980.881150] binder: send failed reply for transaction 4640 to 15334:15335 [ 980.890178] binder: 15334:15335 ioctl c0306201 20000380 returned -14 [ 980.911462] binder: BINDER_SET_CONTEXT_MGR already set 03:41:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x7, 0xc3, 0x4, 0x8, 0x9}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r3, 0xfff, 0x4}, &(0x7f0000000200)=0xc) r4 = msgget$private(0x0, 0x404) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000540)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000600)={{0x5, r5, r6, r7, r8, 0x84, 0x9}, 0x9, 0xffffffffffffff80, 0xfff, 0x6, 0x3, 0x0, r9, r10}) r11 = epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r1, &(0x7f0000000080)={0x20000010}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0x9, 0x4) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) [ 980.938489] binder: 15339:15340 ioctl 40046207 0 returned -16 [ 980.949904] binder_alloc: binder_alloc_mmap_handler: 15334 20001000-20004000 already mapped failed -16 [ 980.971101] binder: 15339:15340 got reply transaction with no transaction stack [ 980.994054] binder: BINDER_SET_CONTEXT_MGR already set [ 980.999915] binder_alloc: binder_alloc_mmap_handler: 15339 20001000-20004000 already mapped failed -16 [ 981.010495] binder: 15334:15335 ioctl 40046207 0 returned -16 [ 981.010558] binder_alloc: 15334: binder_alloc_buf, no vma [ 981.018604] binder: BINDER_SET_CONTEXT_MGR already set 03:41:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0xfdfdffff, 0x0, 0x0}) 03:41:32 executing program 5: clock_getres(0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x400000, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000300)={0xb2, 0x0, 0x4c5, 0xfffffffffffffffd, 0xfffffffffffffff8, 0x7f}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000180)={0xffffffff, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e20, @local}}}, 0x108) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x81, 0x210400) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000100)={0x1}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:41:32 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 981.066433] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 981.072582] binder: 15339:15340 ioctl 40046207 0 returned -16 [ 981.077341] binder: undelivered TRANSACTION_COMPLETE 03:41:32 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) syz_emit_ethernet(0x207843, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300004, 0xffffff11, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x4, 0x4) [ 981.236816] binder: 15363:15369 got transaction with invalid fd, -1 [ 981.238601] binder: BINDER_SET_CONTEXT_MGR already set [ 981.272203] binder: send failed reply for transaction 4645 to 15363:15369 03:41:33 executing program 2: sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000004000000000c00000020000300080001000000000014000600fe800000000000000000de"], 0x1}}, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x1ff, 0x5, 0x7, 0xfffffffffffffff8, 0x8, 0x6, 0x6, 0x8, 0x1ff, 0x6, 0xfffffffffffffe00, 0xfffffffffffffffd}) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) sendmmsg(r1, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x81, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback}, 0x80, &(0x7f0000000080), 0x1, &(0x7f0000000000), 0x142}}], 0x2, 0x0) [ 981.289747] binder: 15363:15369 ioctl c0306201 20000380 returned -14 [ 981.305774] binder_alloc: binder_alloc_mmap_handler: 15363 20001000-20004000 already mapped failed -16 [ 981.325382] binder: 15370:15372 ioctl 40046207 0 returned -16 [ 981.327850] binder: 15370:15382 got reply transaction with no transaction stack 03:41:33 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000240)={0x88, @broadcast, 0x4e22, 0x4, 'wrr\x00', 0x14}, 0x2c) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000380)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0xffffffffffffff67) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0xfffffffffffffda7) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) [ 981.344212] binder_alloc: 15363: binder_alloc_buf, no vma [ 981.361422] binder: BINDER_SET_CONTEXT_MGR already set [ 981.377247] binder: 15363:15369 ioctl 40046207 0 returned -16 [ 981.416007] binder_alloc: binder_alloc_mmap_handler: 15370 20001000-20004000 already mapped failed -16 [ 981.450566] binder: 15370:15372 got reply transaction with no transaction stack 03:41:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x500) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x5000000, 0x0, 0x0}) 03:41:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x48, 0x28, 0x400000000000aff, 0x0, 0x0, {0xc}, [@typed={0x34, 0x5, @str='posix_acl_accessvmnet0eth0trustedlo(.mime_type/\x00'}]}, 0x48}}, 0x0) socket$packet(0x11, 0x3, 0x300) 03:41:33 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f0000000800)='/dev/dri/card#\x00'], &(0x7f0000000ac0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) getpid() getpeername$unix(r2, &(0x7f0000000880)=@abs, &(0x7f0000000180)=0x6e) r3 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000940)=0x800000000000004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000), &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={0x0, 0x4}, &(0x7f0000000540)=0x8) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d76") syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000380)="866312ae45d58a836293d145dfe08be6e1c271f22daf86d3d70c0a660525113bd8456cf20921de6dd85fdcc2ab0745eaeefa7d43dedcdce9af883d46dd7a88c539b7efb1ae1b8aecc8738687accc0afca9e2b3c790", 0x55}], 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffffffffffff, 0x0) [ 981.585190] [ 981.586858] ====================================================== [ 981.593167] WARNING: possible circular locking dependency detected [ 981.599490] 4.20.0-rc6+ #150 Not tainted [ 981.603578] ------------------------------------------------------ [ 981.609895] khugepaged/1025 is trying to acquire lock: [ 981.615196] 000000006e466c89 (delayed_uprobe_lock){+.+.}, at: uprobe_clear_state+0xb4/0x390 [ 981.623701] [ 981.623701] but task is already holding lock: [ 981.629664] 000000006b315a29 (fs_reclaim){+.+.}, at: fs_reclaim_acquire.part.97+0x0/0x30 [ 981.637885] [ 981.637885] which lock already depends on the new lock. [ 981.637885] [ 981.646186] [ 981.646186] the existing dependency chain (in reverse order) is: [ 981.653796] [ 981.653796] -> #1 (fs_reclaim){+.+.}: [ 981.659076] fs_reclaim_acquire.part.97+0x24/0x30 [ 981.664424] fs_reclaim_acquire+0x14/0x20 [ 981.669087] kmem_cache_alloc_trace+0x2d/0x750 [ 981.674176] update_ref_ctr+0x36f/0x590 [ 981.678676] uprobe_write_opcode+0x94b/0xc50 [ 981.683605] set_swbp+0x2a/0x40 [ 981.687408] install_breakpoint.isra.24+0x161/0x840 [ 981.692934] register_for_each_vma+0xa38/0xee0 [ 981.698026] uprobe_apply+0xee/0x140 [ 981.702261] trace_uprobe_register+0x771/0xcf0 [ 981.707372] perf_trace_event_init+0x1a5/0x990 [ 981.712488] perf_uprobe_init+0x1f1/0x280 [ 981.717218] perf_uprobe_event_init+0x106/0x1a0 [ 981.722417] perf_try_init_event+0x137/0x2f0 [ 981.727337] perf_event_alloc.part.94+0x1d54/0x3740 [ 981.732870] __do_sys_perf_event_open+0xada/0x3020 [ 981.738312] __x64_sys_perf_event_open+0xbe/0x150 [ 981.743675] do_syscall_64+0x1b9/0x820 [ 981.748079] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.753783] [ 981.753783] -> #0 (delayed_uprobe_lock){+.+.}: [ 981.759848] lock_acquire+0x1ed/0x520 [ 981.764177] __mutex_lock+0x166/0x16f0 [ 981.768581] mutex_lock_nested+0x16/0x20 [ 981.773150] uprobe_clear_state+0xb4/0x390 [ 981.777895] mmput+0x1bc/0x610 [ 981.781628] binder_alloc_free_page+0x5ab/0x1520 [ 981.786920] __list_lru_walk_one+0x29d/0x8c0 [ 981.791838] list_lru_walk_one+0xa5/0xe0 [ 981.796427] list_lru_walk_node+0x43/0x280 [ 981.801167] binder_shrink_scan+0x164/0x220 [ 981.805996] do_shrink_slab+0x501/0xd30 [ 981.810476] shrink_slab+0x389/0x8c0 [ 981.814696] shrink_node+0x431/0x16b0 [ 981.819020] do_try_to_free_pages+0x3e7/0x1290 [ 981.824114] try_to_free_pages+0x4d0/0xb90 [ 981.828874] __alloc_pages_slowpath+0xa48/0x2de0 [ 981.834154] __alloc_pages_nodemask+0xad8/0xea0 [ 981.839334] khugepaged_alloc_page+0x95/0x190 [ 981.844339] khugepaged_scan_pmd+0x1715/0x3d60 [ 981.849429] khugepaged+0xf20/0x1750 [ 981.853675] kthread+0x35a/0x440 [ 981.857568] ret_from_fork+0x3a/0x50 [ 981.861796] [ 981.861796] other info that might help us debug this: [ 981.861796] [ 981.869941] Possible unsafe locking scenario: [ 981.869941] [ 981.875996] CPU0 CPU1 [ 981.880670] ---- ---- [ 981.885318] lock(fs_reclaim); [ 981.888584] lock(delayed_uprobe_lock); [ 981.895150] lock(fs_reclaim); [ 981.900930] lock(delayed_uprobe_lock); [ 981.904978] [ 981.904978] *** DEADLOCK *** [ 981.904978] [ 981.911027] 3 locks held by khugepaged/1025: [ 981.915454] #0: 000000006b315a29 (fs_reclaim){+.+.}, at: fs_reclaim_acquire.part.97+0x0/0x30 [ 981.924116] #1: 0000000086326917 (shrinker_rwsem){++++}, at: shrink_slab+0x207/0x8c0 [ 981.932082] #2: 000000000790c708 (&alloc->mutex){+.+.}, at: binder_alloc_free_page+0x12f/0x1520 [ 981.941043] [ 981.941043] stack backtrace: [ 981.945530] CPU: 0 PID: 1025 Comm: khugepaged Not tainted 4.20.0-rc6+ #150 [ 981.952592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.961937] Call Trace: [ 981.964513] dump_stack+0x244/0x39d [ 981.968169] ? dump_stack_print_info.cold.1+0x20/0x20 [ 981.973371] ? vprintk_func+0x85/0x181 [ 981.977262] print_circular_bug.isra.35.cold.54+0x1bd/0x27d [ 981.983005] __lock_acquire+0x3399/0x4c20 [ 981.987150] ? mark_held_locks+0x130/0x130 [ 981.991377] ? find_held_lock+0x36/0x1c0 [ 981.995442] ? mark_held_locks+0xc7/0x130 [ 981.999585] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 982.004179] ? trace_hardirqs_on+0xbd/0x310 [ 982.008496] ? kasan_check_read+0x11/0x20 [ 982.012635] ? finish_task_switch+0x1f4/0x910 [ 982.017131] ? trace_hardirqs_off_caller+0x310/0x310 [ 982.022583] ? compat_start_thread+0x80/0x80 [ 982.026984] ? finish_task_switch+0x1f4/0x910 [ 982.031465] ? finish_task_switch+0x1b4/0x910 [ 982.035985] ? zap_class+0x640/0x640 [ 982.039716] ? preempt_notifier_register+0x200/0x200 [ 982.044813] ? __switch_to_asm+0x34/0x70 [ 982.048875] ? __switch_to_asm+0x34/0x70 [ 982.052937] ? __switch_to_asm+0x40/0x70 [ 982.056999] ? __switch_to_asm+0x40/0x70 [ 982.061057] ? __switch_to_asm+0x34/0x70 [ 982.065123] ? __switch_to_asm+0x40/0x70 [ 982.069181] ? __switch_to_asm+0x34/0x70 [ 982.073227] ? __switch_to_asm+0x40/0x70 [ 982.077281] ? __switch_to_asm+0x34/0x70 [ 982.081330] ? __switch_to_asm+0x40/0x70 [ 982.085401] lock_acquire+0x1ed/0x520 [ 982.089204] ? uprobe_clear_state+0xb4/0x390 [ 982.093621] ? lock_release+0xa00/0xa00 [ 982.097616] ? perf_trace_sched_process_exec+0x860/0x860 [ 982.103056] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 982.107628] ? retint_kernel+0x2d/0x2d [ 982.111509] ? trace_hardirqs_on_caller+0xc0/0x310 [ 982.116447] ? uprobe_clear_state+0xb4/0x390 [ 982.120866] __mutex_lock+0x166/0x16f0 [ 982.124746] ? uprobe_clear_state+0xb4/0x390 [ 982.129171] ? uprobe_clear_state+0xb4/0x390 [ 982.133591] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 982.138351] ? mutex_trylock+0x2b0/0x2b0 [ 982.142401] ? preempt_schedule_common+0x1f/0xe0 [ 982.147157] ? preempt_schedule+0x4d/0x60 [ 982.151296] ? ___preempt_schedule+0x16/0x18 [ 982.155793] ? _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 982.160916] ? try_to_wake_up+0x11c/0x1440 [ 982.165159] ? migrate_swap_stop+0x8a0/0x8a0 [ 982.169569] ? find_held_lock+0x36/0x1c0 [ 982.173623] ? zap_class+0x640/0x640 [ 982.177333] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 982.182437] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 982.187533] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 982.192138] ? trace_hardirqs_on+0xbd/0x310 [ 982.196483] ? kasan_check_read+0x11/0x20 [ 982.200650] ? __lock_is_held+0xb5/0x140 [ 982.204707] mutex_lock_nested+0x16/0x20 [ 982.208761] ? mutex_lock_nested+0x16/0x20 [ 982.212994] uprobe_clear_state+0xb4/0x390 [ 982.217222] ? uprobe_munmap+0x450/0x450 [ 982.221279] ? rwsem_downgrade_wake+0x240/0x240 [ 982.225942] ? binder_alloc_free_page+0x59f/0x1520 [ 982.230874] ? __might_sleep+0x95/0x190 [ 982.234852] mmput+0x1bc/0x610 [ 982.238038] ? set_mm_exe_file+0x200/0x200 [ 982.242266] ? call_rwsem_wake+0x1b/0x30 [ 982.246316] ? up_write+0x150/0x220 [ 982.249935] ? down_write_nested+0x130/0x130 [ 982.254348] binder_alloc_free_page+0x5ab/0x1520 [ 982.259117] ? binder_free_buf_locked+0x6e0/0x6e0 [ 982.263991] ? print_usage_bug+0xc0/0xc0 [ 982.268050] ? mark_held_locks+0x130/0x130 [ 982.272276] ? mark_held_locks+0xc7/0x130 [ 982.276410] ? _raw_spin_unlock_irq+0x27/0x80 [ 982.281094] ? mark_held_locks+0xc7/0x130 [ 982.285241] ? kasan_check_read+0x11/0x20 [ 982.289397] ? zap_class+0x640/0x640 [ 982.293103] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 982.297710] ? retint_kernel+0x2d/0x2d [ 982.301601] ? trace_hardirqs_on_caller+0xc0/0x310 [ 982.306521] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 982.311284] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 982.316742] ? __lock_is_held+0xb5/0x140 [ 982.320806] __list_lru_walk_one+0x29d/0x8c0 [ 982.325221] ? binder_free_buf_locked+0x6e0/0x6e0 [ 982.330057] ? list_lru_count_one+0x450/0x450 [ 982.334559] ? lock_acquire+0x268/0x520 [ 982.338524] ? __sched_text_start+0x8/0x8 [ 982.342671] ? kasan_check_read+0x11/0x20 [ 982.346805] ? do_raw_spin_lock+0x14f/0x350 [ 982.351113] ? rwlock_bug.part.2+0x90/0x90 [ 982.355334] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 982.359905] ? retint_kernel+0x2d/0x2d [ 982.363779] ? trace_hardirqs_on_caller+0xc0/0x310 [ 982.368739] list_lru_walk_one+0xa5/0xe0 [ 982.372820] ? binder_free_buf_locked+0x6e0/0x6e0 [ 982.377660] ? binder_free_buf_locked+0x6e0/0x6e0 [ 982.382524] list_lru_walk_node+0x43/0x280 [ 982.386781] ? check_preemption_disabled+0x48/0x280 [ 982.391804] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 982.397342] ? binder_free_buf_locked+0x6e0/0x6e0 [ 982.402189] binder_shrink_scan+0x164/0x220 [ 982.406515] ? __lock_is_held+0xb5/0x140 [ 982.410621] ? binder_ioctl.cold.79+0x17f/0x17f [ 982.415286] do_shrink_slab+0x501/0xd30 [ 982.419287] ? snapshot_refaults+0x290/0x290 [ 982.423697] ? lock_release+0xa00/0xa00 [ 982.427674] ? perf_trace_sched_process_exec+0x860/0x860 [ 982.433116] ? down_read_trylock+0xda/0x140 [ 982.437446] ? shrink_slab+0x207/0x8c0 [ 982.441335] ? downgrade_write+0x270/0x270 [ 982.445577] shrink_slab+0x389/0x8c0 [ 982.449290] ? shrink_active_list+0x1f00/0x1f00 [ 982.453953] ? unregister_memcg_shrinker.isra.44+0x50/0x50 [ 982.459605] ? kasan_check_read+0x11/0x20 [ 982.463763] ? kasan_check_read+0x11/0x20 [ 982.467940] ? node_page_state+0x74/0x110 [ 982.472094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 982.477636] shrink_node+0x431/0x16b0 [ 982.481431] ? mem_cgroup_split_huge_fixup+0x1b0/0x1b0 [ 982.486706] ? shrink_node_memcg+0x18f0/0x18f0 [ 982.491281] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 982.496809] ? compaction_suitable+0x1cc/0x550 [ 982.501379] ? isolate_migratepages_range+0x270/0x270 [ 982.506589] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 982.512133] ? __cpuset_node_allowed+0x19b/0x660 [ 982.516881] ? mark_held_locks+0x130/0x130 [ 982.521124] ? cpuset_nodemask_valid_mems_allowed+0x90/0x90 [ 982.526826] ? debug_smp_processor_id+0x1c/0x20 [ 982.531494] do_try_to_free_pages+0x3e7/0x1290 [ 982.536071] ? zap_class+0x640/0x640 [ 982.539816] ? shrink_node+0x16b0/0x16b0 [ 982.543888] ? __lock_is_held+0xb5/0x140 [ 982.547944] try_to_free_pages+0x4d0/0xb90 [ 982.552186] ? do_try_to_free_pages+0x1290/0x1290 [ 982.557036] ? lock_acquire+0x1ed/0x520 [ 982.561010] ? set_page_refcounted+0x280/0x280 [ 982.565596] ? lock_release+0xa00/0xa00 [ 982.569600] ? _raw_spin_unlock_irq+0x60/0x80 [ 982.574103] ? psi_memstall_enter+0x24f/0x2c0 [ 982.578594] ? psi_memstall_tick+0x230/0x230 [ 982.583011] __alloc_pages_slowpath+0xa48/0x2de0 [ 982.587812] ? zap_class+0x640/0x640 [ 982.591514] ? warn_alloc+0x120/0x120 [ 982.595309] ? mark_held_locks+0x130/0x130 [ 982.599584] ? print_usage_bug+0xc0/0xc0 [ 982.603634] ? lock_unpin_lock+0x4a0/0x4a0 [ 982.607868] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 982.613408] ? check_preemption_disabled+0x48/0x280 [ 982.618417] ? debug_smp_processor_id+0x1c/0x20 [ 982.623074] ? perf_trace_lock+0x14d/0x7a0 [ 982.627301] ? __lock_acquire+0x62f/0x4c20 [ 982.631523] ? update_load_avg+0x2470/0x2470 [ 982.635960] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 982.641501] ? should_fail+0x22d/0xd01 [ 982.645399] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 982.650511] ? zap_class+0x640/0x640 [ 982.654237] ? mark_held_locks+0x130/0x130 [ 982.658486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 982.664037] ? check_preemption_disabled+0x48/0x280 [ 982.669049] ? find_held_lock+0x36/0x1c0 [ 982.673116] ? lock_is_held_type+0x210/0x210 [ 982.677520] ? lock_release+0xa00/0xa00 [ 982.681496] ? perf_trace_sched_process_exec+0x860/0x860 [ 982.686935] ? lock_is_held_type+0x210/0x210 [ 982.691337] ? zap_class+0x640/0x640 [ 982.695054] ? __might_sleep+0x95/0x190 [ 982.699023] __alloc_pages_nodemask+0xad8/0xea0 [ 982.703694] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 982.708714] ? lock_downgrade+0x900/0x900 [ 982.712860] ? lock_downgrade+0x900/0x900 [ 982.717039] ? kasan_check_write+0x14/0x20 [ 982.721265] ? up_read+0x225/0x2c0 [ 982.724807] ? do_raw_spin_trylock+0x270/0x270 [ 982.729380] ? up_read_non_owner+0x100/0x100 [ 982.733787] ? unwind_dump+0x190/0x190 [ 982.737672] khugepaged_alloc_page+0x95/0x190 [ 982.742161] khugepaged_scan_pmd+0x1715/0x3d60 [ 982.746789] ? __collapse_huge_page_swapin+0x1600/0x1600 [ 982.752246] ? __lock_acquire+0x62f/0x4c20 [ 982.756501] ? save_stack+0xa9/0xd0 [ 982.760147] ? save_stack+0x43/0xd0 [ 982.763816] ? __kasan_slab_free+0x102/0x150 [ 982.768250] ? mark_held_locks+0x130/0x130 [ 982.772472] ? kasan_check_read+0x11/0x20 [ 982.776608] ? do_raw_spin_unlock+0xa7/0x330 [ 982.781015] ? mark_held_locks+0x130/0x130 [ 982.785506] ? check_preemption_disabled+0x48/0x280 [ 982.790528] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 982.796074] ? check_preemption_disabled+0x48/0x280 [ 982.801088] ? debug_smp_processor_id+0x1c/0x20 [ 982.805755] ? lock_is_held_type+0x210/0x210 [ 982.810166] ? __mmdrop+0x347/0x4d0 [ 982.813781] ? get_task_mm+0xe0/0xe0 [ 982.817493] ? zap_class+0x640/0x640 [ 982.821207] ? __lock_is_held+0xb5/0x140 [ 982.825283] ? zap_class+0x640/0x640 [ 982.828985] ? lock_acquire+0x1ed/0x520 [ 982.832962] ? khugepaged+0xa87/0x1750 [ 982.836850] ? lock_release+0xa00/0xa00 [ 982.840816] ? __lock_is_held+0xb5/0x140 [ 982.844866] ? lock_downgrade+0x900/0x900 [ 982.849029] ? khugepaged+0xa87/0x1750 [ 982.852911] ? perf_trace_sched_process_exec+0x860/0x860 [ 982.858352] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 982.863897] ? is_vma_temporary_stack+0x74/0x90 [ 982.868567] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 982.874096] khugepaged+0xf20/0x1750 [ 982.877819] ? mark_held_locks+0x130/0x130 [ 982.882075] ? khugepaged_scan_pmd+0x3d60/0x3d60 [ 982.886822] ? preempt_notifier_register+0x200/0x200 [ 982.891915] ? __switch_to_asm+0x34/0x70 [ 982.895985] ? __switch_to_asm+0x40/0x70 [ 982.900043] ? __switch_to_asm+0x34/0x70 [ 982.904094] ? __switch_to_asm+0x40/0x70 [ 982.908144] ? __switch_to_asm+0x34/0x70 [ 982.912207] ? __switch_to_asm+0x40/0x70 [ 982.916256] ? __switch_to_asm+0x34/0x70 [ 982.920305] ? __switch_to_asm+0x34/0x70 [ 982.924360] ? __switch_to_asm+0x40/0x70 [ 982.928405] ? __switch_to_asm+0x34/0x70 [ 982.932459] ? __switch_to_asm+0x40/0x70 [ 982.936520] ? __switch_to_asm+0x34/0x70 [ 982.940579] ? __switch_to_asm+0x40/0x70 [ 982.944631] ? __schedule+0x8d7/0x21d0 [ 982.948556] ? zap_class+0x640/0x640 [ 982.952262] ? find_held_lock+0x36/0x1c0 [ 982.956321] ? __kthread_parkme+0xce/0x1a0 [ 982.960559] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 982.965678] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 982.970773] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 982.975355] ? trace_hardirqs_on+0xbd/0x310 [ 982.979668] ? kasan_check_read+0x11/0x20 [ 982.983810] ? __kthread_parkme+0xce/0x1a0 [ 982.988049] ? trace_hardirqs_off_caller+0x310/0x310 [ 982.993153] ? trace_hardirqs_off_caller+0x310/0x310 [ 982.998247] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 983.003351] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 983.008875] ? __kthread_parkme+0xfb/0x1a0 [ 983.013109] ? khugepaged_scan_pmd+0x3d60/0x3d60 [ 983.017890] kthread+0x35a/0x440 [ 983.021262] ? kthread_stop+0x900/0x900 [ 983.025226] ret_from_fork+0x3a/0x50 [ 983.031358] netlink: 48 bytes leftover after parsing attributes in process `syz-executor1'. 03:41:34 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 983.053559] binder: 15394:15401 got transaction with invalid fd, -1 [ 983.061488] binder_transaction: 14 callbacks suppressed [ 983.061504] binder: 15394:15401 transaction failed 29201/-9, size 24-8 line 3077 [ 983.079181] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 983.085932] kobject: 'loop4' (000000003440eab0): kobject_uevent_env [ 983.092493] kobject: 'loop4' (000000003440eab0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 983.107694] netlink: 48 bytes leftover after parsing attributes in process `syz-executor1'. [ 983.117778] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 983.129402] binder: send failed reply for transaction 4652 to 15394:15401 [ 983.143142] binder: BINDER_SET_CONTEXT_MGR already set [ 983.144880] binder: 15394:15401 ioctl c0306201 20000380 returned -14 03:41:34 executing program 1: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8000, 0x801) sendto$inet6(r2, &(0x7f00000006c0)="0c0c08b91106f5d9580dce58f6404a0844aa3cea8eac823a761fd4d0f83b5e9b08839e7e5b3d3ca43d9e54b671fbb7f3ce83c34985dc5a4513a4b182fc475ab34d594d69a3c08166297883cb8d6b9afa18ec420624db1c0b0ab4ac4327d3266bccaf9422d8a307db71d0c56c1b48", 0x6e, 0x20004000, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) r4 = gettid() getgid() writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000740)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac026656b471e3e887124d3b9c9", 0x63}], 0xe9) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x1, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000004c0)={0x3, 0x9, 0x6, 0x1, r5}, &(0x7f00000005c0)=0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r4, 0x1004000000016) r6 = dup2(r0, r3) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000580), &(0x7f0000000600)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x7, 0x2, 0x3, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x1, 0x3, 0x2}, {0x716, 0x7, 0x8, 0x8, 0x0, 0x800, 0x2, 0x4, 0x1, 0x0, 0x2, 0x6b74, 0x8000}, {0x1, 0x0, 0x1406, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x81, 0x8245, 0x2, 0x2}]}) dup3(r3, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r7, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x1000c0586300}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="ec", 0x1}], 0x1}, 0x0) r8 = memfd_create(&(0x7f0000000000)=',\x00', 0x2) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) [ 983.163928] binder: 15407:15408 ioctl 40046207 0 returned -16 [ 983.170979] binder_alloc: binder_alloc_mmap_handler: 15394 20001000-20004000 already mapped failed -16 [ 983.198440] kobject: 'loop1' (000000000959b2d0): kobject_uevent_env [ 983.214846] kobject: 'loop1' (000000000959b2d0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 983.224621] binder: BINDER_SET_CONTEXT_MGR already set [ 983.231406] binder: 15407:15414 got reply transaction with no transaction stack [ 983.237068] binder: 15394:15401 ioctl 40046207 0 returned -16 [ 983.247814] binder: 15407:15414 transaction failed 29201/-71, size 24-4 line 2741 03:41:34 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f0000000800)='/dev/dri/card#\x00'], &(0x7f0000000ac0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) getpid() getpeername$unix(r2, &(0x7f0000000880)=@abs, &(0x7f0000000180)=0x6e) r3 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000940)=0x800000000000004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000), &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={0x0, 0x4}, &(0x7f0000000540)=0x8) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d76") syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000380)="866312ae45d58a836293d145dfe08be6e1c271f22daf86d3d70c0a660525113bd8456cf20921de6dd85fdcc2ab0745eaeefa7d43dedcdce9af883d46dd7a88c539b7efb1ae1b8aecc8738687accc0afca9e2b3c790", 0x55}], 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffffffffffff, 0x0) 03:41:34 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="1d96817dc121cd6c10a3374673797a31a24b6c8c40990ab76bb517d33dff7f4ddf70e7a464ee1614fe5db29f499b886dfb1f5b3e6e8c345e3ec1015661322a1c40751c138b15f7b37ea507faef1d52d7774db0965fd143e571e849a4a3557799b2c579efc21568f0695857789d0946aebdad98b131008763dd91e471de7e67355a806455b0fc141d510c765f4a96dba342f0dca75e3ba057330727b0319e68e4de6fbe652a730d8f28a8fe9171ccdfbec461b5d859f15c388941dad158a7ccaac9c6000000b912d3ca9f5aaef669a91f42e13854036ce6c51bbc3f6e1f2a71e8ad6462dab93000ccd13491d49945a1bbf5bef14e5ca56af9e34a6877125e4140b62f3561"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f0000000800)='/dev/dri/card#\x00'], &(0x7f0000000ac0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) getpid() getpeername$unix(r2, &(0x7f0000000880)=@abs, &(0x7f0000000180)=0x6e) r3 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000940)=0x800000000000004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000), &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={0x0, 0x4}, &(0x7f0000000540)=0x8) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d76") syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000380)="866312ae45d58a836293d145dfe08be6e1c271f22daf86d3d70c0a660525113bd8456cf20921de6dd85fdcc2ab0745eaeefa7d43dedcdce9af883d46dd7a88c539b7efb1ae1b8aecc8738687accc0afca9e2b3c790", 0x55}], 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffffffffffff, 0x0) [ 983.261908] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 983.268846] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 983.289913] kobject: 'loop5' (00000000738b34bd): kobject_uevent_env [ 983.296907] binder_alloc: 15394: binder_alloc_buf, no vma [ 983.299810] kobject: 'loop5' (00000000738b34bd): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 983.326193] binder: 15394:15418 transaction failed 29189/-3, size 0-0 line 2973 [ 983.344615] binder_release_work: 24 callbacks suppressed [ 983.344621] binder: undelivered TRANSACTION_ERROR: 29190 [ 983.366672] binder: undelivered TRANSACTION_ERROR: 29189 03:41:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x6c00, 0x0, 0x0}) [ 983.389802] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 983.405434] binder: undelivered TRANSACTION_COMPLETE [ 983.411092] binder: undelivered TRANSACTION_ERROR: 29201 [ 983.434288] kobject: 'loop0' (0000000048a3337e): kobject_uevent_env [ 983.438680] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 983.441863] kobject: 'loop0' (0000000048a3337e): fill_kobj_path: path = '/devices/virtual/block/loop0' 03:41:35 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f0000000800)='/dev/dri/card#\x00'], &(0x7f0000000ac0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) getpid() getpeername$unix(r2, &(0x7f0000000880)=@abs, &(0x7f0000000180)=0x6e) r3 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000940)=0x800000000000004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000), &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={0x0, 0x4}, &(0x7f0000000540)=0x8) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d76") syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000380)="866312ae45d58a836293d145dfe08be6e1c271f22daf86d3d70c0a660525113bd8456cf20921de6dd85fdcc2ab0745eaeefa7d43dedcdce9af883d46dd7a88c539b7efb1ae1b8aecc8738687accc0afca9e2b3c790", 0x55}], 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffffffffffff, 0x0) 03:41:35 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f0000000800)='/dev/dri/card#\x00'], &(0x7f0000000ac0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) getpid() getpeername$unix(r2, &(0x7f0000000880)=@abs, &(0x7f0000000180)=0x6e) r3 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000940)=0x800000000000004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000), &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={0x0, 0x4}, &(0x7f0000000540)=0x8) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d76") syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000380)="866312ae45d58a836293d145dfe08be6e1c271f22daf86d3d70c0a660525113bd8456cf20921de6dd85fdcc2ab0745eaeefa7d43dedcdce9af883d46dd7a88c539b7efb1ae1b8aecc8738687accc0afca9e2b3c790", 0x55}], 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffffffffffff, 0x0) [ 983.488714] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 983.496752] binder: 15428:15430 got transaction with invalid fd, -1 [ 983.496888] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 983.503228] binder: 15428:15430 transaction failed 29201/-9, size 24-8 line 3077 [ 983.503242] binder: send failed reply for transaction 4657 to 15428:15430 [ 983.568582] binder: 15428:15430 ioctl c0306201 20000380 returned -14 [ 983.585855] binder_alloc: binder_alloc_mmap_handler: 15428 20001000-20004000 already mapped failed -16 [ 983.595797] kobject: 'loop5' (00000000738b34bd): kobject_uevent_env [ 983.602259] kobject: 'loop5' (00000000738b34bd): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 983.618558] binder_alloc: 15428: binder_alloc_buf, no vma [ 983.637096] binder: BINDER_SET_CONTEXT_MGR already set [ 983.652752] binder: 15428:15430 ioctl 40046207 0 returned -16 [ 983.659660] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env 03:41:35 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f0000000800)='/dev/dri/card#\x00'], &(0x7f0000000ac0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) getpid() getpeername$unix(r2, &(0x7f0000000880)=@abs, &(0x7f0000000180)=0x6e) r3 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000940)=0x800000000000004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000), &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={0x0, 0x4}, &(0x7f0000000540)=0x8) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d76") syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000380)="866312ae45d58a836293d145dfe08be6e1c271f22daf86d3d70c0a660525113bd8456cf20921de6dd85fdcc2ab0745eaeefa7d43dedcdce9af883d46dd7a88c539b7efb1ae1b8aecc8738687accc0afca9e2b3c790", 0x55}], 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffffffffffff, 0x0) [ 983.672519] binder: 15428:15435 transaction failed 29189/-3, size 0-0 line 2973 [ 983.690362] binder: undelivered TRANSACTION_ERROR: 29190 [ 983.697519] binder: undelivered TRANSACTION_ERROR: 29189 [ 983.713071] kobject: 'loop5' (00000000738b34bd): kobject_uevent_env [ 983.720979] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 983.722145] kobject: 'loop5' (00000000738b34bd): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 983.760548] binder: undelivered TRANSACTION_COMPLETE [ 983.765908] binder: undelivered TRANSACTION_ERROR: 29201 [ 983.769406] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 983.791681] kobject: 'loop0' (0000000048a3337e): kobject_uevent_env [ 983.801999] kobject: 'loop0' (0000000048a3337e): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 983.821603] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 983.833983] binder: undelivered TRANSACTION_COMPLETE [ 983.839111] binder: undelivered TRANSACTION_ERROR: 29201 03:41:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x14) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:35 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f0000000800)='/dev/dri/card#\x00'], &(0x7f0000000ac0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) getpid() getpeername$unix(r2, &(0x7f0000000880)=@abs, &(0x7f0000000180)=0x6e) r3 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000940)=0x800000000000004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000), &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={0x0, 0x4}, &(0x7f0000000540)=0x8) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d76") syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000380)="866312ae45d58a836293d145dfe08be6e1c271f22daf86d3d70c0a660525113bd8456cf20921de6dd85fdcc2ab0745eaeefa7d43dedcdce9af883d46dd7a88c539b7efb1ae1b8aecc8738687accc0afca9e2b3c790", 0x55}], 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffffffffffff, 0x0) 03:41:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0xffffff7f, 0x0, 0x0}) 03:41:35 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f0000000800)='/dev/dri/card#\x00'], &(0x7f0000000ac0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) getpid() getpeername$unix(r2, &(0x7f0000000880)=@abs, &(0x7f0000000180)=0x6e) r3 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000940)=0x800000000000004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000), &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={0x0, 0x4}, &(0x7f0000000540)=0x8) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d76") syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000380)="866312ae45d58a836293d145dfe08be6e1c271f22daf86d3d70c0a660525113bd8456cf20921de6dd85fdcc2ab0745eaeefa7d43dedcdce9af883d46dd7a88c539b7efb1ae1b8aecc8738687accc0afca9e2b3c790", 0x55}], 0x1, 0x0) [ 983.884771] kobject: 'loop5' (00000000738b34bd): kobject_uevent_env [ 983.891240] kobject: 'loop5' (00000000738b34bd): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 983.921558] binder: 15449:15452 got transaction with invalid fd, -1 [ 983.929805] kobject: 'loop3' (00000000aa6c5897): kobject_uevent_env [ 983.937269] binder: 15449:15452 transaction failed 29201/-9, size 24-8 line 3077 [ 983.947064] binder_alloc: binder_alloc_mmap_handler: 15407 20001000-20004000 already mapped failed -16 [ 983.960139] binder: BINDER_SET_CONTEXT_MGR already set [ 983.969579] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 983.977651] binder: 15407:15457 ioctl 40046207 0 returned -16 [ 983.983702] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 983.984147] kobject: 'loop3' (00000000aa6c5897): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 983.993920] binder: undelivered TRANSACTION_ERROR: 29201 03:41:35 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 984.031028] binder: send failed reply for transaction 4661 to 15449:15452 [ 984.052463] binder: 15449:15452 ioctl c0306201 20000380 returned -14 [ 984.061593] kobject: 'loop4' (000000003440eab0): kobject_uevent_env [ 984.065388] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 984.068397] kobject: 'loop4' (000000003440eab0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 984.078219] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 984.105620] binder_alloc: binder_alloc_mmap_handler: 15449 20001000-20004000 already mapped failed -16 [ 984.125089] binder: BINDER_SET_CONTEXT_MGR already set [ 984.139692] binder: 15463:15466 ioctl 40046207 0 returned -16 [ 984.145968] binder: BINDER_SET_CONTEXT_MGR already set [ 984.152172] binder: 15449:15452 ioctl 40046207 0 returned -16 [ 984.159078] binder_alloc: 15449: binder_alloc_buf, no vma [ 984.165413] binder: 15449:15467 transaction failed 29189/-3, size 0-0 line 2973 [ 984.173492] binder: undelivered TRANSACTION_COMPLETE [ 984.179271] binder: undelivered TRANSACTION_ERROR: 29201 [ 984.187128] kobject: 'loop5' (00000000738b34bd): kobject_uevent_env [ 984.193583] kobject: 'loop5' (00000000738b34bd): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 984.203174] binder: 15463:15469 got reply transaction with no transaction stack [ 984.216194] binder: 15463:15469 transaction failed 29201/-71, size 24-4 line 2741 [ 984.219713] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 984.225686] binder: undelivered TRANSACTION_ERROR: 29190 [ 984.246891] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 984.263972] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 984.264390] kobject: 'loop0' (0000000048a3337e): kobject_uevent_env [ 984.303922] kobject: 'loop0' (0000000048a3337e): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 984.327192] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 984.334092] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 984.344535] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 984.386647] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 984.397859] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' 03:41:36 executing program 1: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8000, 0x801) sendto$inet6(r2, &(0x7f00000006c0)="0c0c08b91106f5d9580dce58f6404a0844aa3cea8eac823a761fd4d0f83b5e9b08839e7e5b3d3ca43d9e54b671fbb7f3ce83c34985dc5a4513a4b182fc475ab34d594d69a3c08166297883cb8d6b9afa18ec420624db1c0b0ab4ac4327d3266bccaf9422d8a307db71d0c56c1b48", 0x6e, 0x20004000, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) r4 = gettid() getgid() writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000740)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac026656b471e3e887124d3b9c9", 0x63}], 0xe9) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x1, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000004c0)={0x3, 0x9, 0x6, 0x1, r5}, &(0x7f00000005c0)=0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r4, 0x1004000000016) r6 = dup2(r0, r3) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000580), &(0x7f0000000600)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x7, 0x2, 0x3, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x1, 0x3, 0x2}, {0x716, 0x7, 0x8, 0x8, 0x0, 0x800, 0x2, 0x4, 0x1, 0x0, 0x2, 0x6b74, 0x8000}, {0x1, 0x0, 0x1406, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x81, 0x8245, 0x2, 0x2}]}) dup3(r3, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r7, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x1000c0586300}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="ec", 0x1}], 0x1}, 0x0) r8 = memfd_create(&(0x7f0000000000)=',\x00', 0x2) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) 03:41:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x5000000, 0x0, 0x0}) 03:41:36 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f0000000800)='/dev/dri/card#\x00'], &(0x7f0000000ac0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) getpid() getpeername$unix(r2, &(0x7f0000000880)=@abs, &(0x7f0000000180)=0x6e) r3 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000940)=0x800000000000004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000), &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={0x0, 0x4}, &(0x7f0000000540)=0x8) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d76") syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) 03:41:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x48000000, 0x0, 0x0}) 03:41:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xb7eec3717f0000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 984.448080] kobject: 'loop3' (00000000aa6c5897): kobject_uevent_env [ 984.455802] kobject: 'loop3' (00000000aa6c5897): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 984.487926] kobject: 'loop1' (000000000959b2d0): kobject_uevent_env 03:41:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x5000000, 0x0, 0x0}) [ 984.501963] kobject: 'loop1' (000000000959b2d0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 984.524642] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 984.533388] binder: 15478:15484 got transaction with invalid fd, -1 [ 984.533768] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 984.549652] binder: 15478:15484 transaction failed 29201/-9, size 24-8 line 3077 [ 984.554376] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 984.557711] binder: send failed reply for transaction 4666 to 15478:15484 [ 984.569776] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 984.579835] binder: 15478:15484 ioctl c0306201 20000380 returned -14 03:41:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x5000000, 0x0, 0x0}) 03:41:36 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f0000000800)='/dev/dri/card#\x00'], &(0x7f0000000ac0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) getpid() getpeername$unix(r2, &(0x7f0000000880)=@abs, &(0x7f0000000180)=0x6e) r3 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000940)=0x800000000000004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000), &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={0x0, 0x4}, &(0x7f0000000540)=0x8) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d76") [ 984.623090] binder: BINDER_SET_CONTEXT_MGR already set [ 984.636634] binder_alloc: 15478: binder_alloc_buf, no vma [ 984.637743] binder: 15478:15484 ioctl 40046207 0 returned -16 [ 984.649043] binder: 15478:15492 transaction failed 29189/-3, size 0-0 line 2973 [ 984.657450] binder: undelivered TRANSACTION_COMPLETE 03:41:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x1400000000000000, 0x0, 0x0}) [ 984.701024] kobject: 'loop5' (00000000738b34bd): kobject_uevent_env [ 984.716572] kobject: 'loop5' (00000000738b34bd): fill_kobj_path: path = '/devices/virtual/block/loop5' 03:41:36 executing program 2: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8000, 0x801) sendto$inet6(r2, &(0x7f00000006c0)="0c0c08b91106f5d9580dce58f6404a0844aa3cea8eac823a761fd4d0f83b5e9b08839e7e5b3d3ca43d9e54b671fbb7f3ce83c34985dc5a4513a4b182fc475ab34d594d69a3c08166297883cb8d6b9afa18ec420624db1c0b0ab4ac4327d3266bccaf9422d8a307db71d0c56c1b48", 0x6e, 0x20004000, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) r4 = gettid() getgid() writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000740)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac026656b471e3e887124d3b9c9", 0x63}], 0xe9) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x1, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000004c0)={0x3, 0x9, 0x6, 0x1, r5}, &(0x7f00000005c0)=0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r4, 0x1004000000016) r6 = dup2(r0, r3) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000580), &(0x7f0000000600)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x7, 0x2, 0x3, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x1, 0x3, 0x2}, {0x716, 0x7, 0x8, 0x8, 0x0, 0x800, 0x2, 0x4, 0x1, 0x0, 0x2, 0x6b74, 0x8000}, {0x1, 0x0, 0x1406, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x81, 0x8245, 0x2, 0x2}]}) dup3(r3, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r7, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x1000c0586300}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="ec", 0x1}], 0x1}, 0x0) r8 = memfd_create(&(0x7f0000000000)=',\x00', 0x2) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000280)=ANY=[@ANYBLOB="ba2486554013407e95da4d0a7a2c5df8c852de95de240c464a41911a7e8472f26c5e1a881cdbbdc0a5be92e2c30000000000000000000000641484006f47650a3a3511ae85e2c2acc2a4e7face31c4cd2ecdfd616b43c42ae02edc45e2b73d805435dad6743bbe2e2df43fd08cf739636aac0b12fffb23f092e36c7451d5b732b5650c43146eb534efe52b421b6efbce9193f2995cd2c1722bdb264d9ac75d0dc7ea1afa07a2a05bf7fc3b5b4b8eec8a27a2cff5e7d816bf764753f6951a65b8dc6807984266834462e3807cf1813a7a2418bb9e0caf2daeb362526a1bb878d6f146695a8661fa78a47442e882abf5e31eaae828d8b72f3bdff30ebf7825ae8524562530ec83abbb1707746d88fcba560b9c50848ff6b8cbd576315dd50ef1fee95076a8c9a3126743952a4aa75be6110f50d9a7ce8ac82ef56884a20bc4fdfb80d863e65520d15f7adb79cb12ee9ee3499161d5074e7920c0a4706f3eb0e1876f6906ed47c3730ad46225409dbbdad15871126f561d78ce8e334940b38a0708aa1b4691eb92cd59c62f1786b9e87d539b2f60a2dd8027b7d32233aa899e300aecd356f892c01f0c76f6a093f6424f9c34b32d09ce05c44a4faacb39a04f95e69efb37deeb249aed72e7241fc5bfc593093ee991828b6f6e973413f161d35b03659bcac636bd67b64017f6c9a466daa930"]) [ 984.765352] kobject: 'loop0' (0000000048a3337e): kobject_uevent_env [ 984.785584] binder: 15497:15499 got transaction with invalid fd, -1 [ 984.801788] kobject: 'loop0' (0000000048a3337e): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 984.822336] binder: send failed reply for transaction 4670 to 15497:15499 [ 984.857012] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 984.861453] binder: 15497:15499 ioctl c0306201 20000380 returned -14 03:41:36 executing program 5: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r1 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f0000000800)='/dev/dri/card#\x00'], &(0x7f0000000ac0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) getpid() getpeername$unix(r1, &(0x7f0000000880)=@abs, &(0x7f0000000180)=0x6e) r2 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000940)=0x800000000000004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000), &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={0x0, 0x4}, &(0x7f0000000540)=0x8) [ 984.875196] binder: BINDER_SET_CONTEXT_MGR already set [ 984.881352] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 984.891269] binder_alloc: 15497: binder_alloc_buf, no vma [ 984.904600] binder: BINDER_SET_CONTEXT_MGR already set [ 984.909919] binder: 15463:15469 ioctl 40046207 0 returned -16 [ 984.931440] kobject: 'loop5' (00000000738b34bd): kobject_uevent_env [ 984.938517] binder: 15497:15499 ioctl 40046207 0 returned -16 [ 984.945901] kobject: 'loop5' (00000000738b34bd): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 984.970865] binder: 15463:15469 got reply transaction with no transaction stack [ 985.001880] binder: 15497:15506 got reply transaction with no transaction stack [ 985.001929] binder: undelivered TRANSACTION_COMPLETE [ 985.014161] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 985.021275] binder: 15497:15506 ioctl c0306201 20000380 returned -14 [ 985.031950] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' 03:41:36 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 985.068437] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 985.077790] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 985.093714] kobject: 'loop0' (0000000048a3337e): kobject_uevent_env [ 985.101197] kobject: 'loop0' (0000000048a3337e): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 985.117912] kobject: 'loop5' (00000000738b34bd): kobject_uevent_env [ 985.124476] kobject: 'loop5' (00000000738b34bd): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 985.134501] kobject: 'loop4' (000000003440eab0): kobject_uevent_env [ 985.141060] kobject: 'loop4' (000000003440eab0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 985.151662] kobject: 'loop3' (00000000aa6c5897): kobject_uevent_env [ 985.163261] kobject: 'loop3' (00000000aa6c5897): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 985.163391] binder: 15518:15521 got reply transaction with no transaction stack 03:41:37 executing program 1: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8000, 0x801) sendto$inet6(r2, &(0x7f00000006c0)="0c0c08b91106f5d9580dce58f6404a0844aa3cea8eac823a761fd4d0f83b5e9b08839e7e5b3d3ca43d9e54b671fbb7f3ce83c34985dc5a4513a4b182fc475ab34d594d69a3c08166297883cb8d6b9afa18ec420624db1c0b0ab4ac4327d3266bccaf9422d8a307db71d0c56c1b48", 0x6e, 0x20004000, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) r4 = gettid() getgid() writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000740)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac026656b471e3e887124d3b9c9", 0x63}], 0xe9) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x1, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000004c0)={0x3, 0x9, 0x6, 0x1, r5}, &(0x7f00000005c0)=0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r4, 0x1004000000016) r6 = dup2(r0, r3) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000580), &(0x7f0000000600)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x7, 0x2, 0x3, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x1, 0x3, 0x2}, {0x716, 0x7, 0x8, 0x8, 0x0, 0x800, 0x2, 0x4, 0x1, 0x0, 0x2, 0x6b74, 0x8000}, {0x1, 0x0, 0x1406, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x81, 0x8245, 0x2, 0x2}]}) dup3(r3, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r7, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x1000c0586300}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="ec", 0x1}], 0x1}, 0x0) r8 = memfd_create(&(0x7f0000000000)=',\x00', 0x2) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) 03:41:37 executing program 2: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8000, 0x801) sendto$inet6(r2, &(0x7f00000006c0)="0c0c08b91106f5d9580dce58f6404a0844aa3cea8eac823a761fd4d0f83b5e9b08839e7e5b3d3ca43d9e54b671fbb7f3ce83c34985dc5a4513a4b182fc475ab34d594d69a3c08166297883cb8d6b9afa18ec420624db1c0b0ab4ac4327d3266bccaf9422d8a307db71d0c56c1b48", 0x6e, 0x20004000, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) r4 = gettid() getgid() writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000740)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac026656b471e3e887124d3b9c9", 0x63}], 0xe9) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x1, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000004c0)={0x3, 0x9, 0x6, 0x1, r5}, &(0x7f00000005c0)=0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r4, 0x1004000000016) r6 = dup2(r0, r3) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000580), &(0x7f0000000600)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x7, 0x2, 0x3, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x1, 0x3, 0x2}, {0x716, 0x7, 0x8, 0x8, 0x0, 0x800, 0x2, 0x4, 0x1, 0x0, 0x2, 0x6b74, 0x8000}, {0x1, 0x0, 0x1406, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x81, 0x8245, 0x2, 0x2}]}) dup3(r3, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r7, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x1000c0586300}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="ec", 0x1}], 0x1}, 0x0) r8 = memfd_create(&(0x7f0000000000)=',\x00', 0x2) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) 03:41:37 executing program 5: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r1 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f0000000800)='/dev/dri/card#\x00'], &(0x7f0000000ac0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) getpid() getpeername$unix(r1, &(0x7f0000000880)=@abs, &(0x7f0000000180)=0x6e) r2 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000940)=0x800000000000004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000), &(0x7f00000004c0)=0x8) 03:41:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x2000000, 0x0, 0x0}) 03:41:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xc6ff) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) [ 985.364691] kobject: 'loop1' (000000000959b2d0): kobject_uevent_env [ 985.371441] binder: BINDER_SET_CONTEXT_MGR already set [ 985.373092] kobject: 'loop1' (000000000959b2d0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 985.395537] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 985.401851] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 985.414030] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 985.425333] binder: 15528:15530 ioctl 40046207 0 returned -16 [ 985.426337] binder: BINDER_SET_CONTEXT_MGR already set [ 985.448196] binder: 15528:15535 got reply transaction with no transaction stack [ 985.458116] binder: release 15518:15519 transaction 4677 in, still active [ 985.460095] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 985.466365] binder: 15518:15519 ioctl 40046207 0 returned -16 [ 985.483069] binder: 15528:15535 ioctl c0306201 20000380 returned -14 [ 985.484211] binder: send failed reply for transaction 4677 to 15528:15535 03:41:37 executing program 5: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="1d96817dc121cd6c10a3374673797a31a24b6c8c40990ab76bb517d33dff7f4ddf70e7a464ee1614fe5db29f499b886dfb1f5b3e6e8c345e3ec1015661322a1c40751c138b15f7b37ea507faef1d52d7774db0965fd143e571e849a4a3557799b2c579efc21568f0695857789d0946aebdad98b131008763dd91e471de7e67355a806455b0fc141d510c765f4a96dba342f0dca75e3ba057330727b0319e68e4de6fbe652a730d8f28a8fe9171ccdfbec461b5d859f15c388941dad158a7ccaac9c6000000b912d3ca9f5aaef669a91f42e13854036ce6c51bbc3f6e1f2a71e8ad6462dab93000ccd13491d49945a1bbf5bef14e5ca56af9e34a6877125e4140b62f3561"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r1 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f0000000800)='/dev/dri/card#\x00'], &(0x7f0000000ac0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) getpid() getpeername$unix(r1, &(0x7f0000000880)=@abs, &(0x7f0000000180)=0x6e) r2 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000940)=0x800000000000004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000080), 0x0) 03:41:37 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:37 executing program 2: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8000, 0x801) sendto$inet6(r2, &(0x7f00000006c0)="0c0c08b91106f5d9580dce58f6404a0844aa3cea8eac823a761fd4d0f83b5e9b08839e7e5b3d3ca43d9e54b671fbb7f3ce83c34985dc5a4513a4b182fc475ab34d594d69a3c08166297883cb8d6b9afa18ec420624db1c0b0ab4ac4327d3266bccaf9422d8a307db71d0c56c1b48", 0x6e, 0x20004000, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) r4 = gettid() getgid() writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000740)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac026656b471e3e887124d3b9c9", 0x63}], 0xe9) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x1, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000004c0)={0x3, 0x9, 0x6, 0x1, r5}, &(0x7f00000005c0)=0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r4, 0x1004000000016) r6 = dup2(r0, r3) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000580), &(0x7f0000000600)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x7, 0x2, 0x3, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x1, 0x3, 0x2}, {0x716, 0x7, 0x8, 0x8, 0x0, 0x800, 0x2, 0x4, 0x1, 0x0, 0x2, 0x6b74, 0x8000}, {0x1, 0x0, 0x1406, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x81, 0x8245, 0x2, 0x2}]}) dup3(r3, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r7, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x1000c0586300}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="ec", 0x1}], 0x1}, 0x0) r8 = memfd_create(&(0x7f0000000000)=',\x00', 0x2) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) [ 985.530160] binder_alloc: 15528: binder_alloc_buf, no vma [ 985.557165] binder: undelivered TRANSACTION_COMPLETE [ 985.564162] binder: 15528:15530 ioctl c0306201 20000380 returned -14 [ 985.579967] kobject: 'loop5' (00000000738b34bd): kobject_uevent_env [ 985.588607] kobject: 'loop5' (00000000738b34bd): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 985.600767] kobject: 'loop4' (000000003440eab0): kobject_uevent_env [ 985.607499] kobject: 'loop4' (000000003440eab0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 985.608458] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env 03:41:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="006340400000000000000000000000005c54c8610dd8008eb8"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x1400, 0x0, 0x0}) [ 985.634613] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 985.674856] kobject: 'loop0' (0000000048a3337e): kobject_uevent_env [ 985.681328] kobject: 'loop0' (0000000048a3337e): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 985.696247] binder_transaction: 1 callbacks suppressed [ 985.696256] binder: 15546:15555 got reply transaction with no transaction stack 03:41:37 executing program 5: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="1d96817dc121cd6c10a3374673797a31a24b6c8c40990ab76bb517d33dff7f4ddf70e7a464ee1614fe5db29f499b886dfb1f5b3e6e8c345e3ec1015661322a1c40751c138b15f7b37ea507faef1d52d7774db0965fd143e571e849a4a3557799b2c579efc21568f0695857789d0946aebdad98b131008763dd91e471de7e67355a806455b0fc141d510c765f4a96dba342f0dca75e3ba057330727b0319e68e4de6fbe652a730d8f28a8fe9171ccdfbec461b5d859f15c388941dad158a7ccaac9c6000000b912d3ca9f5aaef669a91f42e13854036ce6c51bbc3f6e1f2a71e8ad6462dab93000ccd13491d49945a1bbf5bef14e5ca56af9e34a6877125e4140b62f3561"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r1 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f0000000800)='/dev/dri/card#\x00'], &(0x7f0000000ac0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) getpid() getpeername$unix(r1, &(0x7f0000000880)=@abs, &(0x7f0000000180)=0x6e) r2 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000940)=0x800000000000004) [ 985.755355] binder: BINDER_SET_CONTEXT_MGR already set [ 985.760652] binder: 15557:15560 ioctl 40046207 0 returned -16 [ 985.814769] kobject: 'loop5' (00000000738b34bd): kobject_uevent_env [ 985.821211] kobject: 'loop5' (00000000738b34bd): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 985.830819] binder_alloc_mmap_handler: 5 callbacks suppressed [ 985.830832] binder_alloc: binder_alloc_mmap_handler: 15546 20001000-20004000 already mapped failed -16 [ 985.847364] binder: 15557:15564 got reply transaction with no transaction stack 03:41:37 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 985.871047] binder: BINDER_SET_CONTEXT_MGR already set [ 985.880601] binder: 15557:15564 ioctl c0306201 20000380 returned -14 [ 985.881116] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 985.890173] binder: 15546:15552 ioctl 40046207 0 returned -16 [ 985.927267] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 985.927744] binder: 15546:15552 got reply transaction with no transaction stack [ 985.946450] binder: release 15546:15552 transaction 4684 in, still active 03:41:37 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 985.974723] binder: send failed reply for transaction 4684 to 15557:15560 [ 985.994403] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 986.004662] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 986.035739] kobject: 'loop4' (000000003440eab0): kobject_uevent_env [ 986.051095] kobject: 'loop4' (000000003440eab0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 986.055077] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 986.080601] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 986.090209] kobject: 'loop5' (00000000738b34bd): kobject_uevent_env [ 986.096936] kobject: 'loop5' (00000000738b34bd): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 986.131815] kobject: 'loop3' (00000000aa6c5897): kobject_uevent_env [ 986.138414] kobject: 'loop3' (00000000aa6c5897): fill_kobj_path: path = '/devices/virtual/block/loop3' 03:41:37 executing program 1: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8000, 0x801) sendto$inet6(r2, &(0x7f00000006c0)="0c0c08b91106f5d9580dce58f6404a0844aa3cea8eac823a761fd4d0f83b5e9b08839e7e5b3d3ca43d9e54b671fbb7f3ce83c34985dc5a4513a4b182fc475ab34d594d69a3c08166297883cb8d6b9afa18ec420624db1c0b0ab4ac4327d3266bccaf9422d8a307db71d0c56c1b48", 0x6e, 0x20004000, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) r4 = gettid() getgid() writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000740)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac026656b471e3e887124d3b9c9", 0x63}], 0xe9) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x1, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000004c0)={0x3, 0x9, 0x6, 0x1, r5}, &(0x7f00000005c0)=0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r4, 0x1004000000016) r6 = dup2(r0, r3) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000580), &(0x7f0000000600)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x7, 0x2, 0x3, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x1, 0x3, 0x2}, {0x716, 0x7, 0x8, 0x8, 0x0, 0x800, 0x2, 0x4, 0x1, 0x0, 0x2, 0x6b74, 0x8000}, {0x1, 0x0, 0x1406, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x81, 0x8245, 0x2, 0x2}]}) dup3(r3, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r7, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x1000c0586300}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="ec", 0x1}], 0x1}, 0x0) r8 = memfd_create(&(0x7f0000000000)=',\x00', 0x2) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) 03:41:37 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:37 executing program 5: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r1 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f0000000800)='/dev/dri/card#\x00'], &(0x7f0000000ac0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) getpid() getpeername$unix(r1, &(0x7f0000000880)=@abs, &(0x7f0000000180)=0x6e) syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) 03:41:37 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 03:41:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xa00000000000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 03:41:37 executing program 2: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r1 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f0000000800)='/dev/dri/card#\x00'], &(0x7f0000000ac0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) getpid() getpeername$unix(r1, &(0x7f0000000880)=@abs, &(0x7f0000000180)=0x6e) r2 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000940)=0x800000000000004) [ 986.222980] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 986.231082] kobject: 'loop1' (000000000959b2d0): kobject_uevent_env [ 986.231433] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 986.241833] kobject: 'loop1' (000000000959b2d0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 986.277747] binder: 15579:15588 got reply transaction with no transaction stack [ 986.297359] kobject: 'kvm' (0000000048f78b94): kobject_uevent_env [ 986.304068] kobject: 'kvm' (0000000048f78b94): fill_kobj_path: path = '/devices/virtual/misc/kvm' 03:41:38 executing program 5: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r1 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000780)='security.SMACK64IPOUT\x00', &(0x7f0000000800)='/dev/dri/card#\x00'], &(0x7f0000000ac0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) getpid() getpeername$unix(r1, &(0x7f0000000880)=@abs, &(0x7f0000000180)=0x6e) 03:41:38 executing program 2: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="1d96817dc121cd6c10a3374673797a31a24b6c8c40990ab76bb517d33dff7f4ddf70e7a464ee1614fe5db29f499b886dfb1f5b3e6e8c345e3ec1015661322a1c40751c138b15f7b37ea507faef1d52d7774db0965fd143e571e849a4a3557799b2c579efc21568f0695857789d0946aebdad98b131008763dd91e471de7e67355a806455b0fc141d510c765f4a96dba342f0dca75e3ba057330727b0319e68e4de6fbe652a730d8f28a8fe9171ccdfbec461b5d859f15c388941dad158a7ccaac9c6000000b912d3ca9f5aaef669a91f42e13854036ce6c51bbc3f6e1f2a71e8ad6462dab93000ccd13491d49945a1bbf5bef14e5ca56af9e34a6877125e4140b62f3561"], 0x43) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r1 = memfd_create(&(0x7f00000006c0)='-trusted\x00', 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_smack_entry(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='ramfs\x00', 0x6, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ex